$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/E0A9637E41FA11ECB2D7F760C4F9AE02.roa File: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (raw, json) Hash identifier: nVga8cvt4d5geXWchRCOiaCcwBTl7uOC4MUHjJfCR9o= Subject key identifier: 8C:5F:87:87:F9:A9:0D:27:35:71:87:46:83:7E:18:6A:4E:6F:8D:DD Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Certificate serial: 06DB Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/E0A9637E41FA11ECB2D7F760C4F9AE02.roa Signing time: Fri 10 Apr 2026 22:28:24 +0000 ROA not before: Fri 10 Apr 2026 22:28:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141778 IP address blocks: 103.163.238.0/24 maxlen: 24 103.163.238.0/26 maxlen: 26 103.163.239.0/24 maxlen: 24 2001:df6:2d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Validity Not Before: Apr 10 22:28:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d97988-b486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:be:06:18:25:eb:bd:0e:d7:8c:66:ba:d4: 12:d8:01:27:c6:6e:d0:e7:0e:60:df:29:73:45:14: 58:4f:11:ec:8e:ce:77:50:d9:8c:83:ed:44:48:20: 0c:1a:83:4c:a3:43:13:cb:fa:9b:68:7a:c6:d4:08: 48:30:ff:ec:0c:cb:34:9c:9e:cc:51:05:5c:b3:c6: d5:21:29:83:f3:18:02:33:3d:5d:0e:97:50:a1:2e: 03:df:cb:4a:cf:59:c9:4f:27:74:fb:e2:60:b0:2c: 4a:af:4d:0f:5c:75:bd:65:8c:7c:06:db:bc:51:e2: d6:29:bd:49:b7:3b:a5:00:2e:53:b3:9c:26:cb:a2: d1:49:1a:93:75:9b:35:6d:eb:73:57:1a:77:b2:76: ea:c4:93:3d:3d:af:96:67:0b:0c:a6:a0:3d:2d:03: 2b:0d:c8:e6:21:1d:47:45:7e:08:df:a8:ee:2b:d9: d4:7a:04:20:07:90:da:cb:5e:db:77:fe:8a:42:ef: 26:d7:a9:da:0f:2a:0b:f9:b5:66:15:5a:bc:f7:3a: d5:d3:f6:e4:a8:79:a0:42:54:b5:49:c4:67:2c:1c: 11:d5:c8:94:74:5b:2b:cd:3d:e4:c7:35:89:d3:fe: b5:36:98:9e:8b:5f:88:47:90:b6:4d:45:35:a6:d2: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5F:87:87:F9:A9:0D:27:35:71:87:46:83:7E:18:6A:4E:6F:8D:DD X509v3 Authority Key Identifier: keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/E0A9637E41FA11ECB2D7F760C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.163.238.0/23 IPv6: 2001:df6:2d80::/48 Signature Algorithm: sha256WithRSAEncryption 76:8d:ca:e4:5f:00:57:fe:25:a7:0f:ea:ad:c6:6d:7f:76:ea: f3:04:a7:6a:39:d0:c7:3f:21:c6:b7:8f:9e:25:f1:77:b2:40: a8:66:cc:95:43:4b:65:2d:b8:ff:38:1f:03:82:b3:ad:80:56: 16:da:de:3d:6d:45:fb:52:5c:82:78:65:f5:f5:7a:fb:44:ca: 02:57:03:3b:b1:25:02:5b:43:9a:0c:bd:68:69:ef:3b:1d:9f: 83:d5:bb:96:fa:94:d7:a6:77:c9:ac:5a:91:85:63:e1:6a:8c: 09:a8:dc:55:3e:2f:86:ba:38:b4:a4:62:14:1f:29:15:cc:c7: c5:dd:39:44:5e:cb:7d:92:d2:00:41:75:8a:ef:35:a6:a8:1c: 6d:ce:83:c2:73:21:46:a8:05:28:ec:cb:26:eb:98:f2:c7:94: 4a:2f:9d:0b:2d:92:fb:69:26:65:e7:5e:4e:7f:c1:b0:f3:93: 4b:99:c4:5c:1c:e4:2b:e3:73:e8:9e:19:ae:1b:6f:45:7f:89: af:5b:5a:09:3d:7a:fb:dd:ee:18:27:4d:0c:38:03:fb:17:2b: 4c:6c:b7:6e:f9:62:22:ad:74:b7:01:02:38:0b:4a:64:12:5b: 5e:22:ed:a3:be:bd:4a:d7:94:78:f4:5d:e5:4e:0c:7e:6c:88: 4a:62:a9:66 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUyRTMxMTAvBgNVBAUTKDJDRkE0RDhGNDQxMEE5NTFBQTE2NEU1NTRDNjU4MDVE OENGODg5NUMwHhcNMjYwNDEwMjIyODI0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ5Nzk4OC1iNDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVS+Bhgl670O14xmutQS2AEnxm7Q5w5g3ylzRRRYTxHsjs53UNmMg+1ESCAM GoNMo0MTy/qbaHrG1AhIMP/sDMs0nJ7MUQVcs8bVISmD8xgCMz1dDpdQoS4D38tK z1nJTyd0++JgsCxKr00PXHW9ZYx8Btu8UeLWKb1JtzulAC5Ts5wmy6LRSRqTdZs1 betzVxp3snbqxJM9Pa+WZwsMpqA9LQMrDcjmIR1HRX4I36juK9nUegQgB5Day17b d/6KQu8m16naDyoL+bVmFVq89zrV0/bkqHmgQlS1ScRnLBwR1ciUdFsrzT3kxzWJ 0/61Npiei1+IR5C2TUU1ptL54wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIxfh4f5 qQ0nNXGHRoN+GGpOb43dMB8GA1UdIwQYMBaAFCz6TY9EEKlRqhZOVUxlgF2M+Ilc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTJFMy8yOTQ1M0I3NEEw NzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFWR3FGazVWVEdXQVhZejRp VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQcE5qMFFRcVZHcUZrNVZUR1dBWFl6NGlWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTUyRTMvMjk0NTNCNzRBMDc3MTFFQkE4QzRDNzQwQzRGOUFFMDIvRTBBOTYzN0U0 MUZBMTFFQ0IyRDdGNzYwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6PuMA8EAgACMAkDBwAgAQ32LYAwDQYJKoZIhvcNAQELBQADggEB AHaNyuRfAFf+JacP6q3GbX926vMEp2o50Mc/Ica3j54l8XeyQKhmzJVDS2UtuP84 HwOCs62AVhba3j1tRftSXIJ4ZfX1evtEygJXAzuxJQJbQ5oMvWhp7zsdn4PVu5b6 lNemd8msWpGFY+FqjAmo3FU+L4a6OLSkYhQfKRXMx8XdOURey32S0gBBdYrvNaao HG3Og8JzIUaoBSjsyybrmPLHlEovnQstkvtpJmXnXk5/wbDzk0uZxFwc5Cvjc+ie Ga4bb0V/ia9bWgk9evvd7hgnTQw4A/sXK0xst275YiKtdLcBAjgLSmQSW14i7aO+ vUrXlHj0XeVODH5siEpiqWY= -----END CERTIFICATE-----Generated at Fri Apr 17 19:37:19 2026 by rpki-client