$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/91FD24BA23C511EDA6D7F073C4F9AE02.roa File: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (raw, json) Hash identifier: DAvvM9WZjvxbegKaF7G0bCegMv1ld81gFHwRyYHJ0vY= Subject key identifier: 03:AA:A1:5C:86:EA:60:D4:86:6F:41:F7:E6:74:C3:BC:C7:F8:6F:62 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 09F5 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/91FD24BA23C511EDA6D7F073C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:19:57 +0000 ROA not before: Thu 26 Jun 2025 20:06:22 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58629 IP address blocks: 103.138.122.0/24 maxlen: 24 103.138.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2549 (0x9f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Jun 26 20:06:22 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42eed-c28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4e:2c:d8:1c:f9:fa:de:10:be:09:0d:65:69: ab:3a:aa:92:10:25:67:83:dd:c0:01:a9:f7:c6:91: 85:95:3b:f9:d1:fc:6f:f9:7e:24:04:13:16:c4:80: 1b:5d:20:56:8e:1d:e0:1f:c1:ae:89:3d:50:72:f6: 95:54:fd:33:24:f7:5f:79:51:1b:29:c6:62:bb:2e: dd:01:b8:e8:3a:15:9f:ba:e1:f5:45:21:a4:7d:c2: 80:2b:d2:c4:ab:19:13:3d:43:b4:d6:54:d0:1a:1c: af:15:66:69:d9:21:48:0a:46:a5:8d:6c:c5:37:a8: c3:06:25:47:bb:cf:b5:eb:2d:ba:88:e3:40:39:5a: bd:ee:30:89:cb:c0:70:a0:1d:90:1a:a6:58:1c:65: df:19:48:38:f8:34:c1:1b:f3:59:0e:cb:4d:56:a7: e0:f5:24:72:ff:1d:d1:6b:b4:54:4c:b6:3b:75:f7: 94:03:b2:c0:0e:ba:46:33:04:7e:65:a1:13:06:02: 3e:be:64:f4:e5:6d:6e:9e:f4:4d:91:c7:ad:04:2b: 8f:f3:21:17:91:cb:62:12:f4:13:c9:c8:f1:a5:c0: 6b:1c:30:fa:f8:19:90:af:ef:b0:6c:97:9f:d8:cc: 6e:59:87:4b:94:d7:4c:d8:d3:56:6d:1c:b4:ca:48: e6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AA:A1:5C:86:EA:60:D4:86:6F:41:F7:E6:74:C3:BC:C7:F8:6F:62 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/91FD24BA23C511EDA6D7F073C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.122.0/23 Signature Algorithm: sha256WithRSAEncryption c2:19:33:47:03:1b:ae:9a:44:d5:e8:06:bc:ad:9d:5d:ac:ac: e0:ec:97:f8:d1:fa:99:71:a0:44:3d:b8:ba:73:26:72:6b:6c: c6:8d:1e:3b:20:1d:cd:2c:5e:7a:66:d5:8e:72:58:55:b7:ac: 59:55:14:b2:2a:5f:8b:95:1f:c7:5e:c2:65:dc:97:e9:1e:b5: 57:9f:b7:b7:68:2e:d7:ed:ad:0f:f1:dd:8d:d4:eb:d0:b7:d6: 57:d0:fb:76:df:d9:31:bb:7c:75:63:4c:8f:3c:cb:d8:69:35: 0d:38:89:c4:61:5f:10:78:ab:b0:e4:ec:55:55:8b:5b:b8:a5: 2e:4b:b5:6f:9a:fc:d2:e2:64:55:28:cb:16:bf:42:da:7c:a4: 06:40:69:89:3d:b0:a4:73:d4:e1:76:ea:0c:47:7a:a9:2c:e8: ee:7c:50:e2:5c:af:fc:01:5c:79:58:af:53:30:1d:5e:00:58: 42:c6:0a:a8:c7:82:cd:23:ef:d7:5a:b3:20:ab:12:66:ff:58: 22:14:4e:68:9e:af:12:76:f5:52:a8:bb:48:2c:1e:7a:e2:69: 03:41:b5:49:69:76:d6:6c:bc:30:a2:ea:5a:f6:f9:78:16:da: f5:e6:b7:64:01:12:92:14:87:4b:46:da:8a:50:7e:ec:07:ec: 6b:c6:20:ba -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjUwNjI2MjAwNjIyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmVlZC1jMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkE4s2Bz5+t4QvgkNZWmrOqqSECVng93AAan3xpGFlTv50fxv+X4kBBMWxIAb XSBWjh3gH8GuiT1QcvaVVP0zJPdfeVEbKcZiuy7dAbjoOhWfuuH1RSGkfcKAK9LE qxkTPUO01lTQGhyvFWZp2SFICkaljWzFN6jDBiVHu8+16y26iONAOVq97jCJy8Bw oB2QGqZYHGXfGUg4+DTBG/NZDstNVqfg9SRy/x3Ra7RUTLY7dfeUA7LADrpGMwR+ ZaETBgI+vmT05W1unvRNkcetBCuP8yEXkctiEvQTycjxpcBrHDD6+BmQr++wbJef 2MxuWYdLlNdM2NNWbRy0ykjmpwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAOqoVyG 6mDUhm9B9+Z0w7zH+G9iMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI4QzEvRjhBRkExNDA5OUUwMTFFQTk2NjUyRjMyQzRGOUFFMDIvOTFGRDI0QkEy M0M1MTFFREE2RDdGMDczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ4p6MA0GCSqGSIb3DQEBCwUAA4IBAQDCGTNHAxuumkTV6Aa8rZ1d rKzg7Jf40fqZcaBEPbi6cyZya2zGjR47IB3NLF56ZtWOclhVt6xZVRSyKl+LlR/H XsJl3JfpHrVXn7e3aC7X7a0P8d2N1OvQt9ZX0Pt239kxu3x1Y0yPPMvYaTUNOInE YV8QeKuw5OxVVYtbuKUuS7VvmvzS4mRVKMsWv0LafKQGQGmJPbCkc9ThduoMR3qp LOjufFDiXK/8AVx5WK9TMB1eAFhCxgqox4LNI+/XWrMgqxJm/1giFE5onq8SdvVS qLtILB564mkDQbVJaXbWbLwwoupa9vl4Ftr15rdkARKSFIdLRtqKUH7sB+xrxiC6 -----END CERTIFICATE-----Generated at Mon Mar 2 06:36:10 2026 by rpki-client