$ rpki-client -vvvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/624C3E865DB011F0875D570FC4F9AE02.roa File: 624C3E865DB011F0875D570FC4F9AE02.roa (raw, json) Hash identifier: r6/lSPPeYNPk9FU3UQ2MjtUO4AyDFnIoE6b1onElcEM= Subject key identifier: 3A:6A:53:C4:AE:FD:C6:0A:0D:88:CF:8C:77:B8:09:8D:17:6C:83:65 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 0257 Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/624C3E865DB011F0875D570FC4F9AE02.roa Signing time: Thu 05 Nov 2026 03:50:13 +0000 ROA not before: Thu 05 Nov 2026 03:50:13 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 151964 IP address blocks: 103.65.140.0/24 maxlen: 24 2001:df3:940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Nov 5 03:50:13 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6aebfcf5-b1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:45:e1:be:80:28:92:a1:5a:f0:bd:6e:82: 19:6c:66:f9:b3:50:0e:6c:77:3a:36:93:01:c6:5b: 00:96:2d:6a:b6:00:ba:26:4f:9b:84:1a:93:fb:f5: 82:52:6e:36:59:01:91:fd:f5:da:8f:69:b7:90:7c: 52:67:dc:7e:53:b1:f2:8a:2b:90:4c:c5:82:e9:6e: f7:5b:a7:4e:7c:16:25:62:fd:d2:2f:bc:14:97:27: 16:7d:99:03:6e:74:e7:26:67:d1:9a:e8:7e:3e:34: b9:3b:6f:89:12:02:79:70:f9:44:d8:49:78:75:53: 47:99:3d:1e:ed:e4:ed:10:2e:42:44:1e:ee:1f:36: 44:66:7e:d7:2c:16:8a:fe:22:79:2e:d6:c6:7f:04: 9d:b1:81:da:cb:fe:aa:5a:7a:70:5c:f0:30:a8:1e: ba:b6:54:a4:3b:e0:67:33:8d:15:77:c1:ea:be:4f: c7:d3:7f:86:e9:f5:4b:61:fb:7c:7c:16:10:32:92: 34:07:5e:0d:72:9b:32:d5:d1:27:1e:3b:28:ce:81: 6d:39:bb:39:d8:fe:90:fc:8b:0e:56:65:27:62:eb: 36:07:8a:17:ba:84:68:d0:52:c1:8c:c5:8c:2e:3f: 85:a7:03:fa:1a:9b:5d:f0:f1:92:cd:c1:cf:bd:a7: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6A:53:C4:AE:FD:C6:0A:0D:88:CF:8C:77:B8:09:8D:17:6C:83:65 X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/624C3E865DB011F0875D570FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.65.140.0/24 IPv6: 2001:df3:940::/48 Signature Algorithm: sha256WithRSAEncryption 72:7f:e2:e4:cf:a4:70:e0:f7:83:ca:ab:70:40:c5:04:3a:ab: c9:f3:f8:a6:35:f0:38:5d:65:c5:b3:ea:63:e7:62:7d:76:06: b9:b4:7f:83:b6:8e:46:b3:d0:8f:57:98:f6:99:60:32:18:a7: 22:0d:5e:0d:2b:74:f5:4f:27:cb:45:c1:8d:08:3a:5a:7f:80: af:a5:d0:0c:8c:f5:15:62:50:31:7c:02:4a:89:48:6e:d0:73: 54:16:1d:21:ee:53:35:f0:1f:19:6e:17:02:d8:fe:20:08:e8: 32:94:c8:ca:5b:2c:87:a3:09:23:a5:0d:42:c3:b0:84:ba:01: fc:1a:70:8a:51:75:34:e7:d6:93:93:49:36:f5:33:39:f8:90: 1c:f2:65:5f:9f:43:3e:05:fd:d5:b2:a6:ab:cf:49:bf:36:71: 79:40:da:cd:fb:76:0a:87:a4:d8:32:3e:d8:42:ac:8e:fd:98: 37:b8:35:41:6d:bc:fb:cb:2f:e4:9e:70:25:8c:dc:61:fb:1b: 32:f1:ec:d5:fb:55:7c:91:cf:0a:16:35:15:ed:73:93:40:e0: 43:66:30:6b:b3:65:e4:9f:e5:f1:6f:fe:fe:de:6b:40:51:04: 59:49:5d:38:61:b5:56:f7:4b:a0:28:0c:ed:31:77:9c:2d:14: 18:d5:34:c8 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjYxMTA1MDM1MDEzWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWViZmNmNS1iMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtBF4b6AKJKhWvC9boIZbGb5s1AObHc6NpMBxlsAli1qtgC6Jk+bhBqT+/WC Um42WQGR/fXaj2m3kHxSZ9x+U7HyiiuQTMWC6W73W6dOfBYlYv3SL7wUlycWfZkD bnTnJmfRmuh+PjS5O2+JEgJ5cPlE2El4dVNHmT0e7eTtEC5CRB7uHzZEZn7XLBaK /iJ5LtbGfwSdsYHay/6qWnpwXPAwqB66tlSkO+BnM40Vd8Hqvk/H03+G6fVLYft8 fBYQMpI0B14Ncpsy1dEnHjsozoFtObs52P6Q/IsOVmUnYus2B4oXuoRo0FLBjMWM Lj+FpwP6Gptd8PGSzcHPvadVSQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDpqU8Su /cYKDYjPjHe4CY0XbINlMB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk3QTIvQjNERkM4ODQ2RDYyMTFFRUIzMDdDRTE5QzRGOUFFMDIvNjI0QzNFODY1 REIwMTFGMDg3NUQ1NzBGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ0GMMA8EAgACMAkDBwAgAQ3zCUAwDQYJKoZIhvcNAQELBQADggEB AHJ/4uTPpHDg94PKq3BAxQQ6q8nz+KY18DhdZcWz6mPnYn12Brm0f4O2jkaz0I9X mPaZYDIYpyINXg0rdPVPJ8tFwY0IOlp/gK+l0AyM9RViUDF8AkqJSG7Qc1QWHSHu UzXwHxluFwLY/iAI6DKUyMpbLIejCSOlDULDsIS6AfwacIpRdTTn1pOTSTb1Mzn4 kBzyZV+fQz4F/dWypqvPSb82cXlA2s37dgqHpNgyPthCrI79mDe4NUFtvPvLL+Se cCWM3GH7GzLx7NX7VXyRzwoWNRXtc5NA4ENmMGuzZeSf5fFv/v7ea0BRBFlJXThh tVb3S6AoDO0xd5wtFBjVNMg= -----END CERTIFICATE-----Generated at Sun Nov 15 16:21:10 2026 by rpki-client