$ rpki-client -vvf rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/A1021498C53311E7B0B0744BC4F9AE02.roa File: A1021498C53311E7B0B0744BC4F9AE02.roa (raw, json) Hash identifier: 4soZMA/BUmioUwX8O+LCtr6QF+j1qX0n2gK+CrfBEWw= Subject key identifier: D6:AB:32:64:F0:C7:1E:7D:26:E9:73:FD:30:57:35:D6:7B:A5:B3:56 Certificate issuer: /CN=A91E116E/serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA Certificate serial: 1860 Authority key identifier: D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/A1021498C53311E7B0B0744BC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:31:30 +0000 ROA not before: Thu 12 Jun 2025 16:47:08 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135425 IP address blocks: 103.90.58.0/23 maxlen: 24 103.112.200.0/22 maxlen: 24 103.219.120.0/22 maxlen: 24 103.219.144.0/23 maxlen: 24 2405:6480::/32 maxlen: 32 2405:6680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6240 (0x1860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E116E, serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA Validity Not Before: Jun 12 16:47:08 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a42392-7552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f7:66:02:6a:16:8c:68:b1:be:32:0d:50:c2: e1:0c:0e:85:46:de:2f:4e:bf:76:2b:8e:18:96:e3: 09:3c:b8:b0:20:10:71:40:0a:17:06:9a:bb:cd:fd: 02:7e:b3:4c:6d:70:f5:7e:47:f4:fe:08:c2:70:0c: e5:cb:2f:75:c6:6c:56:a0:8b:3e:d9:08:b6:0f:1a: e0:a8:5c:ca:14:32:e1:e6:6b:fb:b7:02:0d:0e:a8: 5b:8c:3b:e1:46:99:eb:12:09:b3:b6:ad:e8:f2:38: ed:36:f9:a7:be:e4:ae:86:d4:4e:59:02:e4:f2:2b: 42:ef:18:3a:e5:36:94:85:d2:06:20:9c:37:3f:e5: 0f:8d:1c:e2:ab:ee:e4:c0:10:54:53:d5:17:22:29: 1b:1e:9d:cd:53:9f:5f:69:f2:36:25:63:83:9e:3c: 51:e1:c8:41:b8:88:1d:99:a5:07:11:29:c4:ea:ca: c7:18:13:c9:52:f3:54:62:4e:32:3c:61:c1:c9:44: 1b:0c:06:8c:7f:78:30:30:02:8d:06:13:c3:4a:6a: 2a:db:34:4d:92:03:ff:cd:23:c9:1a:9f:5a:f9:28: d0:59:d2:04:70:8f:cb:41:41:90:9e:a9:d7:99:a4: ce:b6:57:01:ac:be:4d:ab:89:52:e3:0f:e8:cd:00: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AB:32:64:F0:C7:1E:7D:26:E9:73:FD:30:57:35:D6:7B:A5:B3:56 X509v3 Authority Key Identifier: keyid:D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/A1021498C53311E7B0B0744BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.90.58.0/23 103.112.200.0/22 103.219.120.0/22 103.219.144.0/23 IPv6: 2405:6480::/32 2405:6680::/32 Signature Algorithm: sha256WithRSAEncryption 51:46:e9:76:60:90:73:b6:d4:0a:ad:ea:58:e2:89:b9:f0:99: