$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5553B5FEE90E11EA998F5735C4F9AE02.roa File: 5553B5FEE90E11EA998F5735C4F9AE02.roa (raw, json) Hash identifier: eyAZbbtItdVCD0trW/+j/FNlPCIgtEJrjEuk2yOz4cg= Subject key identifier: 14:13:89:DA:3E:23:2B:01:56:01:1B:0D:17:67:E7:D1:48:41:9A:99 Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 36C5 Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5553B5FEE90E11EA998F5735C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:45:42 +0000 ROA not before: Tue 02 Sep 2025 15:01:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 3356 IP address blocks: 103.230.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14021 (0x36c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 2 15:01:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48956-54cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:40:69:b7:aa:d8:41:af:df:32:46:50:e0:3e: b6:3a:be:44:ad:d7:af:43:01:7b:2f:fa:9f:d2:ee: 19:c1:fa:70:d6:b9:78:54:00:42:7b:0a:da:e2:e1: 10:5c:68:45:39:10:ac:0b:52:99:76:07:93:75:60: fc:b4:81:51:e4:0a:22:76:7d:5c:5e:b3:d4:07:1f: cf:2c:96:4f:ab:07:61:5b:65:16:93:e1:32:0f:d0: 30:43:e7:03:71:16:90:dd:55:a9:80:d5:b1:af:3e: a9:90:61:f4:42:f2:08:bc:bb:b7:0f:74:83:cc:45: 69:b7:91:e2:c6:be:ae:e3:2c:7c:bb:d8:75:40:21: 0e:76:a2:8c:64:5e:5c:08:57:d8:06:74:bf:16:0e: 32:53:ef:d5:da:fe:d6:ec:d8:04:79:d6:8c:38:e9: 91:13:38:53:9b:96:2f:71:3f:22:af:2b:2f:36:2e: 5f:73:77:3f:7b:59:69:5b:a1:af:98:f0:ad:45:90: 4f:cd:03:26:f8:c4:ac:3b:e6:29:05:ac:91:86:f3: c2:f8:16:95:1e:f7:1d:06:dc:08:61:7c:01:03:c8: 41:17:27:1d:5f:ee:3a:88:8c:c7:97:11:09:50:b0: 47:f5:c5:c9:b7:3d:6a:39:8b:98:ef:f8:04:d3:24: 69:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:13:89:DA:3E:23:2B:01:56:01:1B:0D:17:67:E7:D1:48:41:9A:99 X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5553B5FEE90E11EA998F5735C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.230.68.0/23 Signature Algorithm: sha256WithRSAEncryption 16:c9:9e:d8:bd:cb:cf:8b:c4:a9:d2:ca:14:15:7b:bf:ab:1b: 38:fa:72:ff:dd:a5:3a:ec:b4:2a:23:1f:f1:6a:0e:5c:08:95: 3f:02:2e:3f:31:00:1b:73:0d:9c:95:9f:3a:b0:68:58:11:25: 97:74:0c:e1:86:51:a7:27:cd:cd:01:2b:b4:36:03:01:c1:5f: 58:03:7d:5a:2e:c3:44:ca:81:17:0a:c6:a6:00:2b:45:2a:16: de:1b:d3:2e:7d:79:82:c5:bd:e8:6a:30:be:6c:eb:6a:01:e8: c9:2f:63:73:74:9c:96:8a:31:72:8e:77:43:d1:13:23:da:1c: e1:13:e8:7a:ba:30:1b:b9:ee:bf:66:51:17:47:0b:25:1b:66: 99:cb:e0:ac:40:6d:fa:fc:bb:a0:3e:7d:d8:b2:4c:08:b1:15: 04:ac:fc:7b:8e:87:cf:bd:a5:a4:a2:e9:b6:a1:fb:b7:19:53: 21:82:c8:9e:d1:b0:26:65:10:42:f2:de:dc:2c:4f:78:b3:44: 55:9c:aa:ae:c8:ce:6e:57:69:9d:86:4e:e7:f4:ca:c9:67:82: 35:29:6f:08:fd:52:8a:e8:21:be:e7:88:ee:f1:6a:28:5e:ed: c4:17:ee:46:16:b7:19:64:c4:fb:97:06:47:ce:cf:75:e4:f1: fb:d1:c4:46 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjUwOTAyMTUwMTI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODk1Ni01NGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0Bpt6rYQa/fMkZQ4D62Or5ErdevQwF7L/qf0u4Zwfpw1rl4VABCewra4uEQ XGhFORCsC1KZdgeTdWD8tIFR5Aoidn1cXrPUBx/PLJZPqwdhW2UWk+EyD9AwQ+cD cRaQ3VWpgNWxrz6pkGH0QvIIvLu3D3SDzEVpt5Hixr6u4yx8u9h1QCEOdqKMZF5c CFfYBnS/Fg4yU+/V2v7W7NgEedaMOOmREzhTm5YvcT8irysvNi5fc3c/e1lpW6Gv mPCtRZBPzQMm+MSsO+YpBayRhvPC+BaVHvcdBtwIYXwBA8hBFycdX+46iIzHlxEJ ULBH9cXJtz1qOYuY7/gE0yRpxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBQTido+ IysBVgEbDRdn59FIQZqZMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvNTU1M0I1RkVF OTBFMTFFQTk5OEY1NzM1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+ZEMA0GCSqGSIb3DQEBCwUAA4IBAQAWyZ7YvcvPi8Sp0soUFXu/ qxs4+nL/3aU67LQqIx/xag5cCJU/Ai4/MQAbcw2clZ86sGhYESWXdAzhhlGnJ83N ASu0NgMBwV9YA31aLsNEyoEXCsamACtFKhbeG9MufXmCxb3oajC+bOtqAejJL2Nz dJyWijFyjndD0RMj2hzhE+h6ujAbue6/ZlEXRwslG2aZy+CsQG36/LugPn3YskwI sRUErPx7jofPvaWkoum2ofu3GVMhgsie0bAmZRBC8t7cLE94s0RVnKquyM5uV2md hk7n9MrJZ4I1KW8I/VKK6CG+54ju8WooXu3EF+5GFrcZZMT7lwZHzs915PH70cRG -----END CERTIFICATE-----Generated at Mon Mar 2 04:41:20 2026 by rpki-client