$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/98845C5C54EC11E791C3F825C4F9AE02.roa File: 98845C5C54EC11E791C3F825C4F9AE02.roa (raw, json) Hash identifier: EtduFqwWmltWsbxhdyqETTLdxGQaxld6Ct3ig7z5qNY= Subject key identifier: 40:9B:FB:09:AB:D2:2C:9A:37:85:C7:FD:FF:2F:31:69:6E:5E:8E:EC Certificate issuer: /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Certificate serial: 29EB Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/98845C5C54EC11E791C3F825C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:32:12 +0000 ROA not before: Wed 28 Jan 2026 16:13:03 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 58473 IP address blocks: 103.28.72.0/24 maxlen: 24 103.60.132.0/23 maxlen: 24 103.240.132.0/24 maxlen: 24 2402:df80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10731 (0x29eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Validity Not Before: Jan 28 16:13:03 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44dec-8c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:13:e6:d5:83:72:b1:a6:77:10:32:c2:e1: 84:cd:2f:f8:21:d8:11:6a:f5:fd:e8:0c:ad:42:d8: 9f:e6:2d:79:6d:75:83:89:3d:be:84:20:68:7f:79: 63:54:82:5c:b2:9b:c9:df:ab:f1:66:22:de:37:08: 98:8c:d6:62:c8:c2:a3:c4:14:f5:d6:5a:f6:f1:25: 9f:9d:ce:a6:39:df:c0:5a:d8:3d:d4:73:3a:16:4f: d7:15:cb:3d:0a:d9:ba:c4:84:35:4d:b9:f4:02:e3: ba:78:52:0c:d6:b8:96:f7:93:16:09:ec:71:9a:26: 72:3f:fc:5e:62:96:16:83:6c:76:b9:42:23:88:5f: 32:93:cd:d5:3a:6c:ea:f2:76:e8:86:92:ad:44:67: d9:f1:17:7f:a2:f1:92:29:ba:b1:7a:53:d4:f4:ec: 28:2d:f8:35:01:ee:cd:fd:e0:fd:1b:45:1e:a4:0a: 46:15:17:16:4f:a2:4a:da:b8:1f:21:29:4c:c3:20: b2:c1:63:87:9d:27:2e:47:89:e1:49:63:5c:3e:33: 22:62:04:a2:c2:15:19:50:da:8f:02:50:b3:92:91: 0d:11:e1:f4:9f:c0:04:7a:f1:69:1e:7a:ff:0a:25: 37:9f:3e:31:a2:98:01:25:4d:6a:f9:71:49:9a:b3: 02:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9B:FB:09:AB:D2:2C:9A:37:85:C7:FD:FF:2F:31:69:6E:5E:8E:EC X509v3 Authority Key Identifier: keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/98845C5C54EC11E791C3F825C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.28.72.0/24 103.60.132.0/23 103.240.132.0/24 IPv6: 2402:df80::/32 Signature Algorithm: sha256WithRSAEncryption 57:0b:35:4b:59:e0:6a:f3:ca:8f:d3:bc:ac:ea:46:be:a5:2b: de:42:81:9b:3f:2e:f2:56:aa:06:b0:6f:86:e8:ee:b7:e0:1b: a1:2f:ea:6b:58:dd:9f:16:af:96:48:8a:df:2e:fc:69:e9:7f: bc:fd:01:ae:2c:e5:81:38:05:65:20:38:e1:a2:03:51:68:36: 18:7a:4c:76:62:e3:b8:f5:a1:b0:75:c0:ef:ff:b3:60:ea:f7: fd:61:8a:80:cf:0c:e5:a4:67:a5:63:28:8e:5d:16:f4:27:37: 42:d0:eb:49:f5:da:cb:73:3a:99:ec:5d:8c:9e:f7:65:e0:08: 0f:93:bd:03:f1:aa:e4:4c:16:0e:56:14:f7:22:49:6d:41:30: 08:df:a3:42:b8:c2:0f:2e:e9:a3:18:c1:17:62:17:bd:97:05: 01:63:06:1f:18:d0:00:a6:79:67:9c:48:b9:11:05:4a:98:9b: 55:91:6a:c0:b8:72:79:ff:7f:5b:1b:be:62:de:5a:3f:c1:ea: 18:50:45:ac:e6:f4:5c:f1:f1:35:17:18:7b:61:a0:a0:44:a6: e9:36:8d:59:81:db:fa:ea:44:8c:23:04:ee:51:82:3f:01:8a: 7f:b4:04:ed:e4:84:f2:91:4c:ab:86:73:86:72:70:8c:aa:34: 51:e7:0b:8e -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICKeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMTcxMTAvBgNVBAUTKEI2NEIxMTA4RTk4RUVDODdGQjZCMEMyOEJFMDE2NDVD NzA4QjRBQzUwHhcNMjYwMTI4MTYxMzAzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGRlYy04YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLAT5tWDcrGmdxAywuGEzS/4IdgRavX96AytQtif5i15bXWDiT2+hCBof3lj VIJcspvJ36vxZiLeNwiYjNZiyMKjxBT11lr28SWfnc6mOd/AWtg91HM6Fk/XFcs9 Ctm6xIQ1Tbn0AuO6eFIM1riW95MWCexxmiZyP/xeYpYWg2x2uUIjiF8yk83VOmzq 8nbohpKtRGfZ8Rd/ovGSKbqxelPU9OwoLfg1Ae7N/eD9G0UepApGFRcWT6JK2rgf ISlMwyCywWOHnScuR4nhSWNcPjMiYgSiwhUZUNqPAlCzkpENEeH0n8AEevFpHnr/ CiU3nz4xopgBJU1q+XFJmrMC+QIDAQABo4ICezCCAncwHQYDVR0OBBYEFECb+wmr 0iyaN4XH/f8vMWluXo7sMB8GA1UdIwQYMBaAFLZLEQjpjuyH+2sMKL4BZFxwi0rF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxNy80NDVFRTA5NDU4 QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJZjdhd3dvdmdGa1hIQ0xT c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rrc1JDT21PN0lmN2F3d292Z0ZrWEhDTFNzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFFMTcvNDQ1RUUwOTQ1OEJEMTFFNDkzODNBQjc2QzRGOUFFMDIvOTg4NDVDNUM1 NEVDMTFFNzkxQzNGODI1QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZxxIAwQBZzyEAwQAZ/CEMA0EAgACMAcDBQAkAt+AMA0GCSqGSIb3 DQEBCwUAA4IBAQBXCzVLWeBq88qP07ys6ka+pSveQoGbPy7yVqoGsG+G6O634Buh L+prWN2fFq+WSIrfLvxp6X+8/QGuLOWBOAVlIDjhogNRaDYYekx2YuO49aGwdcDv /7Ng6vf9YYqAzwzlpGelYyiOXRb0JzdC0OtJ9drLczqZ7F2Mnvdl4AgPk70D8ark TBYOVhT3IkltQTAI36NCuMIPLumjGMEXYhe9lwUBYwYfGNAApnlnnEi5EQVKmJtV kWrAuHJ5/39bG75i3lo/weoYUEWs5vRc8fE1Fxh7YaCgRKbpNo1Zgdv66kSMIwTu UYI/AYp/tATt5ITykUyrhnOGcnCMqjRR5wuO -----END CERTIFICATE-----Generated at Mon Mar 2 09:44:40 2026 by rpki-client