$ rpki-client -vvvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/B21D3C5AE21311E8B9660E3EC4F9AE02.roa File: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (raw, json) Hash identifier: WgtRhJ8unltzF7ajj0Mza3GoBGVDUrC6HGLDYBf/nsA= Subject key identifier: 68:08:63:4A:50:AD:52:71:59:18:CE:0D:E0:C3:25:3F:31:DE:DB:1E Certificate issuer: /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Certificate serial: 1D53 Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/B21D3C5AE21311E8B9660E3EC4F9AE02.roa Signing time: Tue 01 Sep 2026 19:28:33 +0000 ROA not before: Tue 01 Sep 2026 19:28:33 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136525 IP address blocks: 103.11.0.0/22 maxlen: 22 103.11.0.0/24 maxlen: 24 103.11.1.0/24 maxlen: 24 103.11.2.0/24 maxlen: 24 103.11.3.0/24 maxlen: 24 203.212.28.0/22 maxlen: 22 203.212.28.0/24 maxlen: 24 203.212.29.0/24 maxlen: 24 203.212.30.0/24 maxlen: 24 203.212.31.0/24 maxlen: 24 2400:9fc0::/32 maxlen: 32 2400:9fc0:1::/48 maxlen: 48 2400:9fc0:2::/48 maxlen: 48 2400:9fc0:3::/48 maxlen: 48 2400:9fc0:4::/48 maxlen: 48 2400:9fc0:5::/48 maxlen: 48 2400:9fc0:6::/48 maxlen: 48 2400:9fc0:7::/48 maxlen: 48 2400:9fc0:8::/48 maxlen: 48 2400:9fc0:9::/48 maxlen: 48 2400:9fc0:10::/48 maxlen: 48 2400:9fc0:11::/48 maxlen: 48 2400:9fc0:12::/48 maxlen: 48 2400:9fc0:13::/48 maxlen: 48 2400:9fc0:14::/48 maxlen: 48 2400:9fc0:99::/48 maxlen: 48 2400:9fc0:192::/48 maxlen: 48 2400:9fc0:1031::/48 maxlen: 48 2400:9fc0:1033::/48 maxlen: 48 2400:9fc0:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 16:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7507 (0x1d53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Validity Not Before: Sep 1 19:28:33 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a972760-2b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:3e:22:25:4a:dc:c6:bc:50:00:a2:8c:61: 11:68:d6:b1:26:ad:5c:07:d6:5e:45:4a:3d:db:15: 61:db:4e:1a:6b:37:20:3b:0e:8f:01:1e:21:33:e8: ae:20:ff:a3:c8:44:e0:55:40:62:ad:d1:71:f2:51: 5f:c0:2c:71:ed:32:1a:d9:cd:7e:ea:b9:1a:0e:81: 13:7a:b7:ce:b2:5f:56:cf:05:46:51:69:04:90:36: e8:53:3f:ad:8d:03:80:25:1a:13:f1:7c:e3:44:e7: 77:fe:c8:46:0b:da:26:e4:a9:3f:3e:78:8d:5d:29: 92:de:3a:78:1b:1f:16:b8:5d:b7:28:c6:85:36:ad: 66:95:11:26:04:6a:67:72:21:09:ee:9f:7e:0f:33: 01:58:4f:fb:f9:c9:45:da:9b:87:ec:97:00:65:2b: d2:c9:3a:17:14:c8:6d:97:99:7e:26:86:18:6e:39: a8:2c:31:8d:b7:e3:04:b9:b1:1a:8b:db:63:4c:e1: 80:2c:43:31:0a:eb:34:0d:df:5b:41:3a:8f:8c:5d: 49:9d:1f:d5:6d:08:83:4e:fc:5c:cb:e6:6a:15:55: 57:d0:f0:8f:e5:6d:6a:65:5f:51:b9:f7:b7:02:c0: c7:d6:43:02:91:d1:aa:15:ab:bc:64:04:c1:2c:65: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:08:63:4A:50:AD:52:71:59:18:CE:0D:E0:C3:25:3F:31:DE:DB:1E