$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/5B213DB20F8D11EBACF1BE19C4F9AE02.roa File: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (raw, json) Hash identifier: jAsAyovDfpAP6+ReKS4TwI/gfYOgL43K+OPo0tOIxRQ= Subject key identifier: EB:37:A7:B3:D9:3D:27:33:69:E9:A3:9B:FD:E9:AF:21:41:49:37:6A Certificate issuer: /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Certificate serial: 0822 Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/5B213DB20F8D11EBACF1BE19C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:38:16 +0000 ROA not before: Tue 02 Sep 2025 21:41:44 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139603 IP address blocks: 103.142.74.0/23 maxlen: 23 103.142.74.0/24 maxlen: 24 103.142.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Validity Not Before: Sep 2 21:41:44 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a40908-6a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:47:df:b9:f7:6f:c5:94:6a:47:89:6e:29: df:e2:05:76:6b:10:a5:03:30:f7:b2:b1:44:5f:60: 89:2a:2f:87:04:eb:ca:12:29:87:41:95:8b:96:18: 9e:93:43:23:0f:b0:de:ca:d1:82:91:d5:1b:07:04: a6:5a:e0:6f:86:70:cb:b2:f1:cf:b5:30:f1:6e:3e: 14:6f:db:45:ac:25:65:28:04:dc:96:1a:d3:57:97: 68:9b:b9:90:b4:38:c4:30:c1:1b:02:bf:cf:45:9e: c9:1d:b2:85:a0:1b:be:a2:01:80:c7:2c:cc:e1:53: 60:6b:bb:3b:3d:28:ea:b5:a1:c3:95:ef:a6:ef:1e: 3b:fe:72:a0:fc:79:c8:cd:b0:f9:da:00:6a:25:11: 68:31:ad:21:6a:58:02:b1:ce:5c:d6:a0:e9:bc:e5: 6b:15:33:48:5d:52:85:bc:7f:68:d3:fc:87:00:ba: ce:e2:82:0f:e5:1f:32:43:06:a5:0b:4c:b4:60:73: 7a:28:81:b5:66:4e:16:40:ac:f8:b9:d7:d9:ad:c3: 07:89:90:11:a4:df:1f:68:a1:31:6c:54:90:97:8f: ab:97:6a:f5:00:72:55:5f:03:d9:51:9c:c1:2d:2d: d3:d4:44:6f:1a:3a:31:af:04:ab:37:5a:f2:20:be: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:37:A7:B3:D9:3D:27:33:69:E9:A3:9B:FD:E9:AF:21:41:49:37:6A X509v3 Authority Key Identifier: keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/5B213DB20F8D11EBACF1BE19C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.142.74.0/23 Signature Algorithm: sha256WithRSAEncryption 08:31:8b:5a:48:e0:6a:18:f2:88:91:f1:ab:d9:c5:b9:7e:28: 55:60:f0:e5:78:7c:2e:8b:89:03:7e:c6:b5:ce:43:8b:41:69: 8a:97:40:e9:2e:46:6b:e7:24:76:57:3c:d5:dd:49:24:55:2c: 67:74:bf:b4:88:5c:26:88:c0:27:aa:d4:4b:8f:03:b4:7f:ab: 94:99:f1:b9:1d:3c:ac:e4:b0:83:8e:51:08:cc:83:ae:aa:e7: 26:f9:7e:d5:3c:50:fd:58:ad:3f:b1:a3:04:00:7d:7a:90:ed: e1:fb:e9:f6:94:32:d9:c6:f7:14:cb:4a:94:4b:04:f3:4f:81: 6f:73:c0:9f:a6:18:d6:5e:74:c0:ae:51:8d:78:c9:b6:da:36: e2:5b:24:ed:14:c8:b6:a7:98:38:bd:47:1b:34:ef:f1:f5:a6: df:5c:3a:01:1f:fb:2c:33:df:59:12:da:d3:b4:2a:ea:1a:d3: de:e9:12:c8:e4:83:64:6e:f8:8f:c7:df:3e:b7:e1:6b:00:d8: 0e:71:33:35:c8:61:bd:a1:c6:5d:66:fa:b6:65:ca:18:67:00: 1c:ac:62:6d:3a:de:4c:ab:d5:99:c0:eb:ad:c0:41:31:75:0a: 1a:d7:38:e2:97:f4:b3:cb:2b:74:82:e9:89:67:b0:7a:21:59: d4:84:72:09 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQyNjA4MDBENEUy OUYxQzYyQUMwHhcNMjUwOTAyMjE0MTQ0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDkwOC02YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsJH37n3b8WUakeJbinf4gV2axClAzD3srFEX2CJKi+HBOvKEimHQZWLlhie k0MjD7DeytGCkdUbBwSmWuBvhnDLsvHPtTDxbj4Ub9tFrCVlKATclhrTV5dom7mQ tDjEMMEbAr/PRZ7JHbKFoBu+ogGAxyzM4VNga7s7PSjqtaHDle+m7x47/nKg/HnI zbD52gBqJRFoMa0halgCsc5c1qDpvOVrFTNIXVKFvH9o0/yHALrO4oIP5R8yQwal C0y0YHN6KIG1Zk4WQKz4udfZrcMHiZARpN8faKExbFSQl4+rl2r1AHJVXwPZUZzB LS3T1ERvGjoxrwSrN1ryIL6eWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOs3p7PZ PSczaemjm/3pryFBSTdqMB8GA1UdIwQYMBaAFMHpC10R2QGw0Eo0JggA1OKfHGKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNBNS80NDU5ODQzODBD NkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFiRFFTalFtQ0FEVTRwOGNZ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dla0xYUkhaQWJEUVNqUW1DQURVNHA4Y1lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0IzQTUvNDQ1OTg0MzgwQzZCMTFFQkIzMkQ4NDE4QzRGOUFFMDIvNUIyMTNEQjIw RjhEMTFFQkFDRjFCRTE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ45KMA0GCSqGSIb3DQEBCwUAA4IBAQAIMYtaSOBqGPKIkfGr2cW5 fihVYPDleHwui4kDfsa1zkOLQWmKl0DpLkZr5yR2VzzV3UkkVSxndL+0iFwmiMAn qtRLjwO0f6uUmfG5HTys5LCDjlEIzIOuqucm+X7VPFD9WK0/saMEAH16kO3h++n2 lDLZxvcUy0qUSwTzT4Fvc8CfphjWXnTArlGNeMm22jbiWyTtFMi2p5g4vUcbNO/x 9abfXDoBH/ssM99ZEtrTtCrqGtPe6RLI5INkbviPx98+t+FrANgOcTM1yGG9ocZd Zvq2ZcoYZwAcrGJtOt5Mq9WZwOutwEExdQoa1zjil/Szyyt0gumJZ7B6IVnUhHIJ -----END CERTIFICATE-----Generated at Mon Mar 2 07:38:43 2026 by rpki-client