$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa File: F4D295243FDA11EFAF5E676AC4F9AE02.roa (raw, json) Hash identifier: Ykk+PqOPcAQxC3ivcFoFj4chGvoYVmrlUu4Emw4r4cM= Subject key identifier: CC:1E:59:16:32:70:94:14:34:43:31:0A:EF:B9:D2:0A:B0:39:0D:7D Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 04CC Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:24:41 +0000 ROA not before: Sat 27 Sep 2025 15:14:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133894 IP address blocks: 103.88.192.0/22 maxlen: 22 103.88.192.0/24 maxlen: 24 103.88.193.0/24 maxlen: 24 103.88.194.0/24 maxlen: 24 103.88.195.0/24 maxlen: 24 116.204.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Sep 27 15:14:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a47659-0075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:c8:4b:e1:f9:ac:a3:8a:3a:7d:b5:bb:84: e2:d2:24:85:6b:81:f9:4b:0d:9c:64:b1:72:d4:b1: 10:2c:54:31:9b:07:41:0e:1c:30:a1:59:c4:7c:86: ea:c7:c2:11:4e:a4:16:a1:0d:26:3b:ef:09:a2:f4: 52:07:c5:15:4f:3d:5b:01:b8:c1:e0:4d:21:0d:66: 31:77:b8:c2:25:a3:c9:97:03:c2:db:85:2d:12:22: 11:be:5d:03:51:4a:e9:3d:cf:9b:c7:5a:f2:89:c2: d0:a0:d8:41:65:bc:9a:6f:1a:b5:f8:b5:f0:94:cf: cb:43:1d:cf:fc:07:f6:07:5f:bf:f8:da:fa:2c:5c: 66:da:8d:33:9c:03:8c:27:9a:84:8b:21:5c:bc:ce: dc:0e:84:4a:cc:90:b0:83:12:07:78:7a:62:3f:f2: 87:2b:ce:29:62:69:5f:0c:ef:0a:26:3f:1d:00:e7: 62:52:51:6e:4a:de:fa:46:8a:b7:fe:59:ac:b5:31: 46:d2:d5:5b:8f:fd:8a:68:74:2a:50:f9:6c:9b:2d: f4:5d:7e:ad:52:bc:df:f4:c9:0e:6e:1b:50:5b:36: 5f:78:91:97:32:51:51:cc:1f:45:32:c7:87:d3:81: 6c:3b:ed:99:20:77:90:f0:74:ee:87:79:12:b8:be: 40:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1E:59:16:32:70:94:14:34:43:31:0A:EF:B9:D2:0A:B0:39:0D:7D X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.192.0/22 116.204.240.0/24 Signature Algorithm: sha256WithRSAEncryption 64:2a:ed:f3:f2:e7:84:f1:41:f8:2f:71:d2:31:c9:56:2d:c8: 32:99:9c:c9:56:00:b8:2f:21:b3:61:d5:86:d4:8e:04:7a:50: da:28:98:45:74:fb:33:cf:10:7c:d2:c6:24:90:96:8c:88:34: 23:64:3d:24:ba:7c:f5:5d:af:3e:a1:b9:a2:5c:2f:da:fa:b0: 90:2a:05:07:59:16:51:c7:24:de:3e:3e:c9:b9:53:6d:dd:07: 17:70:6e:4a:aa:cd:df:30:7a:87:d8:3c:59:37:93:a2:54:50: 83:39:7f:55:32:62:d1:eb:2a:09:c4:c0:13:a7:1c:fb:b6:38: 18:3b:98:84:03:f9:f2:72:7e:6f:d8:5c:d4:9b:b3:c3:1b:92: ac:d0:a8:0e:14:35:9e:49:e8:ad:c4:bf:e9:07:52:d7:c3:a0: fc:f2:12:63:0c:cd:11:53:2f:86:2c:50:27:0e:85:b0:3b:0b: e5:db:fa:41:28:2d:5b:b8:cb:37:8c:89:a7:56:6e:da:3b:3a: 52:28:81:29:4a:da:7f:c4:25:ea:85:71:3b:31:ef:71:9f:99: ef:d2:7e:9c:70:71:cd:64:38:aa:a4:47:83:ea:45:68:60:d8: 39:45:95:50:58:b5:fa:07:3c:fb:89:24:23:40:0c:d2:ad:10: 04:25:7b:f5 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjUwOTI3MTUxNDM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzY1OS0wMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFvIS+H5rKOKOn21u4Ti0iSFa4H5Sw2cZLFy1LEQLFQxmwdBDhwwoVnEfIbq x8IRTqQWoQ0mO+8JovRSB8UVTz1bAbjB4E0hDWYxd7jCJaPJlwPC24UtEiIRvl0D UUrpPc+bx1ryicLQoNhBZbyabxq1+LXwlM/LQx3P/Af2B1+/+Nr6LFxm2o0znAOM J5qEiyFcvM7cDoRKzJCwgxIHeHpiP/KHK84pYmlfDO8KJj8dAOdiUlFuSt76Roq3 /lmstTFG0tVbj/2KaHQqUPlsmy30XX6tUrzf9MkObhtQWzZfeJGXMlFRzB9FMseH 04FsO+2ZIHeQ8HTuh3kSuL5AvwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMweWRYy cJQUNEMxCu+50gqwOQ19MB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDBDOEUvMDMyRTU3Qjg3NDM5MTFFQ0I1NTcyMzZGQzRGOUFFMDIvRjREMjk1MjQz RkRBMTFFRkFGNUU2NzZBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ1jAAwQAdMzwMA0GCSqGSIb3DQEBCwUAA4IBAQBkKu3z8ueE8UH4 L3HSMclWLcgymZzJVgC4LyGzYdWG1I4EelDaKJhFdPszzxB80sYkkJaMiDQjZD0k unz1Xa8+obmiXC/a+rCQKgUHWRZRxyTePj7JuVNt3QcXcG5Kqs3fMHqH2DxZN5Oi VFCDOX9VMmLR6yoJxMATpxz7tjgYO5iEA/nycn5v2FzUm7PDG5Ks0KgOFDWeSeit xL/pB1LXw6D88hJjDM0RUy+GLFAnDoWwOwvl2/pBKC1buMs3jImnVm7aOzpSKIEp Stp/xCXqhXE7Me9xn5nv0n6ccHHNZDiqpEeD6kVoYNg5RZVQWLX6Bzz7iSQjQAzS rRAEJXv1 -----END CERTIFICATE-----Generated at Mon Mar 2 05:36:43 2026 by rpki-client