$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E7676A04A13B11F0B587F733C4F9AE02.roa File: E7676A04A13B11F0B587F733C4F9AE02.roa (raw, json) Hash identifier: XfFdX5d8Ofy55y20y+nCuMM/y19ZpXijIq/KSvDPE2I= Subject key identifier: 4F:97:CA:85:CD:5A:51:E7:CA:13:9E:BD:31:76:B8:34:9F:52:8B:FF Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 0557 Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E7676A04A13B11F0B587F733C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:30:03 +0000 ROA not before: Mon 17 Nov 2025 15:43:34 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 147175 IP address blocks: 103.174.22.0/23 maxlen: 23 103.174.22.0/24 maxlen: 24 103.174.23.0/24 maxlen: 24 2001:df7:b380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Nov 17 15:43:34 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a4779b-d9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:c5:c5:a0:34:7a:8a:06:5d:f7:01:8c:61: 29:f1:78:5a:31:79:f7:3a:a1:38:07:22:20:ee:1c: 7a:7a:24:d6:d5:2a:ae:e8:35:c9:e7:3d:f2:e4:af: bf:a1:18:05:12:b4:f8:6c:33:a2:6c:02:ee:8f:38: 41:ea:78:69:59:1e:b5:22:e0:34:3f:80:4b:c6:9f: ab:49:a1:c8:a3:d8:75:65:91:4e:85:8d:7a:91:ab: 9e:d8:83:7a:6a:0d:36:8a:f6:ac:02:01:c4:d4:8e: 63:e5:8f:6e:6b:89:6e:a7:36:22:be:26:8d:19:58: 7d:66:34:f6:88:62:78:7d:8a:63:e4:00:c0:4b:b7: 95:00:a5:0b:bb:04:31:b8:5a:54:97:f4:6f:b2:ac: d9:67:f8:59:9b:2a:55:e5:7f:18:bc:94:3f:d3:43: cc:5f:62:6a:2b:01:3b:f2:48:08:c2:53:77:83:53: b6:a0:89:fd:ed:23:7a:57:ad:8f:75:8b:a3:29:ba: 6c:a6:e1:13:0c:cb:d7:46:36:88:58:78:41:03:6b: 65:71:62:16:45:01:c7:da:68:1b:0a:68:e3:6d:e3: 0a:10:89:1f:df:18:6b:12:39:7b:2b:07:7b:a9:17: 29:d2:50:14:86:57:38:55:d3:e6:16:26:f8:7d:17: 06:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:97:CA:85:CD:5A:51:E7:CA:13:9E:BD:31:76:B8:34:9F:52:8B:FF X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E7676A04A13B11F0B587F733C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.174.22.0/23 IPv6: 2001:df7:b380::/48 Signature Algorithm: sha256WithRSAEncryption 09:c3:83:ca:8b:64:24:fd:ef:21:a8:09:46:1c:48:4b:10:7e: 4a:b5:90:4b:12:a6:79:e5:c4:ea:96:b3:13:b2:54:84:b4:aa: 64:45:b9:95:54:ac:66:fd:49:03:52:9e:e6:62:0f:2c:1d:6c: 51:78:8c:b9:b5:23:5a:35:2b:88:47:4b:a1:1c:c7:cf:d9:ab: cf:b8:95:c9:01:36:7b:fa:60:85:8f:dd:dc:53:ea:d6:b8:c8: 34:44:2b:d2:df:8f:73:86:de:4e:82:b5:7b:37:32:57:b8:ba: 5e:1a:96:c6:04:b5:b6:57:29:03:f8:d2:66:fc:a8:00:a9:59: 0e:ee:28:1c:ec:38:ac:1e:6f:c0:8e:8e:b2:28:8a:e7:a4:09: 42:b7:c2:e5:92:f4:40:ac:90:da:e3:68:a6:af:36:05:c0:b5: e7:84:5c:41:95:48:1f:43:47:46:cb:7e:4d:30:80:1a:de:a9: d7:6c:2d:0e:0d:16:0d:28:52:c4:f4:be:80:f6:97:29:fb:1b: f9:b3:97:6c:99:47:10:6a:52:99:2d:f9:4e:a2:33:ac:f3:16: 94:20:da:4f:b8:b2:f3:a9:2c:16:c7:3c:25:df:af:e3:c1:24: 79:26:8b:7c:54:0c:e4:23:0f:33:d8:df:21:be:fe:a7:48:78: 49:40:82:b9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUxMTE3MTU0MzM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzc5Yi1kOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZ3FxaA0eooGXfcBjGEp8XhaMXn3OqE4ByIg7hx6eiTW1Squ6DXJ5z3y5K+/ oRgFErT4bDOibALujzhB6nhpWR61IuA0P4BLxp+rSaHIo9h1ZZFOhY16kaue2IN6 ag02ivasAgHE1I5j5Y9ua4lupzYiviaNGVh9ZjT2iGJ4fYpj5ADAS7eVAKULuwQx uFpUl/RvsqzZZ/hZmypV5X8YvJQ/00PMX2JqKwE78kgIwlN3g1O2oIn97SN6V62P dYujKbpspuETDMvXRjaIWHhBA2tlcWIWRQHH2mgbCmjjbeMKEIkf3xhrEjl7Kwd7 qRcp0lAUhlc4VdPmFib4fRcG4wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFE+XyoXN WlHnyhOevTF2uDSfUov/MB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjkyODgvMUZEREE3QjAyQzU5MTFFQ0JBRjVGODZBQzRGOUFFMDIvRTc2NzZBMDRB MTNCMTFGMEI1ODdGNzMzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ64WMA8EAgACMAkDBwAgAQ33s4AwDQYJKoZIhvcNAQELBQADggEB AAnDg8qLZCT97yGoCUYcSEsQfkq1kEsSpnnlxOqWsxOyVIS0qmRFuZVUrGb9SQNS nuZiDywdbFF4jLm1I1o1K4hHS6Ecx8/Zq8+4lckBNnv6YIWP3dxT6ta4yDREK9Lf j3OG3k6CtXs3Mle4ul4alsYEtbZXKQP40mb8qACpWQ7uKBzsOKweb8COjrIoiuek CUK3wuWS9ECskNrjaKavNgXAteeEXEGVSB9DR0bLfk0wgBreqddsLQ4NFg0oUsT0 voD2lyn7G/mzl2yZRxBqUpkt+U6iM6zzFpQg2k+4svOpLBbHPCXfr+PBJHkmi3xU DOQjDzPY3yG+/qdIeElAgrk= -----END CERTIFICATE-----Generated at Mon Mar 2 12:36:44 2026 by rpki-client