$ rpki-client -vvvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/B64A364EA60911F18684AA644611F970.roa File: B64A364EA60911F18684AA644611F970.roa (raw, json) Hash identifier: Yhzu3EEtztbhJR6dKRXKOq7uPqc63g/g/wW5ua5XriQ= Subject key identifier: F2:3B:33:4C:A6:9C:69:38:93:D8:33:F6:63:9F:C0:83:2F:CC:9E:C9 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0DBE Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/B64A364EA60911F18684AA644611F970.roa Signing time: Tue 01 Sep 2026 13:58:57 +0000 ROA not before: Tue 01 Sep 2026 13:58:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137515 IP address blocks: 103.111.120.0/22 maxlen: 22 103.111.120.0/23 maxlen: 23 103.111.120.0/24 maxlen: 24 103.111.121.0/24 maxlen: 24 103.111.122.0/23 maxlen: 23 103.111.122.0/24 maxlen: 24 103.111.123.0/24 maxlen: 24 2405:7e40::/32 maxlen: 32 2405:7e40::/36 maxlen: 36 2405:7e40:1000::/36 maxlen: 36 2405:7e40:2000::/36 maxlen: 36 2405:7e40:3000::/36 maxlen: 36 2405:7e40:4000::/36 maxlen: 36 2405:7e40:5000::/36 maxlen: 36 2405:7e40:6000::/36 maxlen: 36 2405:7e40:7000::/36 maxlen: 36 2405:7e40:8000::/36 maxlen: 36 2405:7e40:9000::/36 maxlen: 36 2405:7e40:a000::/36 maxlen: 36 2405:7e40:b000::/36 maxlen: 36 2405:7e40:c000::/36 maxlen: 36 2405:7e40:d000::/36 maxlen: 36 2405:7e40:e000::/36 maxlen: 36 2405:7e40:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 18:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: Sep 1 13:58:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a96da21-e6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:af:6f:18:e1:ad:64:02:48:64:76:e2:56: d9:3e:e5:ee:7b:37:b2:bd:a4:1e:80:a2:3a:1c:76: ba:b7:e1:d3:0b:cb:4e:e6:bf:ed:e4:e2:ce:bc:d5: 29:5a:b4:42:78:25:93:e2:66:15:67:3e:c3:c1:53: 7f:e4:d5:99:f3:00:f2:cb:b1:79:12:86:4b:28:a7: 67:95:4b:51:3d:86:c1:01:07:23:fb:1f:18:9e:86: 7d:f7:3e:df:ad:8a:b9:ad:2b:51:35:30:d2:d6:dd: 6b:cd:46:8b:af:cf:97:0a:5c:18:17:96:a8:a2:1d: d8:e0:9c:05:57:6d:ba:74:91:a0:d9:1b:62:9a:63: a8:7b:7a:68:97:7c:63:5e:fe:b4:df:25:80:5c:27: 2e:53:0f:fe:02:74:4a:b0:b2:1d:0e:9a:b8:f8:d5: 89:c1:a9:37:60:6a:1a:81:7a:05:8c:6b:e9:0c:4d: 47:99:57:d6:ff:8b:fd:61:54:bd:0a:93:32:59:c1: a5:77:94:80:7d:e4:3a:f0:a2:a7:ec:a3:d4:7e:e9: 82:a5:97:61:ba:eb:e6:74:64:a5:d8:b7:15:52:11: fb:f8:2a:c0:1e:d2:29:ff:f9:0d:10:0c:ba:85:ce: c3:af:4e:f7:92:1b:bb:c0:94:81:db:df:02:ba:97: 