$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/1CA71D84493D11EAAB30C638C4F9AE02.roa File: 1CA71D84493D11EAAB30C638C4F9AE02.roa (raw, json) Hash identifier: wDjfOh8609HdFw/YVyLAqOmKGoMVNeZ+2qVSszT55y4= Subject key identifier: BE:28:C6:F9:1F:4A:3F:70:43:71:D4:C0:C6:46:0C:1D:47:7E:63:DC Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Certificate serial: 1499 Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/1CA71D84493D11EAAB30C638C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:17:51 +0000 ROA not before: Thu 24 Apr 2025 17:15:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64095 IP address blocks: 103.212.52.0/22 maxlen: 22 139.5.164.0/22 maxlen: 22 2404:9e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5273 (0x1499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Validity Not Before: Apr 24 17:15:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4043f-b254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fe:84:68:5f:5c:a2:89:5d:df:56:80:3a:61: 4d:75:e0:35:c2:01:bf:b7:e0:32:a3:bc:21:08:2f: 80:e6:e0:7b:ca:b0:57:60:14:25:e2:cb:0b:f5:c0: be:1d:c4:ec:e9:da:43:33:f1:49:34:cc:0c:9f:fc: 0d:14:ec:39:30:bf:e4:12:fd:a9:c1:c5:4a:c1:94: 0c:b5:08:c1:84:62:36:ed:2a:48:a5:57:f7:fd:4a: b2:de:49:86:4a:40:0d:2c:b5:ce:46:78:cd:db:40: 4d:31:e0:24:87:4b:da:06:2f:ea:e4:33:f7:dd:87: 21:4f:dd:d9:6f:c1:7d:05:a9:1a:09:7c:8d:4b:2c: c6:1b:a6:ba:c2:b5:42:3d:13:4e:42:5c:d7:49:88: 0a:62:6f:4b:91:43:fb:0b:40:e2:da:1c:f0:53:01: 20:bd:0a:70:cd:0d:a0:c3:5c:27:d8:e7:c4:5d:da: 75:74:72:8d:96:df:72:95:bb:cd:64:10:3c:98:1f: 26:cd:5f:d2:12:ec:55:b2:51:0d:72:58:5f:d1:42: 1c:29:5d:5d:4e:c7:fd:75:b3:92:b1:33:d6:f5:7e: b4:c0:af:12:2a:f3:25:d8:76:1e:b5:93:34:38:58: dd:09:5e:2d:b5:40:6b:2f:03:c9:c6:8a:1d:c2:0a: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:28:C6:F9:1F:4A:3F:70:43:71:D4:C0:C6:46:0C:1D:47:7E:63:DC X509v3 Authority Key Identifier: keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/1CA71D84493D11EAAB30C638C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.212.52.0/22 139.5.164.0/22 IPv6: 2404:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 30:c4:3c:7b:41:2a:32:d6:e8:c6:4a:9b:41:3d:42:7c:71:4e: f1:b7:9c:23:fd:11:03:d8:92:91:5f:d7:f6:9e:e6:c7:62:30: 6f:01:ab:14:e7:27:0c:0c:6f:49:c9:dd:d0:78:20:f1:b7:c9: 9a:25:3b:6a:19:f7:8e:f9:37:17:0a:d5:a6:b9:f1:80:7d:5d: 7a:68:46:70:b9:2f:c6:21:da:ca:bd:cf:42:d4:a9:8c:8c:7b: 48:a2:15:ee:5b:fc:84:55:1d:3a:1c:a1:cb:51:9b:1c:c6:be: 5f:af:9d:f5:2f:8e:00:8c:73:34:4a:2e:38:a2:ee:53:4e:51: 47:92:ee:95:58:23:c3:e3:be:64:5b:0e:eb:7a:60:a4:45:33: 0b:37:70:be:c5:2e:bb:93:58:df:a6:25:87:ab:86:f5:a9:04: 7e:22:5c:2e:de:16:37:42:af:8a:e8:7f:cf:3e:2b:3e:df:d0: f4:cb:8a:46:e7:69:ee:9c:d9:46:86:06:c4:c6:81:22:dd:d1: 47:55:54:7f:7b:9f:70:d0:c5:32:5a:82:8a:49:43:38:5c:d4: ec:31:30:fe:41:bc:bd:61:25:8b:7b:2d:25:7c:2e:15:35:30: 7b:7f:53:de:30:b9:ec:67:c4:78:66:1b:02:f5:c2:0e:c9:67: be:22:cc:ea -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICFJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4 NjcwQzg5Q0IwHhcNMjUwNDI0MTcxNTQyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDQzZi1iMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/6EaF9coold31aAOmFNdeA1wgG/t+Ayo7whCC+A5uB7yrBXYBQl4ssL9cC+ HcTs6dpDM/FJNMwMn/wNFOw5ML/kEv2pwcVKwZQMtQjBhGI27SpIpVf3/Uqy3kmG SkANLLXORnjN20BNMeAkh0vaBi/q5DP33YchT93Zb8F9BakaCXyNSyzGG6a6wrVC PRNOQlzXSYgKYm9LkUP7C0Di2hzwUwEgvQpwzQ2gw1wn2OfEXdp1dHKNlt9ylbvN ZBA8mB8mzV/SEuxVslENclhf0UIcKV1dTsf9dbOSsTPW9X60wK8SKvMl2HYetZM0 OFjdCV4ttUBrLwPJxoodwgrTkQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFL4oxvkf Sj9wQ3HUwMZGDB1HfmPcMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjQyODYvQjIxQUEwOTQ3RjQ5MTFFODg4RDM1NjQyQzRGOUFFMDIvMUNBNzFEODQ0 OTNEMTFFQUFCMzBDNjM4QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ9Q0AwQCiwWkMA0EAgACMAcDBQAkBJ6AMA0GCSqGSIb3DQEBCwUA A4IBAQAwxDx7QSoy1ujGSptBPUJ8cU7xt5wj/RED2JKRX9f2nubHYjBvAasU5ycM DG9Jyd3QeCDxt8maJTtqGfeO+TcXCtWmufGAfV16aEZwuS/GIdrKvc9C1KmMjHtI ohXuW/yEVR06HKHLUZscxr5fr531L44AjHM0Si44ou5TTlFHku6VWCPD475kWw7r emCkRTMLN3C+xS67k1jfpiWHq4b1qQR+Ilwu3hY3Qq+K6H/PPis+39D0y4pG52nu nNlGhgbExoEi3dFHVVR/e59w0MUyWoKKSUM4XNTsMTD+Qby9YSWLey0lfC4VNTB7 f1PeMLnsZ8R4ZhsC9cIOyWe+Iszq -----END CERTIFICATE-----Generated at Mon Mar 2 13:55:09 2026 by rpki-client