$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/4EED8CBE029911EF96760924C4F9AE02.roa File: 4EED8CBE029911EF96760924C4F9AE02.roa (raw, json) Hash identifier: UOD9amObCmIqDiXfNM0JkH+AqrUmQZuay9hIXFnISTk= Subject key identifier: 16:10:E1:CF:7E:0D:21:C7:9A:2F:35:C8:F2:6A:50:CC:0A:FA:74:9C Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 152C Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/4EED8CBE029911EF96760924C4F9AE02.roa Signing time: Tue 14 Apr 2026 17:20:57 +0000 ROA not before: Tue 14 Apr 2026 17:20:57 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 136557 IP address blocks: 103.108.228.0/24 maxlen: 24 103.108.231.0/24 maxlen: 24 2402:7340:1::/48 maxlen: 48 2402:7340:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5420 (0x152c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Apr 14 17:20:57 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69de7779-200f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:35:9c:e7:b0:d2:44:64:91:16:93:52:34: 32:90:99:35:bd:1e:ef:c7:58:d0:bc:07:e7:46:97: 5f:0f:a9:7c:98:47:38:8d:ce:82:a0:48:18:a9:c4: 08:2e:30:29:39:55:3a:bf:1c:97:5f:75:64:67:57: 31:a2:67:e0:7e:e4:75:0e:13:25:49:1a:b7:d6:1f: ca:b5:33:e8:5a:22:d6:3d:9e:bc:ff:97:3c:63:6f: b4:dd:ca:40:d5:6f:2e:92:5c:4a:81:02:9f:31:42: d8:ac:48:d0:7b:6b:61:fc:68:79:54:0b:c7:9d:e0: 25:05:e5:bd:39:9a:2d:2d:0a:e6:a9:ae:ca:07:8d: cf:31:a9:85:b8:1b:ee:9f:c3:42:b0:51:76:c5:d0: 21:06:09:c8:25:a3:59:2b:f2:43:ff:df:cc:32:bc: 45:7c:32:3f:40:6e:f7:97:34:8a:b1:ff:54:cd:7d: bb:06:d2:75:c5:45:38:1d:9a:9e:77:02:88:bf:7c: 1f:da:89:5d:9b:f9:ed:3a:8d:d0:db:ca:c2:c7:0a: 7f:97:c5:81:c2:69:38:29:c3:dd:ef:5e:49:00:2f: bb:0d:06:08:c8:f5:42:81:88:1c:4b:6a:b8:8b:b5: 7f:1c:bc:25:6d:ed:88:45:79:bc:3f:44:43:02:12: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:10:E1:CF:7E:0D:21:C7:9A:2F:35:C8:F2:6A:50:CC:0A:FA:74:9C X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/4EED8CBE029911EF96760924C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.108.228.0/24 103.108.231.0/24 IPv6: 2402:7340:1::/48 2402:7340:3::/48 Signature Algorithm: sha256WithRSAEncryption 06:b5:8c:d4:b6:10:fd:9d:28:33:14:f1:80:8b:04:ef:df:42: 3e:ff:b4:28:68:e0:12:5f:9c:ca:e8:de:4f:7a:4c:33:3a:12: 11:aa:cc:3a:1a:ae:66:9c:d7:e9:07:13:ca:15:84:99:85:06: af:67:34:b1:50:52:94:07:9f:32:bf:d7:93:92:97:64:18:ca: ce:80:ff:44:09:0e:05:70:2f:f2:96:07:03:0d:46:d0:e7:32: 50:12:14:5a:83:4f:66:5b:cf:fd:94:8f:96:82:49:ba:90:3f: e9:9b:83:fb:0f:d1:07:e8:04:bd:0c:f0:54:af:04:ce:71:a9: b2:d4:71:b7:4e:4f:ed:40:42:a9:24:68:ec:29:f8:ff:ed:54: 5e:f9:b0:9e:bb:54:f9:05:73:a9:20:96:e7:0e:95:5a:80:c8: 0e:70:6c:5b:19:02:ea:df:1d:d7:78:3d:7a:48:e6:19:f1:c4: 30:3d:8d:78:2a:e8:b2:36:e2:d9:11:76:af:7e:7b:03:e3:fa: dd:96:3b:ea:4a:b2:8f:7a:d9:36:01:a1:a9:2a:b5:80:48:3f: 76:58:37:27:31:86:74:c3:df:fc:79:75:47:4e:d7:ac:3c:1c: 6f:63:6f:52:68:9c:2e:b3:65:10:c3:f4:eb:0a:a7:b4:12:ca: b0:4e:97:fa -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICFSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjYwNDE0MTcyMDU3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWRlNzc3OS0yMDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDM1nOew0kRkkRaTUjQykJk1vR7vx1jQvAfnRpdfD6l8mEc4jc6CoEgYqcQI LjApOVU6vxyXX3VkZ1cxomfgfuR1DhMlSRq31h/KtTPoWiLWPZ68/5c8Y2+03cpA 1W8uklxKgQKfMULYrEjQe2th/Gh5VAvHneAlBeW9OZotLQrmqa7KB43PMamFuBvu n8NCsFF2xdAhBgnIJaNZK/JD/9/MMrxFfDI/QG73lzSKsf9UzX27BtJ1xUU4HZqe dwKIv3wf2oldm/ntOo3Q28rCxwp/l8WBwmk4KcPd715JAC+7DQYIyPVCgYgcS2q4 i7V/HLwlbe2IRXm8P0RDAhJzvwIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFBYQ4c9+ DSHHmi81yPJqUMwK+nScMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdCMTUvRkFGNkZENzg3MUU2MTFFODk5NkUyRTY0QzRGOUFFMDIvNEVFRDhDQkUw Mjk5MTFFRjk2NzYwOTI0QzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS BAIAATAMAwQAZ2zkAwQAZ2znMBgEAgACMBIDBwAkAnNAAAEDBwAkAnNAAAMwDQYJ KoZIhvcNAQELBQADggEBAAa1jNS2EP2dKDMU8YCLBO/fQj7/tCho4BJfnMro3k96 TDM6EhGqzDoarmac1+kHE8oVhJmFBq9nNLFQUpQHnzK/15OSl2QYys6A/0QJDgVw L/KWBwMNRtDnMlASFFqDT2Zbz/2Uj5aCSbqQP+mbg/sP0QfoBL0M8FSvBM5xqbLU cbdOT+1AQqkkaOwp+P/tVF75sJ67VPkFc6kglucOlVqAyA5wbFsZAurfHdd4PXpI 5hnxxDA9jXgq6LI24tkRdq9+ewPj+t2WO+pKso962TYBoakqtYBIP3ZYNycxhnTD 3/x5dUdO16w8HG9jb1JonC6zZRDD9OsKp7QSyrBOl/o= -----END CERTIFICATE-----Generated at Fri Apr 17 11:06:36 2026 by rpki-client