$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/D75BE71A410511E7970A2A5FC4F9AE02.roa File: D75BE71A410511E7970A2A5FC4F9AE02.roa (raw, json) Hash identifier: QhrVr6S11mmhvrj9Cg8LccmRRJkV19q9dD5tCLjHbgE= Subject key identifier: 98:63:45:E3:65:C7:24:A1:AA:00:4E:A2:70:D4:26:05:D6:59:1B:F9 Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Certificate serial: 1AF6 Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/D75BE71A410511E7970A2A5FC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:30:11 +0000 ROA not before: Wed 14 May 2025 16:56:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9541 IP address blocks: 103.213.112.0/22 maxlen: 22 103.213.112.0/23 maxlen: 23 103.213.112.0/24 maxlen: 24 103.213.113.0/24 maxlen: 24 103.213.114.0/23 maxlen: 23 103.213.114.0/24 maxlen: 24 103.213.115.0/24 maxlen: 24 192.140.148.0/22 maxlen: 22 192.140.148.0/23 maxlen: 23 192.140.148.0/24 maxlen: 24 192.140.149.0/24 maxlen: 24 192.140.150.0/23 maxlen: 23 192.140.150.0/24 maxlen: 24 192.140.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6902 (0x1af6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Validity Not Before: May 14 16:56:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a42343-8c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:17:0e:0d:5c:1f:ae:3e:32:5b:e2:ce:81: 30:c7:96:60:74:c3:b3:05:92:08:f6:e5:93:18:43: 1a:57:b3:36:8c:cc:15:27:bf:e0:97:01:9e:7c:9b: bd:06:19:d1:08:6a:92:a4:3b:78:2f:9e:38:35:a0: 19:5a:cd:09:a0:35:01:be:1e:92:9f:3c:27:fb:79: b5:66:03:b8:93:99:20:a7:bd:bb:0e:e0:1a:6b:ea: 62:b7:1c:8c:04:e4:49:b0:c8:32:46:f6:da:11:83: b8:d8:41:78:60:0e:f5:90:64:e6:64:81:84:42:77: fb:d8:c1:47:1f:47:eb:61:fc:19:5b:6c:44:92:18: 63:cf:c5:e3:0d:fb:3f:c3:43:e6:3c:75:74:12:3f: 50:b8:de:63:0c:ac:7c:d2:de:fc:26:7f:4f:9f:e6: 11:8d:f7:8e:a5:f1:15:d3:fb:50:d4:07:9b:4e:c4: 46:c5:38:88:99:bf:48:5f:8a:1b:53:a4:9f:30:a0: 94:d6:ed:8a:40:25:45:dc:01:64:fe:46:c8:7b:2b: a1:30:8f:43:46:1b:5e:82:be:25:f6:53:cc:9e:7a: 3c:45:e2:48:a8:b0:d4:c1:d7:bb:3b:42:e5:ff:0d: 75:9e:e7:67:b5:69:3d:47:86:43:e7:18:c5:48:6e: 79:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:63:45:E3:65:C7:24:A1:AA:00:4E:A2:70:D4:26:05:D6:59:1B:F9 X509v3 Authority Key Identifier: keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/D75BE71A410511E7970A2A5FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.213.112.0/22 192.140.148.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:78:0b:9f:44:b6:f9:e3:06:a2:f2:2d:00:7b:69:84:28:8d: dd:71:fc:46:19:b5:35:d2:d1:e7:bc:26:fc:23:18:b3:bc:b5: 94:2f:29:99:e7:02:a4:db:64:5f:65:43:d9:b1:7d:cb:af:22: cd:e3:ee:4b:f9:01:e7:6a:34:7f:66:c9:71:68:f9:65:b7:ef: 78:e0:8b:82:82:f0:1a:e3:1d:27:81:50:6b:10:0e:9e:78:b3: a3:a1:97:26:2d:76:22:a3:f7:32:2a:83:5f:8c:bb:59:47:6e: 74:db:1c:93:d2:dc:10:d3:d3:49:18:cb:17:e2:8a:ef:4c:66: 6e:fb:af:42:06:3d:28:69:e5:28:6a:33:b0:32:e9:40:47:47: 5d:19:2d:f5:ca:a7:a1:4b:bf:a5:6b:ae:fa:56:39:60:69:d6: 39:1f:78:cd:ee:8e:fa:f5:24:7c:29:9c:20:3e:c3:87:03:1c: 42:f3:8b:9a:c2:28:9e:0d:d4:5d:ad:95:10:ce:35:c7:97:58: ed:35:65:a9:83:35:e4:99:41:4e:cb:a5:93:18:5e:d9:ce:f2: 58:32:7c:e4:7f:a6:95:d9:1e:cf:a4:3c:b5:33:23:fe:87:86: f8:83:6d:c5:0c:03:2c:34:07:39:00:cf:3f:59:02:44:9a:53: 30:ad:64:b2 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICGvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyNjQxMTAvBgNVBAUTKDYwREQ2NUVDN0Y3MkVCNkM3REE4QjkzNzA2RTJEM0JB MEYwNjVCRkMwHhcNMjUwNTE0MTY1NjM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjM0My04YzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX8XDg1cH64+MlvizoEwx5ZgdMOzBZII9uWTGEMaV7M2jMwVJ7/glwGefJu9 BhnRCGqSpDt4L544NaAZWs0JoDUBvh6Snzwn+3m1ZgO4k5kgp727DuAaa+pitxyM BORJsMgyRvbaEYO42EF4YA71kGTmZIGEQnf72MFHH0frYfwZW2xEkhhjz8XjDfs/ w0PmPHV0Ej9QuN5jDKx80t78Jn9Pn+YRjfeOpfEV0/tQ1AebTsRGxTiImb9IX4ob U6SfMKCU1u2KQCVF3AFk/kbIeyuhMI9DRhtegr4l9lPMnno8ReJIqLDUwde7O0Ll /w11nudntWk9R4ZD5xjFSG55pwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJhjReNl xyShqgBOonDUJgXWWRv5MB8GA1UdIwQYMBaAFGDdZex/cutsfai5Nwbi07oPBlv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDI2NC9DNThENkZGQTQx MDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYyeDlxTGszQnVMVHVnOEdX X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOMWw3SDl5NjJ4OXFMazNCdUxUdWc4R1dfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQyNjQvQzU4RDZGRkE0MTA0MTFFNzlFQzAzODVEQzRGOUFFMDIvRDc1QkU3MUE0 MTA1MTFFNzk3MEEyQTVGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ9VwAwQCwIyUMA0GCSqGSIb3DQEBCwUAA4IBAQB+eAufRLb54wai 8i0Ae2mEKI3dcfxGGbU10tHnvCb8IxizvLWULymZ5wKk22RfZUPZsX3LryLN4+5L +QHnajR/ZslxaPllt+944IuCgvAa4x0ngVBrEA6eeLOjoZcmLXYio/cyKoNfjLtZ R2502xyT0twQ09NJGMsX4orvTGZu+69CBj0oaeUoajOwMulAR0ddGS31yqehS7+l a676VjlgadY5H3jN7o769SR8KZwgPsOHAxxC84uawiieDdRdrZUQzjXHl1jtNWWp gzXkmUFOy6WTGF7ZzvJYMnzkf6aV2R7PpDy1MyP+h4b4g23FDAMsNAc5AM8/WQJE mlMwrWSy -----END CERTIFICATE-----Generated at Mon Mar 2 06:19:18 2026 by rpki-client