$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/98152E6C480111EFB2976238C4F9AE02.roa File: 98152E6C480111EFB2976238C4F9AE02.roa (raw, json) Hash identifier: WkBrG4Ptn2oOu7MUQprdMpFUUGYiR0bDGLQIFpoza1U= Subject key identifier: 31:68:3F:18:74:05:23:D0:E8:9A:39:C6:35:0E:D8:AE:09:16:17:6D Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Certificate serial: 024D Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/98152E6C480111EFB2976238C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:27:15 +0000 ROA not before: Wed 25 Jun 2025 02:50:25 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133955 IP address blocks: 103.235.4.0/24 maxlen: 24 103.235.5.0/24 maxlen: 24 103.235.6.0/24 maxlen: 24 103.235.7.0/24 maxlen: 24 150.129.208.0/24 maxlen: 24 150.129.209.0/24 maxlen: 24 150.129.210.0/24 maxlen: 24 150.129.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Validity Not Before: Jun 25 02:50:25 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a3ea53-70c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:62:37:ec:0f:94:70:a7:9b:87:81:65:43: 95:f2:3b:0a:75:68:ed:f1:b5:6a:c2:c4:59:3e:01: bc:6a:bb:a0:58:b5:89:9f:c2:78:3f:53:ca:0c:c9: 17:1f:95:93:eb:3e:90:4b:ee:81:5c:18:56:df:99: f7:ab:a3:30:bb:31:86:3a:37:46:d1:7a:de:eb:81: 00:3c:a1:d4:c8:7b:4c:9b:60:aa:fc:59:7e:e0:f0: 7e:a8:c9:e0:d0:76:07:6b:ec:ab:6e:51:78:51:e6: 34:e1:1a:53:85:2b:6d:e5:0f:ba:46:e9:63:f4:cd: 26:de:37:45:69:a3:be:34:30:fc:a0:05:b6:65:22: 09:99:0f:ae:f7:a8:8b:77:f6:08:51:28:7a:99:00: 38:04:3e:b4:14:56:06:86:4f:64:a5:a5:4a:87:cc: 00:35:3d:98:53:81:7d:0f:a9:c4:b9:a1:38:42:1d: e2:e0:36:46:25:b8:8d:8d:9c:c3:bc:c0:8c:c1:0d: 1c:57:46:e9:06:82:2e:b1:75:f3:e6:2c:dd:5f:72: 5b:4b:58:2c:68:02:73:bb:2a:8b:23:d5:6d:b4:c9: 1c:1e:d4:1e:47:d7:64:58:f9:60:05:57:bc:36:2e: 97:8d:eb:76:57:72:9d:4d:3c:2a:31:1b:87:d2:ff: 45:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:68:3F:18:74:05:23:D0:E8:9A:39:C6:35:0E:D8:AE:09:16:17:6D X509v3 Authority Key Identifier: keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/98152E6C480111EFB2976238C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.235.4.0/22 150.129.208.0/22 Signature Algorithm: sha256WithRSAEncryption 43:1d:4b:c6:12:bd:87:05:e7:c3:25:f9:15:a0:73:90:fc:2b: 17:8c:df:54:e7:9c:ed:1d:ab:d4:63:92:9d:eb:25:57:2c:12: e1:19:32:54:af:5b:a1:25:a4:1d:c8:35:b2:b5:b9:31:dc:c6: d0:17:72:04:ba:db:ea:41:ff:d5:70:67:23:36:f5:f3:2d:57: 92:d1:30:e9:e2:25:97:e7:d0:29:02:8e:87:e2:aa:ce:3b:a5: c3:92:a6:63:29:2e:6a:f2:bb:83:3a:24:0c:2c:15:a3:26:46: 5a:3f:77:cb:14:36:16:88:0c:be:38:13:af:76:6f:36:87:55: 0e:f3:35:cb:d7:07:da:e3:26:47:3a:35:67:fd:00:81:1e:ca: 09:d6:4a:71:49:72:bf:0f:a1:51:53:ac:39:64:e2:28:59:34: 8f:ac:52:e4:c7:e3:c1:d0:a8:fe:69:51:b8:2f:d6:1f:90:b6: d3:de:ec:30:40:df:db:e9:26:43:e3:4c:b6:54:af:4e:64:cd: 68:e1:4d:d2:0b:b1:2b:63:24:16:f1:94:97:d5:8b:11:fb:4e: d8:11:d3:8a:a7:eb:ea:5f:13:c3:1a:f1:63:06:a9:de:fe:d3: 51:8c:42:56:1a:06:90:38:75:8c:ca:81:6d:64:13:64:c8:3d: 44:44:43:7f -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTkxMTAvBgNVBAUTKEVCQzNEN0ZDRkIxMzRGNTM4RkMxOUY5OEFEODk4QzBG M0YwNzRGMjAwHhcNMjUwNjI1MDI1MDI1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWE1My03MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2hiN+wPlHCnm4eBZUOV8jsKdWjt8bVqwsRZPgG8arugWLWJn8J4P1PKDMkX H5WT6z6QS+6BXBhW35n3q6MwuzGGOjdG0Xre64EAPKHUyHtMm2Cq/Fl+4PB+qMng 0HYHa+yrblF4UeY04RpThStt5Q+6Rulj9M0m3jdFaaO+NDD8oAW2ZSIJmQ+u96iL d/YIUSh6mQA4BD60FFYGhk9kpaVKh8wANT2YU4F9D6nEuaE4Qh3i4DZGJbiNjZzD vMCMwQ0cV0bpBoIusXXz5izdX3JbS1gsaAJzuyqLI9VttMkcHtQeR9dkWPlgBVe8 Ni6Xjet2V3KdTTwqMRuH0v9FtwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDFoPxh0 BSPQ6Jo5xjUO2K4JFhdtMB8GA1UdIwQYMBaAFOvD1/z7E09Tj8GfmK2JjA8/B08g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBOS8yNjE4ODQwRUIx NDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQxT1B3Wi1ZclltTUR6OEhU eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY4UFhfUHNUVDFPUHdaLVlyWW1NRHo4SFR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI1QTkvMjYxODg0MEVCMTQzMTFFRDg3RDA3Njc4QzRGOUFFMDIvOTgxNTJFNkM0 ODAxMTFFRkIyOTc2MjM4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ+sEAwQCloHQMA0GCSqGSIb3DQEBCwUAA4IBAQBDHUvGEr2HBefD JfkVoHOQ/CsXjN9U55ztHavUY5Kd6yVXLBLhGTJUr1uhJaQdyDWytbkx3MbQF3IE utvqQf/VcGcjNvXzLVeS0TDp4iWX59ApAo6H4qrOO6XDkqZjKS5q8ruDOiQMLBWj JkZaP3fLFDYWiAy+OBOvdm82h1UO8zXL1wfa4yZHOjVn/QCBHsoJ1kpxSXK/D6FR U6w5ZOIoWTSPrFLkx+PB0Kj+aVG4L9YfkLbT3uwwQN/b6SZD40y2VK9OZM1o4U3S C7ErYyQW8ZSX1YsR+07YEdOKp+vqXxPDGvFjBqne/tNRjEJWGgaQOHWMyoFtZBNk yD1EREN/ -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:11 2026 by rpki-client