$ rpki-client -vvvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/4DF2AB2886FE11F194514C90ABEE528E.roa File: 4DF2AB2886FE11F194514C90ABEE528E.roa (raw, json) Hash identifier: XfRORHPDEUdxdb4LVfe48BfYJNOGVDgQbH1NwVOIeuc= Subject key identifier: 42:B3:05:7E:58:FD:7C:12:69:8B:B7:46:E1:3C:C4:50:45:9C:ED:4F Certificate issuer: /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Certificate serial: 2713 Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/4DF2AB2886FE11F194514C90ABEE528E.roa Signing time: Mon 31 Aug 2026 16:22:57 +0000 ROA not before: Mon 31 Aug 2026 16:22:57 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 38203 IP address blocks: 103.4.116.0/22 maxlen: 24 103.234.200.0/22 maxlen: 22 103.234.200.0/24 maxlen: 24 103.234.201.0/24 maxlen: 24 103.234.202.0/24 maxlen: 24 103.234.203.0/24 maxlen: 24 103.251.120.0/22 maxlen: 24 163.47.144.0/22 maxlen: 24 202.51.176.0/20 maxlen: 24 2402:b500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10003 (0x2713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91240E6, serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Validity Not Before: Aug 31 16:22:57 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a95aa61-4b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:b7:2b:4d:88:72:db:13:c5:ec:5d:b5:ab: 31:28:b5:b6:a2:cf:2e:52:b5:e7:76:a9:81:85:e2: 41:3b:bb:8a:19:ae:28:7f:64:ec:20:4e:0d:62:69: 8e:07:9e:1a:95:28:d2:54:95:87:aa:40:ba:dd:5b: a6:03:44:58:2f:9d:7e:b0:c2:1f:10:54:ad:2e:31: bf:b9:34:f0:c0:4d:84:41:d1:de:7c:3c:6c:7c:76: e3:61:5b:06:1b:15:18:48:2b:91:85:83:ee:55:f6: e2:88:c2:82:a4:d7:d4:2a:35:68:95:3a:03:a6:10: 3a:2a:5f:74:dd:75:c8:d5:6c:43:2f:e9:b8:03:0b: d0:90:8e:6c:0d:32:b9:32:6b:24:08:5b:c4:7c:2b: 52:8c:19:f4:36:3e:70:f6:0a:fd:db:9b:ca:1f:b1: 72:c5:76:70:51:df:2b:9d:4d:b1:99:ff:a8:f1:97: 4e:66:e9:85:68:5a:26:ea:0a:13:e6:18:55:88:9f: b9:d7:9c:75:29:dc:d1:21:07:e5:bc:e6:e6:90:12: c1:28:e7:3e:b2:b0:49:3c:62:59:f3:a1:31:03:8a: 46:2a:65:52:43:c9:2f:28:59:d9:7d:b7:1b:a4:0a: ee:0d:3f:bc:30:12:75:99:86:86:8e:ff:93:a7:e7: 62:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B3:05:7E:58:FD:7C:12:69:8B:B7:46:E1:3C:C4:50:45:9C:ED:4F X509v3 Authority Key Identifier: keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/4DF2AB2886FE11F194514C90ABEE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.4.116.0/22 103.234.200.0/22 103.251.120.0/22 163.47.144.0/22 202.51.176.0/20 IPv6: 2402:b500::/32 Signature Algorithm: sha256WithRSAEncryption 8b:c6:b4:48:27:ef:9c:cd:12:22:8e:fa:88:52:23:2d:93:8b: