$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/39EA203238DB11F1AA6C3EA5A2833773.roa File: 39EA203238DB11F1AA6C3EA5A2833773.roa (raw, json) Hash identifier: Xl9IN1jBFBBr5NJdM8/+NNt/Eg76Z7LumfHzT1CNK/Q= Subject key identifier: 57:B5:DB:8D:89:52:26:CE:E7:6F:37:95:10:11:82:37:7F:1E:99:85 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 05E4 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/39EA203238DB11F1AA6C3EA5A2833773.roa Signing time: Wed 15 Apr 2026 14:56:05 +0000 ROA not before: Wed 15 Apr 2026 14:56:05 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 834 IP address blocks: 103.204.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 23:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1508 (0x5e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Apr 15 14:56:05 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69dfa704-409d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:43:86:c3:ec:ef:29:7e:1a:9b:ef:47:47: 28:5f:50:3f:fd:dd:e3:8c:a6:a9:b0:63:94:ce:ee: 9c:67:cb:94:d9:d8:c0:b1:90:7c:a0:9e:e0:e5:69: c1:55:42:ba:d6:b8:74:df:09:e5:7f:ee:dd:73:a9: 92:7f:a9:71:b1:4c:8d:6c:b6:bc:ee:b8:5b:cc:62: ca:02:12:60:f0:db:33:3c:f7:b9:c7:b3:c4:db:3c: 4d:d5:d2:a8:f9:0d:bc:5b:dc:57:90:83:80:c9:91: 4a:53:76:7a:b5:73:a9:cb:c4:80:9a:7b:1a:86:c5: ac:72:33:45:3c:5a:9b:a9:45:e2:be:ee:fb:6d:a5: da:ab:e7:f4:34:9a:e4:8b:76:d1:60:21:44:2a:30: 42:59:b8:8e:9b:2b:42:0c:33:dc:ca:40:36:41:69: 89:4b:3a:9e:0f:d0:cf:47:48:53:32:b0:5b:bf:8a: 8c:b2:ac:65:39:fd:d9:09:61:fc:54:76:7b:15:b2: 1d:86:0c:bb:cd:67:f8:93:1b:66:78:cd:dd:05:3b: f5:d2:a3:62:28:3f:82:83:a1:69:15:54:1f:85:14: f1:a7:f8:f7:42:11:0b:2a:5c:55:82:b4:34:2a:69: 10:f5:fc:9f:c4:3a:ec:f6:f4:e9:8c:e0:52:57:2f: 90:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B5:DB:8D:89:52:26:CE:E7:6F:37:95:10:11:82:37:7F:1E:99:85 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/39EA203238DB11F1AA6C3EA5A2833773.roa sbgp-ipAddrBlock: critical IPv4: 103.204.23.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:99:ca:ac:7c:e7:bd:f0:dd:25:f7:e8:4a:f0:99:28:e4:43: 15:18:01:fe:97:b8:ea:65:f3:95:5d:54:5c:54:4b:7d:59:7c: 06:34:7a:a9:46:30:f1:ac:f5:39:47:2c:86:3e:03:6a:64:97: e4:6d:6d:72:07:ab:6d:b7:50:6f:fb:2b:ab:91:8b:90:22:db: f7:32:ac:34:3f:75:91:d9:0e:c1:85:cb:91:12:f4:8d:4f:d2: 1f:61:7b:1d:0a:4d:cc:25:c2:37:bb:2d:ff:4d:25:fe:73:80: f5:ae:47:42:0d:96:52:43:f2:74:cb:80:43:7b:b5:4e:47:c0: 98:f0:60:dd:e9:b7:64:d3:ef:78:1a:8a:b3:5c:58:b5:89:eb: d4:38:5b:f9:95:5a:3d:0b:01:c6:ba:9c:9f:42:74:db:0d:9c: 65:51:c7:61:e4:86:d6:80:d8:f1:d1:bc:c1:97:57:29:e0:25: c1:87:c8:cb:b7:be:e7:62:ca:2c:ce:a8:e2:19:32:ed:a0:ae: 9b:88:56:f8:96:2d:d2:4e:ad:52:96:b0:a5:7e:fb:d1:65:5f: cc:bf:58:bd:3a:9e:eb:e3:94:9b:f3:3a:8d:32:b8:7c:d8:93: 26:e5:7e:24:ca:0c:d6:a7:0d:68:77:4f:fa:d6:71:ea:47:ca: 00:30:0b:4f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjYwNDE1MTQ1NjA1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWRmYTcwNC00MDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdRDhsPs7yl+GpvvR0coX1A//d3jjKapsGOUzu6cZ8uU2djAsZB8oJ7g5WnB VUK61rh03wnlf+7dc6mSf6lxsUyNbLa87rhbzGLKAhJg8NszPPe5x7PE2zxN1dKo +Q28W9xXkIOAyZFKU3Z6tXOpy8SAmnsahsWscjNFPFqbqUXivu77baXaq+f0NJrk i3bRYCFEKjBCWbiOmytCDDPcykA2QWmJSzqeD9DPR0hTMrBbv4qMsqxlOf3ZCWH8 VHZ7FbIdhgy7zWf4kxtmeM3dBTv10qNiKD+Cg6FpFVQfhRTxp/j3QhELKlxVgrQ0 KmkQ9fyfxDrs9vTpjOBSVy+QEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFe1242J UibO5283lRARgjd/HpmFMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBEODcvRjY4M0NFRjIyMUVCMTFFQzkyNTAxODE5QzRGOUFFMDIvMzlFQTIwMzIz OERCMTFGMUFBNkMzRUE1QTI4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ8wXMA0GCSqGSIb3DQEBCwUAA4IBAQAcmcqsfOe98N0l9+hK8Jko 5EMVGAH+l7jqZfOVXVRcVEt9WXwGNHqpRjDxrPU5RyyGPgNqZJfkbW1yB6ttt1Bv +yurkYuQItv3Mqw0P3WR2Q7BhcuREvSNT9IfYXsdCk3MJcI3uy3/TSX+c4D1rkdC DZZSQ/J0y4BDe7VOR8CY8GDd6bdk0+94GoqzXFi1ievUOFv5lVo9CwHGupyfQnTb DZxlUcdh5IbWgNjx0bzBl1cp4CXBh8jLt77nYsoszqjiGTLtoK6biFb4li3STq1S lrClfvvRZV/Mv1i9Op7r45Sb8zqNMrh82JMm5X4kygzWpw1od0/61nHqR8oAMAtP -----END CERTIFICATE-----Generated at Sun Apr 19 10:20:00 2026 by rpki-client