$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/3E9C9BD81D0011F1815CC9FC023D8C67.roa File: 3E9C9BD81D0011F1815CC9FC023D8C67.roa (raw, json) Hash identifier: xxCP5LVeK0WM9e+xhYEwm/syG4ynEc+P05z25IyWt+8= Subject key identifier: 29:EA:32:45:40:37:2B:41:3C:F1:6A:FB:11:F8:CA:76:31:99:16:46 Certificate issuer: /CN=A91DD064/serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA Certificate serial: 17 Authority key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/3E9C9BD81D0011F1815CC9FC023D8C67.roa Signing time: Thu 09 Apr 2026 08:47:36 +0000 ROA not before: Thu 09 Apr 2026 08:47:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17819 IP address blocks: 103.19.60.0/22 maxlen: 22 2407:d300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA Validity Not Before: Apr 9 08:47:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d767a7-9cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c4:e1:87:16:e4:b2:a2:4c:a1:7e:e3:02:0e: 75:c6:3a:5f:dc:9b:7b:b9:7a:dd:27:c9:08:76:2c: e6:66:ab:ab:e2:94:03:fe:21:42:73:3d:3f:1d:60: d1:ce:0d:70:d9:3e:77:3b:21:08:d5:6c:d6:e8:77: 13:9d:7a:89:a8:6d:b2:a1:f6:32:d7:65:b6:f2:19: 74:06:ea:aa:ad:6d:6e:62:3b:d1:a4:25:97:a1:b5: f1:d2:10:7c:66:f7:06:dd:4d:31:14:05:b2:11:31: dd:db:59:80:a1:39:63:00:ad:14:25:f9:dc:37:62: ee:96:dc:1b:ad:41:c9:b8:fa:0f:db:b7:52:33:2b: d7:d4:7e:7b:a2:ae:50:5e:d4:a0:12:a0:3f:84:c0: 93:d9:78:fa:ac:81:a9:19:f8:54:16:16:50:8f:49: e0:82:f3:e5:7b:98:af:55:b8:89:b1:3e:84:7a:03: 99:03:22:96:28:90:34:1e:aa:e8:af:f9:ab:53:70: f6:39:70:50:10:b0:c7:23:39:a2:8b:d2:81:01:06: 8b:4b:74:67:9a:56:a1:fb:9f:57:4c:d4:da:0d:90: 53:92:bb:78:8c:80:39:c9:47:30:91:e2:92:cd:00: 73:f2:e0:1e:79:58:5a:e9:ab:a2:e7:18:21:bf:fc: 79:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EA:32:45:40:37:2B:41:3C:F1:6A:FB:11:F8:CA:76:31:99:16:46 X509v3 Authority Key Identifier: keyid:E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/3E9C9BD81D0011F1815CC9FC023D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.19.60.0/22 IPv6: 2407:d300::/32 Signature Algorithm: sha256WithRSAEncryption 32:c2:6b:09:8c:6f:9d:b0:63:e3:a2:a8:66:42:cb:28:71:dd: 01:37:a4:48:47:39:21:07:c9:78:e4:7b:96:c9:64:2e:45:87: 64:b6:92:d1:41:2c:de:d1:b4:49:7e:e8:da:9a:73:57:9e:1e: 94:8b:73:1f:e1:c8:ea:9e:96:93:d7:18:d2:1e:d2:cd:fc:3f: 38:32:60:a0:bb:b3:5b:de:8e:fb:0b:3c:ee:93:43:2c:ab:20: 56:d6:3c:11:ee:ac:7f:50:ff:ae:e0:20:37:65:32:bb:42:16: 83:ed:3b:c9:0f:7c:ac:a9:67:46:4c:f4:08:ba:5f:6b:38:8f: a4:2c:44:9d:89:ec:6d:1f:cf:1d:9c:50:8f:dc:16:77:c8:ec: b5:ab:3c:90:39:8f:9d:e1:6a:50:1f:24:b1:3e:56:98:5f:15: 33:22:5b:0d:60:e8:b7:68:c3:a8:60:c4:3a:8f:69:dc:51:62: 36:ac:1b:04:00:34:86:bb:e8:57:10:af:18:8e:34:ca:c9:f7: e4:e9:2b:48:f6:7b:c2:27:96:a9:57:65:4b:90:76:0a:60:37: e1:85:a8:af:2d:49:74:ec:07:c7:9e:6e:57:0d:6b:ec:68:50: 2c:af:09:5a:5b:25:38:69:3b:4f:84:ba:18:dc:fc:41:b7:d1: 4d:7c:b7:99 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDA2NDExMC8GA1UEBRMoRTk5QTgwNzMwRDBCQTkwNTExREJCMkQxQzdGNURENERB Q0E1MjVEQTAeFw0yNjA0MDkwODQ3MzZaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZDc2N2E3LTljYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCHxOGHFuSyokyhfuMCDnXGOl/cm3u5et0nyQh2LOZmq6vilAP+IUJzPT8dYNHO DXDZPnc7IQjVbNbodxOdeomobbKh9jLXZbbyGXQG6qqtbW5iO9GkJZehtfHSEHxm 9wbdTTEUBbIRMd3bWYChOWMArRQl+dw3Yu6W3ButQcm4+g/bt1IzK9fUfnuirlBe 1KASoD+EwJPZePqsgakZ+FQWFlCPSeCC8+V7mK9VuImxPoR6A5kDIpYokDQequiv +atTcPY5cFAQsMcjOaKL0oEBBotLdGeaVqH7n1dM1NoNkFOSu3iMgDnJRzCR4pLN AHPy4B55WFrpq6LnGCG//HnDAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUKeoyRUA3 K0E88Wr7EfjKdjGZFkYwHwYDVR0jBBgwFoAU6ZqAcw0LqQUR27LRx/XdTaylJdow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMDY0L0QxMkIxQzc4MUNG RjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFVUjI3TFJ4X1hkVGF5bEpk by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNlpxQWN3MExxUVVSMjdMUnhfWGRUYXlsSmRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDA2NC9EMTJCMUM3ODFDRkYxMUYxQTY5RTUwRjk0MTNEOEM2Ny8zRTlDOUJEODFE MDAxMUYxODE1Q0M5RkMwMjNEOEM2Ny5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAJnEzwwDQQCAAIwBwMFACQH0wAwDQYJKoZIhvcNAQELBQADggEBADLC awmMb52wY+OiqGZCyyhx3QE3pEhHOSEHyXjke5bJZC5Fh2S2ktFBLN7RtEl+6Nqa c1eeHpSLcx/hyOqelpPXGNIe0s38PzgyYKC7s1vejvsLPO6TQyyrIFbWPBHurH9Q /67gIDdlMrtCFoPtO8kPfKypZ0ZM9Ai6X2s4j6QsRJ2J7G0fzx2cUI/cFnfI7LWr PJA5j53halAfJLE+VphfFTMiWw1g6Ldow6hgxDqPadxRYjasGwQANIa76FcQrxiO NMrJ9+TpK0j2e8InlqlXZUuQdgpgN+GFqK8tSXTsB8eeblcNa+xoUCyvCVpbJThp O0+Euhjc/EG30U18t5k= -----END CERTIFICATE-----Generated at Fri Apr 17 21:12:31 2026 by rpki-client