$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/98AF39F22E4211F1901494E893833773.roa File: 98AF39F22E4211F1901494E893833773.roa (raw, json) Hash identifier: iFoAuTtUU0PmJ95WE4oNN0+3octF6zZzDVlPo3nsN08= Subject key identifier: D5:A3:0F:6C:71:67:91:64:FA:46:E3:E4:87:B4:00:EF:9B:59:94:C3 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 3580 Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/98AF39F22E4211F1901494E893833773.roa Signing time: Tue 07 Apr 2026 03:30:28 +0000 ROA not before: Tue 07 Apr 2026 03:30:28 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 23532 IP address blocks: 101.0.16.0/24 maxlen: 24 103.46.205.0/24 maxlen: 24 103.46.206.0/24 maxlen: 24 103.46.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13696 (0x3580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Apr 7 03:30:28 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69d47a54-31a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:0f:02:28:35:f2:75:28:47:84:90:86:4f: b3:3d:40:58:63:86:f0:98:e6:cf:3d:bc:98:e8:7d: a8:13:55:31:cd:60:b1:03:98:5c:49:80:e4:98:9a: c5:06:03:f7:44:83:a8:19:62:09:69:ea:9d:86:e7: bc:05:85:ba:54:cb:f2:58:a0:be:6a:8b:96:00:35: 53:af:41:50:e2:92:e1:68:17:d8:bb:bb:7c:6e:85: ae:5a:fa:13:74:0a:cb:8d:38:64:ee:2f:87:dc:78: 1b:da:58:e4:e9:23:0a:c1:d5:dd:5e:3f:c0:9a:77: 28:20:34:21:b4:f3:06:ec:13:f0:60:8d:0c:a5:7e: 0e:a5:7d:2e:8a:b1:65:17:c9:39:18:e5:bd:3b:b1: f3:93:16:c4:4c:87:f4:4f:2b:58:ed:0c:08:53:f9: 7f:7d:3d:5e:ca:83:06:55:80:16:7b:83:17:06:9d: 17:7c:ed:07:1d:63:57:67:23:1d:7c:b4:d0:9d:dc: e8:80:8c:77:5f:21:fc:08:2e:77:9c:09:fb:6f:c7: 46:f0:48:75:62:1f:4f:62:6f:d6:52:49:1d:4d:4b: 80:63:99:7f:49:bd:ac:60:bf:d9:53:43:59:22:ed: 1b:d3:0e:4d:21:74:5c:78:1e:94:d8:19:88:83:5a: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A3:0F:6C:71:67:91:64:FA:46:E3:E4:87:B4:00:EF:9B:59:94:C3 X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/98AF39F22E4211F1901494E893833773.roa sbgp-ipAddrBlock: critical IPv4: 101.0.16.0/24 103.46.205.0-103.46.207.255 Signature Algorithm: sha256WithRSAEncryption ab:0f:38:27:48:2e:93:05:cf:ae:f9:8e:bf:bc:e9:ac:6a:da: 26:d7:32:e6:b5:71:4a:52:86:7a:0a:31:ef:ff:87:2a:da:71: 1f:44:03:73:58:b9:59:88:87:94:04:58:88:2f:4e:ae:f0:69: 6c:e2:16:53:16:98:70:67:ad:18:7e:73:fc:ac:e2:b2:e8:66: 4d:97:db:50:67:1a:56:fc:5a:5b:60:bf:d6:4a:fa:4a:95:a0: d0:bc:0c:28:36:43:83:03:a7:6e:b0:e2:90:64:76:ed:9a:26: 63:91:40:e6:e4:f2:48:59:9a:c3:0c:b5:bd:c8:cc:b4:b7:36: 53:70:b7:e3:75:bf:dc:50:fa:69:c7:49:cc:51:42:e9:81:f7: f9:35:83:b9:36:60:94:f0:a3:80:b0:75:0f:3e:5b:8a:98:9b: ef:a2:ae:dd:8e:cb:b0:27:26:20:2a:16:3e:31:97:05:e6:0e: 1f:49:cd:20:c4:27:27:15:4c:ea:db:ae:66:7b:37:42:14:d9: fa:ed:50:b5:6f:cd:8e:26:d3:f5:2a:e9:c4:a1:6c:c0:22:fd: 1b:9e:b1:08:6d:d7:2d:cd:8f:dc:aa:90:77:3a:97:f3:b7:98: 23:f2:68:4c:ac:29:ef:9b:a2:1a:10:a5:29:5e:11:b5:bb:b4: 5a:7f:c4:7d -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICNYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjYwNDA3MDMzMDI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ0N2E1NC0zMWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAklQPAig18nUoR4SQhk+zPUBYY4bwmObPPbyY6H2oE1UxzWCxA5hcSYDkmJrF BgP3RIOoGWIJaeqdhue8BYW6VMvyWKC+aouWADVTr0FQ4pLhaBfYu7t8boWuWvoT dArLjThk7i+H3Hgb2ljk6SMKwdXdXj/AmncoIDQhtPMG7BPwYI0MpX4OpX0uirFl F8k5GOW9O7HzkxbETIf0TytY7QwIU/l/fT1eyoMGVYAWe4MXBp0XfO0HHWNXZyMd fLTQndzogIx3XyH8CC53nAn7b8dG8Eh1Yh9PYm/WUkkdTUuAY5l/Sb2sYL/ZU0NZ Iu0b0w5NIXRceB6U2BmIg1pC/QIDAQABo4ICbjCCAmowHQYDVR0OBBYEFNWjD2xx Z5Fk+kbj5Ie0AO+bWZTDMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvOThBRjM5RjIy RTQyMTFGMTkwMTQ5NEU4OTM4MzM3NzMucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQAZQAQMAwDBABnLs0DBARnLsAwDQYJKoZIhvcNAQELBQADggEBAKsP OCdILpMFz675jr+86axq2ibXMua1cUpShnoKMe//hyracR9EA3NYuVmIh5QEWIgv Tq7waWziFlMWmHBnrRh+c/ys4rLoZk2X21BnGlb8Wltgv9ZK+kqVoNC8DCg2Q4MD p26w4pBkdu2aJmORQObk8khZmsMMtb3IzLS3NlNwt+N1v9xQ+mnHScxRQumB9/k1 g7k2YJTwo4CwdQ8+W4qYm++irt2Oy7AnJiAqFj4xlwXmDh9JzSDEJycVTOrbrmZ7 N0IU2frtULVvzY4m0/Uq6cShbMAi/RuesQht1y3Nj9yqkHc6l/O3mCPyaEysKe+b ohoQpSleEbW7tFp/xH0= -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:36 2026 by rpki-client