$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa File: DCE5E9CA713611E9A71D3311C4F9AE02.roa (raw, json) Hash identifier: vrKAXugyQA7Y3TmceknnjP/xJSIQyV1iJJJU5cR+CB4= Subject key identifier: 53:84:3A:A4:26:8D:12:D5:10:45:FC:04:C2:35:70:D9:AB:47:F2:83 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0FDB Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa Signing time: Tue 31 Mar 2026 18:22:11 +0000 ROA not before: Tue 31 Mar 2026 18:22:11 +0000 ROA not after: Sat 01 Aug 2026 00:00:00 +0000 asID: 136480 IP address blocks: 103.134.204.0/22 maxlen: 22 103.134.204.0/24 maxlen: 24 103.134.205.0/24 maxlen: 24 103.134.206.0/24 maxlen: 24 103.134.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4059 (0xfdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Mar 31 18:22:11 2026 GMT Not After : Aug 1 00:00:00 2026 GMT Subject: CN=69cc10d3-d2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:c0:80:39:52:21:fe:ea:95:e9:ef:28:c0: 1e:65:8e:6c:34:c5:cf:19:d8:c9:44:be:b6:cc:99: 0a:ee:8a:cc:99:cf:b8:43:42:82:6e:60:6c:9c:2c: 10:0b:18:ab:99:8e:43:5d:07:a0:3f:e2:d0:96:de: 7b:fe:4a:92:b0:0b:6a:fd:8e:fe:e5:94:5b:7a:41: bf:dc:5c:e1:b7:8a:21:24:72:d6:11:6f:2f:d0:0e: e1:e6:32:22:77:0c:05:48:cb:d4:1d:d9:57:a0:da: cc:af:3a:d0:f7:c7:7b:4e:41:e9:64:47:ce:29:2b: b0:ec:85:c8:9a:8b:65:60:0d:1e:0c:2b:e3:8b:0e: 93:20:38:2b:f3:17:bc:eb:52:16:21:1e:4a:12:39: 99:1a:53:e0:4b:72:21:4c:ea:c5:68:b2:08:b2:33: cd:73:f1:31:5b:c5:6d:0c:32:a6:00:52:1e:2f:dd: 5e:f1:01:2b:d6:55:c1:51:8b:6f:7b:0e:0e:48:ea: 03:ad:b5:cb:e3:be:7f:7b:b2:a3:d3:0b:83:8c:61: be:85:dc:eb:58:79:3a:8b:25:51:27:db:a4:a8:d3: df:d3:e2:3a:93:9a:0a:95:41:30:2a:ee:76:72:0c: d2:52:3a:52:c8:f0:b0:34:62:80:7b:11:f3:3d:85: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:84:3A:A4:26:8D:12:D5:10:45:FC:04:C2:35:70:D9:AB:47:F2:83 X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.204.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:b4:60:82:59:5b:35:09:ed:cd:fa:50:a9:92:35:cf:dd:33: 47:f2:2d:61:db:cd:e5:5c:f3:32:b8:a4:35:ab:12:d3:a5:48: 40:55:0b:8b:81:34:55:64:d5:c2:8b:27:3c:14:d6:cc:52:54: 56:53:2d:c7:4b:84:03:79:2c:ea:73:b3:e7:48:9f:24:b1:2b: 21:cc:e2:71:84:45:28:bc:b3:9d:19:03:e2:3c:7a:53:74:ad: a5:8c:02:a2:7e:d3:b7:9d:c8:c3:c7:78:17:bd:d5:81:02:8f: 78:f6:82:dd:02:c5:5f:6a:8b:03:f9:b5:65:4b:6e:6f:cb:84: 03:82:e6:cd:fb:ff:e5:73:84:88:98:d8:04:ff:dc:d8:1e:64: 49:51:50:10:6d:db:a9:c5:dc:40:58:49:67:32:14:9b:38:84: f3:f4:66:a0:dd:99:57:4a:9c:78:58:0c:38:6a:05:a5:a7:1b: ca:c3:e8:1d:50:3b:fe:a9:b1:18:54:b5:e6:4d:5f:c5:24:55: c7:da:f5:6a:74:84:0c:71:0f:db:75:ae:95:99:ea:b4:d0:1e: 68:2d:8b:a4:19:4d:9d:d5:5f:dd:43:d2:c2:4f:53:83:03:90: 11:87:aa:bd:32:6a:6f:22:b4:7f:0a:51:f4:ca:c5:a8:36:8b: 52:3d:ff:1f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICD9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjYwMzMxMTgyMjExWhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNjMTBkMy1kMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+HAgDlSIf7qlenvKMAeZY5sNMXPGdjJRL62zJkK7orMmc+4Q0KCbmBsnCwQ CxirmY5DXQegP+LQlt57/kqSsAtq/Y7+5ZRbekG/3Fzht4ohJHLWEW8v0A7h5jIi dwwFSMvUHdlXoNrMrzrQ98d7TkHpZEfOKSuw7IXImotlYA0eDCvjiw6TIDgr8xe8 61IWIR5KEjmZGlPgS3IhTOrFaLIIsjPNc/ExW8VtDDKmAFIeL91e8QEr1lXBUYtv ew4OSOoDrbXL475/e7Kj0wuDjGG+hdzrWHk6iyVRJ9ukqNPf0+I6k5oKlUEwKu52 cgzSUjpSyPCwNGKAexHzPYXccwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFOEOqQm jRLVEEX8BMI1cNmrR/KDMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkRBMDYvMkJGQzg5NDg3MTM2MTFFOTg2OURCRjEwQzRGOUFFMDIvRENFNUU5Q0E3 MTM2MTFFOUE3MUQzMzExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4bMMA0GCSqGSIb3DQEBCwUAA4IBAQBdtGCCWVs1Ce3N+lCpkjXP 3TNH8i1h283lXPMyuKQ1qxLTpUhAVQuLgTRVZNXCiyc8FNbMUlRWUy3HS4QDeSzq c7PnSJ8ksSshzOJxhEUovLOdGQPiPHpTdK2ljAKiftO3ncjDx3gXvdWBAo949oLd AsVfaosD+bVlS25vy4QDgubN+//lc4SImNgE/9zYHmRJUVAQbdupxdxAWElnMhSb OITz9Gag3ZlXSpx4WAw4agWlpxvKw+gdUDv+qbEYVLXmTV/FJFXH2vVqdIQMcQ/b da6Vmeq00B5oLYukGU2d1V/dQ9LCT1ODA5ARh6q9MmpvIrR/ClH0ysWoNotSPf8f -----END CERTIFICATE-----Generated at Fri Apr 17 09:42:49 2026 by rpki-client