$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/993EC4A6053A11EAAC92336CC4F9AE02.roa File: 993EC4A6053A11EAAC92336CC4F9AE02.roa (raw, json) Hash identifier: eigBk5/FH4wHkZy6SPbCYbh6uzU3aFuUATntLzWiF2o= Subject key identifier: E1:E1:AC:40:92:25:A5:54:56:94:9F:C4:EE:06:1F:3D:76:D2:4B:B8 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0CD9 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/993EC4A6053A11EAAC92336CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:41:12 +0000 ROA not before: Tue 16 Sep 2025 18:58:15 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136911 IP address blocks: 103.98.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Sep 16 18:58:15 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45008-e00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:be:06:94:ef:64:74:b9:a9:03:87:36:ba:c5: d9:df:2a:8c:8a:c9:98:65:e5:1e:15:4c:06:34:99: a9:04:01:a0:6b:6c:c7:60:b8:8c:ae:c9:a7:7a:25: f8:94:3d:d6:be:53:30:b2:91:c7:3a:b5:db:3f:5b: 6d:10:fb:da:19:6b:53:6e:a7:d5:c7:46:c0:7f:b7: f7:1c:82:aa:a4:0c:9a:11:b5:dc:45:77:a9:a7:8c: 75:6e:de:77:b6:f1:44:8b:c4:9e:5b:e6:66:5b:67: 7a:57:67:83:44:39:c2:d8:c5:0e:a3:46:c9:67:10: 6e:37:e2:ec:69:8e:3b:b4:86:f4:61:86:23:68:25: 56:be:20:b2:a9:d2:41:bc:a2:75:ab:fb:8e:04:0c: 1f:2a:52:4d:dc:74:e1:a2:f7:e1:46:74:d6:b5:73: 25:9f:37:8a:90:bb:c9:81:b5:3f:91:f5:d5:5c:ce: 62:c2:34:c9:64:70:ae:c3:2b:7d:2b:28:94:8a:46: cc:68:6c:46:69:7d:08:39:d3:3b:12:ca:f4:bf:10: 92:32:3d:a1:89:db:1b:ee:d3:4b:5b:0c:94:3a:4c: 66:b4:db:f0:f2:87:ef:d3:f6:2d:1f:75:09:f7:41: b3:da:51:e0:62:c0:2a:fc:19:16:80:d4:cf:70:63: 2e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E1:AC:40:92:25:A5:54:56:94:9F:C4:EE:06:1F:3D:76:D2:4B:B8 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/993EC4A6053A11EAAC92336CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.98.135.0/24 Signature Algorithm: sha256WithRSAEncryption 27:62:e0:e4:86:19:e5:b1:83:64:e5:8e:71:1e:5b:3f:75:11: 68:1f:77:7e:11:26:c9:9c:b9:ab:fd:35:d3:2b:aa:4c:58:c5: da:b7:63:e8:93:15:33:53:52:c9:99:3e:d8:18:48:c3:27:2c: cb:46:42:05:c5:f6:0f:fc:41:93:a5:03:93:85:9a:e3:b9:21: 4c:fc:e6:c7:1a:30:9b:76:36:fb:68:89:fe:a8:d6:47:db:ea: 53:80:96:ed:2d:82:5d:0b:f5:25:fe:df:99:04:28:e4:52:99: c4:d6:2c:9e:ce:80:0a:6f:ae:28:b4:ac:5f:75:01:aa:3c:71: 4e:c8:13:8d:bb:fe:f2:1c:63:ab:d0:da:42:7c:00:8f:3f:30: 4c:9a:0c:22:92:26:85:bd:2b:74:a5:74:31:f6:58:cb:48:f3: 11:46:c7:7d:11:72:c1:03:4a:7c:5a:5b:1c:e4:83:21:48:f3: 7f:8a:75:22:e7:57:ba:4c:16:59:ae:af:51:d2:a9:1b:47:12: a4:48:80:70:25:d5:c8:c6:9c:62:7e:21:1a:75:88:e3:e6:52: e1:9e:db:f8:9c:56:bc:86:c4:7e:7f:35:d5:90:fb:a0:cb:ed: ba:3c:d4:17:20:6a:83:ea:8f:cc:d3:75:b1:1f:72:f4:fa:45: 42:37:43:17 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjUwOTE2MTg1ODE1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTAwOC1lMDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlb4GlO9kdLmpA4c2usXZ3yqMismYZeUeFUwGNJmpBAGga2zHYLiMrsmneiX4 lD3WvlMwspHHOrXbP1ttEPvaGWtTbqfVx0bAf7f3HIKqpAyaEbXcRXepp4x1bt53 tvFEi8SeW+ZmW2d6V2eDRDnC2MUOo0bJZxBuN+LsaY47tIb0YYYjaCVWviCyqdJB vKJ1q/uOBAwfKlJN3HThovfhRnTWtXMlnzeKkLvJgbU/kfXVXM5iwjTJZHCuwyt9 KyiUikbMaGxGaX0IOdM7Esr0vxCSMj2hidsb7tNLWwyUOkxmtNvw8ofv0/YtH3UJ 90Gz2lHgYsAq/BkWgNTPcGMunQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOHhrECS JaVUVpSfxO4GHz120ku4MB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkU0MEIvREM1RjFBQ0EwNTM5MTFFQUIxNzQyQzZCQzRGOUFFMDIvOTkzRUM0QTYw NTNBMTFFQUFDOTIzMzZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ2KHMA0GCSqGSIb3DQEBCwUAA4IBAQAnYuDkhhnlsYNk5Y5xHls/ dRFoH3d+ESbJnLmr/TXTK6pMWMXat2PokxUzU1LJmT7YGEjDJyzLRkIFxfYP/EGT pQOThZrjuSFM/ObHGjCbdjb7aIn+qNZH2+pTgJbtLYJdC/Ul/t+ZBCjkUpnE1iye zoAKb64otKxfdQGqPHFOyBONu/7yHGOr0NpCfACPPzBMmgwikiaFvSt0pXQx9ljL SPMRRsd9EXLBA0p8Wlsc5IMhSPN/inUi51e6TBZZrq9R0qkbRxKkSIBwJdXIxpxi fiEadYjj5lLhntv4nFa8hsR+fzXVkPugy+26PNQXIGqD6o/M03WxH3L0+kVCN0MX -----END CERTIFICATE-----Generated at Mon Mar 2 21:10:50 2026 by rpki-client