$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/E20C4942DC7D11EDA2F7B651C4F9AE02.roa File: E20C4942DC7D11EDA2F7B651C4F9AE02.roa (raw, json) Hash identifier: X+PbAB6ZURG0zNwSn5Uz9F3saTJla2qu7ck7HHbuAXM= Subject key identifier: 55:6C:2F:99:F0:51:8D:54:2E:34:A0:6D:E4:52:5F:C8:51:77:CF:8A Certificate issuer: /CN=A91DD42F/serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F Certificate serial: 0845 Authority key identifier: 87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/E20C4942DC7D11EDA2F7B651C4F9AE02.roa Signing time: Sun 30 Aug 2026 21:41:54 +0000 ROA not before: Sun 30 Aug 2026 21:41:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 59381 IP address blocks: 103.235.176.0/22 maxlen: 22 103.235.176.0/24 maxlen: 24 103.235.177.0/24 maxlen: 24 103.235.178.0/24 maxlen: 24 103.235.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD42F, serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F Validity Not Before: Aug 30 21:41:54 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a94a3a2-eb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:40:62:a3:f2:c1:cf:2e:28:1c:0d:f2:91:3e: f5:c0:04:2c:66:db:27:90:a8:df:e0:3f:6a:a7:2c: c5:a0:d4:d2:a9:29:97:ed:07:72:d7:d4:af:f0:58: e3:42:0a:09:b3:81:2a:24:b7:b0:52:33:2e:ba:5a: ca:a4:64:c4:d0:72:fb:17:c8:4a:64:63:65:70:9b: fa:f2:0d:4b:55:21:1c:84:cc:cd:ea:ce:f4:43:18: e7:92:37:80:e6:20:09:f4:63:87:d3:b4:26:40:0e: 1c:fe:16:e9:64:06:df:f0:a6:82:be:38:fb:6b:60: a4:f2:de:97:cd:0d:3f:4f:7e:98:be:7c:4d:9b:fd: f1:a0:a6:d2:4c:c8:3d:45:21:b5:5b:d4:ce:a4:64: 98:55:3e:1d:34:fa:3b:43:50:d0:83:47:83:79:37: 58:b0:b4:27:68:d5:3c:3e:44:1c:d7:9e:59:0e:bb: e0:48:71:71:ca:25:c5:03:6e:82:fa:ea:2a:5a:0b: 2b:a9:d4:5d:19:12:94:26:9a:1f:78:4f:f9:1f:27: 50:89:ff:cc:a9:f6:3e:41:86:57:68:f8:e0:56:59: 56:82:61:90:3e:86:82:1f:ae:f5:5a:12:af:80:6a: 55:e1:6c:ae:ba:6f:b7:b4:7e:7d:99:55:8b:63:00: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6C:2F:99:F0:51:8D:54:2E:34:A0:6D:E4:52:5F:C8:51:77:CF:8A X509v3 Authority Key Identifier: keyid:87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/E20C4942DC7D11EDA2F7B651C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.235.176.0/22 Signature Algorithm: sha256WithRSAEncryption b7:01:c4:97:b3:9d:70:2e:cf:37:db:27:fa:4a:21:e3:6b:84: f2:bd:7f:cd:2f:c6:e5:86:0f:10:dc:c3:70:ca:0b:41:c0:1e: 46:5d:dc:c1:c4:3a:cc:00:47:67:82:63:04:1d:50:08:43:be: 43:e9:0e:f3:64:6b:ff:dc:4a:1a:cf:11:8c:39:35:e0:72:ef: 04:14:dc:b0:02:ae:ad:69:08:69:5e:b2:bf:02:f7:a8:3d:63: 55:83:ff:00:51:73:a5:88:da:3f:d4:1f:cc:5f:27:87:24:26: 19:06:14:14:e3:07:be:cf:ef:35:55:85:db:51:f4:b0:d5:b1: da:8c:e0:52:68:3c:cf:a1:6a:b9:4e:0c:a9:ec:30:e3:72:a1: 8f:a9:55:91:f5:fe:f0:c1:a9:6a:57:88:cb:be:86:06:25:45: 51:43:2f:5c:a5:7f:89:1f:3c:1f:01:dd:f9:20:3a:8f:df:3d: 85:68:dd:14:c8:83:a8:61:2b:35:08:67:7a:fa:bf:e0:4d:22: 16:60:60:a5:e1:6d:f1:d2:cb:c0:d4:a2:1e:81:af:e3:09:95: e1:b9:26:c8:a2:5a:c9:fa:b5:71:ba:5b:11:57:c6:29:d3:24: e7:97:08:69:cc:59:41:32:74:06:6f:b0:12:ec:13:36:66:8f: 80:29:da:55 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0MkYxMTAvBgNVBAUTKDg3QTU1MDYxQjc1RjFEQzJDNUM1QkI4N0QyODk4RTgz MzA3RDg3MEYwHhcNMjYwODMwMjE0MTU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0YTNhMi1lYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kBio/LBzy4oHA3ykT71wAQsZtsnkKjf4D9qpyzFoNTSqSmX7Qdy19Sv8Fjj QgoJs4EqJLewUjMuulrKpGTE0HL7F8hKZGNlcJv68g1LVSEchMzN6s70QxjnkjeA 5iAJ9GOH07QmQA4c/hbpZAbf8KaCvjj7a2Ck8t6XzQ0/T36YvnxNm/3xoKbSTMg9 RSG1W9TOpGSYVT4dNPo7Q1DQg0eDeTdYsLQnaNU8PkQc155ZDrvgSHFxyiXFA26C +uoqWgsrqdRdGRKUJpofeE/5HydQif/MqfY+QYZXaPjgVllWgmGQPoaCH671WhKv gGpV4Wyuum+3tH59mVWLYwBHewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFVsL5nw UY1ULjSgbeRSX8hRd8+KMB8GA1UdIwQYMBaAFIelUGG3Xx3CxcW7h9KJjoMwfYcP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDQyRi9DOEJBMDFCQzJF MkIxMUVCODBFQjcwODBDNEY5QUUwMi9oNlZRWWJkZkhjTEZ4YnVIMG9tT2d6Qjlo dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2VlFZYmRmSGNMRnhidUgwb21PZ3pCOWh3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REQ0MkYvQzhCQTAxQkMyRTJCMTFFQjgwRUI3MDgwQzRGOUFFMDIvRTIwQzQ5NDJE QzdEMTFFREEyRjdCNjUxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ+uwMA0GCSqGSIb3DQEBCwUAA4IBAQC3AcSXs51wLs832yf6SiHj a4TyvX/NL8blhg8Q3MNwygtBwB5GXdzBxDrMAEdngmMEHVAIQ75D6Q7zZGv/3Eoa zxGMOTXgcu8EFNywAq6taQhpXrK/AveoPWNVg/8AUXOliNo/1B/MXyeHJCYZBhQU 4we+z+81VYXbUfSw1bHajOBSaDzPoWq5Tgyp7DDjcqGPqVWR9f7wwalqV4jLvoYG JUVRQy9cpX+JHzwfAd35IDqP3z2FaN0UyIOoYSs1CGd6+r/gTSIWYGCl4W3x0svA 1KIega/jCZXhuSbIolrJ+rVxulsRV8Yp0yTnlwhpzFlBMnQGb7AS7BM2Zo+AKdpV -----END CERTIFICATE-----Generated at Wed Sep 23 07:23:28 2026 by rpki-client