$ rpki-client -vvvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/4D12993446CC11F08EB9471AC4F9AE02.roa File: 4D12993446CC11F08EB9471AC4F9AE02.roa (raw, json) Hash identifier: +QPaOTzsYcDUAUvNxpTVcXHZWmUjQuxmYgXKopDnz4M= Subject key identifier: 52:12:45:E4:3E:5D:0C:B7:9F:19:6C:4D:C8:5F:D2:60:70:63:4D:96 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 1A0D Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/4D12993446CC11F08EB9471AC4F9AE02.roa Signing time: Tue 29 Sep 2026 09:51:13 +0000 ROA not before: Tue 29 Sep 2026 09:51:13 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136948 IP address blocks: 103.99.248.0/22 maxlen: 23 103.99.248.0/24 maxlen: 24 103.99.249.0/24 maxlen: 24 103.99.250.0/24 maxlen: 24 103.99.251.0/24 maxlen: 24 2401:b640::/32 maxlen: 32 2401:b640::/48 maxlen: 48 2401:b640:1::/48 maxlen: 48 2401:b640:2::/48 maxlen: 48 2401:b640:3::/48 maxlen: 48 2401:b640:5::/48 maxlen: 48 2401:b640:6::/48 maxlen: 48 2401:b640:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6669 (0x1a0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: Sep 29 09:51:13 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6abb8a11-4bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:2f:a2:55:52:58:78:fc:8c:1c:8e:9c:8d: 2c:af:61:d4:f7:37:f1:64:6f:ba:8e:e5:27:88:38: c8:33:85:45:ea:30:b6:78:1f:4f:a8:16:d1:76:4f: 93:b3:16:22:7e:61:c2:2a:2e:a9:53:58:10:4b:6e: 24:e8:15:b3:f4:fc:90:3f:65:61:f5:0a:f0:d7:d0: 5d:ec:f0:a2:82:b1:16:87:bf:08:4a:fb:ae:57:4a: 41:75:df:42:f8:53:37:94:4a:4a:1e:0a:25:ae:95: f8:2d:88:69:7b:cb:19:8d:22:97:42:e1:51:0a:55: 6a:0b:94:bd:13:76:e5:73:93:64:ae:ba:16:34:02: 40:5e:33:04:6b:bb:67:03:a8:63:3d:aa:6e:1b:7d: 55:86:b5:3a:16:18:61:f0:66:77:85:43:42:ed:4b: e1:f0:8f:49:f3:10:d5:1d:d8:ed:af:ad:87:15:4a: 7d:90:b4:d0:ce:ef:fa:3e:54:89:5c:bc:2b:82:33: b8:04:9f:30:21:de:60:ee:f4:1d:bc:0e:57:40:af: 83:3c:c4:5b:6e:ad:9d:74:cb:03:e7:19:5c:d9:ee: 6f:1b:e8:3c:60:59:21:a8:b1:3c:77:75:2d:cf:37: 45:da:74:70:2d:d4:95:64:67:ed:66:61:03:5b:21: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:12:45:E4:3E:5D:0C:B7:9F:19:6C:4D:C8:5F:D2:60:70:63:4D:96 X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/4D12993446CC11F08EB9471AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.248.0/22 IPv6: 2401:b640::/32 Signature Algorithm: sha256WithRSAEncryption 84:df:3c:c6:8c:75:d8:6b:9b:6d:57:52:83:7d:7c:45:46:19: da:61:c1:16:bd:45:7b:d6:05:ec:4e:44:62:72:29:d3:68:4d: 0e:ac:20:25:d8:c4:6f:da:28:55:10:de:39:3c:77:40:a5:63: 2f:c8:ac:b4:c9:41:13:d7:22:cd:43:9d:58:67:a3:3a:ea:52: 86:b6:e0:ac:41:47:96:58:61:f8:df:27:7c:92:1a:f2:ed:f2: 58:27:08:83:7b:e2:35:17:f8:49:e9:13:bf:72:85:b5:5e:eb: 54:5d:23:e5:34:e9:7f:f8:ac:18:4d:d0:b1:80:4d:61:d2:65: ab:7b:fa:7c:ba:b3:87:15:1d:76:fb:65:8e:a1:8d:40:30:5e: 45:1e:bc:01:ef:24:56:8d:bb:44:10:50:ca:ca:8c:6f:e6:b3: 01:2a:d6:83:ca:3c:4b:80:fc:84:d7:4c:46:17:48:ee:cf:e3: 47:c4:2a:91:8d:87:ef:e2:21:9a:f1:13:cc:bd:1f:a3:77:72: 94:b4:83:f7:14:08:5f:59:25:f5:44:0b:6a:d9:30:d0:fa:f5: 9c:a9:0d:11:84:5e:f0:ba:71:ed:46:e5:59:56:27:1a:94:ed: 10:23:51:2b:95:f6:ea:2c:4f:9f:7a:1d:9a:02:9f:b0:de:55: 07:b6:4a:24 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjYwOTI5MDk1MTEzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJiOGExMS00YmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVYvolVSWHj8jByOnI0sr2HU9zfxZG+6juUniDjIM4VF6jC2eB9PqBbRdk+T sxYifmHCKi6pU1gQS24k6BWz9PyQP2Vh9Qrw19Bd7PCigrEWh78ISvuuV0pBdd9C +FM3lEpKHgolrpX4LYhpe8sZjSKXQuFRClVqC5S9E3blc5NkrroWNAJAXjMEa7tn A6hjPapuG31VhrU6Fhhh8GZ3hUNC7Uvh8I9J8xDVHdjtr62HFUp9kLTQzu/6PlSJ XLwrgjO4BJ8wId5g7vQdvA5XQK+DPMRbbq2ddMsD5xlc2e5vG+g8YFkhqLE8d3Ut zzdF2nRwLdSVZGftZmEDWyFOpwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFISReQ+ XQy3nxlsTchf0mBwY02WMB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTkwRTMvREExOEIxODQ5QTQ5MTFFNzlBOUYzMDMwQzRGOUFFMDIvNEQxMjk5MzQ0 NkNDMTFGMDhFQjk0NzFBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2P4MA0EAgACMAcDBQAkAbZAMA0GCSqGSIb3DQEBCwUAA4IBAQCE 3zzGjHXYa5ttV1KDfXxFRhnaYcEWvUV71gXsTkRicinTaE0OrCAl2MRv2ihVEN45 PHdApWMvyKy0yUET1yLNQ51YZ6M66lKGtuCsQUeWWGH43yd8khry7fJYJwiDe+I1 F/hJ6RO/coW1XutUXSPlNOl/+KwYTdCxgE1h0mWre/p8urOHFR12+2WOoY1AMF5F HrwB7yRWjbtEEFDKyoxv5rMBKtaDyjxLgPyE10xGF0juz+NHxCqRjYfv4iGa8RPM vR+jd3KUtIP3FAhfWSX1RAtq2TDQ+vWcqQ0RhF7wunHtRuVZVicalO0QI1Erlfbq LE+feh2aAp+w3lUHtkok -----END CERTIFICATE-----Generated at Wed Oct 7 08:46:21 2026 by rpki-client