$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/5CBAC63066DF11F0935CCC36C4F9AE02.roa File: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (raw, json) Hash identifier: FZBTRmN4jNtPYjIkOHiUIokPiCQDNfx5hxg3M5I9k0s= Subject key identifier: 5A:C6:5D:38:7B:87:93:E5:58:20:D2:B5:69:D2:06:D7:CC:9E:C7:7F Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Certificate serial: 0E97 Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/5CBAC63066DF11F0935CCC36C4F9AE02.roa Signing time: Sun 12 Apr 2026 17:21:16 +0000 ROA not before: Sun 12 Apr 2026 17:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140224 IP address blocks: 103.88.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 17:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3735 (0xe97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Validity Not Before: Apr 12 17:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69dbd48c-3bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:32:ec:7b:ee:ff:e8:0b:15:e6:0e:0a:5d: 26:2a:83:05:21:15:9f:59:59:8c:e1:63:dd:20:6f: b5:94:59:44:81:d3:81:b6:2b:ea:3c:db:f0:58:0a: 9b:56:98:51:3e:12:51:08:6a:96:a0:ea:9c:f0:9f: 60:a3:d1:85:bd:4e:8d:95:04:ae:92:17:8e:20:a4: e1:20:de:78:28:27:71:d3:9d:55:99:82:4f:1f:2f: 4e:33:96:f8:68:c1:85:47:40:5a:7a:39:dc:68:f7: 9d:0a:c6:ec:4b:98:4b:49:4f:f3:db:99:96:24:e7: b0:e4:a5:ac:61:6a:ad:34:b0:54:ea:3c:7d:6d:c4: 4f:1d:3c:20:a8:20:9e:63:ca:54:3a:d7:f2:e7:0a: e1:55:77:6b:a0:21:48:27:7f:e4:22:be:bc:ef:11: c7:60:d6:a9:cf:7f:1e:b4:4f:83:15:0c:37:0e:b7: 06:58:53:a9:75:b0:fa:3b:65:e8:03:94:3c:a5:ba: 45:09:87:84:2e:99:1b:82:df:2d:03:a6:f3:37:e9: 6e:00:8d:26:c1:26:5a:9d:ac:ef:10:51:76:97:87: bd:b1:2f:89:f7:7f:5c:00:80:f2:15:b6:32:3c:23: 21:3d:5e:7a:50:42:1c:ea:4b:17:65:5a:ca:00:aa: c0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C6:5D:38:7B:87:93:E5:58:20:D2:B5:69:D2:06:D7:CC:9E:C7:7F X509v3 Authority Key Identifier: keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/5CBAC63066DF11F0935CCC36C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.95.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:28:7b:e3:27:dc:b2:a3:2d:3d:cd:f5:cd:2d:65:fe:52:7d: 54:ed:47:4e:97:6b:6c:20:23:df:ba:66:19:16:a3:d2:59:fe: 27:d3:31:3e:cc:79:e7:b3:56:19:22:0c:df:0a:b9:17:eb:e2: ba:4a:45:fb:ec:7f:07:22:34:18:be:2e:55:0f:51:92:c9:4c: 79:8f:77:82:a1:49:69:72:13:bb:e0:75:d3:6f:23:2c:da:65: 22:18:75:bd:86:47:00:3d:39:0e:6c:6f:ff:cd:b6:11:44:a3: cc:21:98:5e:55:1b:56:d4:e7:d1:9b:6f:41:3e:c3:42:e5:f2: bb:1c:13:aa:ab:27:b2:58:82:fc:0f:3d:17:69:0e:61:ff:76: b9:db:c8:95:00:08:74:f3:27:72:60:9f:00:4e:47:f9:0e:ae: 7c:1a:22:81:43:5d:9f:e1:92:83:f3:59:53:3b:16:8c:ae:db: 25:54:76:fd:34:8c:8f:2d:ea:5d:2d:50:fc:c1:d0:8d:e2:dd: e1:73:86:72:e5:ee:cb:03:67:1b:92:33:cf:7a:42:de:d9:35: 42:20:0a:45:5d:4a:9b:ca:f2:b9:99:dd:a8:8c:09:6a:d7:12: 80:44:25:d8:0b:fc:1c:65:49:50:44:09:9d:f5:3c:aa:49:58: e3:6a:a2:94 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFMTkxMTAvBgNVBAUTKDI1NTI5MEEwMUFBOUI5MTE4QjY2RUVEQTBGOTA1RjZE NDBEQjA1QUUwHhcNMjYwNDEyMTcyMTE2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWRiZDQ4Yy0zYmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCMy7Hvu/+gLFeYOCl0mKoMFIRWfWVmM4WPdIG+1lFlEgdOBtivqPNvwWAqb VphRPhJRCGqWoOqc8J9go9GFvU6NlQSukheOIKThIN54KCdx051VmYJPHy9OM5b4 aMGFR0BaejncaPedCsbsS5hLSU/z25mWJOew5KWsYWqtNLBU6jx9bcRPHTwgqCCe Y8pUOtfy5wrhVXdroCFIJ3/kIr687xHHYNapz38etE+DFQw3DrcGWFOpdbD6O2Xo A5Q8pbpFCYeELpkbgt8tA6bzN+luAI0mwSZanazvEFF2l4e9sS+J939cAIDyFbYy PCMhPV56UEIc6ksXZVrKAKrAmwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFrGXTh7 h5PlWCDStWnSBtfMnsd/MB8GA1UdIwQYMBaAFCVSkKAaqbkRi2bu2g+QX21A2wWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUUxOS8zNTZGMkYzRUMx QTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVSR0xadTdhRDVCZmJVRGJC YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWS1FvQnFwdVJHTFp1N2FENUJmYlVEYkJhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjlFMTkvMzU2RjJGM0VDMUE1MTFFOUE4QjhGMzM2QzRGOUFFMDIvNUNCQUM2MzA2 NkRGMTFGMDkzNUNDQzM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ1hfMA0GCSqGSIb3DQEBCwUAA4IBAQCNKHvjJ9yyoy09zfXNLWX+ Un1U7UdOl2tsICPfumYZFqPSWf4n0zE+zHnns1YZIgzfCrkX6+K6SkX77H8HIjQY vi5VD1GSyUx5j3eCoUlpchO74HXTbyMs2mUiGHW9hkcAPTkObG//zbYRRKPMIZhe VRtW1OfRm29BPsNC5fK7HBOqqyeyWIL8Dz0XaQ5h/3a528iVAAh08ydyYJ8ATkf5 Dq58GiKBQ12f4ZKD81lTOxaMrtslVHb9NIyPLepdLVD8wdCN4t3hc4Zy5e7LA2cb kjPPekLe2TVCIApFXUqbyvK5md2ojAlq1xKARCXYC/wcZUlQRAmd9TyqSVjjaqKU -----END CERTIFICATE-----Generated at Sun Apr 19 08:21:00 2026 by rpki-client