$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1D155926768511F199B9825161A30FBC.roa File: 1D155926768511F199B9825161A30FBC.roa (raw, json) Hash identifier: Lgtl+/i2YK2AmhQo/q4BNlEEYTaR/fMsKr68ozMN46k= Subject key identifier: 85:BA:57:A2:3A:EA:D7:C9:DE:2E:47:71:78:C3:82:A7:67:3C:3A:9C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6DC8 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1D155926768511F199B9825161A30FBC.roa Signing time: Fri 02 Oct 2026 15:24:45 +0000 ROA not before: Fri 02 Oct 2026 15:24:45 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 135942 IP address blocks: 43.239.222.0/24 maxlen: 24 43.239.223.0/24 maxlen: 24 103.53.170.0/24 maxlen: 24 103.53.171.0/24 maxlen: 24 103.138.112.0/23 maxlen: 24 103.138.114.0/23 maxlen: 24 2001:df0:3980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 15:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28104 (0x6dc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:24:45 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfccbd-81e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:8b:2a:77:bc:7e:f3:87:61:a5:05:64:5d: 8b:0a:47:c5:8c:26:42:18:87:c1:06:5c:d6:18:23: c9:85:19:ac:38:9d:68:88:cb:c2:0d:f1:26:58:1f: 37:3b:6c:83:a2:25:a2:41:04:a8:53:f0:2b:04:eb: 5f:dc:4f:85:39:71:b4:0f:02:7f:41:e1:94:bf:0e: 4c:2d:23:40:09:18:77:4a:98:95:0d:3a:ef:09:33: f8:74:1a:5f:96:f0:85:ec:43:1a:75:e3:4b:02:4e: f6:a2:c1:8a:6b:3d:c1:e7:e9:ed:8a:23:75:5d:0f: c1:a4:e8:f6:3b:76:4b:38:05:77:7a:a5:eb:1c:b2: a1:27:0e:7f:36:db:c7:54:38:47:f6:01:bf:08:5f: 95:42:45:fc:15:8c:87:b3:96:37:8e:37:fd:7d:79: 64:ed:5d:04:c8:76:b5:a1:2d:56:1a:1d:5b:be:56: 85:11:51:26:71:16:12:44:e4:f5:63:91:cd:3f:2a: 7f:f1:14:03:36:d9:02:7b:e5:26:1a:b4:8d:d8:74: a5:e2:57:08:77:d8:f5:68:f0:37:73:78:17:b4:f7: 0b:21:6d:3e:d0:d6:cc:14:a4:6a:2b:b1:0d:69:e7: 34:7c:42:89:3e:8e:95:89:80:63:c0:4b:5d:d9:70: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BA:57:A2:3A:EA:D7:C9:DE:2E:47:71:78:C3:82:A7:67:3C:3A:9C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1D155926768511F199B9825161A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.239.222.0/23 103.53.170.0/23 103.138.112.0/22 IPv6: 2001:df0:3980::/48 Signature Algorithm: sha256WithRSAEncryption 3c:c6:bf:6b:0c:cf:54:39:3a:2e:22:75:b6:1d:23:96:b7:4c: c0:e3:78:3c:c4:b0:c7:7b:ac:8c:d6:69:b8:8e:0f:d9:8f:e8: aa:b6:8a:92:81:10:56:e6:b9:9b:db:f9:e8:e8:1c:aa:98:5b: e7:b3:b3:d7:ce:82:9e:5e:7e:e1:03:ef:86:13:dc:01:40:7d: e6:f6:c3:b8:0b:ea:22:d9:64:79:5b:e0:79:56:e0:33:8d:1b: 42:e3:2b:0d:96:1b:d6:dc:e6:81:1f:65:17:fc:37:c0:ea:16: 54:7e:1e:33:dc:55:cf:30:61:ba:97:cd:93:a6:dd:c9:39:3b: b8:f6:96:cb:96:01:ac:94:c3:c3:2a:e5:73:d7:cc:6a:f2:70: 5d:31:50:08:01:a8:c8:30:cb:0f:e8:49:a5:cd:38:a9:9a:c4: 55:6b:57:6e:25:7c:a1:49:6d:1e:f0:a7:e8:50:f7:e4:e8:3e: b5:a4:54:2e:bb:a0:f6:1a:30:6d:55:c8:52:08:93:9e:38:10: 23:d2:64:44:b6:17:ba:7a:ea:6c:ac:7c:35:2d:d8:1a:51:dc: 5d:eb:a3:35:da:88:2e:92:11:9a:8a:81:7a:fb:d2:df:af:0e: b7:16:a3:7e:1c:06:e0:f6:33:58:fd:7b:aa:00:59:23:d0:ba: cd:07:ab:ce -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICbcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyNDQ1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2NiZC04MWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXOLKne8fvOHYaUFZF2LCkfFjCZCGIfBBlzWGCPJhRmsOJ1oiMvCDfEmWB83 O2yDoiWiQQSoU/ArBOtf3E+FOXG0DwJ/QeGUvw5MLSNACRh3SpiVDTrvCTP4dBpf lvCF7EMadeNLAk72osGKaz3B5+ntiiN1XQ/BpOj2O3ZLOAV3eqXrHLKhJw5/NtvH VDhH9gG/CF+VQkX8FYyHs5Y3jjf9fXlk7V0EyHa1oS1WGh1bvlaFEVEmcRYSROT1 Y5HNPyp/8RQDNtkCe+UmGrSN2HSl4lcId9j1aPA3c3gXtPcLIW0+0NbMFKRqK7EN aec0fEKJPo6ViYBjwEtd2XArTQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFIW6V6I6 6tfJ3i5HcXjDgqdnPDqcMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMUQxNTU5MjY3 Njg1MTFGMTk5Qjk4MjUxNjFBMzBGQkMucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQBK+/eAwQBZzWqAwQCZ4pwMA8EAgACMAkDBwAgAQ3wOYAwDQYJKoZI hvcNAQELBQADggEBADzGv2sMz1Q5Oi4idbYdI5a3TMDjeDzEsMd7rIzWabiOD9mP 6Kq2ipKBEFbmuZvb+ejoHKqYW+ezs9fOgp5efuED74YT3AFAfeb2w7gL6iLZZHlb 4HlW4DONG0LjKw2WG9bc5oEfZRf8N8DqFlR+HjPcVc8wYbqXzZOm3ck5O7j2lsuW AayUw8Mq5XPXzGrycF0xUAgBqMgwyw/oSaXNOKmaxFVrV24lfKFJbR7wp+hQ9+To PrWkVC67oPYaMG1VyFIIk544ECPSZES2F7p66mysfDUt2BpR3F3rozXaiC6SEZqK gXr70t+vDrcWo34cBuD2M1j9e6oAWSPQus0Hq84= -----END CERTIFICATE-----Generated at Tue Oct 6 03:40:48 2026 by rpki-client