$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa File: BD22841E9E4911E9A136D25AC4F9AE02.roa (raw, json) Hash identifier: n9GvWb/+SrjUGxKELdg2q8EQPS5cGnIEX61vaZ7cU2Q= Subject key identifier: 8F:51:91:D3:87:7C:B0:87:CB:28:74:15:32:69:C7:76:22:F2:25:57 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0EE7 Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:17:22 +0000 ROA not before: Wed 04 Jun 2025 18:00:29 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 58947 IP address blocks: 103.26.138.0/23 maxlen: 23 103.26.138.0/24 maxlen: 24 103.26.139.0/24 maxlen: 24 103.132.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3815 (0xee7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: Jun 4 18:00:29 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a42e52-37da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:8f:6f:6b:be:eb:f3:e9:90:87:a3:74:d6: a3:8f:f6:df:ed:9c:84:e6:cc:a5:06:06:92:2d:0a: ee:4c:41:5b:19:af:d9:2f:87:35:52:7e:f5:b3:4f: 19:41:4b:94:23:86:86:a0:c5:df:6c:3f:1c:d3:a8: 10:bb:b0:92:59:00:3f:dc:d9:87:35:83:35:d5:94: be:6a:f2:d8:ee:4c:44:bc:e3:51:32:77:5b:58:cb: d3:f6:5c:36:69:79:0b:d5:c0:02:dd:6b:e1:aa:c1: 18:b3:bd:3a:e6:df:9b:13:51:00:92:32:bd:c4:64: bd:5a:1a:a3:ce:e0:10:0b:d4:4e:30:b4:e0:75:6e: 62:0e:ab:3e:0c:80:e8:da:24:61:7b:9b:71:6f:ee: cc:86:ca:24:57:19:c4:90:03:71:7e:8b:a9:8c:d6: da:a8:29:9f:d1:9a:f3:ab:3e:55:99:32:41:bf:b4: 36:45:94:02:a7:a2:27:27:b1:e0:49:65:76:2a:27: 23:76:42:4f:08:f4:43:01:18:b2:2a:cd:40:39:4d: c6:0b:63:6b:8c:63:bf:11:57:b3:32:a0:72:eb:1f: 5e:7c:a2:52:bb:9d:da:c1:25:20:ba:b7:af:eb:df: 20:b9:ea:05:24:e9:d4:8d:0f:2a:ca:d4:81:32:54: 61:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:51:91:D3:87:7C:B0:87:CB:28:74:15:32:69:C7:76:22:F2:25:57 X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.26.138.0/23 103.132.153.0/24 Signature Algorithm: sha256WithRSAEncryption a8:c5:c5:51:1b:86:df:6e:9d:5b:03:9e:78:50:36:39:fe:73: d9:46:f6:58:1c:eb:79:27:21:72:92:76:c1:22:a0:d0:7a:78: be:79:99:f2:fe:0d:61:aa:87:ca:8c:b0:36:83:52:4e:3c:7d: 78:6b:d6:61:9c:55:ba:89:10:59:e3:e9:97:d8:7a:03:91:ae: cd:57:e4:99:58:4a:f0:11:9b:cc:d3:52:84:a9:04:1a:c4:1a: 1e:d6:4b:18:8e:af:b6:01:a8:b5:3e:9e:5f:0e:7e:98:21:65: 0d:0c:63:f6:60:a0:f7:9b:f9:63:09:38:00:b2:79:64:1c:84: 53:d2:74:5f:b3:44:82:f5:22:9c:1a:47:43:28:72:5d:7a:b7: 34:d1:e7:3a:00:12:b2:82:b5:cf:f8:78:30:75:5a:ab:a1:df: f6:4b:ef:a3:fc:da:f8:3b:da:38:7d:31:4d:94:e3:0a:af:3a: d0:14:23:41:55:c3:56:bf:d2:f4:08:d9:07:be:75:11:c6:5a: 12:e1:f4:e1:f3:43:48:93:d9:dd:40:55:29:8f:b2:d8:49:00: 1b:48:3b:8a:4e:44:1d:9c:97:4b:ea:ff:a7:da:d5:71:2d:1e: 8a:d8:be:37:a4:ba:f7:72:c1:51:0f:d3:b2:f1:f2:e5:52:42: 12:fb:de:15 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjUwNjA0MTgwMDI5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmU1Mi0zN2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb2Pb2u+6/PpkIejdNajj/bf7ZyE5sylBgaSLQruTEFbGa/ZL4c1Un71s08Z QUuUI4aGoMXfbD8c06gQu7CSWQA/3NmHNYM11ZS+avLY7kxEvONRMndbWMvT9lw2 aXkL1cAC3WvhqsEYs7065t+bE1EAkjK9xGS9WhqjzuAQC9ROMLTgdW5iDqs+DIDo 2iRhe5txb+7MhsokVxnEkANxfoupjNbaqCmf0Zrzqz5VmTJBv7Q2RZQCp6InJ7Hg SWV2KicjdkJPCPRDARiyKs1AOU3GC2NrjGO/EVezMqBy6x9efKJSu53awSUgurev 698gueoFJOnUjQ8qytSBMlRh0wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFI9RkdOH fLCHyyh0FTJpx3Yi8iVXMB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExNDkvMjRCQjI0Q0U5RTQ5MTFFOTlGOEJDQzU5QzRGOUFFMDIvQkQyMjg0MUU5 RTQ5MTFFOUExMzZEMjVBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZxqKAwQAZ4SZMA0GCSqGSIb3DQEBCwUAA4IBAQCoxcVRG4bfbp1b A554UDY5/nPZRvZYHOt5JyFyknbBIqDQeni+eZny/g1hqofKjLA2g1JOPH14a9Zh nFW6iRBZ4+mX2HoDka7NV+SZWErwEZvM01KEqQQaxBoe1ksYjq+2Aai1Pp5fDn6Y IWUNDGP2YKD3m/ljCTgAsnlkHIRT0nRfs0SC9SKcGkdDKHJderc00ec6ABKygrXP +HgwdVqrod/2S++j/Nr4O9o4fTFNlOMKrzrQFCNBVcNWv9L0CNkHvnURxloS4fTh 80NIk9ndQFUpj7LYSQAbSDuKTkQdnJdL6v+n2tVxLR6K2L43pLr3csFRD9Oy8fLl UkIS+94V -----END CERTIFICATE-----Generated at Mon Mar 2 07:50:15 2026 by rpki-client