$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/A04E05E42CE911EC8F99F486C4F9AE02.roa File: A04E05E42CE911EC8F99F486C4F9AE02.roa (raw, json) Hash identifier: lBBrJlFc6lFPUF/puNjL74UgLNgA767qw8yUAFWXy+g= Subject key identifier: 3A:1A:87:2F:AA:50:5A:CB:FF:E0:97:61:25:FE:BA:74:CE:E3:89:DF Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Certificate serial: 1454 Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/A04E05E42CE911EC8F99F486C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:33:04 +0000 ROA not before: Tue 10 Jun 2025 17:18:27 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 137826 IP address blocks: 103.115.23.0/24 maxlen: 24 103.139.194.0/24 maxlen: 24 2001:df5:1b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5204 (0x1454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D15, serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Validity Not Before: Jun 10 17:18:27 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a423f0-d3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:bd:f4:cf:97:c1:41:30:f9:13:60:d9:0f: 6c:e7:af:a6:e0:d0:73:8d:8e:e0:c3:9e:91:2d:33: bb:70:d8:67:d3:9b:2d:39:c8:44:5b:1d:35:5c:3b: 38:2e:5b:53:e1:27:8f:d9:db:85:7c:6a:6b:97:9a: e3:42:17:4e:19:73:26:57:a9:f8:75:45:07:04:17: 07:4d:27:ad:ae:8c:12:50:01:38:5b:1c:3c:bc:46: 5c:72:c3:3e:93:ca:c3:7f:b6:26:28:06:26:34:25: 61:31:e6:50:d3:41:6e:83:e6:2d:e8:c0:e5:4c:5f: d4:63:43:85:3a:fe:04:f7:d6:58:da:d5:bc:4c:d5: 8f:0a:85:3e:68:1d:86:24:25:71:11:f1:af:a9:ab: c0:63:f3:f3:6f:34:bc:c9:51:d8:fd:35:6c:ec:30: 16:fb:0d:d1:d4:a4:fb:8c:a2:6f:e7:9e:1f:61:0d: 03:4b:82:09:ac:f3:39:5a:65:60:32:e4:75:3d:12: a4:27:a1:4f:3c:28:83:13:d8:08:26:c0:24:08:d6: 35:1a:dd:d1:d6:60:60:62:fd:65:0a:0e:07:5a:06: 2f:17:04:64:f6:c5:cd:13:a7:19:d6:6c:d4:b9:f1: 72:82:44:31:36:16:4c:ea:5e:97:f2:f4:84:30:91: 05:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1A:87:2F:AA:50:5A:CB:FF:E0:97:61:25:FE:BA:74:CE:E3:89:DF X509v3 Authority Key Identifier: keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/A04E05E42CE911EC8F99F486C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.23.0/24 103.139.194.0/24 IPv6: 2001:df5:1b00::/48 Signature Algorithm: sha256WithRSAEncryption 17:75:e7:46:40:b8:03:66:9a:ad:ae:82:27:ce:e2:30:8e:63: db:a6:a3:f4:cb:6e:55:30:89:f9:25:b4:a3:f9:67:11:cc:50: 33:4d:68:3f:3d:22:6a:bc:f4:e8:70:21:f0:4d:74:3e:e9:d8: 44:bd:91:03:9e:ea:98:53:93:81:8d:de:da:9e:d0:99:94:42: 96:c9:fc:f4:6d:ba:e8:28:b4:7c:52:44:d6:3e:24:7a:5f:7a: b9:2b:03:9a:66:88:2d:f2:40:07:ba:00:ab:2e:ac:20:d7:d3: e7:29:d5:a4:6a:e4:fd:9e:8b:77:bd:d8:42:55:22:90:9e:9d: e4:3e:54:91:b0:e0:a7:a7:8f:3b:5d:01:7c:51:f4:2f:88:29: 12:63:c9:4f:50:5e:bd:b2:91:17:4c:96:c6:98:de:c8:b2:d7: 2a:e5:32:28:a1:1c:fb:80:d0:73:22:a8:42:45:d9:3e:86:f5: 33:3e:89:00:5f:8a:e2:37:4d:80:a5:e0:07:15:31:b1:49:62: 70:73:9f:7c:6e:ba:84:a2:0a:a7:e2:a4:84:d7:b7:43:e5:9b: 62:32:d1:0f:00:38:cc:e3:b7:25:1c:45:91:c5:2a:a1:8b:43: fa:dd:2b:b5:1f:82:f8:c5:72:9b:ed:0a:05:2d:b8:4c:fa:57: 86:e3:85:d0 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICFFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMTUxMTAvBgNVBAUTKDkzQzRENzREMThGNTJDRUE1ODUyODBCQjMzMTJGMzEw RTEyMEMwRTkwHhcNMjUwNjEwMTcxODI3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjNmMC1kM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5i99M+XwUEw+RNg2Q9s56+m4NBzjY7gw56RLTO7cNhn05stOchEWx01XDs4 LltT4SeP2duFfGprl5rjQhdOGXMmV6n4dUUHBBcHTSetrowSUAE4Wxw8vEZccsM+ k8rDf7YmKAYmNCVhMeZQ00Fug+Yt6MDlTF/UY0OFOv4E99ZY2tW8TNWPCoU+aB2G JCVxEfGvqavAY/PzbzS8yVHY/TVs7DAW+w3R1KT7jKJv554fYQ0DS4IJrPM5WmVg MuR1PRKkJ6FPPCiDE9gIJsAkCNY1Gt3R1mBgYv1lCg4HWgYvFwRk9sXNE6cZ1mzU ufFygkQxNhZM6l6X8vSEMJEF6wIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFDoahy+q UFrL/+CXYSX+unTO44nfMB8GA1UdIwQYMBaAFJPE100Y9SzqWFKAuzMS8xDhIMDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QxNS83QzY4NUE4Mjk1 QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxPcFlVb0M3TXhMekVPRWd3 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4VFhUUmoxTE9wWVVvQzdNeEx6RU9FZ3dPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNEMTUvN0M2ODVBODI5NUI5MTFFOEE2ODhCNjBFQzRGOUFFMDIvQTA0RTA1RTQy Q0U5MTFFQzhGOTlGNDg2QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ3MXAwQAZ4vCMA8EAgACMAkDBwAgAQ31GwAwDQYJKoZIhvcNAQEL BQADggEBABd150ZAuANmmq2ugifO4jCOY9umo/TLblUwifkltKP5ZxHMUDNNaD89 Imq89OhwIfBNdD7p2ES9kQOe6phTk4GN3tqe0JmUQpbJ/PRtuugotHxSRNY+JHpf erkrA5pmiC3yQAe6AKsurCDX0+cp1aRq5P2ei3e92EJVIpCeneQ+VJGw4Kenjztd AXxR9C+IKRJjyU9QXr2ykRdMlsaY3siy1yrlMiihHPuA0HMiqEJF2T6G9TM+iQBf iuI3TYCl4AcVMbFJYnBzn3xuuoSiCqfipITXt0Plm2Iy0Q8AOMzjtyUcRZHFKqGL Q/rdK7UfgvjFcpvtCgUtuEz6V4bjhdA= -----END CERTIFICATE-----Generated at Mon Mar 2 20:15:08 2026 by rpki-client