$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/7C29A45A669A11EA9A11434FC4F9AE02.roa File: 7C29A45A669A11EA9A11434FC4F9AE02.roa (raw, json) Hash identifier: p2oVcwIUpeODiv+NUpufJsBItMDrUVn0bYaGqwkEXRs= Subject key identifier: 30:AF:CF:B8:DB:35:E7:19:D4:04:06:86:55:48:0C:1D:6E:19:31:A6 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0AE7 Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/7C29A45A669A11EA9A11434FC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:28:32 +0000 ROA not before: Thu 06 Mar 2025 20:09:58 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137033 IP address blocks: 103.149.72.0/23 maxlen: 23 103.149.72.0/24 maxlen: 24 103.149.73.0/24 maxlen: 24 2001:df5:c780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2791 (0xae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Mar 6 20:09:58 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a406c0-254f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f6:f6:a2:eb:b6:91:ad:72:17:7f:fd:25:73: e8:8c:63:f4:11:da:fb:57:d7:19:5e:b6:d7:c9:54: 58:a8:d5:52:dc:7b:89:36:96:46:24:63:2c:a2:b9: ea:c4:d8:e8:01:fb:20:46:9a:51:e6:bb:dc:d3:87: 9b:79:41:d9:a1:37:31:3a:9d:65:ed:d7:7d:cd:fa: 33:fe:90:52:c4:2a:c6:78:d0:ee:f8:08:65:9c:ca: 9b:60:99:58:37:e0:9b:02:c3:70:aa:13:d1:a0:52: 1f:c3:a4:c1:1a:79:66:89:eb:43:69:c0:ee:fd:f3: 44:9a:a8:6c:ee:09:21:20:a7:e9:a7:54:aa:c1:f7: 0b:92:52:3b:03:85:9c:9f:4d:a5:95:bf:27:19:35: c0:7f:b9:32:71:a7:d1:b5:1c:88:a7:9f:6e:89:6f: 60:b9:8b:f8:55:9a:c2:a7:ad:6e:72:52:4d:8d:b8: 77:bb:00:df:01:75:81:74:08:b2:7c:48:b8:08:9f: 42:22:19:7a:7f:22:87:5f:37:9d:73:90:d4:20:6a: 08:15:ff:2b:dd:7f:0d:9a:89:b4:21:86:e1:76:5b: 3a:e1:18:d9:c3:92:d6:48:27:21:18:1f:21:a0:9b: 55:b6:1b:2e:93:d9:ab:6b:1b:b7:63:16:07:c3:49: 6f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AF:CF:B8:DB:35:E7:19:D4:04:06:86:55:48:0C:1D:6E:19:31:A6 X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/7C29A45A669A11EA9A11434FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.72.0/23 IPv6: 2001:df5:c780::/48 Signature Algorithm: sha256WithRSAEncryption b9:f2:2f:fa:d4:71:7d:69:dd:45:c7:9a:48:35:5b:ee:c3:e4: ab:83:13:8c:1d:7f:50:c3:50:2e:02:28:d9:56:26:fe:ec:81: 83:3b:6d:f5:06:92:ab:b4:3e:e6:74:1c:c2:29:8a:94:ec:c0: f3:63:e6:45:19:da:b7:88:a6:f9:b4:63:b8:51:a0:86:17:c5: b9:f9:0f:52:55:ff:02:8c:ae:5d:49:bd:07:28:a7:f9:6f:c9: a1:11:4c:3f:94:e8:03:1d:90:49:b6:60:3e:27:6e:96:db:c5: 6a:98:0d:03:8f:c6:3a:47:29:86:03:ce:ef:42:35:18:9a:af: da:22:3f:0a:6c:4d:69:70:15:9b:2c:8f:7b:f8:c0:77:36:8c: 09:f7:5d:1d:fd:e3:40:cd:35:e4:77:a0:73:c7:59:d7:aa:fc: 58:c4:3f:14:ce:37:4a:9f:0a:ac:8f:3c:cc:36:15:a0:e4:d8: e0:22:c2:0c:74:4a:1a:a1:e1:db:db:44:6b:6f:4a:6f:75:da: 81:fc:03:66:67:19:9c:3a:c2:76:74:cb:cf:5b:94:30:d4:21: 11:f6:38:3d:5c:18:74:2e:35:11:71:d8:89:e1:4c:bf:fb:09: e2:c5:7a:8f:62:e3:4a:59:ad:1c:6a:5c:49:59:01:f8:7a:f7: 8d:90:7a:49 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjUwMzA2MjAwOTU4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDZjMC0yNTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fb2ouu2ka1yF3/9JXPojGP0Edr7V9cZXrbXyVRYqNVS3HuJNpZGJGMsornq xNjoAfsgRppR5rvc04ebeUHZoTcxOp1l7dd9zfoz/pBSxCrGeNDu+AhlnMqbYJlY N+CbAsNwqhPRoFIfw6TBGnlmietDacDu/fNEmqhs7gkhIKfpp1SqwfcLklI7A4Wc n02llb8nGTXAf7kycafRtRyIp59uiW9guYv4VZrCp61uclJNjbh3uwDfAXWBdAiy fEi4CJ9CIhl6fyKHXzedc5DUIGoIFf8r3X8Nmom0IYbhdls64RjZw5LWSCchGB8h oJtVthsuk9mraxu3YxYHw0lveQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDCvz7jb NecZ1AQGhlVIDB1uGTGmMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZFNTgvNjAzM0NGNkE2Njk5MTFFQUJGMTNDOTREQzRGOUFFMDIvN0MyOUE0NUE2 NjlBMTFFQTlBMTE0MzRGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5VIMA8EAgACMAkDBwAgAQ31x4AwDQYJKoZIhvcNAQELBQADggEB ALnyL/rUcX1p3UXHmkg1W+7D5KuDE4wdf1DDUC4CKNlWJv7sgYM7bfUGkqu0PuZ0 HMIpipTswPNj5kUZ2reIpvm0Y7hRoIYXxbn5D1JV/wKMrl1JvQcop/lvyaERTD+U 6AMdkEm2YD4nbpbbxWqYDQOPxjpHKYYDzu9CNRiar9oiPwpsTWlwFZssj3v4wHc2 jAn3XR3940DNNeR3oHPHWdeq/FjEPxTON0qfCqyPPMw2FaDk2OAiwgx0Shqh4dvb RGtvSm912oH8A2ZnGZw6wnZ0y89blDDUIRH2OD1cGHQuNRFx2InhTL/7CeLFeo9i 40pZrRxqXElZAfh6942Qekk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:01:33 2026 by rpki-client