$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/542CA96A0B1911EB92F1EB12C4F9AE02.roa File: 542CA96A0B1911EB92F1EB12C4F9AE02.roa (raw, json) Hash identifier: Cl43nXYN99B9XMoCJJX5Y4f6XTGX9tnmhbgu70RHMgI= Subject key identifier: AC:BB:07:F7:C3:B8:76:FB:C8:9B:85:2C:7D:0C:9D:0C:95:BD:F8:FD Certificate issuer: /CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9 Certificate serial: 0A71 Authority key identifier: 12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/542CA96A0B1911EB92F1EB12C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:30:27 +0000 ROA not before: Wed 14 May 2025 20:06:15 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139006 IP address blocks: 103.138.128.0/23 maxlen: 24 2400:5a20::/45 maxlen: 48 2400:5a20:8::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2673 (0xa71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9 Validity Not Before: May 14 20:06:15 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a40733-abc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ee:20:71:50:b2:68:28:23:e6:ea:72:90:26: fb:7d:f0:9e:4f:16:e0:cc:69:21:a6:ba:a3:5b:f6: a2:df:cf:88:98:3b:03:e0:83:c3:c4:4e:1a:c4:9b: 4a:13:1c:ee:f6:d6:91:70:b1:38:cd:bd:71:85:b8: 9b:6c:ed:48:1b:c4:9c:ec:19:33:bd:5a:2d:ba:d1: af:19:ad:57:8c:81:7b:1d:fb:94:5f:b1:24:e7:36: d9:b1:20:18:40:d5:2e:ef:8c:93:a0:83:be:39:56: 66:59:39:17:04:b6:53:41:a9:a4:da:a7:7a:5c:3a: 5f:4b:c2:ea:86:b7:ec:fc:d4:28:dc:ae:6e:be:cd: fe:5b:96:79:01:d3:aa:a7:2f:4e:7d:da:6c:be:07: 1b:2a:d0:70:52:eb:69:55:15:b5:ce:5d:c0:af:1e: 23:f3:ed:21:73:8b:78:62:8a:c6:0b:70:a4:40:29: 83:24:b1:01:60:00:7b:4d:70:47:a1:04:9c:33:bf: 32:d7:b5:5e:01:b2:50:34:d1:84:b7:3e:d6:41:92: 43:43:3f:74:ca:f5:f5:33:35:f1:f1:f9:3c:92:be: 7b:22:41:a3:cf:70:f3:7a:6e:a9:e2:aa:f9:4a:0b: b1:a0:46:d7:f2:4c:4b:b6:07:c6:9d:8a:9a:bd:6f: d8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BB:07:F7:C3:B8:76:FB:C8:9B:85:2C:7D:0C:9D:0C:95:BD:F8:FD X509v3 Authority Key Identifier: keyid:12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/542CA96A0B1911EB92F1EB12C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.128.0/23 IPv6: 2400:5a20::/44 Signature Algorithm: sha256WithRSAEncryption 25:6a:24:e2:49:a1:75:40:a3:3a:8a:f3:85:9b:47:45:ae:39: 56:99:b1:4a:c9:49:53:09:4b:e1:f3:c1:ab:a3:8c:9a:68:a6: d5:5f:74:8e:f1:13:56:30:7a:d1:9e:81:fb:55:f5:f6:f3:55: 8a:db:1e:61:26:7c:61:3a:16:7e:71:49:8d:b9:aa:af:d6:3b: 77:b3:06:68:b8:6e:bf:2e:86:8f:cf:33:12:16:23:bd:87:2e: ea:a5:c1:e9:f8:ec:77:82:5f:8d:0e:ef:13:c1:5d:70:76:cc: 58:1a:9e:11:8f:93:2f:da:d6:fc:90:6e:4c:e0:62:a6:58:27: bb:64:3d:a5:d7:8f:ea:a7:db:c5:4c:b3:fb:7a:15:14:7c:2d: cd:a2:ca:f8:12:bf:35:d2:db:a4:3e:5e:40:25:69:32:a2:59: 82:b5:f8:ea:94:39:00:7d:0f:52:69:2d:6e:16:97:0c:b6:34: ce:7b:00:c1:91:af:82:3a:68:d1:d1:ef:95:e0:f3:64:0c:ca: 52:e5:f4:be:56:d6:84:4d:1a:ac:2f:ea:b8:2a:10:18:b9:ec: db:d7:9b:6d:0f:92:58:d2:c0:68:7d:d0:7c:44:68:2e:92:ae: f9:b6:12:a4:75:d6:64:44:bd:49:89:fd:14:f9:b5:f9:57:73: 6c:f5:93:0c -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDEyNTYwMThGRTZFNTM4QzQwMEY2M0ZDN0UxMjFDM0E3 MDFGMkRFQTkwHhcNMjUwNTE0MjAwNjE1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDczMy1hYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAle4gcVCyaCgj5upykCb7ffCeTxbgzGkhprqjW/ai38+ImDsD4IPDxE4axJtK Exzu9taRcLE4zb1xhbibbO1IG8Sc7BkzvVotutGvGa1XjIF7HfuUX7Ek5zbZsSAY QNUu74yToIO+OVZmWTkXBLZTQamk2qd6XDpfS8Lqhrfs/NQo3K5uvs3+W5Z5AdOq py9OfdpsvgcbKtBwUutpVRW1zl3Arx4j8+0hc4t4YorGC3CkQCmDJLEBYAB7TXBH oQScM78y17VeAbJQNNGEtz7WQZJDQz90yvX1MzXx8fk8kr57IkGjz3Dzem6p4qr5 SguxoEbX8kxLtgfGnYqavW/YUQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKy7B/fD uHb7yJuFLH0MnQyVvfj9MB8GA1UdIwQYMBaAFBJWAY/m5TjEAPY/x+Ehw6cB8t6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81QzhDQjRENjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9FbFlCai1ibE9NUUE5al9INFNIRHB3SHkz cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VsWUJqLWJsT01RQTlqX0g0U0hEcHdIeTNxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTAwRkMvNUM4Q0I0RDY3RjJGMTFFQUFERjRCRjZBQzRGOUFFMDIvNTQyQ0E5NkEw QjE5MTFFQjkyRjFFQjEyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4qAMA8EAgACMAkDBwQkAFogAAAwDQYJKoZIhvcNAQELBQADggEB ACVqJOJJoXVAozqK84WbR0WuOVaZsUrJSVMJS+HzwaujjJpoptVfdI7xE1YwetGe gftV9fbzVYrbHmEmfGE6Fn5xSY25qq/WO3ezBmi4br8uho/PMxIWI72HLuqlwen4 7HeCX40O7xPBXXB2zFganhGPky/a1vyQbkzgYqZYJ7tkPaXXj+qn28VMs/t6FRR8 Lc2iyvgSvzXS26Q+XkAlaTKiWYK1+OqUOQB9D1JpLW4Wlwy2NM57AMGRr4I6aNHR 75Xg82QMylLl9L5W1oRNGqwv6rgqEBi57NvXm20PkljSwGh90HxEaC6Srvm2EqR1 1mREvUmJ/RT5tflXc2z1kww= -----END CERTIFICATE-----Generated at Mon Mar 2 04:09:13 2026 by rpki-client