$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/2496314236DA11F185A05E51B1833773.roa File: 2496314236DA11F185A05E51B1833773.roa (raw, json) Hash identifier: O9DkSRYiiroOqFJRLLDknng2J2PIFfJ6DkORB5QGXDk= Subject key identifier: FD:FE:2F:7D:21:5B:C2:BA:A3:D1:94:4B:65:5D:82:9C:6B:9F:E3:3A Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0CF3 Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/2496314236DA11F185A05E51B1833773.roa Signing time: Mon 13 Apr 2026 01:43:17 +0000 ROA not before: Mon 13 Apr 2026 01:43:17 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137432 IP address blocks: 103.108.90.0/23 maxlen: 24 2402:68c0::/32 maxlen: 32 2402:68c0::/36 maxlen: 36 2402:68c0:1000::/36 maxlen: 36 2402:68c0:2000::/36 maxlen: 36 2402:68c0:3000::/36 maxlen: 36 2402:68c0:4000::/36 maxlen: 36 2402:68c0:5000::/36 maxlen: 36 2402:68c0:6000::/36 maxlen: 36 2402:68c0:7000::/36 maxlen: 36 2402:68c0:8000::/36 maxlen: 36 2402:68c0:9000::/36 maxlen: 36 2402:68c0:a000::/36 maxlen: 36 2402:68c0:a000::/48 maxlen: 48 2402:68c0:a001::/48 maxlen: 48 2402:68c0:b000::/36 maxlen: 36 2402:68c0:b001::/48 maxlen: 48 2402:68c0:c000::/36 maxlen: 36 2402:68c0:d000::/36 maxlen: 36 2402:68c0:e000::/36 maxlen: 36 2402:68c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3315 (0xcf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: Apr 13 01:43:17 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69dc4a35-7f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:b6:08:db:e8:18:02:3d:ad:2b:c3:7f:9e: af:2e:74:63:46:eb:14:64:4b:93:79:77:6e:e8:d4: ea:87:a0:8c:3f:8d:aa:f4:8c:d7:1b:4f:36:23:2c: b8:a0:08:0f:84:43:09:44:76:ab:45:85:18:d8:f2: 36:c1:24:f6:ba:00:d8:9d:c3:5d:81:fa:f8:6c:14: 87:4d:8b:33:f9:d6:fc:6d:fd:1c:19:14:08:5d:d3: 94:85:f8:9d:2d:0b:11:3e:81:e8:8e:f5:82:7d:17: f4:30:8f:d9:c0:0e:ce:61:21:d7:43:66:04:4a:0f: 0b:81:91:c1:e0:eb:00:83:a0:b0:0b:a3:f7:0b:fd: 5c:9e:74:cf:db:7a:63:52:5a:93:95:2d:84:11:cd: 44:6a:08:86:62:fc:75:6d:9d:2c:26:26:3f:11:4e: 7e:b9:7d:f6:d3:6d:44:65:26:ad:54:ac:45:b6:bc: 35:1b:eb:b1:c3:0c:7a:2f:2f:20:8b:4b:80:bf:79: a6:42:02:9b:92:5d:d1:fa:7e:a6:5d:44:0c:fc:e2: 8f:22:98:ed:d1:a9:00:84:99:69:8e:57:ff:c8:83: 7b:6d:2f:67:3f:1c:ac:2c:cf:82:48:8b:07:e6:cd: 70:0f:7b:de:9f:fb:ad:d2:41:64:bf:5c:21:ae:d0: 2e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FE:2F:7D:21:5B:C2:BA:A3:D1:94:4B:65:5D:82:9C:6B:9F:E3:3A