$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/68C425FC1BBF11ED9F87C083C4F9AE02.roa File: 68C425FC1BBF11ED9F87C083C4F9AE02.roa (raw, json) Hash identifier: rKcpywHUWZc0Yptxqltu8Zb4nVuOO7P8qnMgqqymIZk= Subject key identifier: D2:40:CC:EF:52:D7:ED:68:15:4F:59:3E:F6:46:F3:8A:51:69:67:3B Certificate issuer: /CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA Certificate serial: 0348 Authority key identifier: 2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/68C425FC1BBF11ED9F87C083C4F9AE02.roa Signing time: Mon 31 Aug 2026 01:49:28 +0000 ROA not before: Mon 31 Aug 2026 01:49:28 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 150152 IP address blocks: 103.95.108.0/23 maxlen: 23 103.95.108.0/24 maxlen: 24 103.95.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5753, serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA Validity Not Before: Aug 31 01:49:28 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a94dda8-6d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:97:1f:99:38:bf:61:61:30:b9:18:b4:4a: 8f:c2:e9:9a:b7:82:e1:c4:74:ea:cd:57:ca:8a:e3: a3:2a:3c:30:d1:3a:e8:40:b0:c3:eb:17:61:02:b9: af:7b:93:28:a4:8a:5e:ab:8f:18:ff:1e:6d:94:ba: 2a:30:f7:41:f4:ef:cf:44:fc:d6:94:30:5b:49:87: bb:f7:75:7d:95:24:85:4a:92:f4:f1:57:d4:35:9a: 9f:3a:fe:fa:cb:f6:e0:7d:ce:85:24:d4:1a:91:cf: 28:44:6a:88:2c:97:01:e5:35:19:a5:2c:36:ba:0a: 14:d0:bd:c6:cc:db:9c:1e:6a:5b:6d:31:66:b9:f3: 48:01:b8:9d:e1:46:d5:35:58:b6:30:73:c5:ee:4e: 02:eb:ae:d6:14:4d:c9:a3:ab:70:15:2f:7b:de:28: 92:25:8d:00:56:bb:a5:4c:bc:a4:26:b1:3e:bd:16: ab:72:c8:8e:7e:c2:f6:fc:0b:cb:f5:0f:a1:31:6d: e2:4e:1e:11:95:f7:5b:e6:59:68:b0:ac:8f:9c:60: 84:f5:e5:1e:0c:cd:e4:73:70:7a:70:b7:44:73:7e: e1:49:98:de:08:5a:52:c0:9d:7e:22:5d:57:ba:7e: b7:08:a2:b7:bb:b8:44:a9:38:d8:24:62:9d:d3:79: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:40:CC:EF:52:D7:ED:68:15:4F:59:3E:F6:46:F3:8A:51:69:67:3B X509v3 Authority Key Identifier: keyid:2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/68C425FC1BBF11ED9F87C083C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.95.108.0/23 Signature Algorithm: sha256WithRSAEncryption 05:a5:21:ec:f8:bd:dd:2c:6d:6f:1e:b3:c1:58:ad:e8:1a:25: 02:77:56:c3:06:46:50:f8:ae:9a:40:9f:a1:13:58:7d:66:f0: 0c:8b:d3:c3:0e:a0:d0:19:73:e6:bd:ad:41:1d:7d:82:93:ef: b4:61:ae:6a:50:ff:f1:45:8e:75:00:ec:25:ae:b7:a0:ed:df: f7:00:aa:91:aa:26:72:ae:ae:1f:d4:1d:04:52:f9:2b:c2:35: 66:46:92:17:58:f4:d0:e6:74:68:34:07:3b:41:5a:53:9a:c2: f7:4a:3b:2c:e5:ed:d7:a9:79:23:29:1d:17:5c:21:ce:59:f7: 3f:f7:aa:11:d6:d9:31:98:1e:f9:0f:27:bb:e8:be:d8:1c:39: db:75:82:c8:98:25:c8:ff:80:c9:a0:49:a2:72:ff:0a:66:73: 9d:0f:cd:c6:cc:bd:7f:c8:ec:32:2f:1b:1f:dd:ea:a7:20:2c: 2a:42:70:14:0b:a7:d3:60:3b:c0:74:49:52:5f:70:16:22:90: ed:7a:c2:0b:18:d3:76:44:00:9d:17:31:ed:3c:f4:80:20:34: 36:58:d0:76:84:84:64:10:dd:89:c7:7f:ed:1b:c6:7d:fc:1f: a5:95:a5:e3:c6:01:58:d7:40:f4:7c:8b:9d:2f:f3:7c:2b:59: fc:41:87:92 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3NTMxMTAvBgNVBAUTKDJFNzM3MUUyMDY1Mzg0QUQxMUQ0MzM3RDBEMkVDRDFG NjZEMjE5Q0EwHhcNMjYwODMxMDE0OTI4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0ZGRhOC02ZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApM2XH5k4v2FhMLkYtEqPwumat4LhxHTqzVfKiuOjKjww0TroQLDD6xdhArmv e5MopIpeq48Y/x5tlLoqMPdB9O/PRPzWlDBbSYe793V9lSSFSpL08VfUNZqfOv76 y/bgfc6FJNQakc8oRGqILJcB5TUZpSw2ugoU0L3GzNucHmpbbTFmufNIAbid4UbV NVi2MHPF7k4C667WFE3Jo6twFS973iiSJY0AVrulTLykJrE+vRarcsiOfsL2/AvL 9Q+hMW3iTh4Rlfdb5llosKyPnGCE9eUeDM3kc3B6cLdEc37hSZjeCFpSwJ1+Il1X un63CKK3u7hEqTjYJGKd03n8lwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNJAzO9S 1+1oFU9ZPvZG84pRaWc7MB8GA1UdIwQYMBaAFC5zceIGU4StEdQzfQ0uzR9m0hnK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc1My83QjU2MjQ0NDFC QkIxMUVEQTg3RjZFNjdDNEY5QUUwMi9Mbk54NGdaVGhLMFIxRE45RFM3TkgyYlNH Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuTng0Z1pUaEswUjFETjlEUzdOSDJiU0djby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU3NTMvN0I1NjI0NDQxQkJCMTFFREE4N0Y2RTY3QzRGOUFFMDIvNjhDNDI1RkMx QkJGMTFFRDlGODdDMDgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ19sMA0GCSqGSIb3DQEBCwUAA4IBAQAFpSHs+L3dLG1vHrPBWK3o GiUCd1bDBkZQ+K6aQJ+hE1h9ZvAMi9PDDqDQGXPmva1BHX2Ck++0Ya5qUP/xRY51 AOwlrreg7d/3AKqRqiZyrq4f1B0EUvkrwjVmRpIXWPTQ5nRoNAc7QVpTmsL3Sjss 5e3XqXkjKR0XXCHOWfc/96oR1tkxmB75Dye76L7YHDnbdYLImCXI/4DJoEmicv8K ZnOdD83GzL1/yOwyLxsf3eqnICwqQnAUC6fTYDvAdElSX3AWIpDtesILGNN2RACd FzHtPPSAIDQ2WNB2hIRkEN2Jx3/tG8Z9/B+llaXjxgFY10D0fIudL/N8K1n8QYeS -----END CERTIFICATE-----Generated at Sun Sep 27 19:03:18 2026 by rpki-client