$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/18272628C30B11E8A6851824C4F9AE02.roa File: 18272628C30B11E8A6851824C4F9AE02.roa (raw, json) Hash identifier: 1Jz4nMODGeoSLHO6Ef3HtbcD7KTYNkH2oKy4zTtvZdk= Subject key identifier: 1C:D5:83:32:19:C6:BB:15:AD:DC:88:17:B6:D8:B5:6D:5E:22:A3:1D Certificate issuer: /CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94 Certificate serial: 13AD Authority key identifier: 6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/18272628C30B11E8A6851824C4F9AE02.roa Signing time: Wed 26 Aug 2026 17:32:37 +0000 ROA not before: Wed 26 Aug 2026 17:32:37 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 137991 IP address blocks: 45.121.188.0/22 maxlen: 22 45.121.188.0/24 maxlen: 24 45.121.189.0/24 maxlen: 24 45.121.190.0/24 maxlen: 24 45.121.191.0/24 maxlen: 24 103.119.148.0/22 maxlen: 22 103.119.148.0/24 maxlen: 24 103.119.149.0/24 maxlen: 24 103.119.150.0/24 maxlen: 24 103.119.151.0/24 maxlen: 24 203.1.22.0/23 maxlen: 23 203.1.22.0/24 maxlen: 24 203.1.23.0/24 maxlen: 24 203.10.100.0/23 maxlen: 23 203.10.100.0/24 maxlen: 24 203.10.101.0/24 maxlen: 24 2403:4540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 17:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5037 (0x13ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D1, serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94 Validity Not Before: Aug 26 17:32:37 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8f2335-502f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:95:e9:17:89:ec:05:d4:b2:c0:8f:d2:ff: ed:ed:aa:38:65:cc:aa:c2:95:99:c1:30:c2:2f:19: 58:14:39:67:e5:55:a0:80:e4:16:e2:1d:af:75:37: cd:e6:68:75:22:2b:23:e9:0f:6f:53:91:77:ab:07: ee:d7:b8:77:fb:9d:a0:df:0d:19:c9:66:2f:ab:85: 29:0b:89:38:6b:fb:cf:3e:ba:87:ae:24:6f:36:4b: 3a:61:dd:91:87:83:73:e2:12:75:70:90:3f:27:74: 6a:cd:db:96:61:92:a5:58:c0:8b:76:a3:f3:fa:59: 64:99:a9:77:38:6b:e1:3c:da:2f:29:ed:ce:dd:80: dd:bd:4a:86:23:a8:3e:59:c3:19:39:dc:c8:71:26: ad:36:b2:b5:19:14:cd:37:e4:0b:19:b3:3f:de:0b: 83:c2:39:81:e8:33:58:7b:5a:51:e0:c6:56:06:ef: fd:8c:f6:3d:ce:56:fc:a7:a2:9d:71:0c:c3:6b:2a: 71:32:39:14:8a:67:62:fe:e7:cc:e1:93:9c:21:b4: dd:61:f9:92:c7:14:38:25:be:7d:dd:34:0c:07:39: a6:75:1b:c3:4d:93:b9:a6:52:2f:fa:df:85:68:b5: b5:35:f3:19:0f:d8:92:36:67:a2:e4:2c:df:73:86: fe:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D5:83:32:19:C6:BB:15:AD:DC:88:17:B6:D8:B5:6D:5E:22:A3:1D X509v3 Authority Key Identifier: keyid:6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/18272628C30B11E8A6851824C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.121.188.0/22 