$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/539DF534D1FB11EDA0A31C2FC4F9AE02.roa File: 539DF534D1FB11EDA0A31C2FC4F9AE02.roa (raw, json) Hash identifier: ty0ZEIJclX/yY5QfCTSCoif022wX8vgZ8AhU1vGF9Kg= Subject key identifier: 26:6D:7C:51:C6:58:67:94:28:23:4B:75:6A:30:68:76:3F:01:5D:E2 Certificate issuer: /CN=A91D0432/serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Certificate serial: 0261 Authority key identifier: BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/539DF534D1FB11EDA0A31C2FC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:25:54 +0000 ROA not before: Tue 13 May 2025 02:21:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132080 IP address blocks: 103.136.20.0/22 maxlen: 22 103.136.20.0/24 maxlen: 24 103.136.21.0/24 maxlen: 24 103.136.22.0/24 maxlen: 24 103.136.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0432, serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Validity Not Before: May 13 02:21:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3ea02-94b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:26:13:12:87:18:cc:37:68:4b:17:9f:e3: 53:32:61:2b:82:f2:cb:be:32:22:94:ce:48:49:89: b9:c6:9c:f2:f5:c2:4d:e4:67:aa:21:44:da:a8:5c: 0a:ce:7a:84:fb:f6:12:44:a9:7f:bb:08:5d:1e:a5: 38:d7:65:f0:2b:b5:e0:b3:da:94:a4:52:fa:8c:23: 56:fc:4b:fa:a2:19:cc:93:90:02:62:02:26:1c:ac: d0:c9:2b:af:3a:28:ae:0d:de:24:79:99:25:a5:81: c7:6f:4c:18:b4:e0:f5:2f:a6:05:28:5b:ae:d9:18: ae:77:77:ed:a6:00:14:c2:d3:ca:1c:9a:3e:b3:b7: 03:c2:9e:85:ee:01:7a:91:25:6c:5f:f0:de:6b:71: 8f:54:22:2a:8c:30:3c:8f:ed:89:b2:d2:85:bc:21: 42:3c:3c:5a:a9:60:f6:48:74:fe:4a:dc:03:4f:a2: ff:4e:1b:f0:bd:f4:ab:98:a3:8a:42:95:a9:b4:36: cd:fd:90:e3:af:a5:ee:b0:b9:66:1f:9f:5b:74:fe: ab:34:35:86:98:67:7e:e4:e6:55:e1:d7:bc:4f:26: a2:5f:ce:f3:ae:ea:c7:5b:06:7f:f5:06:a9:03:82: f9:19:a3:4a:06:58:b6:bc:16:42:f6:3b:bf:6c:52: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6D:7C:51:C6:58:67:94:28:23:4B:75:6A:30:68:76:3F:01:5D:E2 X509v3 Authority Key Identifier: keyid:BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/539DF534D1FB11EDA0A31C2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.20.0/22 Signature Algorithm: sha256WithRSAEncryption 59:d4:f8:ee:95:92:5e:1e:56:d7:5f:6e:ae:45:a7:19:56:cd: c6:89:42:bd:01:28:b1:d7:ca:4f:2a:06:a1:ff:d0:c9:5f:71: fb:fc:f9:b8:50:75:8a:f5:90:3a:4e:d0:7a:88:63:1d:18:8a: 98:f5:3c:bc:97:25:df:a9:c9:85:4a:4e:c8:af:45:fa:69:f3: 7b:c1:cb:d7:6d:9e:45:a4:aa:d3:46:96:dd:45:b8:00:74:9f: 87:4b:e7:c8:b9:d3:c3:18:08:7f:67:a8:1e:43:03:da:8a:88: 85:80:58:cc:db:e5:80:c7:38:6b:c7:da:3e:b8:a5:4d:f6:82: e3:76:bc:55:c1:17:2e:10:ef:5b:1b:b3:38:ce:06:9a:f5:64: 5a:8e:8d:2d:ad:95:1d:40:0b:40:6e:da:4a:b8:73:ca:96:b9: 6e:ac:00:92:d5:0e:7d:0c:4f:46:1b:3e:4f:e5:44:80:17:f8: b0:08:35:b8:3e:97:59:eb:2d:c2:59:c7:1c:e9:78:3e:1f:19: 2f:69:88:20:86:76:98:fe:48:1c:aa:59:bb:a9:0e:2d:f3:6d: 98:1c:59:7a:70:cc:88:75:a1:93:20:9a:75:7a:f0:64:e3:0a: aa:97:05:ba:ce:df:d1:41:08:1b:1a:22:b9:c6:e6:88:5a:47: 13:97:31:a1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA0MzIxMTAvBgNVBAUTKEJFMzc3MDRCOEM3REYzOTc1NjE3MTk0QUYyQURFRURB MUNDOUJDRjYwHhcNMjUwNTEzMDIyMTQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWEwMi05NGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqQmExKHGMw3aEsXn+NTMmErgvLLvjIilM5ISYm5xpzy9cJN5GeqIUTaqFwK znqE+/YSRKl/uwhdHqU412XwK7Xgs9qUpFL6jCNW/Ev6ohnMk5ACYgImHKzQySuv OiiuDd4keZklpYHHb0wYtOD1L6YFKFuu2Riud3ftpgAUwtPKHJo+s7cDwp6F7gF6 kSVsX/Dea3GPVCIqjDA8j+2JstKFvCFCPDxaqWD2SHT+StwDT6L/ThvwvfSrmKOK QpWptDbN/ZDjr6XusLlmH59bdP6rNDWGmGd+5OZV4de8TyaiX87zrurHWwZ/9Qap A4L5GaNKBli2vBZC9ju/bFL9vwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCZtfFHG WGeUKCNLdWowaHY/AV3iMB8GA1UdIwQYMBaAFL43cEuMffOXVhcZSvKt7tocybz2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDQzMi9FM0NBMThFQzdC ODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1ZFdGeGxLOHEzdTJoekp2 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqZHdTNHg5ODVkV0Z4bEs4cTN1Mmh6SnZQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDA0MzIvRTNDQTE4RUM3Qjg3MTFFREI1OUUzQjgwQzRGOUFFMDIvNTM5REY1MzRE MUZCMTFFREEwQTMxQzJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4gUMA0GCSqGSIb3DQEBCwUAA4IBAQBZ1PjulZJeHlbXX26uRacZ Vs3GiUK9ASix18pPKgah/9DJX3H7/Pm4UHWK9ZA6TtB6iGMdGIqY9Ty8lyXfqcmF Sk7Ir0X6afN7wcvXbZ5FpKrTRpbdRbgAdJ+HS+fIudPDGAh/Z6geQwPaioiFgFjM 2+WAxzhrx9o+uKVN9oLjdrxVwRcuEO9bG7M4zgaa9WRajo0trZUdQAtAbtpKuHPK lrlurACS1Q59DE9GGz5P5USAF/iwCDW4PpdZ6y3CWccc6Xg+HxkvaYgghnaY/kgc qlm7qQ4t822YHFl6cMyIdaGTIJp1evBk4wqqlwW6zt/RQQgbGiK5xuaIWkcTlzGh -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:06 2026 by rpki-client