de:a3:b7:3a:a6:83:0e:7b:d7:c4:2b:0d:c2:ab:78:72:e1:4f: 7f:cd:ab:25:0e:bc:b1:d0:21:e5:50:87:b1:2a:49:33:34:18: 18:9f:ec:bf:a9:68:e4:b5:0e:93:18:a7:2e:d2:b2:08:8d:64: e2:01:fa:91:ae:47:2a:db:45:3f:4f:6e:99:a8:07:2e:d1:70: d3:7f:9c:31:dd:0c:7c:ac:0d:07:8a:61:70:4b:78:87:cf:ff: e8:52:42:c3:1f:3d:47:22:cf:96:f4:da:56:17:70:d2:cb:5f: 39:1f:c2:5d:f8:3f:b7:40:e9:ce:3f:0c:53:43:aa:ea:7b:54: ac:b2:ae:82:92:aa:08:90:86:62:00:24:9a:be:04:da:d4:3f: 33:51:39:6a:bb:89:55:41:df:be:29:94:58:94:e1:6d:d8:eb: e6:7c:2e:d0:f3:38:31:b7:15:a7:ac:be:74:70:78:ef:6f:08: ba:43:0f:00:d2:52:a8:a6:95:f8:a0:87:cb:66:4d:d4:f0:69: 48:17:ce:8c:8c:f7:84:da:ba:e0:f4:f6:87:f2:32:b3:29:9e: c5:20:ba:36:8d:cb:23:b5:13:f4:0b:ce:ee:10:07:a8:28:31: b0:d0:ad:76 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICJxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwRTYxMTAvBgNVBAUTKDZEQ0U1MkY5QTIyOENCRjZGMzBDRDU1RDQzMzg0RDEy Njg0ODdCNjUwHhcNMjYwODMxMTYyMjU3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1YWE2MS00YjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVW3K02IctsTxexdtasxKLW2os8uUrXndqmBheJBO7uKGa4of2TsIE4NYmmO B54alSjSVJWHqkC63VumA0RYL51+sMIfEFStLjG/uTTwwE2EQdHefDxsfHbjYVsG GxUYSCuRhYPuVfbiiMKCpNfUKjVolToDphA6Kl903XXI1WxDL+m4AwvQkI5sDTK5 MmskCFvEfCtSjBn0Nj5w9gr925vKH7FyxXZwUd8rnU2xmf+o8ZdOZumFaFom6goT 5hhViJ+515x1KdzRIQflvObmkBLBKOc+srBJPGJZ86ExA4pGKmVSQ8kvKFnZfbcb pAruDT+8MBJ1mYaGjv+Tp+diDwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFEKzBX5Y /XwSaYu3RuE8xFBFnO1PMB8GA1UdIwQYMBaAFG3OUvmiKMv28wzVXUM4TRJoSHtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDBFNi82NjA3NDJDOEZE MjExMUU0ODhBQjBDMzRDNEY5QUUwMi9iYzVTLWFJb3lfYnpETlZkUXpoTkVtaEll MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjNVMtYUlveV9iekROVmRRemhORW1oSWUyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQwRTYvNjYwNzQyQzhGRDIxMTFFNDg4QUIwQzM0QzRGOUFFMDIvNERGMkFCMjg4 NkZFMTFGMTk0NTE0QzkwQUJFRTUyOEUucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCZwR0AwQCZ+rIAwQCZ/t4AwQCoy+QAwQEyjOwMA0EAgACMAcDBQAk ArUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLxrRIJ++czRIijvqIUiMtk4veo7c6poMO e9fEKw3Cq3hy4U9/zaslDryx0CHlUIexKkkzNBgYn+y/qWjktQ6TGKcu0rIIjWTi AfqRrkcq20U/T26ZqAcu0XDTf5wx3Qx8rA0HimFwS3iHz//oUkLDHz1HIs+W9NpW F3DSy185H8Jd+D+3QOnOPwxTQ6rqe1Sssq6CkqoIkIZiACSavgTa1D8zUTlqu4lV Qd++KZRYlOFt2OvmfC7Q8zgxtxWnrL50cHjvbwi6Qw8A0lKoppX4oIfLZk3U8GlI F86MjPeE2rrg9PaH8jKzKZ7FILo2jcsjtRP0C87uEAeoKDGw0K12 -----END CERTIFICATE-----Generated at Tue Sep 22 17:55:11 2026 by rpki-client