be:94:d2:18:3c:9f:4d:c2:83:ec:ac:65:c1:9a:64:82:f9:f8: de:35:6d:e6:8a:ed:ab:65:e7:63:fa:58:2c:65:80:e7:69:6c: 89:d5:e1:14:48:49:e4:ed:45:ea:35:c9:17:2b:52:41:c2:a3: 77:fe:ff:1c:69:f9:44:4d:ec:0e:49:f8:fe:51:77:2b:81:23: bc:73:4b:e7:93:29:6a:59:c0:ba:e4:ea:62:cc:d0:21:5a:b8: 88:16:db:e6:a6:3d:d5:06:81:5c:97:3c:a2:77:b4:85:29:ba: 30:b5:4c:40:bb:1f:08:a6:7e:52:db:d2:7b:f6:30:b9:8c:39: 46:28:fc:14:cd:27:2d:a1:e5:06:43:c1:42:24:86:a6:00:47: 08:29:0b:37:2e:c8:e4:c8:a7:b7:8d:00:72:5a:f6:16:62:b8: be:7b:b1:25:b0:6c:c0:0b:3d:06:d6:3e:c3:10:38:60:79:06: a5:82:e6:c5:30:6e:c9:26:8b:44:e0:93:a3:d7:3f:ac:40:45: b7:07:dc:72:c7:2f:9d:2d:b6:56:17:e8:85:1e:75:97:9c:bb: c5:26:a9:f1:99:00:ce:86:70:46:41:01:6c:15:25:dc:6f:9f: 86:5e:ea:69 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICGGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNkUxMTAvBgNVBAUTKEQwMDRDQ0ZBRTZGMDdBNDRCREVGREU5Mzc4MDZBREI5 QzMzMjlGRkEwHhcNMjUwNjEyMTY0NzA4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjM5Mi03NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/dmAmoWjGixvjINUMLhDA6FRt4vTr92K44YluMJPLiwIBBxQAoXBpq7zf0C frNMbXD1fkf0/gjCcAzlyy91xmxWoIs+2Qi2DxrgqFzKFDLh5mv7twINDqhbjDvh RpnrEgmztq3o8jjtNvmnvuSuhtROWQLk8itC7xg65TaUhdIGIJw3P+UPjRziq+7k wBBUU9UXIikbHp3NU59fafI2JWODnjxR4chBuIgdmaUHESnE6srHGBPJUvNUYk4y PGHByUQbDAaMf3gwMAKNBhPDSmoq2zRNkgP/zSPJGp9a+SjQWdIEcI/LQUGQnqnX maTOtlcBrL5Nq4lS4w/ozQAA4wIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFNarMmTw xx59Julz/TBXNdZ7pbNWMB8GA1UdIwQYMBaAFNAEzPrm8HpEve/ek3gGrbnDMp/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE2RS83NDU2Qzc1QUM1 MzIxMUU3OTIxRTNFNDlDNEY5QUUwMi8wQVRNLXVid2VrUzk3OTZUZUFhdHVjTXlu X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBVE0tdWJ3ZWtTOTc5NlRlQWF0dWNNeW5fby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTExNkUvNzQ1NkM3NUFDNTMyMTFFNzkyMUUzRTQ5QzRGOUFFMDIvQTEwMjE0OThD NTMzMTFFN0IwQjA3NDRCQzRGOUFFMDIucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjAe BAIAATAYAwQBZ1o6AwQCZ3DIAwQCZ9t4AwQBZ9uQMBQEAgACMA4DBQAkBWSAAwUA JAVmgDANBgkqhkiG9w0BAQsFAAOCAQEAUUbpdmCQc7bUCq3qWOKJufCZvpTSGDyf TcKD7KxlwZpkgvn43jVt5ortq2XnY/pYLGWA52lsidXhFEhJ5O1F6jXJFytSQcKj d/7/HGn5RE3sDkn4/lF3K4EjvHNL55MpalnAuuTqYszQIVq4iBbb5qY91QaBXJc8 one0hSm6MLVMQLsfCKZ+UtvSe/YwuYw5Rij8FM0nLaHlBkPBQiSGpgBHCCkLNy7I 5Mint40Aclr2FmK4vnuxJbBswAs9BtY+wxA4YHkGpYLmxTBuySaLROCTo9c/rEBF twfccscvnS22VhfohR51l5y7xSap8ZkAzoZwRkEBbBUl3G+fhl7qaQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:10:57 2026 by rpki-client