$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/66FC64186D0711F0AC1BE951C4F9AE02.roa File: 66FC64186D0711F0AC1BE951C4F9AE02.roa (raw, json) Hash identifier: VekWNOhsOkbPhXXSNfSf3h3JUsmawKz26TlG/xieIfo= Subject key identifier: AC:CD:A0:98:D6:F6:BF:B8:B8:27:53:19:D4:95:7C:CE:38:0F:F9:7C Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Certificate serial: 0899 Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/66FC64186D0711F0AC1BE951C4F9AE02.roa Signing time: Wed 30 Sep 2026 21:41:29 +0000 ROA not before: Wed 30 Sep 2026 21:41:29 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 153641 IP address blocks: 103.12.196.0/24 maxlen: 24 103.12.197.0/24 maxlen: 24 103.12.198.0/24 maxlen: 24 103.12.199.0/24 maxlen: 24 103.73.100.0/24 maxlen: 24 103.73.101.0/24 maxlen: 24 103.73.102.0/24 maxlen: 24 103.73.103.0/24 maxlen: 24 103.125.176.0/24 maxlen: 24 103.125.177.0/24 maxlen: 24 103.125.178.0/24 maxlen: 24 103.125.179.0/24 maxlen: 24 103.150.208.0/24 maxlen: 24 103.150.209.0/24 maxlen: 24 103.151.236.0/24 maxlen: 24 103.151.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 21:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2201 (0x899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Validity Not Before: Sep 30 21:41:29 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abd8209-3a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:14:f2:fb:bc:8d:d0:5e:42:67:21:e5:d0: 83:b8:db:d5:82:b0:c4:b0:2d:a1:71:a4:59:3f:00: a9:25:7d:49:e6:3f:83:be:8d:15:a6:25:e8:47:57: ec:f2:3a:7a:a4:e6:a7:4f:63:a6:ba:4c:27:66:97: 68:30:43:80:39:44:fb:d8:aa:1c:4d:2e:b9:3d:e9: b7:72:8c:a2:72:d3:17:f5:28:56:72:2f:0a:ec:f6: 8c:29:b8:70:e6:ce:b2:ad:71:53:cd:c8:eb:28:e2: c0:11:ea:46:6a:ba:05:79:b1:f8:61:e7:01:1c:fa: c7:22:37:52:f2:1e:f9:04:35:b1:1b:f3:7b:89:a7: 2e:f1:71:53:05:0f:5a:72:df:07:db:56:d5:7a:d3: ba:34:f5:69:15:d6:6e:1e:5b:c1:76:26:28:1f:c9: 28:ae:e2:81:2b:82:a4:f4:b0:aa:0c:f9:c7:8b:9b: 46:b9:7b:9d:1a:d1:7f:52:0b:ea:4e:47:88:25:fc: 03:7f:06:31:c1:d5:23:e5:b2:59:a7:74:ad:88:e1: 97:0a:3c:8b:68:dc:78:9c:ce:03:55:33:2f:46:05: 1e:23:bd:61:ac:86:b6:1d:13:96:a1:94:ea:7b:c1: b3:d2:43:84:38:7d:6a:d1:33:ce:93:f4:45:9e:00: 96:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CD:A0:98:D6:F6:BF:B8:B8:27:53:19:D4:95:7C:CE:38:0F:F9:7C X509v3 Authority Key Identifier: keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/66FC64186D0711F0AC1BE951C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.12.196.0/22 103.73.100.0/22 103.125.176.0/22 103.150.208.0/23 103.151.236.