$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/CB04F4409BE611EF8AFF947CC4F9AE02.roa File: CB04F4409BE611EF8AFF947CC4F9AE02.roa (raw, json) Hash identifier: 06HBvjqcPUEAKF8iohz389TsGHlkWQwKjlo0V65nqDc= Subject key identifier: 06:E7:6C:B0:57:0D:74:23:5E:B9:A5:39:76:94:D3:1B:45:9D:48:BC Certificate issuer: /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Certificate serial: 0135 Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/CB04F4409BE611EF8AFF947CC4F9AE02.roa Signing time: Sun 31 May 2026 20:23:13 +0000 ROA not before: Sun 31 May 2026 20:23:13 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 139025 IP address blocks: 103.138.155.0/24 maxlen: 24 103.160.158.0/24 maxlen: 24 2001:df2:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 19:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Validity Not Before: May 31 20:23:13 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c98b1-d597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0e:03:92:ca:72:90:c6:54:36:d0:e6:d0:c8: 84:55:b6:92:69:f5:2f:10:0a:5a:42:6c:19:f7:80: 4d:31:6c:29:b7:22:4a:f5:6f:c6:5c:95:c6:98:19: 0a:b8:38:e4:fa:bd:74:c1:96:b2:19:06:3f:c0:79: c7:c5:1a:4d:ad:72:25:f5:06:2f:fc:80:c8:f6:06: 94:3e:ec:8c:1d:55:5b:f5:ee:79:7c:5f:d0:58:b9: 10:f5:13:09:da:ef:ec:50:09:5e:2a:5f:af:95:e0: 09:30:de:b8:56:df:29:29:0e:44:31:18:54:d0:57: d6:36:be:47:2b:61:a0:57:38:40:e6:5a:5e:63:e3: b5:e4:c8:0a:b4:64:b4:59:9e:07:4b:89:03:98:3a: b5:56:46:c0:96:73:6f:8f:e6:a5:77:1e:e7:d5:ea: 3f:a5:42:8f:79:ad:d7:3c:a5:ac:99:04:c9:b3:4d: 03:62:74:82:85:01:6f:c0:6f:ff:ed:fc:65:6c:06: d1:d9:29:63:52:a7:0d:c2:fd:c2:dc:ae:25:0b:ca: 48:0a:cb:80:18:19:34:a4:f9:0d:f7:cc:10:c0:7c: 92:6a:1f:87:a1:47:04:a2:b5:dd:0f:13:a4:28:3e: 47:8d:09:3e:8d:05:d4:2c:56:52:15:54:92:2d:d5: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E7:6C:B0:57:0D:74:23:5E:B9:A5:39:76:94:D3:1B:45:9D:48:BC X509v3 Authority Key Identifier: keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/CB04F4409BE611EF8AFF947CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.155.0/24 103.160.158.0/24 IPv6: 2001:df2:c080::/48 Signature Algorithm: sha256WithRSAEncryption 59:c0:9d:52:a0:07:dd:60:db:1c:58:65:f6:28:53:9c:24:58: 86:54:c2:ae:b9:a9:57:0e:97:bb:8d:bd:80:6c:e3:c5:29:d4: e1:82:2c:4a:3f:fd:e3:d3:f3:a2:d5:25:75:7f:c8:7c:3a:94: 5e:c0:ca:e4:6c:8e:57:e9:ac:50:60:82:4e:ca:64:8f:66:de: a3:28:a4:70:87:09:0b:f9:87:4a:f2:1c:c1:79:a3:ed:d3:eb: 4d:bb:e4:79:f4:8c:65:ec:1e:5c:02:88:c3:c0:2d:1f:be:20: e1:c4:17:38:54:ab:3c:4d:a5:42:31:1e:0d:cd:ed:1c:a4:15: 07:6f:7f:28:f3:d9:6a:1c:f0:ec:00:f0:75:3b:33:26:ab:ea: b9:94:9e:e9:f3:2d:a8:eb:e4:d7:a8:74:a1:0c:ae:11:42:5e: 0f:4c:d7:80:10:1e:51:dd:14:2f:cc:cf:f9:f5:87:cf:df:83: 51:1e:3f:ae:37:86:dd:71:5b:75:88:4b:b6:ac:ee:ad:aa:ff: 2c:76:96:68:e6:a5:e0:c0:09:ee:d1:5f:54:1c:74:02:bb:d0: 7f:d6:bd:9d:99:5f:a1:96:77:3d:d7:e7:db:d5:7c:0f:1a:42: 28:3a:8d:e8:80:bd:8f:3f:81:fd:b5:f8:75:ec:76:60:0a:d3: a1:76:18:8a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDBDRkNDQzU5ODBGNTdFNkJDODRERjExQjRDNTcxOTM1 RDI1REFDQ0EwHhcNMjYwNTMxMjAyMzEzWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjOThiMS1kNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0A4DkspykMZUNtDm0MiEVbaSafUvEApaQmwZ94BNMWwptyJK9W/GXJXGmBkK uDjk+r10wZayGQY/wHnHxRpNrXIl9QYv/IDI9gaUPuyMHVVb9e55fF/QWLkQ9RMJ 2u/sUAleKl+vleAJMN64Vt8pKQ5EMRhU0FfWNr5HK2GgVzhA5lpeY+O15MgKtGS0 WZ4HS4kDmDq1VkbAlnNvj+aldx7n1eo/pUKPea3XPKWsmQTJs00DYnSChQFvwG// 7fxlbAbR2SljUqcNwv3C3K4lC8pICsuAGBk0pPkN98wQwHySah+HoUcEorXdDxOk KD5HjQk+jQXULFZSFVSSLdXT8QIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFAbnbLBX DXQjXrmlOXaU0xtFnUi8MB8GA1UdIwQYMBaAFAz8zFmA9X5ryE3xG0xXGTXSXazK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9EUHpNV1lEMWZtdklUZkViVEZjWk5kSmRy TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RQek1XWUQxZm12SVRmRWJURmNaTmRKZHJNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE1QUEvM0VGQTI0MTQ2MkUwMTFFQUE2RDU5QTJDQzRGOUFFMDIvQ0IwNEY0NDA5 QkU2MTFFRjhBRkY5NDdDQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ4qbAwQAZ6CeMA8EAgACMAkDBwAgAQ3ywIAwDQYJKoZIhvcNAQEL BQADggEBAFnAnVKgB91g2xxYZfYoU5wkWIZUwq65qVcOl7uNvYBs48Up1OGCLEo/ /ePT86LVJXV/yHw6lF7AyuRsjlfprFBggk7KZI9m3qMopHCHCQv5h0ryHMF5o+3T 60275Hn0jGXsHlwCiMPALR++IOHEFzhUqzxNpUIxHg3N7RykFQdvfyjz2Woc8OwA 8HU7Myar6rmUnunzLajr5NeodKEMrhFCXg9M14AQHlHdFC/Mz/n1h8/fg1EeP643 ht1xW3WIS7as7q2q/yx2lmjmpeDACe7RX1QcdAK70H/WvZ2ZX6GWdz3X59vVfA8a Qig6jeiAvY8/gf21+HXsdmAK06F2GIo= -----END CERTIFICATE-----Generated at Sat Jun 13 18:46:12 2026 by rpki-client