$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/D1E8FCF6A87111EF96B74932C4F9AE02.roa File: D1E8FCF6A87111EF96B74932C4F9AE02.roa (raw, json) Hash identifier: Wje7b0TIX74OOVmbF1Qlf27pCsIdrJxMhiH1wvLQ9Gg= Subject key identifier: 65:78:3A:90:90:97:34:2E:30:A2:9C:D5:E3:61:7E:94:3E:5A:E9:3F Certificate issuer: /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Certificate serial: 010C Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/D1E8FCF6A87111EF96B74932C4F9AE02.roa Signing time: Fri 27 Mar 2026 05:45:29 +0000 ROA not before: Fri 27 Mar 2026 05:45:29 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 140097 IP address blocks: 103.148.126.0/24 maxlen: 24 103.164.82.0/24 maxlen: 24 2001:df2:d480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98D7, serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Validity Not Before: Mar 27 05:45:29 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c61979-d865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:c3:a5:a4:00:ec:a8:85:89:ce:34:0e:05: 8f:8c:48:66:55:aa:38:74:2e:fa:5b:de:13:1c:98: 3f:86:9e:44:e2:4f:24:4d:c6:64:55:e1:32:d7:dd: 4a:8a:c2:58:63:38:de:40:8b:3f:82:d2:21:f5:13: a8:d6:83:22:81:d3:f1:aa:55:aa:47:cd:7a:d7:f9: 65:89:48:54:1f:78:a9:95:96:71:d3:e6:c0:73:02: e1:de:39:73:ac:65:71:76:c0:2b:3b:a1:fa:5d:92: 05:41:c1:e6:f2:d0:77:6c:70:8d:5e:32:91:aa:6e: 0f:39:2a:cf:74:86:9f:29:3e:13:0a:8b:32:fd:d2: ce:bb:8d:cd:f9:ba:89:e1:9a:23:c5:ac:90:6c:f1: 80:b1:3c:9a:0c:8a:8d:19:96:d5:74:63:93:ff:1b: a6:50:b2:57:94:6f:34:1e:30:78:02:ce:e4:f3:60: 6a:5f:aa:de:78:9c:3c:48:a4:62:c5:21:5a:50:3c: d6:55:06:cb:0f:a7:12:9d:a0:fd:16:b2:6e:08:8d: 9a:43:4f:f3:8d:1f:1b:1c:64:4a:fd:06:0f:f5:e7: 38:95:bf:f2:f9:3e:b2:3d:65:24:70:37:09:40:4d: b7:33:22:6f:2e:db:dd:f3:f3:2b:c3:fb:d1:78:6a: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:78:3A:90:90:97:34:2E:30:A2:9C:D5:E3:61:7E:94:3E:5A:E9:3F X509v3 Authority Key Identifier: keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/D1E8FCF6A87111EF96B74932C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.148.126.0/24 103.164.82.0/24 IPv6: 2001:df2:d480::/48 Signature Algorithm: sha256WithRSAEncryption 9b:5d:2f:b6:a0:92:ce:78:18:7d:a5:a9:9e:96:31:0c:26:e5: 7a:d0:00:36:09:57:3f:f4:64:88:85:91:57:18:2c:95:e1:c6: d3:63:75:56:84:f9:db:31:59:23:e2:22:f0:be:9e:97:9b:5f: 40:ac:db:df:aa:1f:33:b0:1b:de:df:96:27:d9:0a:25:f1:5a: 52:23:47:68:2c:94:fc:c8:f8:17:d8:50:04:0a:22:df:b2:2d: 69:a3:95:46:40:9a:b5:78:4c:59:dc:03:33:cc:69:cd:dd:0b: eb:ce:2c:c3:7a:c9:03:98:7e:da:6b:53:7c:5f:e9:30:44:d0: 6f:b4:11:75:39:06:26:f0:d6:ca:6d:57:00:16:1b:6f:73:ad: 9d:7f:20:2f:c0:db:fe:e7:2b:71:c2:47:3c:db:d2:82:6f:db: 22:a7:92:09:63:9d:1d:c3:e9:e9:4a:ea:f2:95:fb:95:c4:e7: ea:25:1a:5a:d2:0d:47:3b:d1:b8:4a:0f:d2:55:8e:6c:dd:f7: 52:5a:3a:a1:86:5c:d8:72:3b:3d:77:03:33:f4:bb:01:d4:ac: 49:7e:91:ba:00:a7:d8:4f:c3:8f:6e:68:dc:1b:72:89:27:fd: 48:07:5d:eb:db:41:5a:6f:45:e9:7a:0a:11:6e:d8:72:6f:e8: 15:a0:20:e0 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4RDcxMTAvBgNVBAUTKDI2MjhFNkE4OTRDREZDOTM3M0YzREI5Q0ZDRkJDNTE0 M0ZGQTJBM0UwHhcNMjYwMzI3MDU0NTI5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM2MTk3OS1kODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBHDpaQA7KiFic40DgWPjEhmVao4dC76W94THJg/hp5E4k8kTcZkVeEy191K isJYYzjeQIs/gtIh9ROo1oMigdPxqlWqR8161/lliUhUH3iplZZx0+bAcwLh3jlz rGVxdsArO6H6XZIFQcHm8tB3bHCNXjKRqm4POSrPdIafKT4TCosy/dLOu43N+bqJ 4ZojxayQbPGAsTyaDIqNGZbVdGOT/xumULJXlG80HjB4As7k82BqX6reeJw8SKRi xSFaUDzWVQbLD6cSnaD9FrJuCI2aQ0/zjR8bHGRK/QYP9ec4lb/y+T6yPWUkcDcJ QE23MyJvLtvd8/Mrw/vReGpu1QIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFGV4OpCQ lzQuMKKc1eNhfpQ+Wuk/MB8GA1UdIwQYMBaAFCYo5qiUzfyTc/PbnPz7xRQ/+io+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThENy84NjIxQUU2MkE4 NzExMUVGQUVBMUM4MzFDNEY5QUUwMi9KaWptcUpUTl9KTno4OXVjX1B2RkZEXzZL ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ppam1xSlROX0pOejg5dWNfUHZGRkRfNktqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjk4RDcvODYyMUFFNjJBODcxMTFFRkFFQTFDODMxQzRGOUFFMDIvRDFFOEZDRjZB ODcxMTFFRjk2Qjc0OTMyQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ5R+AwQAZ6RSMA8EAgACMAkDBwAgAQ3y1IAwDQYJKoZIhvcNAQEL BQADggEBAJtdL7agks54GH2lqZ6WMQwm5XrQADYJVz/0ZIiFkVcYLJXhxtNjdVaE +dsxWSPiIvC+npebX0Cs29+qHzOwG97flifZCiXxWlIjR2gslPzI+BfYUAQKIt+y LWmjlUZAmrV4TFncAzPMac3dC+vOLMN6yQOYftprU3xf6TBE0G+0EXU5Bibw1spt VwAWG29zrZ1/IC/A2/7nK3HCRzzb0oJv2yKnkgljnR3D6elK6vKV+5XE5+olGlrS DUc70bhKD9JVjmzd91JaOqGGXNhyOz13AzP0uwHUrEl+kboAp9hPw49uaNwbcokn /UgHXevbQVpvRel6ChFu2HJv6BWgIOA= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:04 2026 by rpki-client