$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/D57C98A88C0311EFAA53FF12C4F9AE02.roa File: D57C98A88C0311EFAA53FF12C4F9AE02.roa (raw, json) Hash identifier: Yb/qxPAzJiLkKjk0COysI5j3RpY85yaJNQvUBrDuM3s= Subject key identifier: 7B:CE:12:44:FB:53:E9:C1:DD:64:26:7A:D1:8B:33:2B:A7:0C:1D:2E Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 19F1 Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/D57C98A88C0311EFAA53FF12C4F9AE02.roa Signing time: Sun 06 Sep 2026 16:31:28 +0000 ROA not before: Sun 06 Sep 2026 16:31:28 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 64231 IP address blocks: 103.99.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6641 (0x19f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Sep 6 16:31:28 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9d9560-f764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:aa:de:93:a7:3d:03:60:59:42:3b:0f:7a:10: 8e:d0:06:f3:76:1f:de:e8:41:65:f5:80:a9:5a:d1: af:c6:0d:44:e8:b6:87:62:24:38:7a:37:76:1b:a4: fb:1a:ee:91:0a:e7:4a:6b:f9:46:e1:49:f1:f3:23: 8a:0e:c8:bc:99:d3:ad:a5:c5:93:6a:4d:43:0d:d6: 5c:32:52:0b:8f:a5:a9:23:1a:08:80:b0:ca:0a:30: e7:97:85:82:e0:4a:ff:12:19:4b:60:0d:50:c4:16: 2b:13:6e:55:f2:07:57:7c:a6:73:f7:e0:68:6a:5e: fd:fc:18:a6:bf:23:34:33:81:b8:ec:5e:54:8e:c6: 86:ad:8b:2c:3f:41:e0:91:cf:3d:67:12:ec:68:d8: 2e:74:8d:be:4e:0b:a2:65:99:6f:75:05:a9:96:d5: 23:a6:6a:52:65:7a:37:c5:9f:5c:fa:84:2e:41:ff: 51:01:b2:f8:1a:08:79:2f:06:2d:5e:62:7b:8b:1a: 60:fc:b0:f3:35:5a:2f:8e:0a:42:04:b7:f0:70:b3: c5:ca:25:d5:d4:d8:e4:4c:ca:0f:c2:50:1e:3e:d1: 7b:31:b2:f3:6c:da:d1:b8:8e:29:b1:bb:4e:cd:6d: 07:74:ad:02:5e:7b:25:b0:93:ce:78:95:a7:39:c8: b5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CE:12:44:FB:53:E9:C1:DD:64:26:7A:D1:8B:33:2B:A7:0C:1D:2E X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/D57C98A88C0311EFAA53FF12C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.42.0/24 Signature Algorithm: sha256WithRSAEncryption 06:d2:9d:d2:33:82:40:a2:2c:54:f3:bd:0e:8e:2b:74:6a:d8: 3f:8f:b1:78:eb:76:ab:2f:ca:e9:fe:d3:3e:0b:ac:96:ec:c6: b6:ed:01:a1:31:19:cb:bb:f4:6b:36:01:fa:d2:5d:0a:fd:cb: d2:b3:32:88:bb:a2:46:a0:51:87:1e:5f:89:b0:e5:28:6c:18: 1e:1c:ee:cc:2c:eb:10:74:98:68:87:64:bb:64:92:b2:84:90: 3a:7c:f9:53:2a:1b:3d:a1:74:3e:2c:8d:36:3d:0e:78:4d:1f: 8f:e8:4b:97:25:9c:2e:d2:f0:a0:f2:3d:97:ef:b8:49:c2:fb: 2d:70:81:f4:92:ad:29:c0:0a:03:25:e8:e8:da:dd:38:92:db: 61:fa:51:5b:bd:d8:53:1b:39:54:02:d8:8a:39:71:98:29:f4: 39:8a:95:ec:cc:fb:1b:d2:5a:7c:ec:d4:94:a9:e7:cd:7f:9b: 0d:23:5f:ad:25:8f:41:16:3c:49:6c:43:72:bf:45:33:f8:d3: 89:17:39:eb:b2:26:c8:21:29:e1:2e:32:34:96:50:b2:7a:ff: a1:2a:77:43:8e:f2:8a:d0:19:cd:42:c7:95:21:5c:99:27:5e: b8:98:54:28:49:8c:f1:08:01:26:bc:73:c1:bf:00:41:eb:11: 51:35:86:b3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjYwOTA2MTYzMTI4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlkOTU2MC1mNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qrek6c9A2BZQjsPehCO0Abzdh/e6EFl9YCpWtGvxg1E6LaHYiQ4ejd2G6T7 Gu6RCudKa/lG4Unx8yOKDsi8mdOtpcWTak1DDdZcMlILj6WpIxoIgLDKCjDnl4WC 4Er/EhlLYA1QxBYrE25V8gdXfKZz9+Boal79/BimvyM0M4G47F5UjsaGrYssP0Hg kc89ZxLsaNgudI2+TguiZZlvdQWpltUjpmpSZXo3xZ9c+oQuQf9RAbL4Ggh5LwYt XmJ7ixpg/LDzNVovjgpCBLfwcLPFyiXV1NjkTMoPwlAePtF7MbLzbNrRuI4psbtO zW0HdK0CXnslsJPOeJWnOci17QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHvOEkT7 U+nB3WQmetGLMyunDB0uMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg5MkEvRjgxMEU5QTQ4ODE1MTFFNzhCRjdEMTRFQzRGOUFFMDIvRDU3Qzk4QTg4 QzAzMTFFRkFBNTNGRjEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ2MqMA0GCSqGSIb3DQEBCwUAA4IBAQAG0p3SM4JAoixU870Ojit0 atg/j7F463arL8rp/tM+C6yW7Ma27QGhMRnLu/RrNgH60l0K/cvSszKIu6JGoFGH Hl+JsOUobBgeHO7MLOsQdJhoh2S7ZJKyhJA6fPlTKhs9oXQ+LI02PQ54TR+P6EuX JZwu0vCg8j2X77hJwvstcIH0kq0pwAoDJejo2t04ktth+lFbvdhTGzlUAtiKOXGY KfQ5ipXszPsb0lp87NSUqefNf5sNI1+tJY9BFjxJbENyv0Uz+NOJFznrsibIISnh LjI0llCyev+hKndDjvKK0BnNQseVIVyZJ164mFQoSYzxCAEmvHPBvwBB6xFRNYaz -----END CERTIFICATE-----Generated at Sun Oct 4 17:44:10 2026 by rpki-client