$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa File: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (raw, json) Hash identifier: 59GaugIUboIgNlDlRnXyjQ4DeYaCEIFAJ1XQPKcxrCA= Subject key identifier: F7:74:6A:AD:D1:6B:98:2E:8D:EF:83:81:C7:D2:24:6A:3E:5A:02:8B Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: 023F Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa Signing time: Sat 11 Apr 2026 02:35:14 +0000 ROA not before: Sat 11 Apr 2026 02:35:14 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 38903 IP address blocks: 103.122.123.0/24 maxlen: 24 103.131.83.0/24 maxlen: 24 203.99.152.0/24 maxlen: 24 203.99.153.0/24 maxlen: 24 203.99.154.0/24 maxlen: 24 203.99.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: Apr 11 02:35:14 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69d9b361-aafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:20:be:10:77:fd:46:09:32:c8:33:14:3d: 1c:ae:97:68:bf:46:9b:a1:04:39:ff:95:81:f8:5a: 83:98:f1:bb:60:0b:8e:82:8b:0e:e3:80:ed:12:2a: 60:e4:34:0d:1a:67:f8:d4:f8:ae:fa:46:3a:6b:58: ab:d9:a3:b0:5c:d1:1f:30:44:51:96:81:b6:50:38: cc:ac:2e:d3:70:24:bd:0e:7e:37:1f:cb:05:0a:94: 08:37:e1:48:b9:c4:07:2a:6e:0a:4a:c2:33:5d:aa: bb:1f:58:2c:5b:67:04:5d:b9:51:2c:9a:92:c9:20: f1:ee:50:74:6d:d8:96:89:21:03:8e:b6:13:f4:79: e8:7f:d9:a1:8e:36:ce:dc:93:1b:4c:76:5d:db:47: 4b:95:93:bc:c3:09:7e:61:fa:d6:13:d6:3c:40:97: 99:58:fc:37:2d:f3:d9:f2:94:9a:81:69:62:19:b5: 79:d6:93:0a:17:aa:11:44:12:15:31:a3:a1:bb:27: d1:e1:ff:bc:9f:6b:b5:d6:69:fb:8c:f2:d2:9d:da: 6e:6a:91:ad:57:d6:de:11:f3:d2:88:7d:73:db:c7: cc:bf:8d:5c:03:5d:d4:ba:fd:5d:4b:46:b2:11:83: 8d:e4:37:4c:d5:30:51:93:e9:3f:e7:0a:6a:b4:8a: 6a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:74:6A:AD:D1:6B:98:2E:8D:EF:83:81:C7:D2:24:6A:3E:5A:02:8B X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.122.123.0/24 103.131.83.0/24 203.99.152.0/22 Signature Algorithm: sha256WithRSAEncryption 59:8c:80:06:5c:c6:9c:e6:43:fb:6a:e3:88:e9:62:07:3c:27: 28:2d:74:0f:9d:fb:63:65:86:d2:95:2a:99:5a:a8:47:22:98: 79:45:f7:9e:86:f9:c5:a2:7b:68:45:2b:4b:ca:2d:c5:70:dd: 50:45:ce:87:0c:84:18:9b:b1:6d:4f:ed:a0:61:50:3f:f0:74: f8:86:b7:75:7c:a0:4f:f9:3d:0c:c2:05:a5:58:83:c3:56:3f: 94:53:b4:51:88:e5:ce:a0:7e:4e:88:14:b6:a6:7e:df:9e:da: 7f:98:67:3a:16:29:14:be:24:83:97:06:c6:e6:45:2f:01:33: 00:db:59:b8:85:04:5f:2f:83:79:c6:3b:ef:7c:38:5e:09:48: 42:0b:8f:98:a4:9d:c8:70:cb:ab:dc:8c:cb:71:31:50:39:8c: 5b:32:75:74:f4:43:0e:5f:a3:8b:d4:44:76:cd:4e:a5:a1:2f: 69:d7:bd:7f:68:f7:b6:cf:6f:5d:ef:43:13:0f:be:c1:4c:bb: 6c:d1:6d:e6:1b:4e:82:79:ca:98:66:15:89:cf:7e:25:f2:77: 8b:43:9b:99:e8:83:90:35:96:8f:a6:74:43:d7:65:c0:0a:24: 46:68:19:a4:5d:1c:93:10:19:fd:39:3d:17:c4:c7:13:74:c6: f3:a8:b6:b8 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjYwNDExMDIzNTE0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ5YjM2MS1hYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXwgvhB3/UYJMsgzFD0crpdov0aboQQ5/5WB+FqDmPG7YAuOgosO44DtEipg 5DQNGmf41Piu+kY6a1ir2aOwXNEfMERRloG2UDjMrC7TcCS9Dn43H8sFCpQIN+FI ucQHKm4KSsIzXaq7H1gsW2cEXblRLJqSySDx7lB0bdiWiSEDjrYT9Hnof9mhjjbO 3JMbTHZd20dLlZO8wwl+YfrWE9Y8QJeZWPw3LfPZ8pSagWliGbV51pMKF6oRRBIV MaOhuyfR4f+8n2u11mn7jPLSndpuapGtV9beEfPSiH1z28fMv41cA13Uuv1dS0ay EYON5DdM1TBRk+k/5wpqtIpqqwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPd0aq3R a5guje+DgcfSJGo+WgKLMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REIxMjgvN0JGMjNBQzREREU4MTFFREJGOEM5NzNBQzRGOUFFMDIvQUJEN0Q5RkNE REVDMTFFREIxNEVEQTMyQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ3p7AwQAZ4NTAwQCy2OYMA0GCSqGSIb3DQEBCwUAA4IBAQBZjIAG XMac5kP7auOI6WIHPCcoLXQPnftjZYbSlSqZWqhHIph5RfeehvnFontoRStLyi3F cN1QRc6HDIQYm7FtT+2gYVA/8HT4hrd1fKBP+T0MwgWlWIPDVj+UU7RRiOXOoH5O iBS2pn7fntp/mGc6FikUviSDlwbG5kUvATMA21m4hQRfL4N5xjvvfDheCUhCC4+Y pJ3IcMur3IzLcTFQOYxbMnV09EMOX6OL1ER2zU6loS9p171/aPe2z29d70MTD77B TLts0W3mG06CecqYZhWJz34l8neLQ5uZ6IOQNZaPpnRD12XACiRGaBmkXRyTEBn9 OT0XxMcTdMbzqLa4 -----END CERTIFICATE-----Generated at Fri Apr 17 19:00:48 2026 by rpki-client