$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/98A0F61840AD11F0BB332714C4F9AE02.roa File: 98A0F61840AD11F0BB332714C4F9AE02.roa (raw, json) Hash identifier: IS1j4fiLKS57qrKHF7wS3bUANSIBQvPd5t8keIKkTrs= Subject key identifier: 9D:B6:03:C1:F0:5C:35:E0:00:BF:83:B8:A4:1D:7F:43:6F:1B:70:0C Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 120A Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/98A0F61840AD11F0BB332714C4F9AE02.roa Signing time: Thu 02 Apr 2026 17:22:01 +0000 ROA not before: Thu 02 Apr 2026 17:22:01 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138640 IP address blocks: 103.86.195.0/24 maxlen: 24 220.152.114.0/24 maxlen: 24 2400:c640:80::/48 maxlen: 48 2400:c640:81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4618 (0x120a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Apr 2 17:22:01 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cea5b9-26c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:1c:45:3e:bb:20:d1:c2:9f:28:9d:b6:1d: fc:ce:b1:1e:96:e3:5d:6c:76:8f:e1:f2:e1:3d:a1: 04:70:8e:3b:70:3a:c3:17:4d:c1:80:e1:78:c3:c7: 0c:7e:d8:ac:b7:5b:3c:41:1c:ad:51:c6:47:21:96: 30:9f:74:93:69:f9:99:e9:66:e9:0c:16:25:41:31: 5b:9d:8f:c4:2b:36:96:57:7b:4b:a8:b8:10:77:1a: 38:a5:ef:2b:d7:7a:5e:03:e8:86:95:0f:bf:bf:07: 71:ca:29:77:04:9c:27:11:90:97:89:cf:89:10:4c: ee:cf:31:d0:25:42:32:1a:f6:9b:f4:3a:3e:96:4c: 9c:ec:00:18:9c:d9:42:71:14:fc:59:aa:a7:8a:60: 0c:92:9e:81:db:c0:41:33:a0:d3:b9:e0:88:5c:66: 86:2c:5e:50:48:f4:76:18:f4:c7:07:6c:e2:ba:15: f9:fe:88:49:27:bc:9b:35:0a:75:39:44:fc:5d:d9: d8:ec:51:af:7e:cd:25:89:d2:81:b2:9c:0d:89:92: 0b:db:19:63:69:da:9f:4f:6a:2e:1c:cd:a4:85:3f: 67:5a:99:70:37:10:66:b8:69:c1:00:34:74:78:04: ca:dc:7d:fb:b0:1c:fa:6e:83:b0:08:0e:31:11:71: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B6:03:C1:F0:5C:35:E0:00:BF:83:B8:A4:1D:7F:43:6F:1B:70:0C X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/98A0F61840AD11F0BB332714C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.195.0/24 220.152.114.0/24 IPv6: 2400:c640:80::/47 Signature Algorithm: sha256WithRSAEncryption 6a:0b:14:45:02:ad:5a:c7:3c:03:05:40:44:48:12:99:03:e4: 8f:df:05:ab:2b:c1:e4:37:08:f4:c7:44:fc:e2:96:9f:28:56: c0:b2:2f:8f:15:74:77:cf:08:80:a5:0a:3c:23:19:0d:2e:5c: f6:90:61:d9:e2:d0:7f:2a:2d:92:2a:0c:57:53:ac:d1:91:78: 2b:20:26:90:db:d3:5a:b1:42:4c:4c:5b:8a:71:25:a4:90:0a: 44:27:93:c6:d7:e5:ce:02:c1:fa:82:ac:89:31:d8:4d:51:a6: 3f:9a:8b:6c:ec:02:bb:2e:06:9a:55:91:48:59:3a:d5:16:d6: f4:ea:31:f6:c6:e8:6f:3a:c8:5a:37:9a:93:23:f9:a3:61:99: dc:08:71:79:1e:5d:da:6b:f2:51:e6:16:f4:50:24:ee:68:0b: 0f:25:fe:fa:a3:1d:3a:85:94:2c:ef:be:13:fd:e6:4e:15:44: 0f:2a:63:06:be:ce:9d:f9:f6:1e:e4:b9:95:cf:15:0c:f0:4b: f7:a0:d6:9d:40:84:52:8c:6e:e1:b7:f8:77:41:4d:81:8a:51: 95:65:9c:7b:55:1e:bb:3f:8d:6a:5d:e1:98:5f:79:52:48:3a: b7:00:61:7c:07:14:d2:0f:45:54:bb:55:fa:0d:58:1e:11:52: d0:92:cf:f3 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICEgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwNDAyMTcyMjAxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlYTViOS0yNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntQcRT67INHCnyidth38zrEeluNdbHaP4fLhPaEEcI47cDrDF03BgOF4w8cM ftist1s8QRytUcZHIZYwn3STafmZ6WbpDBYlQTFbnY/EKzaWV3tLqLgQdxo4pe8r 13peA+iGlQ+/vwdxyil3BJwnEZCXic+JEEzuzzHQJUIyGvab9Do+lkyc7AAYnNlC cRT8WaqnimAMkp6B28BBM6DTueCIXGaGLF5QSPR2GPTHB2ziuhX5/ohJJ7ybNQp1 OUT8XdnY7FGvfs0lidKBspwNiZIL2xljadqfT2ouHM2khT9nWplwNxBmuGnBADR0 eATK3H37sBz6boOwCA4xEXGzQwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFJ22A8Hw XDXgAL+DuKQdf0NvG3AMMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvOThBMEY2MTg0 MEFEMTFGMEJCMzMyNzE0QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ1bDAwQA3JhyMA8EAgACMAkDBwEkAMZAAIAwDQYJKoZIhvcNAQEL BQADggEBAGoLFEUCrVrHPAMFQERIEpkD5I/fBasrweQ3CPTHRPzilp8oVsCyL48V dHfPCIClCjwjGQ0uXPaQYdni0H8qLZIqDFdTrNGReCsgJpDb01qxQkxMW4pxJaSQ CkQnk8bX5c4CwfqCrIkx2E1Rpj+ai2zsArsuBppVkUhZOtUW1vTqMfbG6G86yFo3 mpMj+aNhmdwIcXkeXdpr8lHmFvRQJO5oCw8l/vqjHTqFlCzvvhP95k4VRA8qYwa+ zp359h7kuZXPFQzwS/eg1p1AhFKMbuG3+HdBTYGKUZVlnHtVHrs/jWpd4ZhfeVJI OrcAYXwHFNIPRVS7VfoNWB4RUtCSz/M= -----END CERTIFICATE-----Generated at Fri Apr 17 14:26:25 2026 by rpki-client