$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/3F6E94ACF5CF11EF90104A57C4F9AE02.roa File: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (raw, json) Hash identifier: r9JGVgj9zikJ7F79B2BaZrfg6rmzbuab3Jau6eNt9Fs= Subject key identifier: B3:88:C1:6A:D7:15:02:D0:11:34:29:82:E1:A2:1E:E8:F0:7C:B2:88 Certificate issuer: /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Certificate serial: 1446 Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/3F6E94ACF5CF11EF90104A57C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:25:55 +0000 ROA not before: Sat 22 Nov 2025 16:35:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138043 IP address blocks: 103.130.196.0/23 maxlen: 23 103.130.196.0/24 maxlen: 24 103.130.197.0/24 maxlen: 24 2400:9860::/32 maxlen: 32 2400:9860::/35 maxlen: 35 2400:9860:2000::/35 maxlen: 35 2400:9860:4000::/35 maxlen: 35 2400:9860:6000::/35 maxlen: 35 2400:9860:8000::/35 maxlen: 35 2400:9860:a000::/35 maxlen: 35 2400:9860:c000::/35 maxlen: 35 2400:9860:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5190 (0x1446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Validity Not Before: Nov 22 16:35:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a46893-4d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:e5:77:71:56:60:7a:71:34:b3:d5:7c:c1: e0:15:91:60:e4:2f:ab:eb:8b:ab:be:78:7f:80:e4: 25:3f:6d:ea:4f:65:35:db:ba:63:b7:17:86:c9:24: 50:78:b0:b5:eb:55:1b:fb:9a:6b:8b:fb:70:ed:3b: c9:79:a6:0d:53:b7:37:e7:49:aa:c6:84:df:a2:40: da:80:65:71:20:22:ad:98:5f:44:a6:9b:73:8e:23: 1a:e2:63:81:06:c5:e5:d5:5f:5a:35:43:a7:b2:60: dc:85:4f:0b:bf:af:56:3b:0d:52:3b:44:76:ee:38: 02:b1:87:46:56:88:16:10:3e:37:11:f8:f2:be:14: d1:74:59:90:35:d1:62:3a:18:cc:29:90:7e:5f:37: b9:6b:50:04:a3:49:f3:7d:57:70:f3:31:0a:de:94: 9e:93:ff:be:85:70:05:2c:fd:a7:18:81:69:f7:5a: d7:e7:91:4c:f5:07:09:21:30:8b:86:94:83:47:d0: cc:54:0c:f8:d3:bc:63:14:de:0e:dc:2a:4d:3d:05: b8:ee:c1:70:a3:b1:08:0e:19:a5:18:02:7b:78:c4: d1:57:3d:19:0f:ed:28:82:4e:4d:e5:4d:fa:4b:a0: 71:5d:24:b6:3e:b5:40:4d:6d:c3:8a:4f:13:a6:d7: 10:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:C1:6A:D7:15:02:D0:11:34:29:82:E1:A2:1E:E8:F0:7C:B2:88 X509v3 Authority Key Identifier: keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/3F6E94ACF5CF11EF90104A57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.130.196.0/23 IPv6: 2400:9860::/32 Signature Algorithm: sha256WithRSAEncryption 07:7b:70:21:dc:a8:1c:27:0a:bb:11:17:8f:20:63:a7:8c:ae: c1:d0:b7:81:db:1e:c7:34:8f:de:70:b8:83:b1:03:25:64:a7: b1:a7:46:3c:31:16:f6:3f:ae:af:f9:a9:bb:b0:7f:c2:0f:9b: 5c:1a:d5:89:6c:14:86:b8:7c:31:e2:b5:ce:f0:31:7a:e2:e3: 6e:60:f1:14:27:c9:b7:a3:d6:25:08:4e:28:54:77:16:b5:d4: b9:7b:25:45:b3:19:6a:d2:de:d5:06:4c:a3:1d:49:74:93:de: 83:f6:0e:29:c1:51:bc:b3:60:f3:17:d8:5a:5f:23:77:5e:d1: 37:f0:14:6f:1c:ec:84:d5:90:9a:c9:b3:21:ff:ec:8c:27:96: 05:80:0c:ff:8c:49:46:16:a1:0d:bf:66:67:67:b7:e3:19:92: b0:83:1f:6a:64:f7:5d:c4:e3:50:da:54:91:3d:b2:f5:56:dc: 59:90:5f:6c:a6:21:5c:1e:9d:7e:f2:f0:9d:a2:56:25:68:df: f6:c3:b5:da:7e:53:d1:2b:f2:d2:c2:4c:c2:29:fb:91:c5:a4: f2:a8:60:a4:73:a2:49:08:2f:e1:cf:51:cb:31:b6:96:c3:9f: 4a:79:6b:24:d0:46:f5:a0:d4:54:54:5b:0e:56:63:03:a7:cf: 7f:c3:c5:fe -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICFEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGMEExMTAvBgNVBAUTKEU0NkJCRjAxNzY4OTU2RTg2NkFFQzQ0M0YyQkIxMzUw MUYyRTczNzkwHhcNMjUxMTIyMTYzNTM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njg5My00ZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZLld3FWYHpxNLPVfMHgFZFg5C+r64urvnh/gOQlP23qT2U127pjtxeGySRQ eLC161Ub+5pri/tw7TvJeaYNU7c350mqxoTfokDagGVxICKtmF9EpptzjiMa4mOB BsXl1V9aNUOnsmDchU8Lv69WOw1SO0R27jgCsYdGVogWED43EfjyvhTRdFmQNdFi OhjMKZB+Xze5a1AEo0nzfVdw8zEK3pSek/++hXAFLP2nGIFp91rX55FM9QcJITCL hpSDR9DMVAz407xjFN4O3CpNPQW47sFwo7EIDhmlGAJ7eMTRVz0ZD+0ogk5N5U36 S6BxXSS2PrVATW3Dik8TptcQRQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLOIwWrX FQLQETQpguGiHujwfLKIMB8GA1UdIwQYMBaAFORrvwF2iVboZq7EQ/K7E1AfLnN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUYwQS9FODYwMjFENkEy M0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1aG1yc1JEOHJzVFVCOHVj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHdV9BWGFKVnVobXJzUkQ4cnNUVUI4dWMzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlGMEEvRTg2MDIxRDZBMjNDMTFFODhBNkZFNjZDQzRGOUFFMDIvM0Y2RTk0QUNG NUNGMTFFRjkwMTA0QTU3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4LEMA0EAgACMAcDBQAkAJhgMA0GCSqGSIb3DQEBCwUAA4IBAQAH e3Ah3KgcJwq7ERePIGOnjK7B0LeB2x7HNI/ecLiDsQMlZKexp0Y8MRb2P66v+am7 sH/CD5tcGtWJbBSGuHwx4rXO8DF64uNuYPEUJ8m3o9YlCE4oVHcWtdS5eyVFsxlq 0t7VBkyjHUl0k96D9g4pwVG8s2DzF9haXyN3XtE38BRvHOyE1ZCaybMh/+yMJ5YF gAz/jElGFqENv2ZnZ7fjGZKwgx9qZPddxONQ2lSRPbL1VtxZkF9spiFcHp1+8vCd olYlaN/2w7XaflPRK/LSwkzCKfuRxaTyqGCkc6JJCC/hz1HLMbaWw59KeWsk0Eb1 oNRUVFsOVmMDp89/w8X+ -----END CERTIFICATE-----Generated at Mon Mar 2 06:04:27 2026 by rpki-client