$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/4863E7886BEA11F0AA50230BC4F9AE02.roa File: 4863E7886BEA11F0AA50230BC4F9AE02.roa (raw, json) Hash identifier: 8JZr4p8tDw2q0HSfdxMhPTA6AUc7o+7D8niSR2gOHHs= Subject key identifier: 77:F7:94:24:04:3A:FE:EB:68:DE:4C:5C:19:2B:A2:BC:39:4E:A4:68 Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Certificate serial: 071F Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/4863E7886BEA11F0AA50230BC4F9AE02.roa Signing time: Tue 12 May 2026 22:27:27 +0000 ROA not before: Tue 12 May 2026 22:27:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141988 IP address blocks: 103.163.246.0/23 maxlen: 24 2001:df6:3180::/48 maxlen: 48 2402:e20::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Validity Not Before: May 12 22:27:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a03a94f-9de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:b6:fd:7d:ae:72:c3:3c:88:50:ad:f5:3a: 7d:59:e0:06:49:56:a0:39:6e:6e:27:e5:d4:5b:3b: 2b:fa:94:2b:12:c8:2e:a6:25:18:db:26:5d:a4:75: 17:66:da:82:46:bc:15:2a:3e:f6:db:e3:fb:bb:67: 55:66:75:ec:83:c9:86:8e:95:06:d4:c9:e4:43:1a: 2e:47:81:25:88:66:64:32:f5:47:91:85:62:2b:d9: 3d:b5:03:7c:fd:c7:19:e4:06:e4:87:27:87:8a:bd: 05:75:29:63:e3:2a:69:c8:53:00:82:ca:b6:76:2c: b0:14:8c:11:05:d9:7c:48:c9:03:2c:ca:fc:44:42: 4f:32:65:31:0a:88:b3:70:5f:9f:1b:48:d0:73:4d: 5b:fe:0c:bd:31:f3:55:8e:c6:8a:1e:88:e9:61:10: 5d:9a:e7:9e:9e:7a:e9:f4:de:b9:94:9f:33:7c:a6: e5:f5:a1:cb:c2:6e:ec:9c:77:c4:d9:1e:5c:0e:19: ac:b8:82:11:6e:39:37:be:d1:1c:f7:dd:4f:07:c7: 3f:5d:08:c4:9e:ae:19:15:52:e6:8b:ed:43:95:0d: e1:9b:14:28:50:44:d8:1d:b9:10:9b:11:a8:a2:47: 84:82:20:92:5c:a4:61:a8:8c:df:d5:43:c1:30:22: b6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F7:94:24:04:3A:FE:EB:68:DE:4C:5C:19:2B:A2:BC:39:4E:A4:68 X509v3 Authority Key Identifier: keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/4863E7886BEA11F0AA50230BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.163.246.0/23 IPv6: 2001:df6:3180::/48 2402:e20::/32 Signature Algorithm: sha256WithRSAEncryption ac:55:88:1e:96:ac:c3:49:b5:f6:6f:d0:50:49:de:90:33:5e: 11:60:f8:23:fe:88:3d:2c:ff:1d:4b:2e:44:1c:7c:91:d5:18: d9:47:2a:4b:db:5e:b6:b4:d7:d4:e3:78:1a:b2:ba:60:f7:60: 85:65:f8:36:b6:fe:87:41:40:de:75:07:9c:9b:47:5f:23:91: bc:e1:c0:b5:80:c4:6e:8e:63:5a:48:8d:be:cb:4e:52:56:5e: a3:8a:48:43:c5:dc:19:2a:ca:ab:e4:0c:df:73:a4:9f:ca:65: 19:99:83:ee:7c:73:dd:00:46:e9:d2:78:06:ac:e6:d3:1e:a8: 2d:f3:cb:6a:3d:d2:b3:9c:30:16:31:c6:f9:aa:eb:54:cf:15: ba:d0:55:de:c2:6e:8b:34:b3:30:a7:72:36:38:00:28:51:6e: 4c:53:e2:2f:20:a6:37:74:e8:5a:c9:bf:86:08:5b:da:b5:1c: b9:96:62:fc:88:d6:cb:bb:70:fb:04:7e:37:3f:5a:a1:71:9c: 61:09:d4:8d:87:75:61:b5:63:31:89:c7:e4:76:85:1d:d9:11: f3:a8:d2:ca:9b:0a:27:5c:2b:33:83:71:2d:b2:2a:14:45:08: 11:07:a7:38:2b:3c:02:64:21:70:07:81:fb:8c:2b:c1:e8:ae: 6a:22:58:8c -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw REZEQjM0MTEwHhcNMjYwNTEyMjIyNzI3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTAzYTk0Zi05ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZ+2/X2ucsM8iFCt9Tp9WeAGSVagOW5uJ+XUWzsr+pQrEsgupiUY2yZdpHUX ZtqCRrwVKj722+P7u2dVZnXsg8mGjpUG1MnkQxouR4EliGZkMvVHkYViK9k9tQN8 /ccZ5AbkhyeHir0FdSlj4yppyFMAgsq2diywFIwRBdl8SMkDLMr8REJPMmUxCoiz cF+fG0jQc01b/gy9MfNVjsaKHojpYRBdmueennrp9N65lJ8zfKbl9aHLwm7snHfE 2R5cDhmsuIIRbjk3vtEc991PB8c/XQjEnq4ZFVLmi+1DlQ3hmxQoUETYHbkQmxGo okeEgiCSXKRhqIzf1UPBMCK23QIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFHf3lCQE Ov7raN5MXBkrorw5TqRoMB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1 N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTFDRjQvOUFDNDg1MUE4NTdGMTFFQjlCMjg1Nzc1QzRGOUFFMDIvNDg2M0U3ODg2 QkVBMTFGMEFBNTAyMzBCQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM BAIAATAGAwQBZ6P2MBYEAgACMBADBwAgAQ32MYADBQAkAg4gMA0GCSqGSIb3DQEB CwUAA4IBAQCsVYgelqzDSbX2b9BQSd6QM14RYPgj/og9LP8dSy5EHHyR1RjZRypL 2162tNfU43gasrpg92CFZfg2tv6HQUDedQecm0dfI5G84cC1gMRujmNaSI2+y05S Vl6jikhDxdwZKsqr5Azfc6SfymUZmYPufHPdAEbp0ngGrObTHqgt88tqPdKznDAW Mcb5qutUzxW60FXewm6LNLMwp3I2OAAoUW5MU+IvIKY3dOhayb+GCFvatRy5lmL8 iNbLu3D7BH43P1qhcZxhCdSNh3VhtWMxicfkdoUd2RHzqNLKmwonXCszg3EtsioU RQgRB6c4KzwCZCFwB4H7jCvB6K5qIliM -----END CERTIFICATE-----Generated at Wed May 13 11:05:58 2026 by rpki-client