$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/3D60B6FCFA5E11EFB84AF068C4F9AE02.roa File: 3D60B6FCFA5E11EFB84AF068C4F9AE02.roa (raw, json) Hash identifier: eERmryIuppZrUFAb8TiqZfIWg/53A0ZkoDjAmmurm48= Subject key identifier: C5:7E:76:5E:5D:88:1E:A4:C8:69:6E:E3:34:2F:C5:3E:A3:CC:F9:D9 Certificate issuer: /CN=A91F9B6C/serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8 Certificate serial: 011D Authority key identifier: 47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/3D60B6FCFA5E11EFB84AF068C4F9AE02.roa Signing time: Thu 27 Aug 2026 05:57:09 +0000 ROA not before: Thu 27 Aug 2026 05:57:09 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 58437 IP address blocks: 103.29.250.0/24 maxlen: 24 103.29.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B6C, serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8 Validity Not Before: Aug 27 05:57:09 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a8fd1b5-d30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:74:4c:c6:1f:95:a6:fb:ac:52:ff:2b:5f: cc:23:2b:f5:bf:fd:7d:af:3e:bc:d3:7b:06:23:df: 4e:9e:dc:d0:32:01:d0:f2:05:3b:8f:3a:75:1a:aa: 25:b8:ab:47:ef:ec:a6:0b:12:ca:b8:20:22:78:77: c2:70:c7:9d:48:f1:95:32:92:11:dc:1e:ee:58:d2: 11:5e:39:7a:bc:a9:83:ea:04:04:3f:1e:50:4f:e6: 6f:24:06:b1:2c:ba:4b:d1:bd:22:37:cb:92:f5:24: e8:91:6a:e8:78:e8:9d:8c:90:07:ac:0d:bf:86:3a: 1e:0a:1a:73:5d:97:85:e8:83:16:0b:d0:83:0f:69: 72:41:9a:30:69:98:3c:52:db:30:2d:c3:0d:cc:ce: 17:bb:a0:a4:db:2b:9d:60:d2:d7:f4:e6:28:1b:50: a5:6d:5d:69:27:42:1d:74:c4:ea:4d:0c:9e:e2:a8: 8e:b9:26:ad:b4:87:55:1e:bd:c4:45:f1:86:f3:b7: 18:f5:85:0f:86:f0:c1:a1:76:8b:03:08:50:d4:49: 2f:9c:95:f9:ea:82:85:3e:f5:2c:91:28:1f:d3:df: 97:f7:1c:93:c5:7f:d6:b7:4e:14:10:52:03:15:1e: 62:9b:05:ec:ee:0e:b0:ca:54:d5:b6:99:b7:06:c7: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7E:76:5E:5D:88:1E:A4:C8:69:6E:E3:34:2F:C5:3E:A3:CC:F9:D9 X509v3 Authority Key Identifier: keyid:47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/3D60B6FCFA5E11EFB84AF068C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.29.250.0/23 Signature Algorithm: sha256WithRSAEncryption 12:a4:15:98:a8:99:7a:44:36:d8:b8:6f:95:46:2b:26:3a:52: 6e:b0:a0:ac:0c:2a:8d:a2:dc:a0:6b:c3:74:69:bc:57:74:c2: fb:55:1e:ba:18:b5:c5:7c:96:ae:39:12:e3:55:4a:52:cc:49: 74:8b:76:67:74:25:3a:e5:a9:f8:86:9e:b5:18:e2:c0:a1:08: 5b:3d:42:89:c5:dd:dd:04:5b:72:51:9b:74:60:74:63:2b:f5: f6:79:69:35:43:97:c5:db:e6:3f:76:fe:85:ef:d1:0e:18:56: 05:f4:72:5a:63:67:32:49:c4:2a:4c:b8:34:f9:d0:38:97:34: 00:27:44:d2:d3:4b:c9:af:65:ca:65:73:31:26:41:c3:96:0a: 92:c9:e5:eb:99:bb:0d:94:45:fc:b7:0e:4e:52:1a:23:f7:47: 3e:b1:04:dc:06:6e:20:2a:aa:0f:8d:53:59:81:81:bb:07:bd: a5:1d:ae:07:3f:c8:68:14:3e:c7:08:89:3b:19:ca:84:36:e8: 04:b6:19:86:61:dc:dc:31:9d:61:d3:d6:73:e2:cb:ae:73:65: ab:f8:7e:e5:0c:d0:9a:cf:b0:a1:f8:0f:41:33:c1:fb:ad:e8: 0e:bc:ca:15:1d:7f:89:e1:40:24:c1:06:65:87:b7:63:a1:2a: 03:b1:f2:29 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCNkMxMTAvBgNVBAUTKDQ3NjdCNjkzQkQ4NDYyRUVBRkE4M0Q5RTgwM0M5RDI4 NkI2MjFEQzgwHhcNMjYwODI3MDU1NzA5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmZDFiNS1kMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5V0TMYflab7rFL/K1/MIyv1v/19rz6803sGI99OntzQMgHQ8gU7jzp1Gqol uKtH7+ymCxLKuCAieHfCcMedSPGVMpIR3B7uWNIRXjl6vKmD6gQEPx5QT+ZvJAax LLpL0b0iN8uS9STokWroeOidjJAHrA2/hjoeChpzXZeF6IMWC9CDD2lyQZowaZg8 UtswLcMNzM4Xu6Ck2yudYNLX9OYoG1ClbV1pJ0IddMTqTQye4qiOuSattIdVHr3E RfGG87cY9YUPhvDBoXaLAwhQ1EkvnJX56oKFPvUskSgf09+X9xyTxX/Wt04UEFID FR5imwXs7g6wylTVtpm3Bsd1BwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMV+dl5d iB6kyGlu4zQvxT6jzPnZMB8GA1UdIwQYMBaAFEdntpO9hGLur6g9noA8nShrYh3I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUI2Qy9EN0RCMEEwOEZB NUQxMUVGQUUzNzRENjhDNEY5QUUwMi9SMmUyazcyRVl1NnZxRDJlZ0R5ZEtHdGlI Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyZTJrNzJFWXU2dnFEMmVnRHlkS0d0aUhjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjlCNkMvRDdEQjBBMDhGQTVEMTFFRkFFMzc0RDY4QzRGOUFFMDIvM0Q2MEI2RkNG QTVFMTFFRkI4NEFGMDY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZx36MA0GCSqGSIb3DQEBCwUAA4IBAQASpBWYqJl6RDbYuG+VRism OlJusKCsDCqNotyga8N0abxXdML7VR66GLXFfJauORLjVUpSzEl0i3ZndCU65an4 hp61GOLAoQhbPUKJxd3dBFtyUZt0YHRjK/X2eWk1Q5fF2+Y/dv6F79EOGFYF9HJa Y2cyScQqTLg0+dA4lzQAJ0TS00vJr2XKZXMxJkHDlgqSyeXrmbsNlEX8tw5OUhoj 90c+sQTcBm4gKqoPjVNZgYG7B72lHa4HP8hoFD7HCIk7GcqENugEthmGYdzcMZ1h 09Zz4suuc2Wr+H7lDNCaz7Ch+A9BM8H7regOvMoVHX+J4UAkwQZlh7djoSoDsfIp -----END CERTIFICATE-----Generated at Wed Sep 23 05:51:51 2026 by rpki-client