X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/2496314236DA11F185A05E51B1833773.roa sbgp-ipAddrBlock: critical IPv4: 103.108.90.0/23 IPv6: 2402:68c0::/32 Signature Algorithm: sha256WithRSAEncryption 24:e7:96:27:6a:e5:41:d1:26:95:d9:da:49:c0:7c:ae:9f:69: 01:d7:d9:14:72:72:dc:c1:8d:e7:29:a8:4a:29:91:5b:86:b9: 87:fc:64:14:3c:ef:45:7c:40:b5:ed:57:7c:98:79:4a:cd:99: 27:8d:3e:09:2e:36:c3:4e:4c:66:bd:61:9f:35:ab:e3:3f:08: 37:d6:d4:59:53:80:36:09:6c:20:79:f2:37:cd:40:7c:a8:99: 16:20:94:4f:46:39:5a:b3:b6:1a:87:e0:b6:19:aa:5a:34:39: e4:a2:b8:fc:e3:17:e3:9c:57:11:7b:6f:7a:52:70:fd:0f:3f: 81:78:ea:78:80:8e:f0:cb:6e:fd:f6:27:f8:f8:34:91:18:8e: 42:a3:62:2f:3f:c5:0f:40:62:f9:77:c4:d6:b8:2e:ab:2a:43: 20:1d:5a:4e:16:24:85:23:0b:dc:37:dc:a1:d7:8a:4e:16:75: ac:ee:e4:41:e1:aa:92:ed:a4:0d:d1:86:d5:3f:39:87:4f:62: 60:d4:a2:34:2d:4b:49:d7:2b:af:36:4e:0c:71:2c:a9:0a:6c: 69:cf:04:58:98:ae:b9:06:d8:3e:5d:68:b1:69:ae:4e:3c:28: 3f:09:c5:6d:18:49:dc:fa:a9:d7:73:46:c0:23:5a:5d:8c:29: 22:6a:8a:6e -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjYwNDEzMDE0MzE3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWRjNGEzNS03Zjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1m2CNvoGAI9rSvDf56vLnRjRusUZEuTeXdu6NTqh6CMP42q9IzXG082Iyy4 oAgPhEMJRHarRYUY2PI2wST2ugDYncNdgfr4bBSHTYsz+db8bf0cGRQIXdOUhfid LQsRPoHojvWCfRf0MI/ZwA7OYSHXQ2YESg8LgZHB4OsAg6CwC6P3C/1cnnTP23pj UlqTlS2EEc1EagiGYvx1bZ0sJiY/EU5+uX32021EZSatVKxFtrw1G+uxwwx6Ly8g i0uAv3mmQgKbkl3R+n6mXUQM/OKPIpjt0akAhJlpjlf/yIN7bS9nPxysLM+CSIsH 5s1wD3ven/ut0kFkv1whrtAuawIDAQABo4ICbzCCAmswHQYDVR0OBBYEFP3+L30h W8K6o9GUS2Vdgpxrn+M6MB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTBGRUEvMjQwREFDRUEwQjcyMTFFQUFDRkI2OTE2QzRGOUFFMDIvMjQ5NjMxNDIz NkRBMTFGMTg1QTA1RTUxQjE4MzM3NzMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ2xaMA0EAgACMAcDBQAkAmjAMA0GCSqGSIb3DQEBCwUAA4IBAQAk 55YnauVB0SaV2dpJwHyun2kB19kUcnLcwY3nKahKKZFbhrmH/GQUPO9FfEC17Vd8 mHlKzZknjT4JLjbDTkxmvWGfNavjPwg31tRZU4A2CWwgefI3zUB8qJkWIJRPRjla s7Yah+C2GapaNDnkorj84xfjnFcRe296UnD9Dz+BeOp4gI7wy2799if4+DSRGI5C o2IvP8UPQGL5d8TWuC6rKkMgHVpOFiSFIwvcN9yh14pOFnWs7uRB4aqS7aQN0YbV PzmHT2Jg1KI0LUtJ1yuvNk4McSypCmxpzwRYmK65Btg+XWixaa5OPCg/CcVtGEnc +qnXc0bAI1pdjCkiaopu -----END CERTIFICATE-----Generated at Fri Apr 17 14:51:49 2026 by rpki-client