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:b7:53:96:7a:31:c1:f0:b4:df:88:87:da:3c:f3:da:b6:a7: 20:2c:cc:4a:a7:99:9a:ed:78:a9:17:4a:0d:41:9e:ac:29:f8: 80:d8:f8:79:b9:2d:c6:25:10:bc:16:28:c5:46:2c:80:bb:ae: 56:70:33:e5:62:2c:66:46:e8:ae:cc:a9:a2:7d:ee:b2:0c:10: a8:89:1e:86:4d:ce:6e:a6:f7:18:2b:ab:52:74:17:6a:1f:2f: 48:61:00:4b:23:f2:47:2f:76:ea:44:bd:30:0e:e2:a6:27:ac: e7:6f:67:1a:a2:e2:70:8a:8c:34:d2:f2:14:f5:27:42:16:63: 6b:c6:31:c3:e9:cd:2c:08:b2:75:d1:b8:73:38:6d:f5:53:58: 59:25:55:7c:bd:09:3f:48:f3:75:1d:c0:af:89:ac:92:7b:ed: 30:ab:36:1e:3d:ec:15:64:f3:8e:bc:bc:dd:0b:0a:bd:31:5b: 60:f3:17:dd:e5:ee:f1:fe:bc:ec:81:61:a6:89:3e:1a:53:1c: 54:0b:60:30:b5:34:ff:d4:8c:5e:15:6f:bc:1e:5a:39:13:e5: 7c:b8:cf:82:9c:c2:f8:74:8a:7b:09:dc:5d:84:de:48:2e:b1: 02:63:25:3c:81:cc:8a:09:71:56:48:a6:ba:bb:01:98:3f:03: ea:ea:a2:06 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NEMxMTAvBgNVBAUTKDVFQTExQzhBM0EyOUUwNjk3M0MxRjEyMTYxMUQ1QTVD MkExQjA2OUQwHhcNMjYwOTMwMjE0MTI5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkODIwOS0zYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNEU8vu8jdBeQmch5dCDuNvVgrDEsC2hcaRZPwCpJX1J5j+Dvo0VpiXoR1fs 8jp6pOanT2OmukwnZpdoMEOAOUT72KocTS65Pem3coyictMX9ShWci8K7PaMKbhw 5s6yrXFTzcjrKOLAEepGaroFebH4YecBHPrHIjdS8h75BDWxG/N7iacu8XFTBQ9a ct8H21bVetO6NPVpFdZuHlvBdiYoH8koruKBK4Kk9LCqDPnHi5tGuXudGtF/Ugvq TkeIJfwDfwYxwdUj5bJZp3StiOGXCjyLaNx4nM4DVTMvRgUeI71hrIa2HROWoZTq e8Gz0kOEOH1q0TPOk/RFngCWUQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFKzNoJjW 9r+4uCdTGdSVfM44D/l8MB8GA1UdIwQYMBaAFF6hHIo6KeBpc8HxIWEdWlwqGwad MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0Qy81MUE5RUFDQzQx NjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRHbHp3ZkVoWVIxYVhDb2JC cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxRWNpam9wNEdsendmRWhZUjFhWENvYkJwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTY1NEMvNTFBOUVBQ0M0MTYwMTFFQjkwODc0NDUwQzRGOUFFMDIvNjZGQzY0MTg2 RDA3MTFGMEFDMUJFOTUxQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCZwzEAwQCZ0lkAwQCZ32wAwQBZ5bQAwQBZ5fsMA0GCSqGSIb3DQEB CwUAA4IBAQCLt1OWejHB8LTfiIfaPPPatqcgLMxKp5ma7XipF0oNQZ6sKfiA2Ph5 uS3GJRC8FijFRiyAu65WcDPlYixmRuiuzKmife6yDBCoiR6GTc5upvcYK6tSdBdq Hy9IYQBLI/JHL3bqRL0wDuKmJ6znb2caouJwiow00vIU9SdCFmNrxjHD6c0sCLJ1 0bhzOG31U1hZJVV8vQk/SPN1HcCviaySe+0wqzYePewVZPOOvLzdCwq9MVtg8xfd 5e7x/rzsgWGmiT4aUxxUC2AwtTT/1IxeFW+8Hlo5E+V8uM+CnML4dIp7CdxdhN5I LrECYyU8gcyKCXFWSKa6uwGYPwPq6qIG -----END CERTIFICATE-----Generated at Thu Oct 1 21:01:47 2026 by rpki-client