$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/74444F50490E11EFA7EAAA70C4F9AE02.roa File: 74444F50490E11EFA7EAAA70C4F9AE02.roa (raw, json) Hash identifier: tEKpqbkdPt3IofjNYPWKeOSpyZo4ATkkF2T4JwM5VE8= Subject key identifier: 00:A5:FC:5A:D4:A3:C9:EE:D7:0D:1F:AC:04:DE:64:F4:A1:F4:9F:A5 Certificate issuer: /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27 Certificate serial: 029D Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/74444F50490E11EFA7EAAA70C4F9AE02.roa Signing time: Sat 17 Oct 2026 02:51:47 +0000 ROA not before: Sat 17 Oct 2026 02:51:47 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 26383 IP address blocks: 103.99.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27 Validity Not Before: Oct 17 02:51:47 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ad2e2c3-5886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:78:ca:82:c5:5f:2c:0b:04:9e:f3:d4:1e:7a: 0a:d0:53:1d:b6:59:bb:f7:44:aa:88:39:65:12:ca: fc:3d:4e:e5:f4:bc:d4:79:e5:2c:31:44:46:bc:39: be:fe:1b:88:72:a3:6f:7c:e0:99:58:71:d0:93:94: 21:3c:17:9f:0e:b0:2f:bf:62:16:87:fe:c0:30:92: 4c:fc:08:85:89:3d:19:bd:3d:b6:7b:a5:0d:d7:54: c8:0d:73:12:f4:6d:b4:e5:dc:e9:27:70:1f:22:18: ed:3c:39:6f:31:fa:af:92:e3:c3:f9:29:63:2f:66: 8b:e2:3d:cd:3c:e7:75:17:61:dc:61:9f:8a:af:80: 9f:0d:8c:23:90:36:c0:59:c5:62:6d:ee:5d:01:5e: 73:6c:05:62:95:e7:54:f7:1f:61:a3:1c:ca:03:70: 8d:0f:f0:ef:63:bc:6c:b1:4a:b7:09:70:88:e1:cc: e3:bc:1c:9d:f2:b4:65:74:d8:d0:95:b2:f6:77:d1: a9:ea:93:d4:62:cc:7f:47:7f:23:9d:34:77:37:c6: 73:64:76:09:aa:a1:a2:86:82:f2:b7:2e:35:d0:6e: 49:e8:a7:f0:b9:25:a0:a6:b0:d8:b6:ff:18:27:1b: d0:88:20:30:3d:8e:bc:38:4c:f9:28:44:e2:f9:ce: bb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A5:FC:5A:D4:A3:C9:EE:D7:0D:1F:AC:04:DE:64:F4:A1:F4:9F:A5 X509v3 Authority Key Identifier: keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/74444F50490E11EFA7EAAA70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.52.0/24 Signature Algorithm: sha256WithRSAEncryption 51:da:5f:bb:a4:23:53:33:c3:44:38:42:10:7d:79:91:c5:c0: 7c:90:cd:54:3f:c3:26:3c:e9:9c:79:ab:01:4b:a1:53:a3:04: 31:9f:02:03:7f:3f:25:d1:bd:a8:4d:00:e7:7a:3f:80:61:5a: 82:4c:2d:57:6a:0a:48:cf:79:62:e3:77:bb:1d:50:69:94:67: 3b:48:57:7c:7d:e4:05:86:61:59:3c:ad:ba:08:1d:b6:5f:6f: 99:4d:12:51:cc:2c:81:05:f9:96:6f:9e:13:e8:f1:29:93:25: 8c:77:da:bf:2c:54:52:a2:52:96:a1:f9:62:d8:30:9f:bb:9d: 8c:45:28:bb:2f:47:e5:d9:5a:26:f6:23:30:2e:f2:9c:f7:fb: d7:4e:07:34:ac:52:1f:6e:46:38:e1:40:17:bd:a8:57:99:9b: db:13:83:15:55:cc:db:39:d6:5e:2d:38:ee:38:e6:6e:63:e1: c2:ac:5d:4f:5e:17:c1:54:66:ff:50:71:50:6c:4f:53:1b:cc: e2:88:de:c0:67:d9:b8:b4:43:4a:1c:96:d0:14:76:09:3f:17: 05:d2:38:fd:95:6a:1b:ec:2c:95:b1:8c:7a:19:0f:c5:a6:cd: 72:f5:47:2f:b4:30:b9:35:2d:69:b2:70:c7:cc:d6:68:84:23: 0c:db:88:e6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI3QUIxMTAvBgNVBAUTKDU5RDU4ODEyNUE3MTY2OTg3MzhEMUQxRTlFNkQ4QTY4 RDc0MDlCMjcwHhcNMjYxMDE3MDI1MTQ3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQyZTJjMy01ODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnjKgsVfLAsEnvPUHnoK0FMdtlm790SqiDllEsr8PU7l9LzUeeUsMURGvDm+ /huIcqNvfOCZWHHQk5QhPBefDrAvv2IWh/7AMJJM/AiFiT0ZvT22e6UN11TIDXMS 9G205dzpJ3AfIhjtPDlvMfqvkuPD+SljL2aL4j3NPOd1F2HcYZ+Kr4CfDYwjkDbA WcVibe5dAV5zbAViledU9x9hoxzKA3CND/DvY7xssUq3CXCI4czjvByd8rRldNjQ lbL2d9Gp6pPUYsx/R38jnTR3N8ZzZHYJqqGihoLyty410G5J6KfwuSWgprDYtv8Y JxvQiCAwPY68OEz5KETi+c67OwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFACl/FrU o8nu1w0frATeZPSh9J+lMB8GA1UdIwQYMBaAFFnViBJacWaYc40dHp5timjXQJsn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjdBQi82RjZFOTgyODMx MEUxMUVFODg5RkYwM0ZDNEY5QUUwMi9XZFdJRWxweFpwaHpqUjBlbm0yS2FOZEFt eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkV0lFbHB4WnBoempSMGVubTJLYU5kQW15Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTI3QUIvNkY2RTk4MjgzMTBFMTFFRTg4OUZGMDNGQzRGOUFFMDIvNzQ0NDRGNTA0 OTBFMTFFRkE3RUFBQTcwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ2M0MA0GCSqGSIb3DQEBCwUAA4IBAQBR2l+7pCNTM8NEOEIQfXmR xcB8kM1UP8MmPOmceasBS6FTowQxnwIDfz8l0b2oTQDnej+AYVqCTC1XagpIz3li 43e7HVBplGc7SFd8feQFhmFZPK26CB22X2+ZTRJRzCyBBfmWb54T6PEpkyWMd9q/ LFRSolKWofli2DCfu52MRSi7L0fl2Vom9iMwLvKc9/vXTgc0rFIfbkY44UAXvahX mZvbE4MVVczbOdZeLTjuOOZuY+HCrF1PXhfBVGb/UHFQbE9TG8ziiN7AZ9m4tENK HJbQFHYJPxcF0jj9lWob7CyVsYx6GQ/Fps1y9UcvtDC5NS1psnDHzNZohCMM24jm -----END CERTIFICATE-----Generated at Sun Nov 15 14:57:01 2026 by rpki-client