$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/98A0F61840AD11F0BB332714C4F9AE02.roa File: 98A0F61840AD11F0BB332714C4F9AE02.roa (raw, json) Hash identifier: IHS1dAGj9jKnE6X/SA4FOXKPpMTMBUd8S8gYvi2WOxw= Subject key identifier: E7:E5:64:BD:FF:1E:A0:2D:70:6A:9C:02:A3:45:C0:45:CF:58:7B:AB Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 11F0 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/98A0F61840AD11F0BB332714C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:35:50 +0000 ROA not before: Thu 19 Jun 2025 17:27:35 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138640 IP address blocks: 103.86.195.0/24 maxlen: 24 220.152.114.0/24 maxlen: 24 2400:c640:80::/48 maxlen: 48 2400:c640:81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4592 (0x11f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Jun 19 17:27:35 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48706-e27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:fb:bd:93:75:26:0e:d0:05:57:0c:1f:b8: 7a:cb:9d:09:e2:dd:08:65:06:f2:b3:7f:ca:c4:fc: 5c:75:9a:9a:7e:58:5a:c8:0b:a5:73:15:b8:47:7f: 38:02:4c:ee:1f:b8:7d:7b:42:2d:62:4a:9d:3e:8f: 83:18:dc:96:9f:6e:e9:a9:52:04:a0:ea:69:11:2b: 69:0a:ae:bf:f3:11:cc:36:c6:b0:bd:59:c9:66:5f: ea:a3:08:e7:2c:e5:96:eb:8e:e1:08:b9:4a:e7:a5: 3f:ca:41:78:d4:15:0c:ad:c2:2d:35:4e:97:a5:18: 7c:21:5b:de:46:48:dd:9c:eb:37:71:80:3b:b8:51: 72:5a:ac:bb:2e:dd:eb:7d:55:07:d9:57:c8:e5:a9: eb:5f:7a:25:2c:93:e6:7c:3a:71:98:fe:41:77:88: 13:a3:49:ef:b2:56:b0:ba:97:cc:a8:11:bd:6c:61: 52:82:8b:10:c7:e5:82:0e:8c:55:e4:0f:97:56:f5: 26:68:b4:b8:2c:47:90:5f:75:01:41:1d:7a:5e:3e: 2b:ea:6c:f6:65:bf:24:73:7a:fa:17:2b:79:7b:87: 69:81:47:e9:b3:2a:64:2c:a2:4b:29:ea:44:af:e4: ed:66:7a:b3:25:21:f8:42:ba:25:9f:2a:13:fb:7b: 31:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E5:64:BD:FF:1E:A0:2D:70:6A:9C:02:A3:45:C0:45:CF:58:7B:AB X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/98A0F61840AD11F0BB332714C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.195.0/24 220.152.114.0/24 IPv6: 2400:c640:80::/47 Signature Algorithm: sha256WithRSAEncryption 05:2b:af:b2:55:aa:4e:cf:5d:6f:d5:51:de:4f:0b:ac:f4:b7: 81:4e:28:0e:1b:59:4f:31:c2:f8:73:a6:45:8e:fa:e4:31:48: 42:6c:73:76:cd:a7:03:7c:f9:2d:1a:9d:41:bd:12:6f:a8:4a: 95:13:d6:10:de:f9:ba:a2:1f:ed:4a:26:f0:20:2c:62:e6:4c: d5:6e:ac:6f:57:39:6d:1f:b6:63:65:a9:60:0f:42:5a:38:81: b1:9c:2f:d7:f0:c4:e5:69:da:82:b3:35:3a:ff:5e:9c:92:2e: 6a:30:a8:fa:44:5b:26:f6:b8:d6:6c:3f:45:6c:3e:22:49:76: 5a:f6:48:43:65:3a:92:c8:89:fa:f9:0c:3c:90:cf:90:0b:33: 0d:c0:58:d2:c3:0b:ed:be:4e:95:84:31:33:8f:41:e1:32:e3: a4:cc:e2:61:84:b3:d3:60:12:b3:6b:36:be:c2:89:61:d2:3f: 4a:dd:52:2b:9f:70:8c:63:f4:09:83:b1:9a:5b:8c:a1:b3:08: 74:dc:ae:0e:bb:5a:a0:5d:f5:dc:75:dd:09:3c:eb:49:29:8b: ea:5f:ba:ba:ef:26:02:3a:cd:d7:4e:bb:c0:e5:4a:7c:41:14: fb:d6:66:e9:94:2e:e5:8c:6d:4d:2e:2a:86:bf:53:d5:03:bb: 39:6a:49:a0 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICEfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUwNjE5MTcyNzM1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODcwNi1lMjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszP7vZN1Jg7QBVcMH7h6y50J4t0IZQbys3/KxPxcdZqaflhayAulcxW4R384 AkzuH7h9e0ItYkqdPo+DGNyWn27pqVIEoOppEStpCq6/8xHMNsawvVnJZl/qowjn LOWW647hCLlK56U/ykF41BUMrcItNU6XpRh8IVveRkjdnOs3cYA7uFFyWqy7Lt3r fVUH2VfI5anrX3olLJPmfDpxmP5Bd4gTo0nvslawupfMqBG9bGFSgosQx+WCDoxV 5A+XVvUmaLS4LEeQX3UBQR16Xj4r6mz2Zb8kc3r6Fyt5e4dpgUfpsypkLKJLKepE r+TtZnqzJSH4QrolnyoT+3sxKwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFOflZL3/ HqAtcGqcAqNFwEXPWHurMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvOThBMEY2MTg0 MEFEMTFGMEJCMzMyNzE0QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ1bDAwQA3JhyMA8EAgACMAkDBwEkAMZAAIAwDQYJKoZIhvcNAQEL BQADggEBAAUrr7JVqk7PXW/VUd5PC6z0t4FOKA4bWU8xwvhzpkWO+uQxSEJsc3bN pwN8+S0anUG9Em+oSpUT1hDe+bqiH+1KJvAgLGLmTNVurG9XOW0ftmNlqWAPQlo4 gbGcL9fwxOVp2oKzNTr/XpySLmowqPpEWyb2uNZsP0VsPiJJdlr2SENlOpLIifr5 DDyQz5ALMw3AWNLDC+2+TpWEMTOPQeEy46TM4mGEs9NgErNrNr7CiWHSP0rdUiuf cIxj9AmDsZpbjKGzCHTcrg67WqBd9dx13Qk860kpi+pfurrvJgI6zddOu8DlSnxB FPvWZumULuWMbU0uKoa/U9UDuzlqSaA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:21:55 2026 by rpki-client