103.119.148.0/22 203.1.22.0/23 203.10.100.0/23 IPv6: 2403:4540::/32 Signature Algorithm: sha256WithRSAEncryption be:c8:6e:6a:17:c2:28:49:e3:36:88:71:d3:c9:ce:cb:5c:0c: d0:86:ea:24:ad:bc:38:71:6e:67:99:ee:ab:cc:20:a6:c6:61: 34:6d:93:ab:fc:e5:a9:98:58:ee:6f:c0:5c:20:db:29:e3:50: eb:97:ef:f1:74:f5:fe:36:ed:e2:ae:48:74:e1:b8:32:06:fe: 93:55:83:65:79:c8:63:eb:37:e9:b4:e4:30:39:bf:43:b7:de: 62:98:b8:dd:1d:16:87:79:21:e0:79:e5:50:de:b6:ee:5d:97: f6:0e:07:06:4a:fc:3e:4d:9e:83:f6:da:c8:70:ff:93:1e:75: fe:e2:e7:43:37:9c:00:2f:77:9c:f2:10:8d:75:96:5e:36:dd: 65:ee:dd:53:3d:a8:1a:f1:23:2e:1c:83:c2:6d:cd:9c:77:47: fc:a3:9c:77:fd:09:29:9a:f0:ff:94:6e:a7:c2:70:94:d6:8e: b4:7f:dd:af:28:af:26:a5:e5:79:d3:3f:8f:c2:53:24:92:df: 0d:f3:e2:a5:f1:a4:0e:31:96:4d:c7:21:e3:23:e1:a6:05:87: 40:c8:fa:34:27:7e:96:0d:b3:43:f5:15:51:17:aa:5d:50:73: a8:17:93:03:f2:9b:5b:87:0a:97:0b:57:06:53:72:0a:a3:83: ce:96:14:cc -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICE60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDExMTAvBgNVBAUTKDZDQjMwREMwOEVGMjk3MzBFOURGMDQ5QzU0RjM5NTgy QUI4NUJFOTQwHhcNMjYwODI2MTczMjM3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmMjMzNS01MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2KV6ReJ7AXUssCP0v/t7ao4ZcyqwpWZwTDCLxlYFDln5VWggOQW4h2vdTfN 5mh1Iisj6Q9vU5F3qwfu17h3+52g3w0ZyWYvq4UpC4k4a/vPPrqHriRvNks6Yd2R h4Nz4hJ1cJA/J3RqzduWYZKlWMCLdqPz+llkmal3OGvhPNovKe3O3YDdvUqGI6g+ WcMZOdzIcSatNrK1GRTNN+QLGbM/3guDwjmB6DNYe1pR4MZWBu/9jPY9zlb8p6Kd cQzDaypxMjkUimdi/ufM4ZOcIbTdYfmSxxQ4Jb593TQMBzmmdRvDTZO5plIv+t+F aLW1NfMZD9iSNmei5Czfc4b+ewIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFBzVgzIZ xrsVrdyIF7bYtW1eIqMdMB8GA1UdIwQYMBaAFGyzDcCO8pcw6d8EnFTzlYKrhb6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBEMS9DQzc4MzBCMEMz MDkxMUU4OTAwRTVGMjFDNEY5QUUwMi9iTE1Od0k3eWx6RHAzd1NjVlBPVmdxdUZ2 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMTU53STd5bHpEcDN3U2NWUE9WZ3F1RnZwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQwRDEvQ0M3ODMwQjBDMzA5MTFFODkwMEU1RjIxQzRGOUFFMDIvMTgyNzI2MjhD MzBCMTFFOEE2ODUxODI0QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCLXm8AwQCZ3eUAwQBywEWAwQBywpkMA0EAgACMAcDBQAkA0VAMA0G CSqGSIb3DQEBCwUAA4IBAQC+yG5qF8IoSeM2iHHTyc7LXAzQhuokrbw4cW5nme6r zCCmxmE0bZOr/OWpmFjub8BcINsp41Drl+/xdPX+Nu3irkh04bgyBv6TVYNlechj 6zfptOQwOb9Dt95imLjdHRaHeSHgeeVQ3rbuXZf2DgcGSvw+TZ6D9trIcP+THnX+ 4udDN5wAL3ec8hCNdZZeNt1l7t1TPaga8SMuHIPCbc2cd0f8o5x3/QkpmvD/lG6n wnCU1o60f92vKK8mpeV50z+PwlMkkt8N8+Kl8aQOMZZNxyHjI+GmBYdAyPo0J36W DbND9RVRF6pdUHOoF5MD8ptbhwqXC1cGU3IKo4POlhTM -----END CERTIFICATE-----Generated at Fri Oct 2 16:43:06 2026 by rpki-client