$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa File: 26F1B59437A511ECB73C9852C4F9AE02.roa (raw, json) Hash identifier: waHlPrSIXU1DTG8JgX28cOXJ6bVasMgkvdeHgZb1AOY= Subject key identifier: 31:48:2F:E9:BC:BA:BE:CE:8B:F7:E0:FA:45:38:9B:00:6B:07:DD:4D Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 05FA Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:52:58 +0000 ROA not before: Thu 03 Jul 2025 00:03:23 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142424 IP address blocks: 103.168.38.0/23 maxlen: 23 103.168.38.0/24 maxlen: 24 103.168.39.0/24 maxlen: 24 2001:df6:ca80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1530 (0x5fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Jul 3 00:03:23 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a40c7a-3576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:89:46:a7:69:01:ca:a9:66:d3:9e:55:2c: d7:e5:63:e1:7c:f2:e7:3f:f1:9e:d3:ce:13:31:90: 9e:3c:7a:56:8d:b7:ef:fa:84:40:c0:a9:4e:8a:9d: 45:c6:af:27:8a:e5:84:e1:b6:34:87:8c:ee:d9:db: d2:68:ee:84:2e:95:e7:5e:36:c7:4f:2a:ba:b7:25: 3f:8a:17:0c:44:04:41:d9:f5:92:af:1c:44:05:ba: db:28:77:78:88:95:83:de:4b:04:c5:18:57:64:42: 4a:4f:c7:a1:23:20:34:ff:13:31:94:6a:4d:82:de: 8f:dc:5a:50:c8:da:13:43:5b:83:9f:48:ef:9e:65: 73:b7:cb:d8:78:3a:f4:c9:6a:29:a7:1d:87:2d:16: 21:3b:5c:63:25:93:96:3c:4d:93:f0:f3:b5:e1:30: d7:e4:67:8b:a5:d5:d2:4c:ca:df:51:7b:56:7f:77: 67:1c:f8:e3:04:cc:51:e4:88:88:c5:f5:2e:8e:36: 10:03:2c:f8:b6:12:17:76:01:14:3b:81:56:8e:57: 0f:7a:14:62:4f:5f:d0:4f:f7:ed:3b:04:93:d0:cf: c1:82:8a:65:53:73:58:99:31:ad:c8:1d:a4:a6:17: 24:39:b6:ba:18:53:e1:bb:4e:8b:93:8f:4c:0e:0e: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:48:2F:E9:BC:BA:BE:CE:8B:F7:E0:FA:45:38:9B:00:6B:07:DD:4D X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.168.38.0/23 IPv6: 2001:df6:ca80::/48 Signature Algorithm: sha256WithRSAEncryption b9:16:21:87:73:a5:30:e7:23:7f:92:92:79:55:e7:0f:00:bf: 03:8c:38:44:62:29:1a:49:d9:b9:8d:f5:57:4b:b8:6c:ee:42: 9e:8c:08:50:54:4c:f6:41:04:98:a4:35:60:18:45:7e:ae:9f: 14:be:4c:b9:21:61:15:18:c7:de:fe:56:f4:a9:33:42:9c:21: 57:21:12:08:2f:59:53:c6:d8:17:52:ea:cd:3a:82:5f:dd:ae: 08:e6:2d:1f:0d:2d:cb:1e:9c:98:bb:18:1d:96:f3:f4:03:51: db:30:ba:26:50:49:6a:ff:63:83:22:cc:14:9e:b7:63:7f:dd: 4a:dd:a8:7a:5e:0f:41:99:96:2b:33:c5:fe:09:7e:7f:7a:90: e4:b5:56:14:65:74:3e:ea:82:b7:5c:2c:49:1b:c0:af:3b:f7: 1a:3b:e1:4d:7c:e1:c4:f6:5c:58:83:22:63:46:bd:e2:50:b2: 97:8e:34:13:28:e8:8c:30:cc:cb:44:15:17:cc:fe:a6:4a:14: 5c:45:89:79:e2:bf:b0:c0:d5:d4:09:10:34:13:8d:c1:cc:50: 08:09:fd:54:a8:89:33:6a:e9:60:3f:3b:01:61:2a:3e:61:8c: ec:52:a4:7d:6b:57:01:8e:fe:2a:06:48:e2:aa:89:b5:47:7d: 46:8e:08:49 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUwNzAzMDAwMzIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGM3YS0zNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzuJRqdpAcqpZtOeVSzX5WPhfPLnP/Ge084TMZCePHpWjbfv+oRAwKlOip1F xq8niuWE4bY0h4zu2dvSaO6ELpXnXjbHTyq6tyU/ihcMRARB2fWSrxxEBbrbKHd4 iJWD3ksExRhXZEJKT8ehIyA0/xMxlGpNgt6P3FpQyNoTQ1uDn0jvnmVzt8vYeDr0 yWoppx2HLRYhO1xjJZOWPE2T8PO14TDX5GeLpdXSTMrfUXtWf3dnHPjjBMxR5IiI xfUujjYQAyz4thIXdgEUO4FWjlcPehRiT1/QT/ftOwST0M/BgoplU3NYmTGtyB2k phckOba6GFPhu06Lk49MDg4wuQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDFIL+m8 ur7Oi/fg+kU4mwBrB91NMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQwNDIvRUZDOThERTZFNTM2MTFFQjk5MjY1NTZCQzRGOUFFMDIvMjZGMUI1OTQz N0E1MTFFQ0I3M0M5ODUyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6gmMA8EAgACMAkDBwAgAQ32yoAwDQYJKoZIhvcNAQELBQADggEB ALkWIYdzpTDnI3+SknlV5w8AvwOMOERiKRpJ2bmN9VdLuGzuQp6MCFBUTPZBBJik NWAYRX6unxS+TLkhYRUYx97+VvSpM0KcIVchEggvWVPG2BdS6s06gl/drgjmLR8N LcsenJi7GB2W8/QDUdswuiZQSWr/Y4MizBSet2N/3UrdqHpeD0GZliszxf4Jfn96 kOS1VhRldD7qgrdcLEkbwK879xo74U184cT2XFiDImNGveJQspeONBMo6IwwzMtE FRfM/qZKFFxFiXniv7DA1dQJEDQTjcHMUAgJ/VSoiTNq6WA/OwFhKj5hjOxSpH1r VwGO/ioGSOKqibVHfUaOCEk= -----END CERTIFICATE-----Generated at Mon Mar 2 12:41:13 2026 by rpki-client