$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/06F73C70ABD011F0977C9F10C4F9AE02.roa File: 06F73C70ABD011F0977C9F10C4F9AE02.roa (raw, json) Hash identifier: cBtPE8rtP5QtqkrN/0U2QgCH4VD5OiwkyNBaiuigMVc= Subject key identifier: 2B:E6:1A:64:46:1B:86:19:55:31:97:E8:71:7F:A8:8B:BE:3C:99:5C Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: 01AF Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/06F73C70ABD011F0977C9F10C4F9AE02.roa Signing time: Wed 11 Nov 2026 04:51:16 +0000 ROA not before: Wed 11 Nov 2026 04:51:16 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 26658 IP address blocks: 103.197.168.0/22 maxlen: 24 220.158.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Nov 11 04:51:16 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6af3f443-af2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:30:95:b5:47:ca:44:ba:c0:dd:c7:3d:1b: c5:cd:9c:65:64:48:a7:57:42:69:cc:9d:c9:fa:5a: 91:cf:ad:44:b5:b6:5a:53:3c:48:54:75:a4:55:f6: e6:71:83:a8:61:18:08:43:e7:c3:2a:59:71:38:0c: d3:11:c5:45:83:f7:92:05:8b:64:ee:51:32:b4:ef: 64:5b:05:7a:b0:bb:56:8e:c9:c4:de:74:f6:ec:23: b2:06:52:c0:24:09:40:3a:38:d1:a5:e6:b1:e2:0d: 92:75:19:56:58:66:c8:d0:5f:79:0d:04:d4:c2:fa: 68:1a:39:0c:f0:7f:bc:08:98:76:64:0f:c2:30:43: 50:ca:79:c2:d4:e7:51:8d:47:57:64:5a:37:19:1a: 26:72:96:05:c7:34:78:fe:73:5d:c1:87:4b:f4:1b: fe:41:b0:f7:3a:11:5f:01:cb:44:e4:07:a4:22:ac: 35:f5:ca:27:de:bc:8c:b0:3a:b4:fd:f9:b3:60:77: a4:80:4f:20:07:8a:66:8e:91:05:f5:97:00:c7:0c: 55:bd:f8:2b:dd:ef:2c:50:9b:c9:26:2e:92:fa:f4: b4:48:e2:4d:c5:48:58:e4:12:e1:5c:d8:dd:c2:d5: a0:9c:3f:8d:e5:02:0d:af:05:a7:81:f0:c2:8c:34: 0c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E6:1A:64:46:1B:86:19:55:31:97:E8:71:7F:A8:8B:BE:3C:99:5C X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/06F73C70ABD011F0977C9F10C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.197.168.0/22 220.158.224.0/22 Signature Algorithm: sha256WithRSAEncryption a5:a6:a1:94:22:f0:03:84:42:a5:de:c4:1e:d8:2c:34:bd:a0: 84:6e:b0:a3:e1:f4:b6:82:57:ba:75:e3:5a:6b:40:d0:42:8b: 05:1e:1d:7b:41:89:92:54:e8:a6:4e:1f:f2:8a:79:c1:cc:9e: 82:96:29:82:90:1b:d9:9a:37:d0:44:8e:15:4a:01:64:6d:5c: 40:f7:aa:71:49:7d:c4:78:86:ac:75:e9:b5:f9:5f:a1:10:dd: dc:76:1d:c9:03:71:b5:d7:c6:02:27:23:6a:4e:a5:73:01:48: 74:fb:ab:36:b3:b0:48:2e:6e:f6:93:83:3f:ee:57:4e:65:cf: ff:b8:64:17:50:16:bc:c6:85:68:35:28:d1:85:ae:89:39:29: db:89:85:4e:a7:dd:19:d0:4a:3f:87:1d:5f:83:8c:3b:27:22: 19:74:6e:ae:24:c8:07:e8:e9:c5:03:64:4b:1b:c8:7d:9a:3c: 7e:3b:93:f3:65:54:0d:04:a0:0b:78:79:e9:49:2e:eb:a4:35: ef:b8:f5:ba:92:17:95:06:52:c1:ed:aa:7b:f0:f8:02:ff:64: 89:71:eb:3e:2f:e9:45:54:74:ec:55:76:6e:70:f6:46:6c:62: 6a:21:2e:16:a7:89:e2:b2:cd:33:0a:3f:f0:9d:19:31:b4:08: 97:0e:db:e0 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjYxMTExMDQ1MTE2WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWYzZjQ0My1hZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu0wlbVHykS6wN3HPRvFzZxlZEinV0JpzJ3J+lqRz61EtbZaUzxIVHWkVfbm cYOoYRgIQ+fDKllxOAzTEcVFg/eSBYtk7lEytO9kWwV6sLtWjsnE3nT27COyBlLA JAlAOjjRpeax4g2SdRlWWGbI0F95DQTUwvpoGjkM8H+8CJh2ZA/CMENQynnC1OdR jUdXZFo3GRomcpYFxzR4/nNdwYdL9Bv+QbD3OhFfActE5AekIqw19con3ryMsDq0 /fmzYHekgE8gB4pmjpEF9ZcAxwxVvfgr3e8sUJvJJi6S+vS0SOJNxUhY5BLhXNjd wtWgnD+N5QINrwWngfDCjDQM2QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCvmGmRG G4YZVTGX6HF/qIu+PJlcMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlFQkEvRkEzMjBDREE1QURDMTFFRkI1NjA2NjM3QzRGOUFFMDIvMDZGNzNDNzBB QkQwMTFGMDk3N0M5RjEwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ8WoAwQC3J7gMA0GCSqGSIb3DQEBCwUAA4IBAQClpqGUIvADhEKl 3sQe2Cw0vaCEbrCj4fS2gle6deNaa0DQQosFHh17QYmSVOimTh/yinnBzJ6ClimC kBvZmjfQRI4VSgFkbVxA96pxSX3EeIasdem1+V+hEN3cdh3JA3G118YCJyNqTqVz AUh0+6s2s7BILm72k4M/7ldOZc//uGQXUBa8xoVoNSjRha6JOSnbiYVOp90Z0Eo/ hx1fg4w7JyIZdG6uJMgH6OnFA2RLG8h9mjx+O5PzZVQNBKALeHnpSS7rpDXvuPW6 kheVBlLB7ap78PgC/2SJces+L+lFVHTsVXZucPZGbGJqIS4Wp4niss0zCj/wnRkx tAiXDtvg -----END CERTIFICATE-----Generated at Sun Nov 15 23:40:41 2026 by rpki-client