$ rpki-client -vvvf rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/65C6DD42E15211EC8EEE9668C4F9AE02.roa File: 65C6DD42E15211EC8EEE9668C4F9AE02.roa (raw, json) Hash identifier: 5wXDr1Y4xXPrp5MEX9JiUG+NNP+qZv35l6G9SEzxAOY= Subject key identifier: 08:E0:17:13:FE:B7:74:46:A3:76:17:67:7B:E3:BE:60:6E:6A:B6:1E Certificate issuer: /CN=A91386E8/serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1 Certificate serial: 071F Authority key identifier: 30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/65C6DD42E15211EC8EEE9668C4F9AE02.roa Signing time: Sun 04 Oct 2026 20:32:47 +0000 ROA not before: Sun 04 Oct 2026 20:32:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142124 IP address blocks: 103.166.170.0/23 maxlen: 23 103.166.170.0/24 maxlen: 24 103.166.171.0/24 maxlen: 24 2402:7ba0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 22:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91386E8, serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1 Validity Not Before: Oct 4 20:32:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ac2b7ee-aa99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:95:20:df:94:ba:7d:ad:f1:c8:0f:df:62:83: 35:ef:aa:20:6e:08:be:d7:c0:09:56:e6:93:42:21: 50:7e:c3:a7:51:b8:0d:80:0b:00:06:df:01:6b:f8: 09:a6:77:9c:8c:47:78:2e:45:57:ad:44:fa:6a:b1: c2:16:1e:d3:2d:dc:2c:fb:1e:78:e6:55:4b:37:ae: 19:c6:90:72:b0:ff:58:6a:b1:ba:16:d1:12:57:dd: 18:d7:cf:1d:54:27:17:eb:ff:67:f2:05:91:9e:fd: b8:07:4c:1e:d7:96:91:ad:a5:88:14:0d:1d:ba:f6: 6e:63:07:3b:ea:43:6d:d9:86:8d:ee:b9:9a:b1:b5: 4f:d6:5b:20:b0:53:46:ef:94:78:ce:b1:8f:eb:57: d8:9b:f9:5c:29:01:16:07:86:14:4b:3d:35:bd:33: d1:5c:36:97:37:07:00:82:d8:3c:6a:61:69:f1:7d: 27:d4:e9:3b:e9:58:6c:9d:63:cf:76:5c:09:8b:ca: 2e:2c:8e:6e:c4:87:c3:f8:7e:ba:af:55:94:b5:4d: b9:36:de:6d:83:1a:57:75:1d:38:fd:66:11:9c:8e: 87:ec:f5:85:66:68:17:d3:24:70:2e:9c:a6:fd:91: 25:5e:5c:90:00:06:a0:2b:17:f5:12:2a:c9:83:ee: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E0:17:13:FE:B7:74:46:A3:76:17:67:7B:E3:BE:60:6E:6A:B6:1E X509v3 Authority Key Identifier: keyid:30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/65C6DD42E15211EC8EEE9668C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.166.170.0/23 IPv6: 2402:7ba0::/32 Signature Algorithm: sha256WithRSAEncryption 5c:d0:6d:e3:e6:e2:86:06:03:36:6d:34:0a:d8:f6:30:49:fc: de:87:c9:d9:9b:ae:66:ac:2b:8e:71:c1:04:b5:b4:bd:64:ac: e7:e2:d3:a7:e8:86:2e:58:8f:82:d8:e9:98:0d:66:34:17:71: 47:40:4d:39:aa:df:b5:b4:70:f3:a4:22:d4:e1:f7:60:a8:62: 5f:95:1e:05:25:b2:32:f8:fe:20:31:37:33:f1:3e:76:37:77: 31:99:fc:e9:be:cd:56:fd:83:9f:f4:40:a0:cc:e9:78:04:b9: f7:7d:f9:02:1a:0e:6a:08:51:b7:a0:ba:4a:f9:4b:4d:4d:46: 27:3a:41:dd:0a:79:8b:29:39:2b:3d:8f:c0:a6:ed:f5:7c:e4: 68:31:0c:35:37:db:c2:5f:7d:8d:cd:3b:2f:09:84:d4:13:73: ae:1d:4f:b7:1c:4f:3b:49:40:1e:55:63:3a:ee:99:69:8b:f1: 2d:b5:f5:fa:da:df:47:e4:b7:e8:34:ea:4d:31:d1:01:1c:8e: a5:93:72:f6:8f:c4:a3:4f:d2:40:96:ed:e0:b5:61:47:36:d9: db:8e:a0:1c:f1:aa:ed:5b:37:79:6f:df:5c:5f:74:88:c0:b0: 52:c0:a0:1a:21:eb:cf:03:2a:69:85:fa:c1:df:57:c3:21:cb: 71:3e:15:84 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg2RTgxMTAvBgNVBAUTKDMwRTIzNjFDRERBNUVCQTcwNUYzQTZCMkZCRUJFNURC N0RBRjEwRjEwHhcNMjYxMDA0MjAzMjQ3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyYjdlZS1hYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopUg35S6fa3xyA/fYoM176ogbgi+18AJVuaTQiFQfsOnUbgNgAsABt8Ba/gJ pnecjEd4LkVXrUT6arHCFh7TLdws+x545lVLN64ZxpBysP9YarG6FtESV90Y188d VCcX6/9n8gWRnv24B0we15aRraWIFA0duvZuYwc76kNt2YaN7rmasbVP1lsgsFNG 75R4zrGP61fYm/lcKQEWB4YUSz01vTPRXDaXNwcAgtg8amFp8X0n1Ok76VhsnWPP dlwJi8ouLI5uxIfD+H66r1WUtU25Nt5tgxpXdR04/WYRnI6H7PWFZmgX0yRwLpym /ZElXlyQAAagKxf1EirJg+5/lwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFAjgFxP+ t3RGo3YXZ3vjvmBuarYeMB8GA1UdIwQYMBaAFDDiNhzdpeunBfOmsvvr5dt9rxDx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODZFOC80ODg5NTk0RUE4 MDAxMUVCOTA2NTBBMTVDNEY5QUUwMi9NT0kySE4ybDY2Y0Y4NmF5LS12bDIzMnZF UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PSTJITjJsNjZjRjg2YXktLXZsMjMydkVQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzg2RTgvNDg4OTU5NEVBODAwMTFFQjkwNjUwQTE1QzRGOUFFMDIvNjVDNkRENDJF MTUyMTFFQzhFRUU5NjY4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6aqMA0EAgACMAcDBQAkAnugMA0GCSqGSIb3DQEBCwUAA4IBAQBc 0G3j5uKGBgM2bTQK2PYwSfzeh8nZm65mrCuOccEEtbS9ZKzn4tOn6IYuWI+C2OmY DWY0F3FHQE05qt+1tHDzpCLU4fdgqGJflR4FJbIy+P4gMTcz8T52N3cxmfzpvs1W /YOf9ECgzOl4BLn3ffkCGg5qCFG3oLpK+UtNTUYnOkHdCnmLKTkrPY/Apu31fORo MQw1N9vCX32NzTsvCYTUE3OuHU+3HE87SUAeVWM67plpi/EttfX62t9H5LfoNOpN MdEBHI6lk3L2j8SjT9JAlu3gtWFHNtnbjqAc8artWzd5b99cX3SIwLBSwKAaIevP AypphfrB31fDIctxPhWE -----END CERTIFICATE-----Generated at Tue Oct 6 05:05:59 2026 by rpki-client