$ rpki-client -vvvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/F9393E440C4811EF97CBBC31C4F9AE02.roa File: F9393E440C4811EF97CBBC31C4F9AE02.roa (raw, json) Hash identifier: 6Ru6rgmOu4YBuaM/V7SuCQLsbqIre/bOyQq781+7qEI= Subject key identifier: B7:93:6A:41:C8:01:FE:04:81:0D:26:AB:95:2E:A4:80:BB:85:47:05 Certificate issuer: /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Certificate serial: 020C Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/F9393E440C4811EF97CBBC31C4F9AE02.roa Signing time: Wed 23 Sep 2026 03:53:32 +0000 ROA not before: Wed 23 Sep 2026 03:53:32 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 17990 IP address blocks: 118.103.240.0/21 maxlen: 24 202.70.160.0/20 maxlen: 24 2001:df0:44::/48 maxlen: 48 2001:df5:3380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 04:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Validity Not Before: Sep 23 03:53:32 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab34d3c-54fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:31:0e:85:8b:48:6e:35:6a:cc:ab:46:0b: fb:eb:1f:76:28:10:25:5c:dc:ad:cf:f0:0c:fb:3f: b1:f1:68:79:e4:3a:95:27:da:8c:e5:1c:31:f5:3e: 3a:e3:a3:3f:1d:c1:14:e0:c5:6b:03:57:ec:5f:85: 5f:72:ac:8e:0f:6a:20:3c:27:37:30:ac:fb:54:a8: 32:45:71:6d:ea:82:c9:22:2b:e2:7c:b8:52:de:5c: 36:7e:86:88:45:2e:ca:f3:56:6c:ff:35:45:ce:1f: ab:2d:19:cd:12:68:1b:eb:85:da:23:f6:ef:de:7c: d8:a7:2c:06:fd:8f:6b:ca:a7:12:78:13:21:cb:93: 87:c2:f9:d2:f3:12:9f:bf:b9:a6:80:29:b8:c4:93: 8f:78:52:5d:0e:04:16:b9:e7:73:ed:eb:db:59:53: 4b:50:6d:ff:f6:30:7b:63:40:66:c5:17:31:73:11: 9b:94:84:2a:5c:a5:14:63:6c:96:b9:1f:bb:01:33: 22:7e:04:ec:c0:47:f1:f9:5e:7a:e7:81:a3:08:3b: fe:4c:4e:97:ad:58:81:af:a6:dc:f3:ce:a9:e3:19: 2d:52:a9:83:4c:a1:f7:c9:dd:03:96:f9:83:66:95: 5d:ea:07:1a:09:ae:1c:2b:a5:de:22:e8:ce:86:62: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:93:6A:41:C8:01:FE:04:81:0D:26:AB:95:2E:A4:80:BB:85:47:05 X509v3 Authority Key Identifier: keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/F9393E440C4811EF97CBBC31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 118.103.240.0/21 202.70.160.0/20 IPv6: 2001:df0:44::/48 2001:df5:3380::/48 Signature Algorithm: sha256WithRSAEncryption ad:7c:c0:00:86:88:d9:56:b1:72:9b:2c:7e:24:48:e6:f7:ba: 88:d1:8a:27:14:09:69:1f:d2:d9:59:d4:78:24:7a:a5:b4:fa: 87:f9:05:6f:bb:73:a0:fd:68:09:bd:11:56:33:64:b3:47:87: 63:08:02:46:75:66:9c:61:64:33:3e:9d:87:98:a7:7f:da:2a: b4:04:0c:fb:96:32:b4:21:dd:e8:74:84:bc:34:dd:c3:0d:bf: 73:b9:4a:ad:06:6a:f7:db:12:3c:08:62:9f:d1:8d:60:f6:6a: 11:10:6a:b9:91:cf:a0:32:4d:e8:63:50:17:71:dd:1b:1f:76: a8:82:87:fe:10:13:53:76:5f:85:e5:1b:f5:67:50:2b:fd:10: db:1b:40:4b:2b:34:c2:c3:63:fc:c2:01:30:cb:76:fe:8b:fa: ac:86:65:60:6a:9b:36:a2:ec:9e:c1:19:db:ea:ea:4f:1e:15: 37:1a:3c:8f:fc:9e:dc:7f:0e:6f:2b:a5:12:07:4d:ea:be:3d: 34:aa:da:01:ef:8e:ac:f2:4f:95:6a:ce:d5:6e:f6:a5:85:ef: a9:1e:a4:48:30:b6:4a:d7:3b:2f:76:c1:dc:ea:87:a3:8c:26: 77:ca:8b:fe:f2:03:5c:73:d3:26:6e:53:4c:b5:aa:4e:fb:02: 5c:81:35:c0 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzQTAxMTAvBgNVBAUTKEJDQjdDRjQ0MzBCQjk4RUEwNDg1MUMzNDA3MjZFNTg4 MTUwRTEzOUQwHhcNMjYwOTIzMDM1MzMyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzNGQzYy01NGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7UxDoWLSG41asyrRgv76x92KBAlXNytz/AM+z+x8Wh55DqVJ9qM5Rwx9T46 46M/HcEU4MVrA1fsX4VfcqyOD2ogPCc3MKz7VKgyRXFt6oLJIivifLhS3lw2foaI RS7K81Zs/zVFzh+rLRnNEmgb64XaI/bv3nzYpywG/Y9ryqcSeBMhy5OHwvnS8xKf v7mmgCm4xJOPeFJdDgQWuedz7evbWVNLUG3/9jB7Y0BmxRcxcxGblIQqXKUUY2yW uR+7ATMifgTswEfx+V5654GjCDv+TE6XrViBr6bc886p4xktUqmDTKH3yd0DlvmD ZpVd6gcaCa4cK6XeIujOhmJV+wIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFLeTakHI Af4EgQ0mq5UupIC7hUcFMB8GA1UdIwQYMBaAFLy3z0Qwu5jqBIUcNAcm5YgVDhOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTNBMC9BNTk1NUU1NjBD NDUxMUVGOUU3RTA1MURDNEY5QUUwMi92TGZQUkRDN21Pb0VoUncwQnlibGlCVU9F NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMZlBSREM3bU9vRWhSdzBCeWJsaUJVT0U1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkzQTAvQTU5NTVFNTYwQzQ1MTFFRjlFN0UwNTFEQzRGOUFFMDIvRjkzOTNFNDQw QzQ4MTFFRjk3Q0JCQzMxQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS BAIAATAMAwQDdmfwAwQEykagMBgEAgACMBIDBwAgAQ3wAEQDBwAgAQ31M4AwDQYJ KoZIhvcNAQELBQADggEBAK18wACGiNlWsXKbLH4kSOb3uojRiicUCWkf0tlZ1Hgk eqW0+of5BW+7c6D9aAm9EVYzZLNHh2MIAkZ1ZpxhZDM+nYeYp3/aKrQEDPuWMrQh 3eh0hLw03cMNv3O5Sq0GavfbEjwIYp/RjWD2ahEQarmRz6AyTehjUBdx3RsfdqiC h/4QE1N2X4XlG/VnUCv9ENsbQEsrNMLDY/zCATDLdv6L+qyGZWBqmzai7J7BGdvq 6k8eFTcaPI/8ntx/Dm8rpRIHTeq+PTSq2gHvjqzyT5VqztVu9qWF76kepEgwtkrX Oy92wdzqh6OMJnfKi/7yA1xz0yZuU0y1qk77AlyBNcA= -----END CERTIFICATE-----Generated at Sun Oct 4 21:40:41 2026 by rpki-client