$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/50063EE8822A11EDB2081A49C4F9AE02.roa File: 50063EE8822A11EDB2081A49C4F9AE02.roa (raw, json) Hash identifier: hFX5YE8MCfCx/kmb790trFxkpl5n33coYoMd9aDEGes= Subject key identifier: 58:83:FB:C0:B8:70:84:B2:BA:BF:AD:64:00:60:2C:A9:DD:29:9C:40 Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0E31 Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/50063EE8822A11EDB2081A49C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:27:42 +0000 ROA not before: Tue 06 May 2025 18:27:30 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 136547 IP address blocks: 103.251.36.0/24 maxlen: 24 103.251.37.0/24 maxlen: 24 103.251.38.0/24 maxlen: 24 103.251.39.0/24 maxlen: 24 150.242.228.0/24 maxlen: 24 150.242.229.0/24 maxlen: 24 150.242.230.0/24 maxlen: 24 150.242.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3633 (0xe31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: May 6 18:27:30 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a468fd-2a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:1c:f9:cf:3e:a8:88:60:bb:97:84:a9:d1: 6d:e4:7a:12:c9:45:9c:f9:d3:b4:02:eb:51:da:dc: 66:01:e7:15:aa:0c:74:ae:20:c4:0a:de:57:da:8c: 7c:82:e7:7f:3c:36:ff:fa:82:4b:47:6b:f0:4a:d1: 6e:fc:2d:08:62:07:d0:ab:67:e3:2e:78:e5:07:a1: da:7c:09:96:0b:aa:f3:20:c3:8c:0e:e4:e9:43:2e: a3:6b:e3:33:fb:38:ab:85:2c:84:5f:d9:d5:76:c8: 08:a8:05:ab:6c:06:4a:7b:42:c0:cd:1e:d8:d8:99: 84:79:ca:16:f0:5e:60:e0:82:52:ae:7f:08:72:95: 81:54:d4:42:db:47:77:6e:21:15:93:bb:7d:08:f3: a1:eb:6b:6e:a2:90:ad:74:51:ef:d4:0a:ca:c7:48: 8f:85:38:3b:25:33:c6:9f:31:ba:2b:64:b4:9d:63: 26:fc:31:2f:ea:e3:84:66:c8:46:77:ad:50:87:6e: 3e:42:a2:87:e3:ca:37:69:ae:5f:1a:56:50:c1:9c: e1:8b:a7:06:23:dd:b7:e1:0f:24:6b:a2:09:b7:5a: 4f:0b:93:7d:9a:02:ff:d6:f5:72:41:3f:43:78:27: 69:1f:00:ba:ab:a8:0d:6c:99:8f:c9:ed:2f:5e:9b: 55:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:83:FB:C0:B8:70:84:B2:BA:BF:AD:64:00:60:2C:A9:DD:29:9C:40 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/50063EE8822A11EDB2081A49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.251.36.0/22 150.242.228.0/22 Signature Algorithm: sha256WithRSAEncryption ae:4b:34:bd:40:88:c4:e8:77:da:47:42:c9:a0:5d:81:25:dd: 58:04:7f:a9:cc:d2:cd:a8:34:b7:45:a0:bc:34:d7:d9:58:26: fb:29:f3:ec:42:78:09:1c:1c:15:a4:c3:b3:da:e9:2c:3d:24: 5a:d6:77:72:89:6f:59:ba:a1:f3:49:a9:fa:fd:2c:7c:b4:b7: 33:c4:0e:a6:3a:23:d2:67:59:48:9e:c8:17:f6:4c:95:c2:e9: 5b:53:f0:b0:36:50:9e:15:13:e1:00:16:f9:ad:f8:eb:82:cc: 05:1d:dd:7e:76:7a:4a:c4:00:85:ea:fc:bc:62:54:03:0a:de: 1c:2f:07:03:ab:83:4c:0c:a8:1a:44:81:50:57:8f:8f:9d:60: ae:e4:0d:6d:43:1f:58:f9:30:49:bf:ff:60:2f:63:6d:b8:64: 50:16:ae:42:d7:57:84:04:16:8c:58:41:5f:f9:27:cb:65:ba: 3d:d3:f4:4c:0f:7d:c7:6c:a3:bb:b4:54:4c:73:70:3e:36:6e: a4:58:45:43:87:94:6a:5b:9a:81:a1:cc:ea:b1:97:b9:3b:15: 69:62:e9:80:23:c6:97:fd:9e:fd:89:1e:5d:4b:42:26:9c:de: 8c:05:0f:63:a8:80:30:97:df:00:4e:63:1a:7f:00:73:d9:d4: 9c:d4:2b:89 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjUwNTA2MTgyNzMwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjhmZC0yYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApL8c+c8+qIhgu5eEqdFt5HoSyUWc+dO0AutR2txmAecVqgx0riDECt5X2ox8 gud/PDb/+oJLR2vwStFu/C0IYgfQq2fjLnjlB6HafAmWC6rzIMOMDuTpQy6ja+Mz +zirhSyEX9nVdsgIqAWrbAZKe0LAzR7Y2JmEecoW8F5g4IJSrn8IcpWBVNRC20d3 biEVk7t9CPOh62tuopCtdFHv1ArKx0iPhTg7JTPGnzG6K2S0nWMm/DEv6uOEZshG d61Qh24+QqKH48o3aa5fGlZQwZzhi6cGI9234Q8ka6IJt1pPC5N9mgL/1vVyQT9D eCdpHwC6q6gNbJmPye0vXptV9wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFiD+8C4 cISyur+tZABgLKndKZxAMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvNTAwNjNFRTg4 MjJBMTFFREIyMDgxQTQ5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ/skAwQClvLkMA0GCSqGSIb3DQEBCwUAA4IBAQCuSzS9QIjE6Hfa R0LJoF2BJd1YBH+pzNLNqDS3RaC8NNfZWCb7KfPsQngJHBwVpMOz2uksPSRa1ndy iW9ZuqHzSan6/Sx8tLczxA6mOiPSZ1lInsgX9kyVwulbU/CwNlCeFRPhABb5rfjr gswFHd1+dnpKxACF6vy8YlQDCt4cLwcDq4NMDKgaRIFQV4+PnWCu5A1tQx9Y+TBJ v/9gL2NtuGRQFq5C11eEBBaMWEFf+SfLZbo90/RMD33HbKO7tFRMc3A+Nm6kWEVD h5RqW5qBoczqsZe5OxVpYumAI8aX/Z79iR5dS0ImnN6MBQ9jqIAwl98ATmMafwBz 2dSc1CuJ -----END CERTIFICATE-----Generated at Mon Mar 2 02:21:50 2026 by rpki-client