$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/525D3FA866D811F0A962E05FC4F9AE02.roa File: 525D3FA866D811F0A962E05FC4F9AE02.roa (raw, json) Hash identifier: yXwdOd72bbovK/lF6Uti3upvDyZiu0XdcxdU6SGbEWE= Subject key identifier: 47:A5:C0:77:FE:62:3C:EC:F9:2D:E6:91:3A:9F:31:6A:47:5D:2F:06 Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Certificate serial: 0E98 Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/525D3FA866D811F0A962E05FC4F9AE02.roa Signing time: Sun 12 Apr 2026 17:21:19 +0000 ROA not before: Sun 12 Apr 2026 17:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18186 IP address blocks: 103.88.95.0/24 maxlen: 24 220.158.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3736 (0xe98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Validity Not Before: Apr 12 17:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69dbd48f-d884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:39:75:36:d1:a4:19:12:ee:a1:c5:5c:b9:b1: 9e:5b:b6:00:7d:23:75:80:41:04:60:7a:30:57:07: d3:a3:81:5f:6d:4a:ee:e8:89:fa:12:d9:51:e6:35: 4f:2b:c6:06:90:20:ab:32:a7:9d:0d:50:b8:d8:8c: 9a:e3:84:05:2a:2d:e3:b3:32:25:d6:e0:3b:d4:b9: ec:25:de:21:43:50:0f:e6:0f:75:36:d4:35:d1:86: 15:2e:c0:f1:99:1c:9d:09:fc:52:08:58:b8:ba:46: 5a:e6:d9:89:e9:16:0a:9c:af:74:f7:85:2e:78:e8: 51:1b:2a:f8:15:50:cf:95:5c:81:86:7c:d1:40:b7: 05:d1:65:90:5a:1c:3d:09:82:00:72:5b:9e:29:64: 03:44:ee:66:84:32:6d:dd:30:93:e1:fe:39:a7:9b: b3:9e:f1:cf:62:3b:a2:33:c3:2e:48:0e:07:1e:0e: b2:35:cf:a9:81:88:70:46:fc:75:3c:e6:17:48:da: d5:20:3c:f2:5d:ee:2b:98:98:a9:dd:65:e1:28:0b: 8b:26:68:1c:45:3e:dc:5b:13:1f:42:e2:4c:8a:c4: 45:6a:5c:b2:f4:18:e6:6c:5d:e3:8f:7f:55:02:75: 8e:d6:80:42:88:65:dd:b0:ea:a9:1b:ab:89:82:41: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A5:C0:77:FE:62:3C:EC:F9:2D:E6:91:3A:9F:31:6A:47:5D:2F:06 X509v3 Authority Key Identifier: keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/525D3FA866D811F0A962E05FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.95.0/24 220.158.195.0/24 Signature Algorithm: sha256WithRSAEncryption 52:a8:89:4a:17:73:c2:bf:ac:3e:4f:c3:9f:cf:c1:43:ef:86: 85:9c:b0:ce:8c:20:ae:28:d7:74:be:ee:07:9c:f7:4b:6b:f3: dd:f7:a7:cd:da:02:4b:14:57:97:e7:66:3e:be:b3:35:87:34: 86:76:60:92:5b:41:64:ca:73:4d:7b:41:7d:5d:f9:d9:7f:08: b7:1a:dd:9e:75:13:e8:b0:32:fd:c3:dc:d9:3d:65:98:17:84: 46:ea:a7:4b:34:45:91:48:bf:0e:47:9f:a0:6f:94:fe:34:19: 9c:ae:f4:2a:22:f4:f2:3e:ad:26:9d:10:21:9b:65:8e:1b:83: 44:10:99:49:f9:8c:e5:d7:33:f1:8e:cc:cd:be:61:b3:54:fc: 0e:66:6a:14:08:87:24:69:9a:39:4a:49:eb:ee:00:66:1a:4f: a9:be:03:5f:c7:d8:ba:55:3c:21:52:d4:8e:79:ae:02:32:b4: 50:6d:29:8d:22:b7:23:e1:ee:bf:87:33:2a:9a:c4:af:37:49: 91:9f:48:34:36:1b:d3:a7:0c:dd:12:91:7f:e7:6b:21:4a:f7: b1:24:b9:a6:44:44:fa:06:e0:4b:10:f8:8e:c0:22:63:07:bb: 46:4f:48:22:d9:b9:76:a5:e8:19:c2:52:77:3b:66:f2:67:8d: 11:da:6b:f4 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFMTkxMTAvBgNVBAUTKDI1NTI5MEEwMUFBOUI5MTE4QjY2RUVEQTBGOTA1RjZE NDBEQjA1QUUwHhcNMjYwNDEyMTcyMTE5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWRiZDQ4Zi1kODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zl1NtGkGRLuocVcubGeW7YAfSN1gEEEYHowVwfTo4FfbUru6In6EtlR5jVP K8YGkCCrMqedDVC42Iya44QFKi3jszIl1uA71LnsJd4hQ1AP5g91NtQ10YYVLsDx mRydCfxSCFi4ukZa5tmJ6RYKnK9094UueOhRGyr4FVDPlVyBhnzRQLcF0WWQWhw9 CYIAclueKWQDRO5mhDJt3TCT4f45p5uznvHPYjuiM8MuSA4HHg6yNc+pgYhwRvx1 POYXSNrVIDzyXe4rmJip3WXhKAuLJmgcRT7cWxMfQuJMisRFalyy9BjmbF3jj39V AnWO1oBCiGXdsOqpG6uJgkG0AwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEelwHf+ Yjzs+S3mkTqfMWpHXS8GMB8GA1UdIwQYMBaAFCVSkKAaqbkRi2bu2g+QX21A2wWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUUxOS8zNTZGMkYzRUMx QTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVSR0xadTdhRDVCZmJVRGJC YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWS1FvQnFwdVJHTFp1N2FENUJmYlVEYkJhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjlFMTkvMzU2RjJGM0VDMUE1MTFFOUE4QjhGMzM2QzRGOUFFMDIvNTI1RDNGQTg2 NkQ4MTFGMEE5NjJFMDVGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ1hfAwQA3J7DMA0GCSqGSIb3DQEBCwUAA4IBAQBSqIlKF3PCv6w+ T8Ofz8FD74aFnLDOjCCuKNd0vu4HnPdLa/Pd96fN2gJLFFeX52Y+vrM1hzSGdmCS W0FkynNNe0F9XfnZfwi3Gt2edRPosDL9w9zZPWWYF4RG6qdLNEWRSL8OR5+gb5T+ NBmcrvQqIvTyPq0mnRAhm2WOG4NEEJlJ+Yzl1zPxjszNvmGzVPwOZmoUCIckaZo5 Sknr7gBmGk+pvgNfx9i6VTwhUtSOea4CMrRQbSmNIrcj4e6/hzMqmsSvN0mRn0g0 NhvTpwzdEpF/52shSvexJLmmRET6BuBLEPiOwCJjB7tGT0gi2bl2pegZwlJ3O2by Z40R2mv0 -----END CERTIFICATE-----Generated at Fri Apr 17 09:39:30 2026 by rpki-client