$ rpki-client -vvvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/436398BA3B7011EAA14F566EC4F9AE02.roa File: 436398BA3B7011EAA14F566EC4F9AE02.roa (raw, json) Hash identifier: NAxyiAU8glno68cNHqspT7JDCLwrA8VgpOOy/tuTa5w= Subject key identifier: 09:77:0B:43:3F:37:32:DA:5B:57:D0:1D:A7:DC:2D:3F:1B:B5:24:6F Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0C37 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/436398BA3B7011EAA14F566EC4F9AE02.roa Signing time: Mon 24 Aug 2026 19:38:01 +0000 ROA not before: Mon 24 Aug 2026 19:38:01 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 63967 IP address blocks: 103.9.185.0/24 maxlen: 24 103.9.187.0/24 maxlen: 24 103.244.162.0/24 maxlen: 24 117.104.186.0/24 maxlen: 24 117.104.187.0/24 maxlen: 24 2404:b780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3127 (0xc37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Aug 24 19:38:01 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8c9d99-cc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:b5:e4:d5:10:7f:72:7d:df:11:7a:f3:9c: a7:ee:fb:a4:05:76:fa:07:60:f3:76:35:d5:f6:aa: c7:79:9f:82:9c:df:25:02:23:8d:b4:e5:9e:1f:84: 05:e8:0b:8e:95:17:f7:2d:a7:82:4c:24:21:49:ba: 53:a4:b6:40:fc:ea:38:aa:c2:4a:a8:29:f4:5a:dc: 33:a0:b8:36:93:35:e2:f2:e9:d7:24:e7:d8:04:39: 49:12:c3:25:6e:44:94:a4:48:34:c7:0f:ab:e4:0e: c8:8b:96:a6:96:b0:5d:85:41:95:b6:9c:c0:95:57: f6:d8:e6:29:05:76:99:86:8a:72:3a:d0:11:7e:22: ed:cd:97:a2:cb:fc:67:99:90:1a:52:28:4e:19:dc: 83:8d:f9:99:e0:1a:df:58:cd:48:1b:2d:4a:3a:8c: ac:8f:ef:b3:52:75:54:82:49:37:d1:b4:17:1d:b6: 30:fd:e1:90:dd:36:3e:1d:a4:1c:f9:81:33:d7:14: 69:f1:ba:b7:80:5b:6c:8a:78:9a:f2:3f:f8:97:a8: 81:81:c1:e3:99:c5:52:36:14:7f:26:f5:48:4b:04: 60:46:87:4a:41:91:8a:61:57:92:94:50:20:01:97: fb:0b:eb:35:b4:0d:7d:8c:63:4d:23:70:2f:55:01: 29:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:77:0B:43:3F:37:32:DA:5B:57:D0:1D:A7:DC:2D:3F:1B:B5:24:6F X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/436398BA3B7011EAA14F566EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.9.185.0/24 103.9.187.0/24 103.244.162.0/24 117.104.186.0/23 IPv6: 2404:b780::/32 Signature Algorithm: sha256WithRSAEncryption 38:92:e1:f8:6d:9b:56:7a:14:9e:ba:b3:5a:6a:8b:5d:0b:29: 06:1f:9a:79:5c:ce:a7:ea:48:b4:81:b5:bf:4d:7d:3b:36:ce: 8d:dc:7d:dd:c9:8e:4d:64:f7:c7:24:51:3d:08:bd:dd:70:8a: 78:b9:2a:6c:25:7e:23:c5:b6:02:c1:91:3b:40:67:d9:a6:bb: 2b:b3:4f:e1:4d:8c:3a:56:6f:e3:aa:10:09:7c:9c:d9:8b:57: 5c:59:03:21:66:ea:db:d0:7a:bb:fd:da:25:9f:13:78:9a:17: 0e:2a:87:f2:0f:34:c1:88:8a:f6:c0:42:00:bb:87:bc:8e:31: 65:eb:22:16:b9:90:4f:b3:82:c2:1e:86:eb:c0:ca:02:11:43: bc:ce:ad:fa:b9:a3:51:20:0c:e2:e5:f6:ea:e6:67:7a:bf:02: 01:d9:f5:b4:96:60:29:03:bf:2b:ba:5b:93:1c:f5:eb:6d:65: ac:4b:52:3b:5f:09:a9:30:17:05:2f:3e:a3:81:95:eb:67:07: 30:7b:03:43:52:8a:72:b4:70:0c:ac:70:83:30:13:ff:fa:aa: 73:37:3f:38:ff:ed:45:b1:8c:82:89:e0:1b:02:12:08:51:89: a9:99:98:9a:9f:6c:42:0e:28:d1:e3:f8:2c:d5:b0:43:c0:02: 15:ca:a9:fb -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICDDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjYwODI0MTkzODAxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThjOWQ5OS1jYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbi15NUQf3J93xF685yn7vukBXb6B2DzdjXV9qrHeZ+CnN8lAiONtOWeH4QF 6AuOlRf3LaeCTCQhSbpTpLZA/Oo4qsJKqCn0WtwzoLg2kzXi8unXJOfYBDlJEsMl bkSUpEg0xw+r5A7Ii5amlrBdhUGVtpzAlVf22OYpBXaZhopyOtARfiLtzZeiy/xn mZAaUihOGdyDjfmZ4BrfWM1IGy1KOoysj++zUnVUgkk30bQXHbYw/eGQ3TY+HaQc +YEz1xRp8bq3gFtsinia8j/4l6iBgcHjmcVSNhR/JvVISwRgRodKQZGKYVeSlFAg AZf7C+s1tA19jGNNI3AvVQEpCQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFAl3C0M/ NzLaW1fQHafcLT8btSRvMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU1RUEvN0M2MEI5RjYzQjZFMTFFQUFFNUYxNjZCQzRGOUFFMDIvNDM2Mzk4QkEz QjcwMTFFQUExNEY1NjZFQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQAZwm5AwQAZwm7AwQAZ/SiAwQBdWi6MA0EAgACMAcDBQAkBLeAMA0G CSqGSIb3DQEBCwUAA4IBAQA4kuH4bZtWehSeurNaaotdCykGH5p5XM6n6ki0gbW/ TX07Ns6N3H3dyY5NZPfHJFE9CL3dcIp4uSpsJX4jxbYCwZE7QGfZprsrs0/hTYw6 Vm/jqhAJfJzZi1dcWQMhZurb0Hq7/dolnxN4mhcOKofyDzTBiIr2wEIAu4e8jjFl 6yIWuZBPs4LCHobrwMoCEUO8zq36uaNRIAzi5fbq5md6vwIB2fW0lmApA78ruluT HPXrbWWsS1I7XwmpMBcFLz6jgZXrZwcwewNDUopytHAMrHCDMBP/+qpzNz84/+1F sYyCieAbAhIIUYmpmZian2xCDijR4/gs1bBDwAIVyqn7 -----END CERTIFICATE-----Generated at Sun Sep 27 21:30:17 2026 by rpki-client