$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa File: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (raw, json) Hash identifier: YHaOMGN1bGK+r6itlpUXyRbyQUqBHPRfz33sAi+A7Pw= Subject key identifier: 5B:79:71:41:EB:7D:E8:9F:68:8C:54:E3:73:BA:6E:53:D8:0D:C2:B4 Certificate issuer: /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A Certificate serial: 0214 Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:35:00 +0000 ROA not before: Sat 17 May 2025 03:41:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138680 IP address blocks: 103.136.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1938, serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A Validity Not Before: May 17 03:41:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3de14-0449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:18:de:d5:af:5b:d1:fe:38:85:f0:d2:df: 6e:f6:b3:b7:92:fc:24:8b:ba:88:11:44:d6:54:ae: e7:1a:36:c6:10:b9:93:47:14:40:23:bc:e6:2e:93: 39:8d:f7:57:6a:78:e2:44:32:7a:51:5e:88:64:69: 64:16:60:e4:4a:c1:14:fe:2f:cf:21:ed:29:08:ff: 02:d1:4c:95:67:8e:c3:ab:5a:c8:24:98:13:db:24: 66:74:06:5f:49:45:04:4c:29:86:7f:85:c8:ab:d3: fb:ba:23:29:7e:20:85:e3:2f:c9:e6:6e:2b:ad:3c: 0b:a0:b6:a6:1a:9b:30:4f:6b:db:e1:01:12:fa:32: c2:e8:85:23:07:c3:0b:be:80:52:25:3a:f2:66:9b: 51:eb:d8:d8:be:7f:2b:1d:5d:24:04:10:e8:12:11: cd:cb:0d:1c:6d:b8:5f:a9:5a:c4:aa:9f:83:1d:4a: 48:62:a7:74:4e:7a:f6:90:81:23:7a:42:b1:9b:80: 1f:1e:7a:ff:57:dd:53:da:34:f6:87:27:a6:da:93: 1b:08:e2:bc:0e:03:bd:cf:f6:27:4a:2d:32:2a:ad: 11:ce:0a:d0:31:dd:c3:eb:7c:d3:44:79:0b:e2:9e: 16:7f:81:35:61:4c:44:81:d4:35:56:ca:fd:94:b7: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:79:71:41:EB:7D:E8:9F:68:8C:54:E3:73:BA:6E:53:D8:0D:C2:B4 X509v3 Authority Key Identifier: keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.86.0/24 Signature Algorithm: sha256WithRSAEncryption 86:c2:6c:f7:41:40:86:05:a8:28:24:df:bb:9b:ee:06:e9:24: e0:84:9d:fc:ac:dc:5d:0a:f5:1f:2d:4d:15:23:45:06:a4:ab: 3e:dc:da:02:21:3f:38:2d:bf:b8:04:63:7f:66:ff:b3:f0:00: e2:c5:0f:34:d7:a3:32:fe:88:36:a4:ad:f7:20:8d:bf:b6:79: 8f:d2:ad:3c:91:26:31:d4:b1:27:fa:f8:4c:e6:47:e2:8f:d2: 37:55:e0:2e:f5:8f:a9:6e:3a:b4:9d:b1:a0:ec:3f:d5:d9:15: c4:1c:a4:1b:f8:e6:c2:5f:77:87:e4:e7:98:55:22:23:01:d8: 9b:3d:af:8f:b0:a5:26:0e:c6:bc:28:4f:d7:d3:1b:c2:7c:7e: c2:1a:38:86:f0:6d:0b:c5:fd:c9:c9:b0:ea:ea:0e:43:2e:19: ac:8e:0d:8d:be:26:47:c4:77:a0:f5:36:06:15:b9:8f:a0:dd: 35:02:2e:5d:e5:0a:94:47:e4:45:f8:15:b0:11:84:f3:52:a3: 86:2c:de:46:e2:3e:66:ee:34:19:9a:d5:bc:3e:af:90:04:85: 7b:14:56:c7:65:69:08:a7:dc:6f:ef:99:48:63:07:69:f2:be: 33:07:a0:e6:36:50:29:b4:b9:5e:e4:a8:f6:eb:5d:7e:d9:db: a3:24:ce:8b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MzgxMTAvBgNVBAUTKDQ1QzlERTI1NEUyRTAzMDVENjUwQTUwQTZCRjE5MjY4 ODA3RUYxMEEwHhcNMjUwNTE3MDM0MTU4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGUxNC0wNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpwY3tWvW9H+OIXw0t9u9rO3kvwki7qIEUTWVK7nGjbGELmTRxRAI7zmLpM5 jfdXanjiRDJ6UV6IZGlkFmDkSsEU/i/PIe0pCP8C0UyVZ47Dq1rIJJgT2yRmdAZf SUUETCmGf4XIq9P7uiMpfiCF4y/J5m4rrTwLoLamGpswT2vb4QES+jLC6IUjB8ML voBSJTryZptR69jYvn8rHV0kBBDoEhHNyw0cbbhfqVrEqp+DHUpIYqd0Tnr2kIEj ekKxm4AfHnr/V91T2jT2hyem2pMbCOK8DgO9z/YnSi0yKq0RzgrQMd3D63zTRHkL 4p4Wf4E1YUxEgdQ1Vsr9lLePcQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFt5cUHr feifaIxU43O6blPYDcK0MB8GA1UdIwQYMBaAFEXJ3iVOLgMF1lClCmvxkmiAfvEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkzOC81MjY4NDk3MkVF MTAxMUVEOTA2NTc0MzZDNEY5QUUwMi9SY25lSlU0dUF3WFdVS1VLYV9HU2FJQi04 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjbmVKVTR1QXdYV1VLVUthX0dTYUlCLThRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTE5MzgvNTI2ODQ5NzJFRTEwMTFFRDkwNjU3NDM2QzRGOUFFMDIvNjhFQ0YzQkFF RTE5MTFFRDlDN0NEQzYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4hWMA0GCSqGSIb3DQEBCwUAA4IBAQCGwmz3QUCGBagoJN+7m+4G 6STghJ38rNxdCvUfLU0VI0UGpKs+3NoCIT84Lb+4BGN/Zv+z8ADixQ8016My/og2 pK33II2/tnmP0q08kSYx1LEn+vhM5kfij9I3VeAu9Y+pbjq0nbGg7D/V2RXEHKQb +ObCX3eH5OeYVSIjAdibPa+PsKUmDsa8KE/X0xvCfH7CGjiG8G0Lxf3JybDq6g5D Lhmsjg2NviZHxHeg9TYGFbmPoN01Ai5d5QqUR+RF+BWwEYTzUqOGLN5G4j5m7jQZ mtW8Pq+QBIV7FFbHZWkIp9xv75lIYwdp8r4zB6DmNlAptLle5Kj2611+2dujJM6L -----END CERTIFICATE-----Generated at Mon Mar 2 07:23:29 2026 by rpki-client