$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/660A349884C511EFB2831C16C4F9AE02.roa File: 660A349884C511EFB2831C16C4F9AE02.roa (raw, json) Hash identifier: JOI1tvb1poGQyqT/UOQ+mAjid6ZVItCsv6CFBamipUs= Subject key identifier: C1:4D:C2:E9:A0:12:72:6D:8D:3F:87:92:28:B9:8B:87:9F:84:D8:47 Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 06BA Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/660A349884C511EFB2831C16C4F9AE02.roa Signing time: Thu 12 Nov 2026 22:42:40 +0000 ROA not before: Thu 12 Nov 2026 22:42:40 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 6134 IP address blocks: 43.248.8.0/22 maxlen: 24 103.39.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1722 (0x6ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Nov 12 22:42:40 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6af640e0-5b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:bb:de:4b:56:aa:9c:17:63:9f:5f:b0:3c: 46:b2:9f:62:f2:db:58:39:b9:95:2b:5f:c8:b9:49: 42:a4:b3:e4:ad:f1:89:45:f2:8d:bc:72:54:d2:12: dd:44:35:93:d5:9d:37:b9:d2:97:e3:79:15:18:1d: 31:5a:db:48:50:00:39:49:21:27:e6:28:d1:86:bf: 77:ae:47:6b:af:66:4b:52:a0:16:c7:54:ab:d1:ce: 79:89:08:8c:b9:63:a6:f2:12:40:6a:66:dc:17:1a: 2d:4e:26:b1:5a:3d:f3:b7:50:08:41:04:39:77:46: cc:08:fb:90:6b:07:f1:58:fd:67:aa:cd:eb:39:3d: 09:9d:4f:53:e5:14:53:86:f6:c6:95:47:0e:9b:1b: f5:dd:30:9d:43:2c:5a:36:f8:98:df:ac:b2:ab:8c: 22:fd:2d:06:e9:35:9b:57:93:42:1f:b6:43:d0:d2: 3b:1c:4b:0c:28:12:d3:88:d2:77:64:a4:ff:1a:f5: 0f:56:f0:3a:a0:ee:b0:ec:b1:6e:b9:1f:3a:9f:55: 46:7e:7a:4a:6c:ae:97:a4:a6:01:9f:bc:15:5a:2e: 33:b4:bd:99:7f:5a:40:61:2e:f2:31:87:16:f6:03: ae:68:86:ac:db:8d:38:ef:bf:fe:69:79:f3:70:98: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4D:C2:E9:A0:12:72:6D:8D:3F:87:92:28:B9:8B:87:9F:84:D8:47 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/660A349884C511EFB2831C16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.8.0/22 103.39.76.0/22 Signature Algorithm: sha256WithRSAEncryption 03:ff:ce:dd:04:03:d0:bd:94:e3:51:30:30:e7:da:cb:59:a2: 87:09:74:0f:80:31:af:8c:4a:31:d9:b5:32:53:46:77:28:a5: a5:a1:7c:15:39:95:36:4b:a0:da:05:4f:77:1f:65:64:2a:dc: e8:7f:c1:10:0b:ae:6b:e4:65:c9:aa:b8:2a:f9:b8:04:f0:94: 1c:c4:36:59:f8:67:36:8f:78:5d:13:9a:d6:7d:8c:e8:59:3a: 68:fa:ec:ed:c8:8d:ae:29:e2:ce:bf:a9:9f:4a:c4:4a:ae:e0: cc:a1:22:b1:d1:21:eb:ec:59:9d:ec:67:a7:57:24:b2:40:14: ad:ec:93:1b:6c:ac:90:24:69:77:99:52:58:1b:62:96:1c:60: c0:a8:7c:be:a0:af:df:12:91:fe:1c:bb:d5:1b:5c:ea:98:9c: f3:97:cd:20:cc:59:5e:17:bf:19:e4:0f:55:7c:3e:2d:0a:8a: 4b:1b:a1:05:bf:89:3b:e8:ff:e3:3a:52:b4:fa:a4:4b:40:28: 7e:d6:a9:7f:d6:86:8b:bb:03:07:ad:9f:5a:79:00:6f:5d:c1: a6:38:95:22:d0:16:ec:0a:6f:92:60:3c:71:b5:5e:13:07:5b: 80:4b:fe:88:8b:8d:71:d2:b5:91:c5:b9:84:bf:4e:3b:8e:ec: b4:34:74:f2 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjYxMTEyMjI0MjQwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWY2NDBlMC01YjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf+73ktWqpwXY59fsDxGsp9i8ttYObmVK1/IuUlCpLPkrfGJRfKNvHJU0hLd RDWT1Z03udKX43kVGB0xWttIUAA5SSEn5ijRhr93rkdrr2ZLUqAWx1Sr0c55iQiM uWOm8hJAambcFxotTiaxWj3zt1AIQQQ5d0bMCPuQawfxWP1nqs3rOT0JnU9T5RRT hvbGlUcOmxv13TCdQyxaNviY36yyq4wi/S0G6TWbV5NCH7ZD0NI7HEsMKBLTiNJ3 ZKT/GvUPVvA6oO6w7LFuuR86n1VGfnpKbK6XpKYBn7wVWi4ztL2Zf1pAYS7yMYcW 9gOuaIas240477/+aXnzcJhGJQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMFNwumg EnJtjT+Hkii5i4efhNhHMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA5NEQvNDBCNzM4NkVERTgxMTFFQkE5RkM3RDcyQzRGOUFFMDIvNjYwQTM0OTg4 NEM1MTFFRkIyODMxQzE2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/gIAwQCZydMMA0GCSqGSIb3DQEBCwUAA4IBAQAD/87dBAPQvZTj UTAw59rLWaKHCXQPgDGvjEox2bUyU0Z3KKWloXwVOZU2S6DaBU93H2VkKtzof8EQ C65r5GXJqrgq+bgE8JQcxDZZ+Gc2j3hdE5rWfYzoWTpo+uztyI2uKeLOv6mfSsRK ruDMoSKx0SHr7Fmd7GenVySyQBSt7JMbbKyQJGl3mVJYG2KWHGDAqHy+oK/fEpH+ HLvVG1zqmJzzl80gzFleF78Z5A9VfD4tCopLG6EFv4k76P/jOlK0+qRLQCh+1ql/ 1oaLuwMHrZ9aeQBvXcGmOJUi0BbsCm+SYDxxtV4TB1uAS/6Ii41x0rWRxbmEv047 juy0NHTy -----END CERTIFICATE-----Generated at Sun Nov 15 14:30:46 2026 by rpki-client