$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa File: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (raw, json) Hash identifier: 7Q85h+rzys9gaPrVfQEFahP/UVW/+V+RwB+tsVQHhNs= Subject key identifier: 01:6B:E5:F6:3F:35:C4:F2:D6:A7:E7:B7:4C:E5:21:D6:C2:67:70:C9 Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Certificate serial: 01C3 Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa Signing time: Tue 03 Nov 2026 04:53:01 +0000 ROA not before: Tue 03 Nov 2026 04:53:01 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 136557 IP address blocks: 103.26.236.0/24 maxlen: 24 103.26.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Validity Not Before: Nov 3 04:53:01 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ae968ad-ec71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:ad:7a:29:f6:96:d1:7d:fe:ef:ff:69:8b: 4d:e8:85:47:7c:37:7f:be:0c:a4:c4:07:ad:e5:42: b4:10:96:ed:e4:57:c4:87:0f:58:89:e3:f9:e2:42: 3d:ae:7e:10:e9:c2:86:ad:99:ea:31:ba:ba:84:68: fc:c6:17:8e:2d:12:4a:9b:39:71:bf:e8:99:e8:5a: 64:bb:c9:44:1a:ab:d2:b3:c8:27:c0:3e:f0:6a:bd: 10:36:bd:22:a1:13:eb:fd:34:81:9a:52:d5:1a:30: 20:9e:6e:c0:aa:f2:de:63:d1:71:07:6a:74:92:21: 72:99:6e:4d:82:d4:f2:fb:a7:0b:be:99:67:f7:d2: f8:cf:c3:7a:ae:75:3d:d0:72:e2:25:f9:1d:b5:88: 2f:59:d9:14:84:4a:b6:c7:1d:a1:3c:bf:06:eb:ce: 02:6a:8d:61:e0:8f:76:a5:49:ed:a5:c7:bd:69:6c: 7d:7b:27:0f:8f:b5:5d:0c:eb:1b:60:83:29:69:e7: a8:a8:ae:4a:d2:bb:98:d1:91:52:58:fd:ae:b4:4d: 6f:61:d5:97:e2:a9:f7:4b:0e:00:b6:e0:d4:ac:1b: cd:32:37:80:29:c5:26:79:e0:3e:ad:de:d4:68:f0: 8b:db:e2:4e:c3:55:d8:22:5e:88:d6:6e:c5:dd:cf: fc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6B:E5:F6:3F:35:C4:F2:D6:A7:E7:B7:4C:E5:21:D6:C2:67:70:C9 X509v3 Authority Key Identifier: keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.26.236.0/23 Signature Algorithm: sha256WithRSAEncryption 88:fd:98:b8:aa:17:98:56:38:48:ad:52:36:b0:f6:a1:1d:8a: 50:40:8c:30:e4:a7:4a:33:ec:aa:cc:b0:2c:20:69:7f:77:51: 6f:45:2d:c8:b4:94:0c:68:32:f6:29:90:99:42:ea:08:8f:bc: 97:3c:5c:b7:e8:37:85:6e:d3:16:b7:91:38:9e:6c:69:84:ad: ba:ce:cd:72:02:1f:8f:f5:48:0e:51:ba:47:6d:88:3c:b6:f1: 64:55:e9:5a:11:86:d4:b3:c9:27:74:57:56:30:eb:3a:25:54: ac:4a:69:4f:75:ce:67:4e:02:23:40:43:e9:1c:d1:4c:16:4e: 26:c8:80:a0:ed:bb:e4:f8:44:87:d5:8d:0c:be:e7:a3:4d:52: 6c:9c:58:cc:56:46:b4:73:b9:38:ac:94:3a:e3:73:5b:6b:5f: 99:6b:a8:0a:df:fa:4d:aa:08:c9:aa:38:72:da:55:52:bf:59: c1:84:dc:86:1c:e1:77:22:e1:d7:45:80:d2:34:1d:91:62:f7: 25:44:89:cc:d0:90:55:f3:7e:9f:9c:04:53:75:f3:45:47:a1: b5:6a:d1:0f:7d:fb:62:5c:9d:9b:39:23:ac:23:33:b5:82:e4: 33:80:d0:66:c7:f3:42:81:76:73:d9:fd:37:db:49:0c:b7:22: d2:ad:45:93 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3OUYxMTAvBgNVBAUTKDgyQjREMjcxREUyMTJFMDYzMzVDMEI0NUU2NjUxN0I1 MDhCODM1MTYwHhcNMjYxMTAzMDQ1MzAxWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU5NjhhZC1lYzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOmtein2ltF9/u//aYtN6IVHfDd/vgykxAet5UK0EJbt5FfEhw9YieP54kI9 rn4Q6cKGrZnqMbq6hGj8xheOLRJKmzlxv+iZ6Fpku8lEGqvSs8gnwD7war0QNr0i oRPr/TSBmlLVGjAgnm7AqvLeY9FxB2p0kiFymW5NgtTy+6cLvpln99L4z8N6rnU9 0HLiJfkdtYgvWdkUhEq2xx2hPL8G684Cao1h4I92pUntpce9aWx9eycPj7VdDOsb YIMpaeeoqK5K0ruY0ZFSWP2utE1vYdWX4qn3Sw4AtuDUrBvNMjeAKcUmeeA+rd7U aPCL2+JOw1XYIl6I1m7F3c/8PwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAFr5fY/ NcTy1qfnt0zlIdbCZ3DJMB8GA1UdIwQYMBaAFIK00nHeIS4GM1wLReZlF7UIuDUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzc5Ri82Rjk5RDRGMDND RjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExnWXpYQXRGNW1VWHRRaTRO UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM3OUYvNkY5OUQ0RjAzQ0Y5MTFFRkEwQTA2Rjg2QzRGOUFFMDIvNjIxNDI4Q0Uz Q0ZCMTFFRkIwQkYwNDBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZxrsMA0GCSqGSIb3DQEBCwUAA4IBAQCI/Zi4qheYVjhIrVI2sPah HYpQQIww5KdKM+yqzLAsIGl/d1FvRS3ItJQMaDL2KZCZQuoIj7yXPFy36DeFbtMW t5E4nmxphK26zs1yAh+P9UgOUbpHbYg8tvFkVelaEYbUs8kndFdWMOs6JVSsSmlP dc5nTgIjQEPpHNFMFk4myICg7bvk+ESH1Y0MvuejTVJsnFjMVka0c7k4rJQ643Nb a1+Za6gK3/pNqgjJqjhy2lVSv1nBhNyGHOF3IuHXRYDSNB2RYvclRInM0JBV836f nARTdfNFR6G1atEPfftiXJ2bOSOsIzO1guQzgNBmx/NCgXZz2f0320kMtyLSrUWT -----END CERTIFICATE-----Generated at Sun Nov 15 11:17:56 2026 by rpki-client