$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5E89A9888CBD11EFBA479615C4F9AE02.roa File: 5E89A9888CBD11EFBA479615C4F9AE02.roa (raw, json) Hash identifier: pGkwox9umZUHoOM38loNX04qmSCRj5ejUz67/mM+dmc= Subject key identifier: 67:1D:24:1D:DE:F3:D4:52:B6:78:E8:91:7B:B9:2E:14:84:FF:1E:1A Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: 0118 Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5E89A9888CBD11EFBA479615C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:42:22 +0000 ROA not before: Tue 01 Jul 2025 07:43:06 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132805 IP address blocks: 103.2.104.0/24 maxlen: 24 103.2.107.0/24 maxlen: 24 223.130.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Jul 1 07:43:06 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a593be-2465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:f0:b6:37:b0:a4:26:8f:1e:6b:e8:38:01: ac:c2:40:78:fc:ef:7d:96:ad:13:8b:7c:dc:ae:ef: b2:9d:23:11:cb:ed:3a:94:d2:89:9c:05:18:b8:ba: f4:af:19:57:c2:5d:76:e7:ad:dc:7d:da:d2:de:df: 4d:9f:2f:3d:14:d8:de:d9:2a:5d:18:31:8a:6f:45: 30:c2:dd:20:f6:28:83:c9:25:bc:86:ed:09:8c:3e: 64:16:6e:00:cb:eb:68:87:d1:2f:e9:b3:dc:74:28: ad:fd:25:74:12:75:dd:ba:8b:78:3c:c1:29:e1:1e: f4:27:98:2f:47:83:fa:43:e9:04:f0:19:55:be:fe: 5e:72:80:f4:78:e8:d8:24:81:d4:04:24:e7:ac:3e: 26:fa:ce:b3:ff:b5:8a:1b:e6:52:64:ff:48:a8:8e: 8f:ce:01:a2:15:14:1e:8a:0e:47:2b:bd:ed:e1:44: 48:26:db:6d:25:5d:8f:aa:29:5c:54:42:95:aa:64: c7:47:03:ba:f6:48:c8:af:0e:60:f9:9b:4b:73:4f: 78:ef:0e:44:27:06:1a:3b:21:cb:ad:cd:67:91:e8: 3e:6f:15:a3:7d:56:27:01:8c:b9:55:ea:18:44:f0: e2:7e:83:46:47:48:fc:15:e2:56:38:0e:7f:95:6f: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1D:24:1D:DE:F3:D4:52:B6:78:E8:91:7B:B9:2E:14:84:FF:1E:1A X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5E89A9888CBD11EFBA479615C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.2.104.0/24 103.2.107.0/24 223.130.0.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:c5:d3:d1:90:6e:a7:62:47:e3:a0:31:15:fd:99:82:a2:15: 5c:d2:3d:09:c8:0c:9a:98:58:5c:eb:f1:2a:68:49:d2:28:86: 64:fb:c3:77:e7:a3:36:ad:94:44:27:ee:e4:32:27:4d:b9:3a: 7b:67:9a:59:3f:8d:a0:0a:00:82:09:f8:1e:ac:f7:92:9b:53: 14:72:96:a1:9a:1e:a9:1c:2a:7e:0b:24:18:dc:09:4e:68:00: dc:e6:95:c3:15:ba:e0:e2:34:42:84:58:7e:6a:b1:91:5c:23: 28:57:ce:3f:89:34:9e:39:e9:0a:32:13:a6:9d:39:64:7f:9c: 00:d3:24:1f:3e:31:af:e2:be:c1:da:aa:94:45:10:0b:5c:8c: 46:71:b4:22:b9:b1:92:01:18:42:55:12:e7:a9:c3:a7:2d:e0: e2:b0:71:0a:e9:3f:38:51:ae:25:2e:5b:11:43:03:1d:40:09: f4:77:d3:9d:06:42:9c:e6:40:c0:1b:85:7c:75:91:b3:2e:87: 8f:32:68:9b:b6:8c:56:a4:64:42:95:ef:37:2f:75:95:9d:53: 34:bb:d2:1e:0d:ea:69:37:86:74:4a:d2:72:b4:db:cc:77:f5: b9:0e:e0:6f:47:f1:c9:c4:30:81:a4:d7:f3:3f:f7:23:80:e5: 82:d4:a2:84 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz QUI5RjRDNDAwHhcNMjUwNzAxMDc0MzA2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTNiZS0yNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtW7wtjewpCaPHmvoOAGswkB4/O99lq0Ti3zcru+ynSMRy+06lNKJnAUYuLr0 rxlXwl12563cfdrS3t9Nny89FNje2SpdGDGKb0Uwwt0g9iiDySW8hu0JjD5kFm4A y+toh9Ev6bPcdCit/SV0EnXduot4PMEp4R70J5gvR4P6Q+kE8BlVvv5ecoD0eOjY JIHUBCTnrD4m+s6z/7WKG+ZSZP9IqI6PzgGiFRQeig5HK73t4URIJtttJV2Pqilc VEKVqmTHRwO69kjIrw5g+ZtLc0947w5EJwYaOyHLrc1nkeg+bxWjfVYnAYy5VeoY RPDifoNGR0j8FeJWOA5/lW8HTwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGcdJB3e 89RStnjokXu5LhSE/x4aMB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURGQUYvOTdCRTkzMEU4Q0JDMTFFRkJGMjIwMDEyQzRGOUFFMDIvNUU4OUE5ODg4 Q0JEMTFFRkJBNDc5NjE1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZwJoAwQAZwJrAwQC34IAMA0GCSqGSIb3DQEBCwUAA4IBAQBOxdPR kG6nYkfjoDEV/ZmCohVc0j0JyAyamFhc6/EqaEnSKIZk+8N356M2rZREJ+7kMidN uTp7Z5pZP42gCgCCCfgerPeSm1MUcpahmh6pHCp+CyQY3AlOaADc5pXDFbrg4jRC hFh+arGRXCMoV84/iTSeOekKMhOmnTlkf5wA0yQfPjGv4r7B2qqURRALXIxGcbQi ubGSARhCVRLnqcOnLeDisHEK6T84Ua4lLlsRQwMdQAn0d9OdBkKc5kDAG4V8dZGz LoePMmibtoxWpGRCle83L3WVnVM0u9IeDeppN4Z0StJytNvMd/W5DuBvR/HJxDCB pNfzP/cjgOWC1KKE -----END CERTIFICATE-----Generated at Mon Mar 2 16:12:32 2026 by rpki-client