$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5842DDF0FCE511E9BFA4B27AC4F9AE02.roa File: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (raw, json) Hash identifier: eljEAlMkKKscvcS1ohJrK9p2ggCusjEVdiGi3d1+CNk= Subject key identifier: 83:E9:60:17:29:BC:C3:CF:2A:37:2E:6F:FA:3F:C5:7C:43:AB:A9:15 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0D1E Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5842DDF0FCE511E9BFA4B27AC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:39:15 +0000 ROA not before: Tue 20 May 2025 18:22:56 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138985 IP address blocks: 103.138.50.0/23 maxlen: 23 103.138.50.0/24 maxlen: 24 103.138.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3358 (0xd1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: May 20 18:22:56 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42563-eccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b2:94:50:e8:6c:6f:9e:95:a4:f3:84:66:3f: a3:d4:24:a4:64:77:35:68:d5:c8:10:bf:56:b1:1c: 36:24:2c:d6:0a:f3:c0:24:44:20:03:e1:fa:30:14: 9a:18:c0:c3:27:e8:2e:59:ac:9b:01:1b:a3:98:f0: b4:50:5d:f2:9c:1a:83:3d:94:65:f3:25:86:dd:72: e3:a0:fd:0b:76:f1:33:3f:9c:09:15:7f:f2:ee:79: 05:41:6b:54:81:76:fe:b1:b1:59:21:87:4d:12:b2: 5e:25:ce:69:f9:14:ff:78:dc:f3:ff:ae:c2:a4:16: 16:09:06:4b:7b:41:81:73:0c:c1:ec:3f:ab:58:9f: 43:45:17:87:c5:32:3f:58:3a:6d:f2:33:d3:db:f6: 90:40:f8:ae:e0:09:05:a7:3f:e2:8d:48:28:0e:48: 2c:99:b3:8f:ab:5a:af:ab:b9:27:da:ae:af:44:8b: 4f:b9:ad:a5:7d:f4:9d:81:54:f3:99:e4:34:15:4d: e9:b2:80:79:3f:7b:c4:63:9f:b5:4c:e5:cf:a6:e3: 7d:24:e9:57:76:83:da:68:7c:aa:2f:db:31:1d:ba: c1:97:2e:d9:65:4a:90:65:77:ad:94:46:7e:1f:e1: b1:4f:26:d1:dd:1b:df:e4:07:c6:c9:77:9e:1b:3a: 59:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E9:60:17:29:BC:C3:CF:2A:37:2E:6F:FA:3F:C5:7C:43:AB:A9:15 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5842DDF0FCE511E9BFA4B27AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.50.0/23 Signature Algorithm: sha256WithRSAEncryption 23:03:c7:5e:fc:e8:16:2e:60:13:c9:d6:43:d2:6a:ae:1f:82: e1:6d:b7:26:09:e3:60:cb:2d:39:d6:af:1d:38:45:8a:ae:44: b3:90:51:6e:c7:15:1c:a2:c6:95:b5:c3:ad:93:04:d9:7e:c4: 3e:e5:88:52:1d:9b:fa:ee:4e:99:30:7f:05:75:3e:3a:f8:78: 4d:c6:c5:2b:90:2e:ca:14:8c:38:77:ac:2a:8e:b1:04:92:24: 37:ab:93:87:27:b6:9d:34:83:dc:bf:a2:b6:2a:ee:bd:b0:21: 07:ab:f9:12:13:01:fe:36:cc:ef:ae:4d:dd:ba:a2:15:cb:b5: e5:b2:60:84:bc:b1:60:17:70:c7:c2:3f:2f:15:1e:c1:de:c2: 8c:7a:ec:b2:e1:d2:ca:29:27:1b:18:92:fa:98:dc:a0:ea:ed: 4c:ed:cc:07:09:f2:40:6e:4a:b5:48:a9:07:49:79:0f:a2:ec: 78:a8:7e:db:65:49:e8:0e:3a:2d:51:28:e5:10:7d:6e:7d:fe: 9c:a7:60:bb:82:59:33:08:7e:ed:48:ff:2b:ea:94:a8:d9:c6: 03:68:49:16:df:41:f8:99:72:39:46:22:cb:f6:34:29:4f:7e: df:cc:31:78:e5:4d:95:79:28:36:19:9c:6c:bf:2c:48:51:ea: 40:5c:4b:0f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjUwNTIwMTgyMjU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjU2My1lY2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LKUUOhsb56VpPOEZj+j1CSkZHc1aNXIEL9WsRw2JCzWCvPAJEQgA+H6MBSa GMDDJ+guWaybARujmPC0UF3ynBqDPZRl8yWG3XLjoP0LdvEzP5wJFX/y7nkFQWtU gXb+sbFZIYdNErJeJc5p+RT/eNzz/67CpBYWCQZLe0GBcwzB7D+rWJ9DRReHxTI/ WDpt8jPT2/aQQPiu4AkFpz/ijUgoDkgsmbOPq1qvq7kn2q6vRItPua2lffSdgVTz meQ0FU3psoB5P3vEY5+1TOXPpuN9JOlXdoPaaHyqL9sxHbrBly7ZZUqQZXetlEZ+ H+GxTybR3Rvf5AfGyXeeGzpZBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIPpYBcp vMPPKjcub/o/xXxDq6kVMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThCMEIvNUFFQjVFQjJGQ0M1MTFFOTk4NThBOTFFQzRGOUFFMDIvNTg0MkRERjBG Q0U1MTFFOUJGQTRCMjdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ4oyMA0GCSqGSIb3DQEBCwUAA4IBAQAjA8de/OgWLmATydZD0mqu H4LhbbcmCeNgyy051q8dOEWKrkSzkFFuxxUcosaVtcOtkwTZfsQ+5YhSHZv67k6Z MH8FdT46+HhNxsUrkC7KFIw4d6wqjrEEkiQ3q5OHJ7adNIPcv6K2Ku69sCEHq/kS EwH+Nszvrk3duqIVy7XlsmCEvLFgF3DHwj8vFR7B3sKMeuyy4dLKKScbGJL6mNyg 6u1M7cwHCfJAbkq1SKkHSXkPoux4qH7bZUnoDjotUSjlEH1uff6cp2C7glkzCH7t SP8r6pSo2cYDaEkW30H4mXI5RiLL9jQpT37fzDF45U2VeSg2GZxsvyxIUepAXEsP -----END CERTIFICATE-----Generated at Mon Mar 2 07:09:26 2026 by rpki-client