$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa File: CA4C06CA976711EAA651F944C4F9AE02.roa (raw, json) Hash identifier: HjiLuMpEKDFq4BbZHd2t+ZeOPmcjFgJgpkLo6Is6Q70= Subject key identifier: D5:DA:44:CC:61:7C:A3:2D:F1:31:10:A2:C7:BC:C4:76:FC:25:9C:A1 Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Certificate serial: 0A05 Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa Signing time: Wed 08 Apr 2026 20:24:56 +0000 ROA not before: Wed 08 Apr 2026 20:24:56 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138165 IP address blocks: 103.113.1.0/24 maxlen: 24 103.146.39.0/24 maxlen: 24 2407:40c0:2000::/36 maxlen: 36 2407:40c0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2565 (0xa05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Validity Not Before: Apr 8 20:24:56 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69d6b997-38b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:01:25:71:1a:39:75:e0:9f:e7:fe:a1:34:1d: 3e:ba:73:95:a8:42:3b:99:b0:41:41:01:f1:9a:62: 50:3d:2a:9c:4a:96:82:1c:37:ac:13:ae:bb:6f:84: 8a:37:05:cf:3e:84:12:9b:9d:0e:a8:5e:4f:77:95: 37:e2:e1:8e:a2:26:7b:2f:a1:9d:00:1a:9a:ac:b6: 21:2a:66:57:36:fb:de:b1:36:a2:11:e6:b1:20:73: ed:b6:47:de:40:2e:a2:23:27:ae:40:a2:bf:a3:be: 6b:01:12:bc:29:e5:3a:78:dd:1b:8d:f6:cb:d0:41: 57:fd:b4:e5:27:f4:1c:06:e2:22:7f:b4:bc:eb:f7: 2d:9a:ae:9c:17:a2:e3:7a:54:fc:23:bb:d2:1d:81: c3:37:8a:e7:86:26:d7:dd:12:74:c2:21:67:3f:c4: b8:c9:be:81:c7:9d:2d:42:fb:bd:92:13:1c:f8:e7: 30:ef:8a:60:0e:22:33:e6:a5:ad:14:68:61:a9:06: 6c:3f:db:36:df:1d:9b:ea:2d:8f:30:ab:f0:21:19: 83:bd:7b:d3:22:a5:34:fd:09:44:16:75:95:78:0e: 56:4b:32:cf:13:bb:7a:e4:4f:c8:67:4b:77:6f:b7: 48:d0:5d:12:d7:d6:18:ff:a7:25:21:64:db:74:6a: 10:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DA:44:CC:61:7C:A3:2D:F1:31:10:A2:C7:BC:C4:76:FC:25:9C:A1 X509v3 Authority Key Identifier: keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.113.1.0/24 103.146.39.0/24 IPv6: 2407:40c0:2000::/36 2407:40c0:4000::/36 Signature Algorithm: sha256WithRSAEncryption c4:b3:2e:94:77:93:38:79:8c:92:f4:ed:d1:44:6f:95:2f:9b: aa:5a:bf:4d:11:12:99:24:c5:12:cc:fc:6a:b8:99:61:60:a2: fb:24:21:35:1b:f0:73:e9:fc:67:94:2e:7d:c1:27:43:b9:02: 86:42:10:ed:0f:23:45:b3:8f:26:be:27:56:3b:1c:53:f8:69: 91:55:1c:67:92:a1:bd:d9:a5:cb:39:a2:90:16:5e:d8:31:5d: e1:ea:8d:fd:f9:2e:75:83:6f:c5:66:55:3b:9b:b3:b2:0e:a8: a2:a7:c8:12:ce:c6:c7:5b:3c:82:2d:e4:76:44:90:1c:b8:f0: cb:fc:83:67:89:22:6c:0d:ef:0c:66:e0:2b:f3:4f:dd:c7:96: e2:1f:0d:6f:ca:fb:6b:62:2e:e1:b7:54:86:86:21:87:bc:3b: 87:97:fd:16:32:d2:9f:6c:6d:4d:4d:fb:ef:8a:ce:b1:72:8a: 4a:36:06:14:17:62:49:15:98:10:e2:89:ab:90:ec:d1:a5:80: 36:75:fb:0b:6a:11:f9:e1:9e:14:7a:36:b9:97:24:88:bc:61: 06:28:14:4d:cb:94:fe:a9:d0:ab:a8:96:1e:6a:8a:bb:0c:5c: d9:68:5a:81:2f:ac:a6:28:3e:56:18:72:54:63:fe:5f:37:94: 1a:6c:93:77 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICCgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF MjEzMjIzNDkwHhcNMjYwNDA4MjAyNDU2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ2Yjk5Ny0zOGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgElcRo5deCf5/6hNB0+unOVqEI7mbBBQQHxmmJQPSqcSpaCHDesE667b4SK NwXPPoQSm50OqF5Pd5U34uGOoiZ7L6GdABqarLYhKmZXNvvesTaiEeaxIHPttkfe QC6iIyeuQKK/o75rARK8KeU6eN0bjfbL0EFX/bTlJ/QcBuIif7S86/ctmq6cF6Lj elT8I7vSHYHDN4rnhibX3RJ0wiFnP8S4yb6Bx50tQvu9khMc+Ocw74pgDiIz5qWt FGhhqQZsP9s23x2b6i2PMKvwIRmDvXvTIqU0/QlEFnWVeA5WSzLPE7t65E/IZ0t3 b7dI0F0S19YY/6clIWTbdGoQ1wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFNXaRMxh fKMt8TEQose8xHb8JZyhMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3 NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5NjYvM0VGMjI0MDI5NzY2MTFFQTlFQjQ5NTQyQzRGOUFFMDIvQ0E0QzA2Q0E5 NzY3MTFFQUE2NTFGOTQ0QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQAZ3EBAwQAZ5InMBYEAgACMBADBgQkB0DAIAMGBCQHQMBAMA0GCSqG SIb3DQEBCwUAA4IBAQDEsy6Ud5M4eYyS9O3RRG+VL5uqWr9NERKZJMUSzPxquJlh YKL7JCE1G/Bz6fxnlC59wSdDuQKGQhDtDyNFs48mvidWOxxT+GmRVRxnkqG92aXL OaKQFl7YMV3h6o39+S51g2/FZlU7m7OyDqiip8gSzsbHWzyCLeR2RJAcuPDL/INn iSJsDe8MZuAr80/dx5biHw1vyvtrYi7ht1SGhiGHvDuHl/0WMtKfbG1NTfvvis6x copKNgYUF2JJFZgQ4omrkOzRpYA2dfsLahH54Z4Ueja5lySIvGEGKBRNy5T+qdCr qJYeaoq7DFzZaFqBL6ymKD5WGHJUY/5fN5QabJN3 -----END CERTIFICATE-----Generated at Fri Apr 17 12:37:41 2026 by rpki-client