$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa File: F719961A1A8611ECB908E939C4F9AE02.roa (raw, json) Hash identifier: L4+heFdChY3z9s7BEBGVcv7MYCBF/KrgUao3TApE1No= Subject key identifier: 64:5C:F7:7F:BE:44:09:FA:DD:F0:9B:E9:1D:E2:72:A4:CD:6D:28:C8 Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Certificate serial: 05EC Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa Signing time: Thu 10 Sep 2026 23:44:58 +0000 ROA not before: Thu 10 Sep 2026 23:44:58 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 55736 IP address blocks: 103.164.128.0/24 maxlen: 24 103.164.129.0/24 maxlen: 24 123.100.228.0/24 maxlen: 24 123.100.229.0/24 maxlen: 24 123.100.230.0/24 maxlen: 24 123.100.231.0/24 maxlen: 24 202.157.178.0/24 maxlen: 24 203.142.9.0/24 maxlen: 24 2405:70c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Validity Not Before: Sep 10 23:44:58 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa340fa-2f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:b9:64:ed:ef:6f:f3:b8:1e:d6:1b:b7:df: d4:7e:31:4e:ae:d8:8e:b9:f1:c3:f7:76:87:8c:73: f3:3e:f6:13:98:ce:51:19:5e:ed:a7:9e:36:19:ac: 3a:51:b3:64:3f:ab:4c:ab:39:38:c0:75:26:25:3b: a0:d8:39:c8:fd:ff:9f:1e:09:cf:cc:0e:ad:67:b2: 6c:7c:00:15:cb:35:a6:8c:50:8d:c5:b4:7c:6e:26: f6:76:17:2e:23:8b:21:bc:ad:a7:14:0a:21:63:4e: f9:1c:92:3d:b2:98:3d:66:40:54:28:80:ef:e5:be: d7:80:f1:6f:d7:2c:07:5c:9d:1e:d4:32:b7:b3:00: 89:af:5b:ec:7b:bb:18:4d:5d:9c:c0:34:fa:f6:7e: be:37:43:6b:c1:5f:f5:0a:b1:19:30:3e:a2:4a:1d: a9:0d:3a:ed:d9:02:75:84:37:03:e6:92:07:78:48: 65:25:5e:a7:22:2f:e6:1a:d2:16:83:25:81:2f:e9: 62:7c:fe:cd:8d:62:8c:99:c8:cc:3e:f8:3c:21:a1: 85:2a:56:a1:cf:d2:6b:df:49:32:8d:c3:03:7c:85: ee:a1:42:91:68:bb:14:1b:4b:13:53:1a:17:1b:4c: 3b:79:51:73:36:bf:70:32:7c:b7:3a:22:65:c0:1b: 32:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5C:F7:7F:BE:44:09:FA:DD:F0:9B:E9:1D:E2:72:A4:CD:6D:28:C8 X509v3 Authority Key Identifier: keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.164.128.0/23 123.100.228.0/22 202.157.178.0/24 203.142.9.0/24 IPv6: 2405:70c0::/32 Signature Algorithm: sha256WithRSAEncryption 05:33:2f:2f:bd:4e:e1:8d:22:e7:e4:a0:ca:ea:45:f8:6d:27: 99:d8:48:b7:95:19:2b:a2:8a:c2:52:43:b2:6f:d1:84:9f:aa: 42:12:e3:c8:90:06:c6:48:88:ea:61:bf:cd:89:fe:f9:8c:55: 80:70:a4:8d:63:a3:4a:09:18:b4:ed:28:fc:35:36:7d:15:23: 46:4a:80:1c:9c:7c:6d:70:a7:0e:78:c3:ce:f4:61:21:cd:1b: ea:d0:86:aa:ba:7a:51:3d:78:82:17:4a:f0:e4:f7:10:8d:d3: e6:ef:0c:5e:cf:b0:1e:bb:69:3a:df:ea:e0:e1:49:b7:e1:08: 39:da:19:d9:1f:9f:72:e1:ef:50:d9:1d:15:1e:1b:17:70:0c: ef:e9:99:57:d0:d0:fb:c1:66:b5:73:f5:e7:e4:38:96:d6:f6: 0b:0d:6b:68:8d:67:8a:41:16:47:9f:ae:ef:74:d3:27:0e:ee: 9c:88:8f:d6:4a:21:09:96:55:3d:ab:2a:f4:83:e1:28:62:27: 51:e0:a3:a6:8a:c6:b1:4a:45:d9:ea:23:9a:27:aa:bb:60:03: 11:bd:e5:6d:0f:a1:cf:76:37:5a:8e:a7:df:83:69:75:72:ce: 6f:c0:0d:5f:a8:2c:97:3b:78:9d:3c:5e:5a:97:aa:a1:b0:fe: 05:78:98:76 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0MUIxMTAvBgNVBAUTKDA4MDI1QjlCNDRFRUQ4QUUwQjc2RjExRTAzNzJDRTk2 MTg3N0FEOUYwHhcNMjYwOTEwMjM0NDU4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEzNDBmYS0yZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0O5ZO3vb/O4HtYbt9/UfjFOrtiOufHD93aHjHPzPvYTmM5RGV7tp542Gaw6 UbNkP6tMqzk4wHUmJTug2DnI/f+fHgnPzA6tZ7JsfAAVyzWmjFCNxbR8bib2dhcu I4shvK2nFAohY075HJI9spg9ZkBUKIDv5b7XgPFv1ywHXJ0e1DK3swCJr1vse7sY TV2cwDT69n6+N0NrwV/1CrEZMD6iSh2pDTrt2QJ1hDcD5pIHeEhlJV6nIi/mGtIW gyWBL+lifP7NjWKMmcjMPvg8IaGFKlahz9Jr30kyjcMDfIXuoUKRaLsUG0sTUxoX G0w7eVFzNr9wMny3OiJlwBsyPwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFGRc93++ RAn63fCb6R3icqTNbSjIMB8GA1UdIwQYMBaAFAgCW5tE7tiuC3bxHgNyzpYYd62f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQxQi82OUY2QjdERTFB ODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJLNExkdkVlQTNMT2xoaDNy WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBSmJtMFR1Mks0TGR2RWVBM0xPbGhoM3JaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk0MUIvNjlGNkI3REUxQTgzMTFFQzhDOTIyMjI5QzRGOUFFMDIvRjcxOTk2MUEx QTg2MTFFQ0I5MDhFOTM5QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQBZ6SAAwQCe2TkAwQAyp2yAwQAy44JMA0EAgACMAcDBQAkBXDAMA0G CSqGSIb3DQEBCwUAA4IBAQAFMy8vvU7hjSLn5KDK6kX4bSeZ2Ei3lRkroorCUkOy b9GEn6pCEuPIkAbGSIjqYb/Nif75jFWAcKSNY6NKCRi07Sj8NTZ9FSNGSoAcnHxt cKcOeMPO9GEhzRvq0IaqunpRPXiCF0rw5PcQjdPm7wxez7Aeu2k63+rg4Um34Qg5 2hnZH59y4e9Q2R0VHhsXcAzv6ZlX0ND7wWa1c/Xn5DiW1vYLDWtojWeKQRZHn67v dNMnDu6ciI/WSiEJllU9qyr0g+EoYidR4KOmisaxSkXZ6iOaJ6q7YAMRveVtD6HP djdajqffg2l1cs5vwA1fqCyXO3idPF5al6qhsP4FeJh2 -----END CERTIFICATE-----Generated at Fri Sep 25 23:41:16 2026 by rpki-client