X509v3 Authority Key Identifier: keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/B21D3C5AE21311E8B9660E3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.11.0.0/22 203.212.28.0/22 IPv6: 2400:9fc0::/32 Signature Algorithm: sha256WithRSAEncryption b2:a8:eb:bc:d1:38:74:95:d0:e0:39:c5:a5:1f:1b:e4:67:32: e1:84:11:c1:46:24:b6:3f:00:5e:17:84:83:1a:98:39:58:b4: 28:84:47:cf:49:c7:e2:99:25:d4:6d:cd:da:67:ab:59:08:88: ec:3d:9a:8d:fd:c4:de:f8:91:85:75:2f:f8:5a:4c:15:ae:44: 18:d3:c7:59:47:f8:44:00:7d:1b:75:8b:88:3c:07:80:3e:23: ec:d9:8d:3e:ab:c2:1f:f9:8b:10:41:1b:c5:3f:74:17:79:ba: 09:d3:2d:bc:8a:54:41:3a:6e:15:ac:34:42:9f:c8:97:54:01: 3e:63:41:40:cd:f1:09:c9:aa:9c:66:29:38:36:3d:b1:cc:ab: f9:8b:b6:e4:1e:fd:a9:99:23:d5:74:17:32:16:9e:5e:7c:45: a6:ba:0e:f9:d8:65:e0:f8:4d:e0:d9:44:1e:33:4d:b2:04:9a: fb:55:5a:8f:0c:ef:b0:01:7f:8b:7e:a6:7c:d0:5c:48:0b:1a: fb:5b:f0:b2:00:00:fe:b8:f6:28:12:85:5e:2c:c8:0d:0e:74: 5e:04:19:53:4c:12:cb:6d:1c:58:6d:85:d2:15:36:d9:34:ed: 27:8e:6e:3a:ab:5a:80:c4:d0:0f:05:5b:cc:b4:ba:22:c6:63: 6f:ea:a4:16 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyQTAxMTAvBgNVBAUTKDgzMjAwNURDNDVEOEMxMzJBODg1MTU1QzQzMUQzMzMx OUFDRjZEOEQwHhcNMjYwOTAxMTkyODMzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk3Mjc2MC0yYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyA+IiVK3Ma8UACijGERaNaxJq1cB9ZeRUo92xVh204aazcgOw6PAR4hM+iu IP+jyETgVUBirdFx8lFfwCxx7TIa2c1+6rkaDoETerfOsl9WzwVGUWkEkDboUz+t jQOAJRoT8XzjROd3/shGC9om5Kk/PniNXSmS3jp4Gx8WuF23KMaFNq1mlREmBGpn ciEJ7p9+DzMBWE/7+clF2puH7JcAZSvSyToXFMhtl5l+JoYYbjmoLDGNt+MEubEa i9tjTOGALEMxCus0Dd9bQTqPjF1JnR/VbQiDTvxcy+ZqFVVX0PCP5W1qZV9Rufe3 AsDH1kMCkdGqFau8ZATBLGW1jwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGgIY0pQ rVJxWRjODeDDJT8x3tseMB8GA1UdIwQYMBaAFIMgBdxF2MEyqIUVXEMdMzGaz22N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjJBMC84MDMyQ0JGMEUz QTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdUS29oUlZjUXgwek1aclBi WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5QUYzRVhZd1RLb2hSVmNReDB6TVpyUGJZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzYyQTAvODAzMkNCRjBFM0ExMTFFNkJGM0IwMDY4QzRGOUFFMDIvQjIxRDNDNUFF MjEzMTFFOEI5NjYwRTNFQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZwsAAwQCy9QcMA0EAgACMAcDBQAkAJ/AMA0GCSqGSIb3DQEBCwUA A4IBAQCyqOu80Th0ldDgOcWlHxvkZzLhhBHBRiS2PwBeF4SDGpg5WLQohEfPScfi mSXUbc3aZ6tZCIjsPZqN/cTe+JGFdS/4WkwVrkQY08dZR/hEAH0bdYuIPAeAPiPs 2Y0+q8If+YsQQRvFP3QXeboJ0y28ilRBOm4VrDRCn8iXVAE+Y0FAzfEJyaqcZik4 Nj2xzKv5i7bkHv2pmSPVdBcyFp5efEWmug752GXg+E3g2UQeM02yBJr7VVqPDO+w AX+LfqZ80FxICxr7W/CyAAD+uPYoEoVeLMgNDnReBBlTTBLLbRxYbYXSFTbZNO0n jm46q1qAxNAPBVvMtLoixmNv6qQW -----END CERTIFICATE-----Generated at Sat Sep 5 06:37:44 2026 by rpki-client