$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/40C76F3ACC1611EC80603209C4F9AE02.roa File: 40C76F3ACC1611EC80603209C4F9AE02.roa (raw, json) Hash identifier: xA0rurA/PEYXlJ3WLFAqJrvgYkaEX5VuqrE31iWX5bs= Subject key identifier: 3D:49:5A:1F:5E:9C:BD:EE:F2:AB:2C:DC:ED:11:C9:B8:69:6D:65:7D Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Certificate serial: 03B8 Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/40C76F3ACC1611EC80603209C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:25:49 +0000 ROA not before: Mon 29 Sep 2025 01:28:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38549 IP address blocks: 103.196.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Validity Not Before: Sep 29 01:28:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44c6d-142e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:f6:96:39:13:5e:7e:bb:00:41:75:d5:42: 3c:80:b4:ae:7d:0c:3f:40:57:f3:c4:ed:a7:d8:43: 77:47:32:e3:7e:1f:49:ff:2d:dc:13:fa:9b:dd:4d: 05:be:41:ec:a9:c5:f0:fa:e4:e1:4f:88:84:eb:b0: ea:3e:82:22:3a:f7:6b:86:77:cf:ef:3f:5f:e1:6f: 21:52:a2:39:2b:72:1b:b7:f2:95:00:23:12:62:51: d2:af:43:3d:5d:34:0f:55:c8:35:f4:7c:80:2b:9d: 11:10:be:5b:d1:a0:94:4a:22:1a:90:82:14:bc:2a: f9:a8:54:3e:32:8e:c7:60:38:1d:ca:fc:95:26:ba: 9c:97:f8:c8:f1:c7:26:60:80:84:98:2e:21:48:b6: 22:cc:ae:50:a6:a5:12:90:66:2b:3b:5e:a9:0f:fd: 2e:1b:8c:a9:4e:04:ac:29:8a:5d:b5:d5:38:b9:25: ea:95:ec:bd:a9:af:85:08:a0:c3:83:e1:27:a2:92: b0:a6:57:5b:1c:e5:58:81:ab:9e:c4:12:1e:16:29: cf:96:7d:45:66:08:3f:8d:2c:a6:73:f8:1d:dc:2a: c9:34:b5:29:bc:08:18:a7:2a:8b:e1:16:11:01:ef: 54:b7:7a:0a:09:34:35:24:b1:04:26:a3:68:bc:4d: 21:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:49:5A:1F:5E:9C:BD:EE:F2:AB:2C:DC:ED:11:C9:B8:69:6D:65:7D X509v3 Authority Key Identifier: keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/40C76F3ACC1611EC80603209C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.196.68.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:e1:82:4c:7a:ca:5b:16:07:7e:8c:07:f7:2d:a8:2f:cf:b7: a0:f9:fa:d1:96:5d:07:dd:b6:42:b5:8f:45:27:ca:39:bd:d1: 20:fa:5d:74:bc:b0:85:f4:52:a9:a9:cc:28:8e:65:9d:12:74: f5:ae:e5:5f:a9:9a:ab:49:1c:e9:61:97:78:66:fd:e5:89:1f: 9a:4a:55:18:c0:eb:cd:d5:4e:13:59:7c:28:94:bd:23:5a:42: 23:a7:4c:69:a5:e8:8e:40:1e:49:37:af:5e:72:37:36:a9:d8: 05:f2:6c:92:2c:ea:dc:76:28:85:1e:8d:47:e5:b4:d9:61:3b: a9:f9:5f:b7:69:39:96:f0:0c:76:2d:24:6c:e5:55:0d:e3:e7: 9e:85:72:fd:a5:24:9d:ae:8b:f1:7e:9b:8c:00:1d:3d:3e:9e: 0c:60:d5:db:ef:ab:8b:e1:d4:bc:4f:c7:05:64:92:d5:f0:35: 2c:58:47:fc:51:cf:21:3c:72:a2:3c:55:e7:06:df:31:ac:f4: 40:fb:42:3d:1e:3c:75:b3:65:92:40:5b:f3:34:81:d5:a3:fb: 19:6c:f4:b9:16:c8:40:53:cb:fc:70:c3:3e:5c:28:f5:9b:0b: 75:7c:d0:9b:c1:aa:77:fe:1d:79:09:71:28:90:99:d8:58:c7: 2f:de:f4:83 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF ODg1RTQ4OUQwHhcNMjUwOTI5MDEyODI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGM2ZC0xNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/z2ljkTXn67AEF11UI8gLSufQw/QFfzxO2n2EN3RzLjfh9J/y3cE/qb3U0F vkHsqcXw+uThT4iE67DqPoIiOvdrhnfP7z9f4W8hUqI5K3Ibt/KVACMSYlHSr0M9 XTQPVcg19HyAK50REL5b0aCUSiIakIIUvCr5qFQ+Mo7HYDgdyvyVJrqcl/jI8ccm YICEmC4hSLYizK5QpqUSkGYrO16pD/0uG4ypTgSsKYpdtdU4uSXqley9qa+FCKDD g+EnopKwpldbHOVYgauexBIeFinPln1FZgg/jSymc/gd3CrJNLUpvAgYpyqL4RYR Ae9Ut3oKCTQ1JLEEJqNovE0hqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD1JWh9e nL3u8qss3O0RybhpbWV9MB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzg5RjkvRkQ4MDZCQTJDQzEzMTFFQzgyN0EyNjg3QzRGOUFFMDIvNDBDNzZGM0FD QzE2MTFFQzgwNjAzMjA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ8REMA0GCSqGSIb3DQEBCwUAA4IBAQBb4YJMespbFgd+jAf3Lagv z7eg+frRll0H3bZCtY9FJ8o5vdEg+l10vLCF9FKpqcwojmWdEnT1ruVfqZqrSRzp YZd4Zv3liR+aSlUYwOvN1U4TWXwolL0jWkIjp0xppeiOQB5JN69ecjc2qdgF8myS LOrcdiiFHo1H5bTZYTup+V+3aTmW8Ax2LSRs5VUN4+eehXL9pSSdrovxfpuMAB09 Pp4MYNXb76uL4dS8T8cFZJLV8DUsWEf8Uc8hPHKiPFXnBt8xrPRA+0I9Hjx1s2WS QFvzNIHVo/sZbPS5FshAU8v8cMM+XCj1mwt1fNCbwap3/h15CXEokJnYWMcv3vSD -----END CERTIFICATE-----Generated at Mon Mar 2 07:08:56 2026 by rpki-client