$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/298965AC06B611EBBBFD6B2CC4F9AE02.roa File: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (raw, json) Hash identifier: mEYTlHG5kpWGqAptPr16SuSTKtrgl88+S1qWS3rlZ1c= Subject key identifier: 9E:8B:59:E3:E6:EC:D2:E0:FD:A7:28:38:66:2F:1A:67:B9:86:85:26 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 086B Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/298965AC06B611EBBBFD6B2CC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:22:32 +0000 ROA not before: Thu 28 Aug 2025 08:51:35 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55720 IP address blocks: 103.27.74.0/24 maxlen: 24 103.100.152.0/24 maxlen: 24 220.158.200.0/24 maxlen: 24 220.158.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Aug 28 08:51:35 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a459b8-1177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8e:7e:31:49:e9:1b:13:d6:6a:da:dc:58:af: dd:db:7a:eb:1d:0b:10:fb:88:d6:c0:b1:ce:12:a8: 38:0d:83:cb:69:f2:bf:44:81:0b:b5:f3:b8:13:75: 65:81:53:ad:4b:8e:75:e9:87:81:5e:d7:b4:0e:52: 90:7c:ac:14:84:f7:a9:cf:a2:5e:65:d3:64:9c:90: 7b:93:c2:06:c6:93:b8:df:fb:e9:0f:05:49:5f:be: 9b:b4:f5:65:94:87:ba:8e:2f:ee:9d:86:f1:1f:a6: 94:c0:86:e0:cb:01:fe:f3:79:5e:a5:6b:0b:86:78: ac:76:c6:2c:83:6e:66:4a:77:9f:7f:d2:15:71:7d: 9f:8b:3d:98:e3:3e:1c:f0:98:b4:6a:9f:9f:25:0c: 76:63:b0:6a:14:d9:2c:57:43:75:56:d8:c3:39:af: 1b:3a:e4:86:a6:8e:a4:0f:ad:40:d5:ed:df:4e:58: 4c:98:6e:44:85:c7:83:20:99:a3:75:82:f0:b9:5c: 5d:bf:e4:de:e5:49:48:23:f7:89:ae:b9:06:c5:3c: 6f:35:07:46:6c:fd:bc:1a:00:e0:72:28:df:2e:8c: 3b:8d:ed:3f:35:8e:10:78:58:27:b2:09:74:d7:b6: 87:aa:2e:77:95:d0:da:42:2d:c5:6c:e8:56:08:5d: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8B:59:E3:E6:EC:D2:E0:FD:A7:28:38:66:2F:1A:67:B9:86:85:26 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/298965AC06B611EBBBFD6B2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.27.74.0/24 103.100.152.0/24 220.158.200.0/23 Signature Algorithm: sha256WithRSAEncryption 36:76:35:fd:17:d5:6c:cc:65:4a:62:26:c9:a6:6b:4b:f8:e1: 38:00:12:77:c6:57:aa:0e:ba:bb:93:c5:0f:75:89:43:13:8a: 13:07:b6:ff:7d:85:a2:1f:16:bb:67:6e:ba:5b:63:08:65:ff: d2:cd:a7:05:fc:86:a7:bb:bf:0c:0c:b1:2e:f7:fb:a8:b8:0a: 98:4e:1f:2d:79:5a:93:70:0b:d3:2c:ec:ec:a7:3f:a8:8f:64: 2e:34:c4:01:71:a8:c5:c0:3b:49:ba:40:a2:21:42:ab:c5:96: c5:51:1c:fd:dd:0c:3f:36:3a:fd:0b:ff:ac:2a:0d:f1:2b:33: 3e:12:46:13:2e:c0:bc:99:13:bf:74:53:13:6a:79:eb:24:6c: b4:7c:f1:c7:cc:50:25:c5:8a:63:40:68:de:a3:ee:1d:55:aa: 25:75:7b:08:c3:27:82:64:c4:4b:e8:f8:5b:e5:97:a6:3e:97: be:0f:96:6e:1d:fa:f5:29:f5:5a:ae:5a:f2:2d:b7:b6:70:66: 84:06:f1:57:0b:62:97:b5:79:08:94:6c:52:4b:67:c7:a1:7c: 9d:f3:ef:20:ee:ec:ea:67:06:22:bd:37:17:0d:03:1e:45:47: cb:33:8c:d4:f8:e2:07:a7:ee:ae:18:2b:ad:1a:71:95:b5:a9: 43:56:e6:e2 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjUwODI4MDg1MTM1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTliOC0xMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Y5+MUnpGxPWatrcWK/d23rrHQsQ+4jWwLHOEqg4DYPLafK/RIELtfO4E3Vl gVOtS4516YeBXte0DlKQfKwUhPepz6JeZdNknJB7k8IGxpO43/vpDwVJX76btPVl lIe6ji/unYbxH6aUwIbgywH+83lepWsLhnisdsYsg25mSneff9IVcX2fiz2Y4z4c 8Ji0ap+fJQx2Y7BqFNksV0N1VtjDOa8bOuSGpo6kD61A1e3fTlhMmG5EhceDIJmj dYLwuVxdv+Te5UlII/eJrrkGxTxvNQdGbP28GgDgcijfLow7je0/NY4QeFgnsgl0 17aHqi53ldDaQi3FbOhWCF3BNQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJ6LWePm 7NLg/acoOGYvGme5hoUmMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REExM0UvNTRENkE1MEUwNkI1MTFFQjkzNzJEMzJCQzRGOUFFMDIvMjk4OTY1QUMw NkI2MTFFQkJCRkQ2QjJDQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZxtKAwQAZ2SYAwQB3J7IMA0GCSqGSIb3DQEBCwUAA4IBAQA2djX9 F9VszGVKYibJpmtL+OE4ABJ3xleqDrq7k8UPdYlDE4oTB7b/fYWiHxa7Z266W2MI Zf/SzacF/Ianu78MDLEu9/uouAqYTh8teVqTcAvTLOzspz+oj2QuNMQBcajFwDtJ ukCiIUKrxZbFURz93Qw/Njr9C/+sKg3xKzM+EkYTLsC8mRO/dFMTannrJGy0fPHH zFAlxYpjQGjeo+4dVaoldXsIwyeCZMRL6Phb5ZemPpe+D5ZuHfr1KfVarlryLbe2 cGaEBvFXC2KXtXkIlGxSS2fHoXyd8+8g7uzqZwYivTcXDQMeRUfLM4zU+OIHp+6u GCutGnGVtalDVubi -----END CERTIFICATE-----Generated at Mon Mar 2 10:12:15 2026 by rpki-client