4a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3B:33:4C:A6:9C:69:38:93:D8:33:F6:63:9F:C0:83:2F:CC:9E:C9 X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/B64A364EA60911F18684AA644611F970.roa sbgp-ipAddrBlock: critical IPv4: 103.111.120.0/22 IPv6: 2405:7e40::/32 Signature Algorithm: sha256WithRSAEncryption 06:e2:ce:fd:e7:db:e6:95:c9:ca:8b:f5:95:8a:96:d2:89:c2: f5:e0:10:db:82:de:5f:6a:fc:cf:4a:1f:dd:6c:74:ce:5c:ca: 26:b6:8c:6e:e6:f7:ec:b4:fc:28:c0:c2:b8:2e:b6:8b:c8:9e: 73:f2:dd:31:22:bb:a7:05:a5:04:ed:ad:16:43:f8:e3:f0:9b: 43:f7:44:c4:2b:f5:13:34:1f:02:ca:a5:d1:9f:03:b1:61:05: 9e:6b:5e:c7:ff:6d:1b:20:ac:9e:d4:d0:36:c6:59:3a:13:96: 71:52:75:da:1d:2e:ca:d2:b6:f7:f4:ee:90:8f:ca:35:8a:5a: 8f:2b:43:b4:91:5e:77:37:9d:27:6e:55:96:38:b3:ea:2c:9c: a4:3d:c4:10:23:a1:98:df:58:71:e9:5f:3f:2f:87:71:66:45: 78:9d:f7:ec:d1:57:0e:01:1c:07:f7:1f:b8:b5:04:dc:2c:33: fa:21:09:d9:45:9d:27:15:20:7c:62:ed:06:2c:51:35:8d:ae: f2:6a:13:d5:36:1d:1d:22:90:92:77:2a:b9:ea:7d:09:07:a7: a6:c8:ca:fb:ee:90:e8:26:0a:b1:65:7b:86:a3:92:d8:85:15: e9:d4:58:d1:e0:ce:ae:44:90:8b:78:c0:36:b2:b1:cc:23:fd: 8a:4f:c8:3c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjYwOTAxMTM1ODU3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2ZGEyMS1lNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvKvbxjhrWQCSGR24lbZPuXuezeyvaQegKI6HHa6t+HTC8tO5r/t5OLOvNUp WrRCeCWT4mYVZz7DwVN/5NWZ8wDyy7F5EoZLKKdnlUtRPYbBAQcj+x8YnoZ99z7f rYq5rStRNTDS1t1rzUaLr8+XClwYF5aooh3Y4JwFV226dJGg2RtimmOoe3pol3xj Xv603yWAXCcuUw/+AnRKsLIdDpq4+NWJwak3YGoagXoFjGvpDE1HmVfW/4v9YVS9 CpMyWcGld5SAfeQ68KKn7KPUfumCpZdhuuvmdGSl2LcVUhH7+CrAHtIp//kNEAy6 hc7Dr073khu7wJSB298CupdKVQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPI7M0ym nGk4k9gz9mOfwIMvzJ7JMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE2REMvNDRBN0U1RTgwOTVGMTFFQUEyODE2ODFEQzRGOUFFMDIvQjY0QTM2NEVB NjA5MTFGMTg2ODRBQTY0NDYxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ294MA0EAgACMAcDBQAkBX5AMA0GCSqGSIb3DQEBCwUAA4IBAQAG 4s7959vmlcnKi/WVipbSicL14BDbgt5favzPSh/dbHTOXMomtoxu5vfstPwowMK4 LraLyJ5z8t0xIrunBaUE7a0WQ/jj8JtD90TEK/UTNB8CyqXRnwOxYQWea17H/20b IKye1NA2xlk6E5ZxUnXaHS7K0rb39O6Qj8o1ilqPK0O0kV53N50nblWWOLPqLJyk PcQQI6GY31hx6V8/L4dxZkV4nffs0VcOARwH9x+4tQTcLDP6IQnZRZ0nFSB8Yu0G LFE1ja7yahPVNh0dIpCSdyq56n0JB6emyMr77pDoJgqxZXuGo5LYhRXp1FjR4M6u RJCLeMA2srHMI/2KT8g8 -----END CERTIFICATE-----Generated at Sun Oct 11 22:50:56 2026 by rpki-client