$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/A37D1F4AF51A11F08A3A39E6586F56BC.roa File: A37D1F4AF51A11F08A3A39E6586F56BC.roa (raw, json) Hash identifier: jR0WlKY8LzR2LUBl37yUqlZt1qZx888jsAWYo1rjx1o= Subject key identifier: D7:28:DF:7F:3F:65:C5:17:9B:F1:85:46:13:9D:71:D3:D9:4F:7E:ED Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 09D0 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/A37D1F4AF51A11F08A3A39E6586F56BC.roa Signing time: Sun 01 Mar 2026 12:20:01 +0000 ROA not before: Mon 19 Jan 2026 09:38:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61327 IP address blocks: 103.89.144.0/22 maxlen: 22 103.89.144.0/24 maxlen: 24 103.89.145.0/24 maxlen: 24 103.89.146.0/24 maxlen: 24 103.89.147.0/24 maxlen: 32 202.155.188.0/22 maxlen: 22 2400:7ca0::/36 maxlen: 36 2400:7ca0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Jan 19 09:38:41 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a42ef1-40b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:85:5a:f5:44:23:d8:93:50:26:79:59:71: ce:c3:70:63:da:b5:0c:ba:17:34:d1:11:f7:e6:02: eb:d9:57:9e:26:28:4e:45:94:1c:e5:b4:6f:d9:7d: d3:65:8f:db:69:e7:ff:a6:44:e1:b8:a3:ef:4a:67: ef:1a:63:35:e6:19:0a:2f:21:3b:43:3c:fe:7d:95: 6a:55:e0:6d:49:f8:6b:24:38:ff:f6:f4:01:31:d7: 7a:ed:3b:dc:7e:23:70:ce:13:c1:51:9e:07:2c:a7: cd:a6:8b:e2:69:7f:17:97:6f:59:5c:9a:b2:f6:b8: 41:b4:02:73:f1:2a:91:11:49:a7:65:d6:2e:18:9b: 14:38:1b:4c:0e:d5:2e:ea:ff:33:17:26:82:17:2e: d9:51:c5:f8:1f:82:22:0a:a7:18:a7:b2:ca:c7:2f: 29:f7:c3:9f:20:a6:39:e7:54:45:bf:b0:38:27:a9: ad:f8:15:ed:aa:ee:9e:da:df:aa:3e:29:cd:64:78: ca:ea:1f:e7:95:54:6b:28:2d:28:41:3a:47:96:32: 16:59:22:13:26:b0:7d:ea:c0:cb:d5:e1:d9:52:c4: bb:41:25:6d:19:33:81:80:ba:81:ff:c6:ef:17:51: 5d:27:0d:f6:49:45:43:15:db:2f:fc:b3:3c:3d:59: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:28:DF:7F:3F:65:C5:17:9B:F1:85:46:13:9D:71:D3:D9:4F:7E:ED X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/A37D1F4AF51A11F08A3A39E6586F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.89.144.0/22 202.155.188.0/22 IPv6: 2400:7ca0::/35 Signature Algorithm: sha256WithRSAEncryption a3:47:6e:a2:60:a2:d9:1c:15:c9:0f:a4:e8:2f:6e:4c:fc:0a: 5a:ce:9e:b7:8e:d3:bc:4e:da:45:c4:9d:f1:3b:67:e4:e6:4d: c8:17:7a:06:1a:58:12:45:ab:c8:e1:b0:70:19:cd:83:7c:dc: 1a:c8:9a:28:b9:93:9f:ab:40:bf:2e:b0:2f:96:ec:48:c3:36: 78:1e:e8:8d:9a:dd:7e:23:d4:59:34:a4:4c:cb:93:fc:b3:e0: ff:e8:ef:4e:d1:52:34:c6:89:49:58:72:78:f8:fa:4a:4a:04: c5:82:4d:92:97:47:53:8e:26:fd:54:e6:4f:ff:37:0e:e2:e9: e8:91:0b:9c:68:a2:c1:54:bd:58:53:7e:f0:dc:08:98:b8:e2: 76:bd:2b:24:8c:05:1f:dd:06:33:85:5f:36:b7:75:98:a3:e1: 3e:d1:78:f6:a7:ba:2f:d9:81:1f:26:8c:69:7c:fd:ab:a3:9f: 88:2b:b8:72:13:ce:b3:cb:b2:ba:f0:4e:24:3c:b7:84:4b:72: e5:35:d8:39:52:87:55:88:be:d6:63:a2:f7:5d:62:90:c3:8a: 53:28:41:cf:7d:a5:9a:eb:90:81:da:0e:da:17:7c:ea:20:e0: 3c:09:3e:69:de:e8:ed:19:26:56:59:d6:2f:41:ce:6d:4a:00: 2b:27:9d:3b -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjYwMTE5MDkzODQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmVmMS00MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BiFWvVEI9iTUCZ5WXHOw3Bj2rUMuhc00RH35gLr2VeeJihORZQc5bRv2X3T ZY/baef/pkThuKPvSmfvGmM15hkKLyE7Qzz+fZVqVeBtSfhrJDj/9vQBMdd67Tvc fiNwzhPBUZ4HLKfNpoviaX8Xl29ZXJqy9rhBtAJz8SqREUmnZdYuGJsUOBtMDtUu 6v8zFyaCFy7ZUcX4H4IiCqcYp7LKxy8p98OfIKY551RFv7A4J6mt+BXtqu6e2t+q PinNZHjK6h/nlVRrKC0oQTpHljIWWSITJrB96sDL1eHZUsS7QSVtGTOBgLqB/8bv F1FdJw32SUVDFdsv/LM8PVmyywIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFNco338/ ZcUXm/GFRhOdcdPZT37tMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUY1NTQvRUIxQ0JCRTI5RTVCMTFFQUIyNDhGQzUxQzRGOUFFMDIvQTM3RDFGNEFG NTFBMTFGMDhBM0EzOUU2NTg2RjU2QkMucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAS BAIAATAMAwQCZ1mQAwQCypu8MA4EAgACMAgDBgUkAHygADANBgkqhkiG9w0BAQsF AAOCAQEAo0duomCi2RwVyQ+k6C9uTPwKWs6et47TvE7aRcSd8Ttn5OZNyBd6BhpY EkWryOGwcBnNg3zcGsiaKLmTn6tAvy6wL5bsSMM2eB7ojZrdfiPUWTSkTMuT/LPg /+jvTtFSNMaJSVhyePj6SkoExYJNkpdHU44m/VTmT/83DuLp6JELnGiiwVS9WFN+ 8NwImLjidr0rJIwFH90GM4VfNrd1mKPhPtF49qe6L9mBHyaMaXz9q6OfiCu4chPO s8uyuvBOJDy3hEty5TXYOVKHVYi+1mOi911ikMOKUyhBz32lmuuQgdoO2hd86iDg PAk+ad7o7RkmVlnWL0HObUoAKyedOw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:59:49 2026 by rpki-client