$ rpki-client -vvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/37759456617811ECBB095A62C4F9AE02.roa File: 37759456617811ECBB095A62C4F9AE02.roa (raw, json) Hash identifier: GoPelaWzfjsTFtPr3I95eodushRHuWInvxaTpmekvow= Subject key identifier: 70:3D:77:94:8C:CB:10:6F:67:08:E1:D3:92:5B:DD:96:94:61:3E:92 Certificate issuer: /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25 Certificate serial: 0CDD Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/37759456617811ECBB095A62C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:40:11 +0000 ROA not before: Tue 22 Apr 2025 18:47:08 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132169 IP address blocks: 103.138.202.0/23 maxlen: 23 103.138.202.0/24 maxlen: 24 103.138.203.0/24 maxlen: 24 2001:df0:5280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25 Validity Not Before: Apr 22 18:47:08 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4259b-ec07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:a7:79:b7:35:84:9a:d8:91:a8:7f:0d:d9: 97:54:f3:e2:79:f3:14:46:0e:50:93:02:d5:98:45: 6b:c5:17:91:f4:d9:aa:4f:5e:63:6b:35:99:69:3e: 30:04:35:56:69:20:ad:41:58:10:c8:29:36:c5:91: c6:95:37:8f:6a:66:1a:fc:15:ad:01:80:1a:01:86: 8a:62:31:d5:02:6d:2e:15:8c:16:f9:5d:cc:a5:39: 79:7e:b0:3e:96:3f:ba:a6:9c:60:cd:89:bd:69:62: 3d:52:e8:9b:2a:8c:b8:33:db:6f:f0:53:73:3c:08: 41:98:41:c5:15:a6:0b:78:f7:3e:63:04:54:ca:d5: 5d:6d:da:c6:8c:fb:bb:08:f3:87:20:78:07:64:11: 3a:21:90:91:5f:98:7e:9f:16:f2:ab:95:36:fe:2c: b7:81:6c:3d:bd:80:51:96:36:9c:6a:4f:af:3d:bd: 2f:88:6d:cb:5e:53:da:31:7f:4e:78:a0:63:9a:0c: ac:58:de:75:bc:22:91:70:d9:b9:31:82:38:2a:ea: fc:b4:c9:c1:c3:d2:34:c6:a4:35:90:05:f3:7e:38: 0b:9a:30:c5:82:3b:41:a1:6d:36:e9:f9:76:95:1a: 9d:cd:dd:da:d0:b7:a2:ad:5f:f5:4f:53:1d:ec:ee: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3D:77:94:8C:CB:10:6F:67:08:E1:D3:92:5B:DD:96:94:61:3E:92 X509v3 Authority Key Identifier: keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/37759456617811ECBB095A62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.202.0/23 IPv6: 2001:df0:5280::/48 Signature Algorithm: sha256WithRSAEncryption 63:eb:b6:1e:36:2c:8d:40:9e:df:34:12:2c:73:c3:a7:de:a5: 1b:fe:15:d7:53:6c:fd:4c:44:ca:e4:af:4a:3b:54:7c:e9:b5: df:a1:ea:4c:74:94:10:9d:ff:c2:30:43:98:26:00:87:23:51: 02:e1:6d:8e:e5:a9:32:4b:8e:b2:1a:c3:52:f3:d9:44:9c:43: b8:15:de:f4:2f:fd:fa:ce:80:14:ea:8c:a3:76:bc:24:aa:9a: 31:0e:81:d6:ef:ec:71:f1:a2:f8:0f:11:5d:00:35:d8:16:90: 57:c5:a3:4c:cf:6f:47:9d:38:eb:b0:3a:d7:a6:c7:8e:a7:49: e1:b0:f6:e8:85:fc:27:0a:69:e6:1d:c3:45:ec:00:fd:5e:e1: 6b:4b:c6:2a:c4:5c:bd:17:ff:c1:46:a5:52:33:a1:45:7e:75: a6:b9:96:c9:ba:76:a3:60:67:8d:57:28:ab:28:f3:45:a3:f8: 6e:a6:35:7a:64:a2:25:dc:a0:dc:f5:de:f7:13:1a:bd:aa:cc: 9e:74:c8:03:e0:5a:14:a9:5a:6a:a4:e8:88:6e:a0:48:70:1c: 81:56:c7:f9:26:88:41:31:8e:8f:85:6c:e1:2e:8b:0e:cf:db: 05:02:66:b8:18:a9:35:76:05:ef:1d:9e:bd:25:b0:f0:af:a4: 4b:b8:3b:44 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyOUExMTAvBgNVBAUTKDg5NUU2QkNBN0E1QzM2RDlGMzA0NDcyRDBEMjcxM0E0 ODJDOURCMjUwHhcNMjUwNDIyMTg0NzA4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjU5Yi1lYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwa6nebc1hJrYkah/DdmXVPPiefMURg5QkwLVmEVrxReR9NmqT15jazWZaT4w BDVWaSCtQVgQyCk2xZHGlTePamYa/BWtAYAaAYaKYjHVAm0uFYwW+V3MpTl5frA+ lj+6ppxgzYm9aWI9UuibKoy4M9tv8FNzPAhBmEHFFaYLePc+YwRUytVdbdrGjPu7 CPOHIHgHZBE6IZCRX5h+nxbyq5U2/iy3gWw9vYBRljacak+vPb0viG3LXlPaMX9O eKBjmgysWN51vCKRcNm5MYI4Kur8tMnBw9I0xqQ1kAXzfjgLmjDFgjtBoW026fl2 lRqdzd3a0LeirV/1T1Md7O4FnQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHA9d5SM yxBvZwjh05Jb3ZaUYT6SMB8GA1UdIwQYMBaAFIlea8p6XDbZ8wRHLQ0nE6SCydsl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI5QS8xRjIzRTA1ODA1 N0YxMUVBQTU1MTZCM0ZDNEY5QUUwMi9pVjVyeW5wY050bnpCRWN0RFNjVHBJTEoy eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWNXJ5bnBjTnRuekJFY3REU2NUcElMSjJ5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgyOUEvMUYyM0UwNTgwNTdGMTFFQUE1NTE2QjNGQzRGOUFFMDIvMzc3NTk0NTY2 MTc4MTFFQ0JCMDk1QTYyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4rKMA8EAgACMAkDBwAgAQ3wUoAwDQYJKoZIhvcNAQELBQADggEB AGPrth42LI1Ant80Eixzw6fepRv+FddTbP1MRMrkr0o7VHzptd+h6kx0lBCd/8Iw Q5gmAIcjUQLhbY7lqTJLjrIaw1Lz2UScQ7gV3vQv/frOgBTqjKN2vCSqmjEOgdbv 7HHxovgPEV0ANdgWkFfFo0zPb0edOOuwOtemx46nSeGw9uiF/CcKaeYdw0XsAP1e 4WtLxirEXL0X/8FGpVIzoUV+daa5lsm6dqNgZ41XKKso80Wj+G6mNXpkoiXcoNz1 3vcTGr2qzJ50yAPgWhSpWmqk6IhuoEhwHIFWx/kmiEExjo+FbOEuiw7P2wUCZrgY qTV2Be8dnr0lsPCvpEu4O0Q= -----END CERTIFICATE-----Generated at Mon Mar 2 09:32:12 2026 by rpki-client