$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/98B698EEE8A811F084817E76576F56BC.roa File: 98B698EEE8A811F084817E76576F56BC.roa (raw, json) Hash identifier: JBryeLEpdHknVs2/azmwAglPMtPdhkj/YFJ0rtMnNdU= Subject key identifier: 07:1C:68:33:10:93:97:25:6F:47:12:AB:C6:48:7C:D2:8F:C9:7A:C5 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0C87 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/98B698EEE8A811F084817E76576F56BC.roa Signing time: Sun 01 Mar 2026 16:44:24 +0000 ROA not before: Sat 03 Jan 2026 13:32:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139826 IP address blocks: 103.146.36.0/24 maxlen: 24 2001:df2:4280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Jan 3 13:32:06 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46ce8-c67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:aa:7f:ef:bb:53:77:20:07:e0:85:ae:2c: 59:85:f6:fe:8d:a7:af:3d:2d:08:fd:65:ed:a4:a7: 9c:45:d1:d2:ff:7f:55:ac:38:fa:63:27:6e:4a:d1: 5e:d5:b8:6a:48:dc:64:2f:d7:c4:58:46:58:9d:1e: 6c:d4:93:47:dc:46:8e:61:3a:6d:62:1c:8d:ca:f5: b7:f3:32:79:60:72:f5:5e:06:01:40:7f:0f:b0:ea: 08:cf:59:2e:c6:b2:b7:e4:f6:58:8a:e1:48:7b:28: 63:27:2a:2c:2b:d5:fb:13:54:cd:a3:ed:9d:3f:b4: da:1b:d8:4b:14:9e:8d:15:6f:1e:30:62:dd:29:fe: d1:8f:d3:38:18:22:4b:31:ff:65:8e:74:8d:62:17: bf:dc:d3:f3:d5:58:89:cb:75:a1:36:aa:09:cb:99: ed:87:ab:bc:2d:3f:f1:84:dc:ad:4d:b4:44:7b:69: c9:34:98:a9:a0:e8:98:61:d2:51:46:73:fa:d1:a4: f2:a8:e2:d6:35:92:1b:ce:1e:87:3c:79:ff:17:be: a1:90:eb:49:f3:06:7d:b4:b0:d4:50:0b:89:0e:89: 1e:03:5c:9b:44:84:a7:0f:75:2e:93:ac:38:40:c1: c4:98:5e:78:c5:a8:92:e5:e5:2e:c4:2e:a1:ae:36: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1C:68:33:10:93:97:25:6F:47:12:AB:C6:48:7C:D2:8F:C9:7A:C5 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/98B698EEE8A811F084817E76576F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.146.36.0/24 IPv6: 2001:df2:4280::/48 Signature Algorithm: sha256WithRSAEncryption 6a:24:27:f8:c0:3a:a1:2b:33:e1:e5:28:e6:75:8c:83:e5:ef: 14:65:1b:7c:66:02:27:30:e7:c2:68:07:74:64:2f:12:dd:2c: fc:ec:86:2b:cb:e8:72:a4:db:e3:98:96:9f:a2:e4:1d:ea:2c: aa:e0:9b:ae:82:d0:26:79:da:bc:e9:cc:ac:ae:ba:11:5e:93: 70:f3:47:95:d4:a1:69:c6:b6:57:76:84:69:e9:c6:66:a0:12: ca:5b:6e:7b:ca:fc:f2:3e:2b:58:b0:59:77:18:b2:09:17:b2: 54:33:73:08:78:0b:3b:30:01:b9:66:85:4d:03:1c:4d:71:cc: 0f:e9:c7:ae:7a:e3:ce:a0:49:8e:41:53:47:86:f6:a2:df:d0: 6b:f5:7c:ef:0e:63:f7:27:07:b9:c7:64:73:a5:7e:d9:40:11: 94:be:0d:29:6a:2d:ec:ae:da:2a:08:64:9e:c2:e0:ac:45:b9: d3:6e:95:5e:ea:ac:67:c9:bc:1e:ce:72:94:6a:a3:97:08:5c: 3d:13:d7:02:b6:7d:ec:e3:55:62:a1:d9:0e:27:35:b3:01:09: 45:a0:75:9d:13:31:97:c1:06:0a:da:21:b9:ae:48:eb:10:cb: 07:68:e9:16:c9:a0:0d:87:fa:36:54:a1:b7:05:86:4a:97:54: 96:e8:7b:d7 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjYwMTAzMTMzMjA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmNlOC1jNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiGqf++7U3cgB+CFrixZhfb+jaevPS0I/WXtpKecRdHS/39VrDj6YyduStFe 1bhqSNxkL9fEWEZYnR5s1JNH3EaOYTptYhyNyvW38zJ5YHL1XgYBQH8PsOoIz1ku xrK35PZYiuFIeyhjJyosK9X7E1TNo+2dP7TaG9hLFJ6NFW8eMGLdKf7Rj9M4GCJL Mf9ljnSNYhe/3NPz1ViJy3WhNqoJy5nth6u8LT/xhNytTbREe2nJNJipoOiYYdJR RnP60aTyqOLWNZIbzh6HPHn/F76hkOtJ8wZ9tLDUUAuJDokeA1ybRISnD3Uuk6w4 QMHEmF54xaiS5eUuxC6hrjZyfQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAccaDMQ k5clb0cSq8ZIfNKPyXrFMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTM2RUIvM0VDMDJFQ0ExNzVBMTFFQUIyQTZBODUxQzRGOUFFMDIvOThCNjk4RUVF OEE4MTFGMDg0ODE3RTc2NTc2RjU2QkMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ5IkMA8EAgACMAkDBwAgAQ3yQoAwDQYJKoZIhvcNAQELBQADggEB AGokJ/jAOqErM+HlKOZ1jIPl7xRlG3xmAicw58JoB3RkLxLdLPzshivL6HKk2+OY lp+i5B3qLKrgm66C0CZ52rzpzKyuuhFek3DzR5XUoWnGtld2hGnpxmagEspbbnvK /PI+K1iwWXcYsgkXslQzcwh4CzswAblmhU0DHE1xzA/px656486gSY5BU0eG9qLf 0Gv1fO8OY/cnB7nHZHOlftlAEZS+DSlqLeyu2ioIZJ7C4KxFudNulV7qrGfJvB7O cpRqo5cIXD0T1wK2fezjVWKh2Q4nNbMBCUWgdZ0TMZfBBgraIbmuSOsQywdo6RbJ oA2H+jZUobcFhkqXVJboe9c= -----END CERTIFICATE-----Generated at Mon Mar 2 19:19:54 2026 by rpki-client