$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/7F662C72997011E8B0FDEF57C4F9AE02.roa File: 7F662C72997011E8B0FDEF57C4F9AE02.roa (raw, json) Hash identifier: 3poz9WeE/VQCro0QqBaX5PdACtIqSQyu6Jy9OGfa5do= Subject key identifier: 10:E6:1E:43:43:A0:98:92:C0:82:FE:91:35:E4:E1:54:7D:88:7E:BD Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Certificate serial: 141C Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/7F662C72997011E8B0FDEF57C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:33:13 +0000 ROA not before: Thu 28 Aug 2025 17:06:31 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 136941 IP address blocks: 103.99.180.0/22 maxlen: 23 103.99.180.0/24 maxlen: 24 103.99.181.0/24 maxlen: 24 103.99.182.0/24 maxlen: 24 103.99.183.0/24 maxlen: 24 2401:b0c0::/32 maxlen: 32 2401:b0c0:1000::/36 maxlen: 36 2401:b0c0:1002::/48 maxlen: 48 2401:b0c0:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5148 (0x141c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Validity Not Before: Aug 28 17:06:31 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a423f9-665e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f0:cb:6e:22:cd:a4:81:89:b7:d9:dd:68:ef: 4c:67:44:5e:a1:ad:ce:98:d9:4f:c8:ca:78:ff:b8: f4:2e:ef:36:40:9e:57:fe:ee:92:32:d5:27:69:e3: 52:44:dd:07:a8:d2:c6:33:d7:38:4c:9c:9d:50:6a: 5d:81:1b:2d:b3:b7:31:f4:b4:e8:44:eb:cb:1f:5f: 58:30:48:77:8f:f2:9c:fa:db:29:72:00:f0:4d:6a: a7:98:48:e9:ed:bd:72:46:65:f9:62:e1:80:04:54: 81:ff:64:ce:b9:cd:bd:c1:0a:aa:c9:9e:44:64:a7: 9e:aa:9b:21:bb:29:63:38:ac:42:fb:ba:91:62:19: cb:d2:65:38:a5:8f:18:be:cc:39:f0:d5:ff:0f:bd: bb:f7:0f:d3:38:9e:24:d5:cf:c8:ae:8c:61:b4:7a: 5f:53:53:7e:13:13:51:4a:d5:eb:f2:9f:70:a7:24: eb:72:b9:84:b8:5e:21:10:f2:d7:72:1b:98:62:46: 9d:ac:a0:5d:16:c9:78:19:fb:93:b7:51:b5:40:e9: 28:dd:32:6d:9d:7a:59:00:58:c8:83:28:06:29:c6: 33:b6:3c:8f:66:1d:39:96:3b:6e:10:68:f6:a4:c8: 13:53:52:4f:7e:6e:4c:f5:d9:9d:bf:0f:96:a6:22: 5b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E6:1E:43:43:A0:98:92:C0:82:FE:91:35:E4:E1:54:7D:88:7E:BD X509v3 Authority Key Identifier: keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/7F662C72997011E8B0FDEF57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.180.0/22 IPv6: 2401:b0c0::/32 Signature Algorithm: sha256WithRSAEncryption 57:fb:a3:66:7c:78:c3:8a:c1:80:23:bc:06:d1:64:24:40:cd: 42:03:9f:10:17:3a:7c:84:9e:a3:81:2c:32:c2:bf:d5:63:cc: 20:bf:da:81:d0:55:b0:45:4a:05:43:01:45:a8:9f:6f:aa:e2: c9:94:33:01:c1:9c:c1:c9:44:35:c6:c4:eb:d3:3a:43:2e:97: e8:10:a5:f7:bc:fa:35:f5:75:4d:1c:44:5f:d7:44:0b:a4:f3: d9:39:a6:ee:84:23:76:f2:6a:ee:dd:a3:31:be:f3:e0:58:fa: 03:77:7c:55:44:81:1d:48:ec:45:f1:4b:06:93:69:7d:5c:16: aa:82:ee:44:3e:8a:0d:8d:f1:d4:79:34:c0:0c:36:64:73:90: 61:c3:72:5b:a8:03:47:a4:42:8a:dc:2e:53:ee:c8:5b:ee:73: 11:08:03:7a:48:e2:a3:1a:b4:ea:5d:49:dd:3d:c8:6f:06:32: 31:18:91:4b:c2:38:19:7b:a7:3d:32:7b:6c:0e:d6:61:17:56: c1:ea:a5:08:7e:f6:00:0d:de:9d:bc:f7:3e:a5:1c:cb:a0:b2: a9:93:56:1f:6f:39:7b:35:bb:92:ff:96:b7:c3:66:33:b0:4f: e7:00:ca:7c:70:a2:7a:70:66:b6:0e:64:a1:a6:f3:c6:19:37: 75:20:92:2d -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICFBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCNEUxMTAvBgNVBAUTKDNBMTQ5NDI1QkUzMjg1RDYxMTRCMDFGNkMyRkM4OEEx N0FGRjRCRUMwHhcNMjUwODI4MTcwNjMxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjNmOS02NjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vDLbiLNpIGJt9ndaO9MZ0Reoa3OmNlPyMp4/7j0Lu82QJ5X/u6SMtUnaeNS RN0HqNLGM9c4TJydUGpdgRsts7cx9LToROvLH19YMEh3j/Kc+tspcgDwTWqnmEjp 7b1yRmX5YuGABFSB/2TOuc29wQqqyZ5EZKeeqpshuyljOKxC+7qRYhnL0mU4pY8Y vsw58NX/D7279w/TOJ4k1c/IroxhtHpfU1N+ExNRStXr8p9wpyTrcrmEuF4hEPLX chuYYkadrKBdFsl4GfuTt1G1QOko3TJtnXpZAFjIgygGKcYztjyPZh05ljtuEGj2 pMgTU1JPfm5M9dmdvw+WpiJblwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBDmHkND oJiSwIL+kTXk4VR9iH69MB8GA1UdIwQYMBaAFDoUlCW+MoXWEUsB9sL8iKF6/0vs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUI0RS8yQ0E0NzA2Njk5 NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhkWVJTd0gyd3Z5SW9Ycl9T LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oU1VKYjR5aGRZUlN3SDJ3dnlJb1hyX1Mtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0FCNEUvMkNBNDcwNjY5OTcwMTFFODg2MUREMDU3QzRGOUFFMDIvN0Y2NjJDNzI5 OTcwMTFFOEIwRkRFRjU3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2O0MA0EAgACMAcDBQAkAbDAMA0GCSqGSIb3DQEBCwUAA4IBAQBX +6NmfHjDisGAI7wG0WQkQM1CA58QFzp8hJ6jgSwywr/VY8wgv9qB0FWwRUoFQwFF qJ9vquLJlDMBwZzByUQ1xsTr0zpDLpfoEKX3vPo19XVNHERf10QLpPPZOabuhCN2 8mru3aMxvvPgWPoDd3xVRIEdSOxF8UsGk2l9XBaqgu5EPooNjfHUeTTADDZkc5Bh w3JbqANHpEKK3C5T7shb7nMRCAN6SOKjGrTqXUndPchvBjIxGJFLwjgZe6c9Mnts DtZhF1bB6qUIfvYADd6dvPc+pRzLoLKpk1Yfbzl7NbuS/5a3w2YzsE/nAMp8cKJ6 cGa2DmShpvPGGTd1IJIt -----END CERTIFICATE-----Generated at Mon Mar 2 13:29:55 2026 by rpki-client