$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/5BA557A6DEB011EDB7B0C04EC4F9AE02.roa File: 5BA557A6DEB011EDB7B0C04EC4F9AE02.roa (raw, json) Hash identifier: uBvCvr/fH3fM04LrLo8yLQnVCBWXatqmkz7SGocGSOc= Subject key identifier: 4C:89:03:57:63:48:52:13:8A:D9:34:BF:96:A5:27:C2:F4:9B:8E:5C Certificate issuer: /CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Certificate serial: 021B Authority key identifier: 09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/5BA557A6DEB011EDB7B0C04EC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:34:36 +0000 ROA not before: Sat 05 Apr 2025 03:38:54 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 150749 IP address blocks: 103.83.238.0/23 maxlen: 23 103.83.238.0/24 maxlen: 24 103.83.239.0/24 maxlen: 24 2001:df1:ef40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93F, serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Validity Not Before: Apr 5 03:38:54 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3ddfc-2cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:3d:ed:4c:99:89:a0:3a:56:a1:2d:15:c4: c3:ba:80:26:3a:56:db:8d:c6:66:38:6a:45:98:36: cd:ae:ff:55:3c:66:70:fe:2a:c2:d7:1c:ae:2e:59: c6:7c:f9:61:10:b2:64:a5:42:86:7c:04:50:53:b6: d3:31:91:04:c6:4f:79:c2:5b:9b:0c:7c:bb:7c:d9: b8:8b:af:d7:5f:dd:a0:2e:5a:6e:aa:17:94:dd:17: 06:a3:28:e9:f8:50:9e:ba:fe:da:77:48:09:5d:0f: 20:a6:0f:0a:bf:9a:dd:7f:92:f8:ee:b0:75:f4:a7: 93:65:69:ee:47:8e:f5:6c:c6:74:78:da:e3:a9:c7: 57:dd:f6:e9:ff:b8:6c:5e:80:2a:20:d1:40:6c:7b: 63:55:a8:f4:66:ed:52:b1:b4:2c:42:25:66:ed:c2: ab:ad:63:d2:46:56:5d:fd:86:e4:3b:f8:56:ec:74: 15:8d:24:06:fb:94:e5:95:86:74:f7:36:ff:e6:76: 69:1e:00:a2:b0:9a:3e:66:fd:25:80:ce:c0:93:ef: 34:ee:86:3b:37:af:ab:38:49:05:70:28:e9:d0:5d: 45:d7:a7:c7:bb:30:17:60:f9:03:32:a9:3a:80:7e: 85:8d:da:d2:1e:d4:75:eb:3b:df:30:2a:5a:4c:d5: 3e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:89:03:57:63:48:52:13:8A:D9:34:BF:96:A5:27:C2:F4:9B:8E:5C X509v3 Authority Key Identifier: keyid:09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/5BA557A6DEB011EDB7B0C04EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.83.238.0/23 IPv6: 2001:df1:ef40::/48 Signature Algorithm: sha256WithRSAEncryption 66:73:48:0e:21:9d:cc:64:8c:19:77:ac:09:44:e1:be:f8:ae: 80:a6:cd:4a:ed:c8:5a:df:bb:64:34:e6:b1:4e:3b:10:32:d2: 6a:e3:d2:7c:85:96:bd:8a:64:4c:42:b3:67:b1:81:8d:1b:36: de:d7:50:c5:a2:d1:af:ed:d0:bd:db:35:bc:6f:ed:87:b5:ce: 1f:49:c5:13:88:34:31:cc:09:ba:49:e3:a8:14:8a:9e:3e:04: d2:97:bb:ad:06:c8:2f:0a:19:73:7d:d3:97:dc:cc:24:67:2e: 95:f8:aa:37:2a:cf:ee:a7:80:ab:91:c3:38:08:83:b3:69:3a: 27:cf:58:16:be:9a:b1:8c:88:49:41:1d:40:e5:3e:cc:e7:e9: 44:18:80:c5:a4:2b:70:3b:96:ff:7d:1c:02:9a:f1:12:1f:a6: ce:47:74:af:db:9f:57:c3:4f:43:f2:92:19:ff:be:86:be:30: 37:10:e7:66:0b:5b:17:51:7d:d3:d9:0e:3b:ac:98:21:c1:b0: 51:59:41:b6:8c:3b:79:b4:d5:14:d1:c3:64:3b:a7:a5:4c:71: 03:c8:10:40:62:47:6e:08:4c:22:94:46:82:64:05:fd:bb:d9: bd:76:c3:a5:67:b6:d1:d5:7f:88:a7:72:05:fb:1b:a5:9c:31: a8:73:35:76 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0YxMTAvBgNVBAUTKDA5NEEwRENEODAyQTA1QkY3NTczRkY3QTZFRTBBN0E5 NzIwNTUwRDEwHhcNMjUwNDA1MDMzODU0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGRmYy0yY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvg97UyZiaA6VqEtFcTDuoAmOlbbjcZmOGpFmDbNrv9VPGZw/irC1xyuLlnG fPlhELJkpUKGfARQU7bTMZEExk95wlubDHy7fNm4i6/XX92gLlpuqheU3RcGoyjp +FCeuv7ad0gJXQ8gpg8Kv5rdf5L47rB19KeTZWnuR471bMZ0eNrjqcdX3fbp/7hs XoAqINFAbHtjVaj0Zu1SsbQsQiVm7cKrrWPSRlZd/YbkO/hW7HQVjSQG+5TllYZ0 9zb/5nZpHgCisJo+Zv0lgM7Ak+807oY7N6+rOEkFcCjp0F1F16fHuzAXYPkDMqk6 gH6FjdrSHtR16zvfMCpaTNU+SwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEyJA1dj SFITitk0v5alJ8L0m45cMB8GA1UdIwQYMBaAFAlKDc2AKgW/dXP/em7gp6lyBVDR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRi82MEE4Rjg4Q0RF QUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJiOTFjXzk2YnVDbnFYSUZV TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVb056WUFxQmI5MWNfOTZidUNucVhJRlVORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM5M0YvNjBBOEY4OENERUFEMTFFRDhBNkRGMTREQzRGOUFFMDIvNUJBNTU3QTZE RUIwMTFFREI3QjBDMDRFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ1PuMA8EAgACMAkDBwAgAQ3x70AwDQYJKoZIhvcNAQELBQADggEB AGZzSA4hncxkjBl3rAlE4b74roCmzUrtyFrfu2Q05rFOOxAy0mrj0nyFlr2KZExC s2exgY0bNt7XUMWi0a/t0L3bNbxv7Ye1zh9JxROINDHMCbpJ46gUip4+BNKXu60G yC8KGXN905fczCRnLpX4qjcqz+6ngKuRwzgIg7NpOifPWBa+mrGMiElBHUDlPszn 6UQYgMWkK3A7lv99HAKa8RIfps5HdK/bn1fDT0Pykhn/voa+MDcQ52YLWxdRfdPZ DjusmCHBsFFZQbaMO3m01RTRw2Q7p6VMcQPIEEBiR24ITCKURoJkBf272b12w6Vn ttHVf4incgX7G6WcMahzNXY= -----END CERTIFICATE-----Generated at Mon Mar 2 14:02:38 2026 by rpki-client