$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/9D1CF15E90EE11E8960E8480C4F9AE02.roa File: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (raw, json) Hash identifier: Rxse+ULBkZMwlH2UiISqMUPfmFK125elRz9OmCKvgHc= Subject key identifier: 8F:1A:86:BA:B1:A2:BE:AD:42:D8:04:8F:07:7B:67:2F:A5:93:C9:96 Certificate issuer: /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014 Certificate serial: 1473 Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/9D1CF15E90EE11E8960E8480C4F9AE02.roa Signing time: Thu 28 May 2026 17:20:31 +0000 ROA not before: Thu 28 May 2026 17:20:31 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 135375 IP address blocks: 103.63.190.0/24 maxlen: 24 103.216.48.0/22 maxlen: 22 103.216.48.0/24 maxlen: 24 103.216.49.0/24 maxlen: 24 103.216.50.0/24 maxlen: 24 103.216.51.0/24 maxlen: 24 203.95.196.0/22 maxlen: 22 203.95.196.0/24 maxlen: 24 203.95.197.0/24 maxlen: 24 203.95.198.0/24 maxlen: 24 203.95.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5235 (0x1473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014 Validity Not Before: May 28 17:20:31 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a18795f-3341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1f:87:3d:00:cd:1d:11:5a:9d:83:dc:39:f9: da:d3:28:c7:7a:8a:fb:bf:4c:28:d6:24:f6:ff:ed: 68:bf:2c:29:d2:37:89:19:de:df:c2:14:87:5f:52: dd:d6:01:c9:27:fe:98:db:ed:9d:16:5b:4e:15:e8: b4:c2:1f:da:f7:16:40:db:80:48:b7:fb:2d:f5:b3: bd:69:0b:0c:b5:05:02:57:27:96:c2:61:91:21:37: da:7f:94:a6:78:fc:19:39:be:e8:90:84:a2:25:9e: b7:39:d7:38:66:ab:31:08:2e:7e:ed:f0:04:2c:c6: 44:27:87:7a:1e:8e:68:5f:9c:41:65:00:50:35:26: 53:dc:c7:3d:ef:f7:aa:c4:77:1d:ca:32:69:32:5e: 68:16:8d:c5:47:9b:99:b9:6f:cb:85:65:8a:3e:cd: 18:8d:98:ab:96:86:c3:2c:89:83:c5:db:f3:fb:32: 66:52:d1:d6:99:af:f8:66:0d:03:7d:b2:62:b4:1a: 66:c7:0b:77:43:32:9c:2b:58:93:46:2c:a5:64:0d: 0b:03:8a:27:b3:08:fa:0c:b0:e3:9b:b5:c5:3c:89: 02:09:92:4e:dc:c2:e5:99:5e:36:b3:1b:35:cb:1e: 41:66:6b:d0:e9:f8:fd:79:22:ed:2e:d6:b0:ba:b1: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1A:86:BA:B1:A2:BE:AD:42:D8:04:8F:07:7B:67:2F:A5:93:C9:96 X509v3 Authority Key Identifier: keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/9D1CF15E90EE11E8960E8480C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.63.190.0/24 103.216.48.0/22 203.95.196.0/22 Signature Algorithm: sha256WithRSAEncryption 91:fa:eb:60:42:b4:8f:80:c4:35:5b:86:72:60:e9:49:8c:75: 7c:23:95:fd:0c:26:b4:4d:ff:9c:32:df:89:3b:c9:f1:f0:00: e7:99:36:bf:c5:88:e1:10:96:f9:08:67:0a:ad:81:bd:f4:6c: b6:b0:cf:c7:f2:fd:ce:68:17:f8:5a:7b:65:e6:2c:3a:09:da: 6b:e7:12:0d:7a:ad:79:39:48:d4:d2:c9:8b:20:97:9e:9e:da: 9c:49:f1:78:f6:5c:3f:90:de:74:85:d1:c8:52:95:7c:da:aa: fd:dc:e5:01:9a:fb:9f:cf:2d:2f:4c:29:f5:3d:a1:fc:5e:c9: 4c:9b:2a:97:41:70:af:ba:ac:91:af:2f:0d:b8:c4:64:cb:c8: c3:16:6e:6a:83:4b:9d:6e:67:41:45:e3:c2:ac:6b:1a:9d:69: 48:8d:5c:ec:a8:df:4e:cf:df:fe:9f:5d:70:46:4e:8e:41:df: 95:a5:93:a1:8f:69:88:39:34:20:35:4f:dd:05:e3:16:19:cc: 65:3a:f5:68:1b:8c:77:ef:53:ec:48:09:10:3e:da:fc:88:86: e8:7b:d9:d1:ec:62:b0:c4:ee:42:97:cd:66:74:8c:81:ec:32: 93:da:37:74:89:21:8e:11:8c:97:44:48:12:b5:bd:c6:17:93: 11:67:76:87 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICFHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzkxMTAvBgNVBAUTKEExNDlFN0ZENEQ3OTA2RkMxQTYzNDEyOTg2NTVEQTgx ODVGMjkwMTQwHhcNMjYwNTI4MTcyMDMxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE4Nzk1Zi0zMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApx+HPQDNHRFanYPcOfna0yjHeor7v0wo1iT2/+1ovywp0jeJGd7fwhSHX1Ld 1gHJJ/6Y2+2dFltOFei0wh/a9xZA24BIt/st9bO9aQsMtQUCVyeWwmGRITfaf5Sm ePwZOb7okISiJZ63Odc4ZqsxCC5+7fAELMZEJ4d6Ho5oX5xBZQBQNSZT3Mc97/eq xHcdyjJpMl5oFo3FR5uZuW/LhWWKPs0YjZirlobDLImDxdvz+zJmUtHWma/4Zg0D fbJitBpmxwt3QzKcK1iTRiylZA0LA4onswj6DLDjm7XFPIkCCZJO3MLlmV42sxs1 yx5BZmvQ6fj9eSLtLtawurGDMQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFI8ahrqx or6tQtgEjwd7Zy+lk8mWMB8GA1UdIwQYMBaAFKFJ5/1NeQb8GmNBKYZV2oGF8pAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzOS9BRUYwNjhCODkw RUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2d2FZMEVwaGxYYWdZWHlr QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Vbm5fVTE1QnZ3YVkwRXBobFhhZ1lYeWtCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY2MzkvQUVGMDY4Qjg5MEVDMTFFODgzQzNENDdCQzRGOUFFMDIvOUQxQ0YxNUU5 MEVFMTFFODk2MEU4NDgwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZz++AwQCZ9gwAwQCy1/EMA0GCSqGSIb3DQEBCwUAA4IBAQCR+utg QrSPgMQ1W4ZyYOlJjHV8I5X9DCa0Tf+cMt+JO8nx8ADnmTa/xYjhEJb5CGcKrYG9 9Gy2sM/H8v3OaBf4Wntl5iw6Cdpr5xINeq15OUjU0smLIJeentqcSfF49lw/kN50 hdHIUpV82qr93OUBmvufzy0vTCn1PaH8XslMmyqXQXCvuqyRry8NuMRky8jDFm5q g0udbmdBRePCrGsanWlIjVzsqN9Oz9/+n11wRk6OQd+VpZOhj2mIOTQgNU/dBeMW GcxlOvVoG4x371PsSAkQPtr8iIboe9nR7GKwxO5Cl81mdIyB7DKT2jd0iSGOEYyX REgStb3GF5MRZ3aH -----END CERTIFICATE-----Generated at Sat Jun 13 14:43:11 2026 by rpki-client