$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa File: 35D9F1BE8A7C11E79774186BC4F9AE02.roa (raw, json) Hash identifier: GXe2tm7Td8dX1Lrha+7jXekKG7vTEBadOSGynY1Vs4U= Subject key identifier: 81:33:DB:F6:DA:39:A1:00:EC:D0:16:7A:0C:48:0A:93:E6:57:E9:C0 Certificate issuer: /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Certificate serial: 19E8 Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa Signing time: Thu 24 Sep 2026 16:30:16 +0000 ROA not before: Thu 24 Sep 2026 16:30:16 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 136937 IP address blocks: 103.99.128.0/22 maxlen: 24 2401:aec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6632 (0x19e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C1, serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Validity Not Before: Sep 24 16:30:16 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6ab55018-9567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cf:70:4c:74:88:cc:10:21:75:58:54:a2:52: 05:7a:d9:fa:ad:ab:6c:61:4d:ce:53:6c:cd:89:47: 71:a6:3d:d4:c3:b0:29:f0:61:df:a0:76:c6:5d:42: a1:b7:96:8c:7f:4e:3f:f5:8c:a9:4b:32:07:cb:1c: 79:6c:62:03:48:6e:64:3b:96:aa:46:cd:fd:e2:e8: a2:2c:8d:35:80:24:3f:9f:aa:43:55:be:af:ae:fe: 9a:c1:38:bf:b8:c2:54:b6:91:ff:d2:b7:64:34:7f: 0c:29:43:f3:24:74:cd:fe:70:e5:c8:8f:59:1a:18: ab:ec:8a:00:7e:f8:0d:39:24:91:c8:46:78:85:7d: d9:22:59:53:1f:b6:c8:0a:68:86:33:7f:76:6d:2c: 72:6f:39:10:12:3f:23:b4:e5:72:55:de:13:f2:c1: ae:53:fe:16:b7:2e:47:1a:fe:7f:f3:20:b2:dc:b7: b3:3d:45:24:dc:35:ab:ee:21:ce:48:dc:66:b1:83: a1:d5:fc:99:0a:09:90:11:7f:fc:93:c2:02:b4:ce: 02:54:af:bb:0d:fb:2d:43:d7:3a:60:bb:7d:86:2d: 02:23:78:5c:93:fc:82:8d:d5:1d:1d:0c:50:89:05: 49:05:5c:74:b3:92:a8:dd:96:ef:d4:73:68:b9:e7: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:33:DB:F6:DA:39:A1:00:EC:D0:16:7A:0C:48:0A:93:E6:57:E9:C0 X509v3 Authority Key Identifier: keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.128.0/22 IPv6: 2401:aec0::/32 Signature Algorithm: sha256WithRSAEncryption 3f:17:9a:55:01:ac:83:8d:ed:1e:9d:48:55:85:fa:7d:7e:63: e4:27:92:ef:69:8e:33:c0:78:59:37:c1:92:9e:78:08:c3:fd: 62:b8:6b:b7:82:51:69:79:f5:44:13:f7:58:d4:25:c7:fb:d8: 28:0c:c0:f9:2a:f0:5c:19:07:2d:ee:32:34:a9:8e:99:f8:1e: 45:2e:a6:71:e5:0e:64:9d:6f:25:eb:60:a0:dd:18:5a:8b:dd: 5b:5e:ff:5c:ba:26:4d:3f:8b:ed:8e:69:80:1c:9c:02:93:4e: 5d:05:af:38:19:59:db:7d:c3:d9:b9:bb:e1:62:19:ee:21:3b: 06:8a:ba:bb:fc:33:6d:e1:99:29:c6:6d:74:99:a7:90:2f:d4: 75:6d:16:61:06:56:d9:eb:5c:e5:ae:98:db:7f:77:04:af:5d: ca:c5:f2:9b:ea:c9:32:ba:92:9b:81:4c:82:1a:e2:92:ed:54: 11:39:97:0a:27:18:1d:ce:d5:f0:bf:e0:63:90:31:2d:25:19: d9:ed:d5:2a:66:47:79:16:15:60:25:d6:73:da:47:1b:88:52: 21:05:4b:82:27:76:c2:e0:a3:e9:4a:b3:2e:78:89:86:b7:c6: e4:98:ba:18:f8:8c:cf:2f:cc:c6:9c:ee:85:21:db:d8:8d:4c: ec:3a:12:2f -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzExMTAvBgNVBAUTKEMxMDgwRTY2MUIwREZBNjIwRUIwOUFBQjJERUFENjAz NEI4MjhFQkMwHhcNMjYwOTI0MTYzMDE2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1NTAxOC05NTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApc9wTHSIzBAhdVhUolIFetn6ratsYU3OU2zNiUdxpj3Uw7Ap8GHfoHbGXUKh t5aMf04/9YypSzIHyxx5bGIDSG5kO5aqRs394uiiLI01gCQ/n6pDVb6vrv6awTi/ uMJUtpH/0rdkNH8MKUPzJHTN/nDlyI9ZGhir7IoAfvgNOSSRyEZ4hX3ZIllTH7bI CmiGM392bSxybzkQEj8jtOVyVd4T8sGuU/4Wty5HGv5/8yCy3LezPUUk3DWr7iHO SNxmsYOh1fyZCgmQEX/8k8ICtM4CVK+7DfstQ9c6YLt9hi0CI3hck/yCjdUdHQxQ iQVJBVx0s5Ko3Zbv1HNouef7DwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFIEz2/ba OaEA7NAWegxICpPmV+nAMB8GA1UdIwQYMBaAFMEIDmYbDfpiDrCaqy3q1gNLgo68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMS84MDJDMjQzMjhB N0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1tSU9zSnFyTGVyV0EwdUNq cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dRZ09aaHNOLW1JT3NKcXJMZXJXQTB1Q2pydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REIwQzEvODAyQzI0MzI4QTdBMTFFNzk5RTlGNzY0QzRGOUFFMDIvMzVEOUYxQkU4 QTdDMTFFNzk3NzQxODZCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2OAMA0EAgACMAcDBQAkAa7AMA0GCSqGSIb3DQEBCwUAA4IBAQA/ F5pVAayDje0enUhVhfp9fmPkJ5LvaY4zwHhZN8GSnngIw/1iuGu3glFpefVEE/dY 1CXH+9goDMD5KvBcGQct7jI0qY6Z+B5FLqZx5Q5knW8l62Cg3Rhai91bXv9cuiZN P4vtjmmAHJwCk05dBa84GVnbfcPZubvhYhnuITsGirq7/DNt4Zkpxm10maeQL9R1 bRZhBlbZ61zlrpjbf3cEr13KxfKb6skyupKbgUyCGuKS7VQROZcKJxgdztXwv+Bj kDEtJRnZ7dUqZkd5FhVgJdZz2kcbiFIhBUuCJ3bC4KPpSrMueImGt8bkmLoY+IzP L8zGnO6FIdvYjUzsOhIv -----END CERTIFICATE-----Generated at Fri Sep 25 07:36:52 2026 by rpki-client