$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/252E9EB4652411F196C4FA3A8447A888.roa File: 252E9EB4652411F196C4FA3A8447A888.roa (raw, json) Hash identifier: uLZNLe/3LKewURqIVc5uNnrl/e0YDlahAtsJGHncajc= Subject key identifier: 04:A4:AC:C5:33:0C:5A:CE:10:38:71:D8:A8:51:5E:79:41:8C:59:78 Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Certificate serial: 0230 Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/252E9EB4652411F196C4FA3A8447A888.roa Signing time: Wed 10 Jun 2026 23:28:54 +0000 ROA not before: Wed 10 Jun 2026 23:28:54 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 136758 IP address blocks: 103.95.64.0/24 maxlen: 24 103.95.65.0/24 maxlen: 24 103.95.66.0/24 maxlen: 24 103.95.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Validity Not Before: Jun 10 23:28:54 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a29f336-77fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:00:da:e5:5a:e6:11:0e:69:75:91:56:01: 45:95:19:57:88:d4:bb:3c:70:31:1c:b1:46:72:90: 2e:fc:e7:93:1b:da:46:ad:69:5f:46:ec:6c:6a:d2: 5f:63:a3:bd:39:c8:6b:8a:b6:d3:0b:09:b4:a4:a7: fd:06:da:6f:ff:3d:8f:56:2a:5c:47:ab:4e:7c:4b: 41:7c:c0:ae:a6:48:ee:cd:41:82:47:bf:d8:54:be: 22:f0:3f:40:6b:42:38:e7:ba:81:5c:2b:24:f9:8c: 97:24:22:1d:26:4f:f7:94:8e:92:55:c9:e2:a6:4a: 19:bc:d2:8b:e6:04:e0:ec:5b:1c:59:ab:35:5a:cb: 22:34:17:f7:1e:29:ea:7c:24:80:92:8d:26:c3:f7: 10:40:50:c1:2f:2b:f4:4f:e7:45:a7:06:76:c6:14: 37:df:5e:2d:45:4c:31:ff:a1:bd:8d:47:e3:da:65: 42:c9:bb:83:df:21:cf:0d:1e:04:9f:01:a0:5f:f9: 72:e6:76:7b:16:60:0b:48:c5:b5:19:dd:27:fb:f5: b1:a2:f5:65:88:40:01:bc:7b:bd:79:7f:ae:60:79: 7e:b3:8c:14:76:ed:c3:f6:f0:42:e9:27:d7:4e:18: a4:39:6f:7a:cc:df:fa:1b:17:fc:f1:86:a5:4f:b8: a2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A4:AC:C5:33:0C:5A:CE:10:38:71:D8:A8:51:5E:79:41:8C:59:78 X509v3 Authority Key Identifier: keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/252E9EB4652411F196C4FA3A8447A888.roa sbgp-ipAddrBlock: critical IPv4: 103.95.64.0/22 Signature Algorithm: sha256WithRSAEncryption 98:16:15:2c:3f:2f:b5:08:99:2c:c4:61:2d:1a:94:2e:2e:1e: 45:44:b3:7e:e3:cf:f4:54:fe:95:3c:b3:36:e8:d7:9a:99:1f: 21:8f:75:bd:eb:08:c9:9f:39:c2:ca:76:e5:8d:61:8c:01:33: 13:bc:fb:d8:7d:eb:e9:0a:2f:b9:87:8c:9c:2d:3b:29:2a:f9: ad:42:18:f5:db:6c:e7:5e:3e:2f:c1:82:db:4e:15:ed:a6:b6: 09:f0:dd:1f:4e:c5:03:db:d5:d5:01:44:8e:b3:d8:58:72:f7: 6d:da:60:60:8e:0e:66:a6:2a:f8:c7:dc:b8:02:b1:8e:54:94: 9b:41:43:14:00:e4:3d:47:9b:fe:da:85:97:b5:b4:87:f5:e1: d6:dc:e9:06:de:47:1a:94:4d:25:26:94:7e:95:0b:62:d9:42: 02:e4:04:53:cd:6d:9a:e5:1c:d2:d2:75:ef:86:e1:9b:ed:f5: 98:8f:05:7a:cd:14:1b:8f:be:da:cf:f7:0f:cd:67:36:1c:09: 8b:ad:07:4f:0b:61:84:f5:94:78:6d:25:2b:31:13:8f:88:da: c5:be:e7:2f:7d:e0:4d:bf:b0:54:01:fb:7a:5b:f5:5f:92:36: 66:6d:ad:b6:e4:29:3e:bc:4d:46:e5:bd:4c:2a:a9:ed:75:a6: ca:09:93:a3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDMxMTAvBgNVBAUTKDc1QUI0QjhEQjMwMTUzQkQ3MjZDRjlGOTYyNTBCRTA0 MDREODhCMUEwHhcNMjYwNjEwMjMyODU0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTI5ZjMzNi03N2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEYA2uVa5hEOaXWRVgFFlRlXiNS7PHAxHLFGcpAu/OeTG9pGrWlfRuxsatJf Y6O9OchrirbTCwm0pKf9Btpv/z2PVipcR6tOfEtBfMCupkjuzUGCR7/YVL4i8D9A a0I457qBXCsk+YyXJCIdJk/3lI6SVcnipkoZvNKL5gTg7FscWas1WssiNBf3Hinq fCSAko0mw/cQQFDBLyv0T+dFpwZ2xhQ3314tRUwx/6G9jUfj2mVCybuD3yHPDR4E nwGgX/ly5nZ7FmALSMW1Gd0n+/WxovVliEABvHu9eX+uYHl+s4wUdu3D9vBC6SfX ThikOW96zN/6Gxf88YalT7iimwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFASkrMUz DFrOEDhx2KhRXnlBjFl4MB8GA1UdIwQYMBaAFHWrS42zAVO9cmz5+WJQvgQE2Isa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENEMy83RjYwMEVDQTA4 RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3MXliUG41WWxDLUJBVFlp eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhdExqYk1CVTcxeWJQbjVZbEMtQkFUWWl4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBDRDMvN0Y2MDBFQ0EwOEVGMTFFRUJDOUI1RDBEQzRGOUFFMDIvMjUyRTlFQjQ2 NTI0MTFGMTk2QzRGQTNBODQ0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ19AMA0GCSqGSIb3DQEBCwUAA4IBAQCYFhUsPy+1CJksxGEtGpQu Lh5FRLN+48/0VP6VPLM26NeamR8hj3W96wjJnznCynbljWGMATMTvPvYfevpCi+5 h4ycLTspKvmtQhj122znXj4vwYLbThXtprYJ8N0fTsUD29XVAUSOs9hYcvdt2mBg jg5mpir4x9y4ArGOVJSbQUMUAOQ9R5v+2oWXtbSH9eHW3OkG3kcalE0lJpR+lQti 2UIC5ARTzW2a5RzS0nXvhuGb7fWYjwV6zRQbj77az/cPzWc2HAmLrQdPC2GE9ZR4 bSUrMROPiNrFvucvfeBNv7BUAft6W/VfkjZmba225Ck+vE1G5b1MKqntdabKCZOj -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:11 2026 by rpki-client