$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/13C4E664EB7C11F08E054CC1506F56BC.roa File: 13C4E664EB7C11F08E054CC1506F56BC.roa (raw, json) Hash identifier: jZ7P6qKrVtgWLOiH94PndlOT6XCLZtC2/Exrw0aB2Kg= Subject key identifier: CA:A0:4F:1D:DD:05:A1:E3:E2:16:F9:10:9E:E8:5B:3F:11:09:E4:D0 Certificate issuer: /CN=A91CF188/serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630 Certificate serial: 87 Authority key identifier: EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/13C4E664EB7C11F08E054CC1506F56BC.roa Signing time: Tue 01 Sep 2026 07:56:58 +0000 ROA not before: Tue 01 Sep 2026 07:56:58 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 5065 IP address blocks: 103.37.116.0/24 maxlen: 24 103.37.117.0/24 maxlen: 24 103.37.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF188, serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630 Validity Not Before: Sep 1 07:56:58 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a96854a-690a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:23:59:6a:04:c2:36:8e:97:0e:80:dc:fc: f7:7b:4f:75:f2:97:00:16:90:a2:0c:15:bc:3a:ae: dc:c6:c5:dd:a3:c8:f3:78:5d:ee:7e:61:47:6e:59: dc:58:0b:56:76:64:4b:bc:9e:cb:32:8f:01:64:10: bd:93:44:b3:bd:b8:0f:71:a8:e6:43:7d:4e:09:d9: b9:cd:ff:b3:0a:f5:42:c6:21:9a:3f:31:33:73:5a: 1c:4f:4f:c9:76:dc:43:9a:a1:cd:64:36:a6:9e:74: 59:b9:63:47:06:b3:c3:64:1a:db:23:29:ff:de:e3: c6:a3:df:e3:21:7b:a5:39:1a:2c:c2:57:b6:f2:f8: 01:99:61:8f:7f:7d:b3:a2:e7:28:5a:84:a3:78:28: ae:23:03:26:76:bc:9a:4e:05:f3:03:6c:90:3d:52: ca:1f:72:ed:95:a6:03:52:f0:5d:c7:2c:1b:9a:cf: 4e:c0:30:e0:5e:72:fb:43:03:3b:ea:9b:5b:f7:34: a3:56:6a:2c:b0:cc:3d:8d:00:e7:47:2a:70:fc:a9: 57:ca:76:de:01:73:91:80:ab:7a:e2:16:dc:99:14: 2a:5f:3d:03:7d:ef:85:7b:f3:d5:5d:40:ff:5f:da: 6d:47:3d:1d:19:ee:ae:d3:6b:28:d7:89:30:63:95: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A0:4F:1D:DD:05:A1:E3:E2:16:F9:10:9E:E8:5B:3F:11:09:E4:D0 X509v3 Authority Key Identifier: keyid:EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/13C4E664EB7C11F08E054CC1506F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.37.116.0/23 103.37.119.0/24 Signature Algorithm: sha256WithRSAEncryption 63:f1:bc:b5:90:ee:82:3c:16:9f:ab:b9:01:51:9b:fb:72:5f: a5:ce:c8:dd:8d:e2:48:2b:11:b5:50:8c:85:95:f7:53:1a:38: 63:0e:3f:bc:1d:67:90:70:f0:c5:dd:0f:6e:e2:c3:8a:fc:a7: 7f:ef:2e:11:de:1f:30:15:f5:c3:af:a7:5c:61:ec:fd:ca:49: 22:90:ba:ee:bd:5f:43:4e:60:13:37:0a:90:83:b6:d9:a2:24: 58:e0:23:2d:7a:78:b3:3c:3e:df:5b:19:77:95:1f:ea:5e:01: 02:ba:2a:1c:21:32:e4:7c:17:14:b6:9c:d3:18:6c:f8:63:4b: b5:97:58:b3:06:c6:51:93:e9:af:e5:9c:c6:70:d7:71:8c:6c: a4:56:08:00:7d:6a:da:7a:8a:0c:f6:13:75:58:b0:b7:4b:78: b8:9c:d6:ba:ea:23:dd:e1:3e:8e:a3:7d:3f:e3:16:f8:17:f3: 6e:2d:81:c8:81:e0:10:93:86:71:9c:a6:a5:38:ad:34:12:29: 9b:9b:0b:4e:67:be:99:c2:bc:2d:4a:66:00:88:19:a8:6a:9f: 89:df:e4:f7:7e:4c:a5:79:ee:2f:50:53:38:da:67:a5:a1:9e: 98:71:d4:fb:ea:b6:b1:d8:f0:7b:26:91:c8:d3:fc:ba:8f:88: bd:16:e9:ad -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxODgxMTAvBgNVBAUTKEVBNUE2MDNGRkIyQTA0MEUzQjM4NEIyMDYxQjcyMjI3 MkYwQTk2MzAwHhcNMjYwOTAxMDc1NjU4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2ODU0YS02OTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyIjWWoEwjaOlw6A3Pz3e0918pcAFpCiDBW8Oq7cxsXdo8jzeF3ufmFHblnc WAtWdmRLvJ7LMo8BZBC9k0SzvbgPcajmQ31OCdm5zf+zCvVCxiGaPzEzc1ocT0/J dtxDmqHNZDamnnRZuWNHBrPDZBrbIyn/3uPGo9/jIXulORoswle28vgBmWGPf32z oucoWoSjeCiuIwMmdryaTgXzA2yQPVLKH3LtlaYDUvBdxywbms9OwDDgXnL7QwM7 6ptb9zSjVmossMw9jQDnRypw/KlXynbeAXORgKt64hbcmRQqXz0Dfe+Fe/PVXUD/ X9ptRz0dGe6u02so14kwY5UF+wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMqgTx3d BaHj4hb5EJ7oWz8RCeTQMB8GA1UdIwQYMBaAFOpaYD/7KgQOOzhLIGG3IicvCpYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjE4OC9FMkVFNUM2QUVC N0ExMUYwODFBQTU3OTI1MDZGNTZCQy82bHBnUF9zcUJBNDdPRXNnWWJjaUp5OEts akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZscGdQX3NxQkE0N09Fc2dZYmNpSnk4S2xqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0YxODgvRTJFRTVDNkFFQjdBMTFGMDgxQUE1NzkyNTA2RjU2QkMvMTNDNEU2NjRF QjdDMTFGMDhFMDU0Q0MxNTA2RjU2QkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZyV0AwQAZyV3MA0GCSqGSIb3DQEBCwUAA4IBAQBj8by1kO6CPBaf q7kBUZv7cl+lzsjdjeJIKxG1UIyFlfdTGjhjDj+8HWeQcPDF3Q9u4sOK/Kd/7y4R 3h8wFfXDr6dcYez9ykkikLruvV9DTmATNwqQg7bZoiRY4CMtenizPD7fWxl3lR/q XgECuiocITLkfBcUtpzTGGz4Y0u1l1izBsZRk+mv5ZzGcNdxjGykVggAfWraeooM 9hN1WLC3S3i4nNa66iPd4T6Oo30/4xb4F/NuLYHIgeAQk4ZxnKalOK00EimbmwtO Z76ZwrwtSmYAiBmoap+J3+T3fkylee4vUFM42meloZ6YcdT76rax2PB7JpHI0/y6 j4i9Fumt -----END CERTIFICATE-----Generated at Thu Sep 24 11:02:48 2026 by rpki-client