$ rpki-client -vvvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/41789B66CC1611EC80603209C4F9AE02.roa File: 41789B66CC1611EC80603209C4F9AE02.roa (raw, json) Hash identifier: jrQWyurRzRFwiCnUirXmO3JOWscdHg4B5w17/r4/CUw= Subject key identifier: EB:45:D2:21:92:22:55:67:F9:D5:FA:82:69:CB:93:BE:ED:2E:02:7C Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Certificate serial: 0429 Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/41789B66CC1611EC80603209C4F9AE02.roa Signing time: Sun 27 Sep 2026 00:49:45 +0000 ROA not before: Sun 27 Sep 2026 00:49:45 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 58606 IP address blocks: 103.196.68.0/24 maxlen: 24 103.196.69.0/24 maxlen: 24 103.196.70.0/24 maxlen: 24 103.196.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 00:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Validity Not Before: Sep 27 00:49:45 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab86829-b935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:c8:4b:ca:11:53:25:47:0d:5a:6d:45:ac: 54:2b:8d:87:23:d7:af:61:20:43:a7:81:7b:dc:46: 39:ff:be:da:90:60:0a:09:53:bf:ba:43:64:62:c6: 19:0e:2d:3a:f8:21:88:04:22:ed:52:16:c7:23:39: 37:60:e0:a1:1b:82:ec:3a:49:f9:58:d2:a4:04:b8: 1e:06:64:c4:41:09:2d:64:e9:7a:fd:4c:e1:2b:87: e5:00:7b:66:ea:82:d2:f3:55:dc:4f:c2:61:f6:30: dd:c1:de:ab:b0:ca:80:bc:92:2d:c8:cc:94:fd:76: f5:3c:32:b5:04:53:cc:d6:67:03:d4:1d:de:86:f4: df:7d:79:da:50:f6:ca:27:40:73:60:fc:ef:69:38: 8e:41:30:2c:9a:5d:eb:1c:2d:7d:ae:12:9c:54:bd: 4a:46:12:24:1e:c8:55:95:a4:33:d2:14:64:39:24: a6:ea:a7:d7:5a:f6:b7:d0:c5:eb:2d:71:58:d5:f3: b5:5f:df:c0:e1:18:3b:95:c3:4f:43:0e:cf:a9:7f: 96:c4:03:b1:0c:5c:2b:f5:2d:36:43:15:92:02:c3: dd:27:55:aa:83:15:df:c2:3c:d9:51:71:c6:42:46: 56:96:6b:70:2d:87:5e:4a:db:a7:f3:9b:ee:c7:46: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:45:D2:21:92:22:55:67:F9:D5:FA:82:69:CB:93:BE:ED:2E:02:7C X509v3 Authority Key Identifier: keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/41789B66CC1611EC80603209C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.196.68.0/22 Signature Algorithm: sha256WithRSAEncryption 58:10:19:25:8e:27:74:94:13:19:25:f4:24:41:36:ef:33:b1: a6:b4:a2:49:b9:d8:d9:ef:c7:10:a7:68:18:cb:fa:29:b5:27: f3:66:57:46:a4:97:15:44:73:8b:1d:c6:6f:cd:e7:38:74:dd: 8f:32:8b:0a:e6:2e:93:ca:d5:2b:9e:b8:0e:db:4c:ab:4f:e5: a9:0d:63:e4:23:e5:aa:ef:8b:4a:60:94:b4:89:69:6c:ec:05: fa:7a:40:55:ce:58:0a:c6:0a:82:c7:4d:0c:e0:f5:0b:41:7a: b7:24:34:98:27:cb:d0:03:0e:7d:60:12:24:f0:ac:a6:d4:7a: 8e:ca:44:cf:f1:b8:e4:a7:8b:86:37:bc:f4:5d:e4:da:bc:ad: c2:aa:ab:b1:5f:1f:0d:64:09:6e:16:d5:78:b9:ca:85:13:94: 93:aa:81:43:3a:db:4e:fa:4a:33:19:23:3e:e6:b4:3a:d5:3d: 50:06:15:7d:58:e9:58:d9:d3:05:bf:fa:bb:ec:11:b8:9a:ee: d0:17:41:35:e4:33:f2:be:df:ed:3c:e9:8e:ea:c4:05:62:3c: 12:65:44:08:7d:f2:36:28:2c:7e:ac:f0:b8:45:8e:f8:11:5e: 12:1b:83:a2:f9:03:f1:e9:53:36:2d:7a:ef:ac:1d:99:fb:29: ff:70:7b:07 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF ODg1RTQ4OUQwHhcNMjYwOTI3MDA0OTQ1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI4NjgyOS1iOTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyvIS8oRUyVHDVptRaxUK42HI9evYSBDp4F73EY5/77akGAKCVO/ukNkYsYZ Di06+CGIBCLtUhbHIzk3YOChG4LsOkn5WNKkBLgeBmTEQQktZOl6/UzhK4flAHtm 6oLS81XcT8Jh9jDdwd6rsMqAvJItyMyU/Xb1PDK1BFPM1mcD1B3ehvTffXnaUPbK J0BzYPzvaTiOQTAsml3rHC19rhKcVL1KRhIkHshVlaQz0hRkOSSm6qfXWva30MXr LXFY1fO1X9/A4Rg7lcNPQw7PqX+WxAOxDFwr9S02QxWSAsPdJ1WqgxXfwjzZUXHG QkZWlmtwLYdeStun85vux0ajSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOtF0iGS IlVn+dX6gmnLk77tLgJ8MB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzg5RjkvRkQ4MDZCQTJDQzEzMTFFQzgyN0EyNjg3QzRGOUFFMDIvNDE3ODlCNjZD QzE2MTFFQzgwNjAzMjA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ8REMA0GCSqGSIb3DQEBCwUAA4IBAQBYEBkljid0lBMZJfQkQTbv M7GmtKJJudjZ78cQp2gYy/optSfzZldGpJcVRHOLHcZvzec4dN2PMosK5i6TytUr nrgO20yrT+WpDWPkI+Wq74tKYJS0iWls7AX6ekBVzlgKxgqCx00M4PULQXq3JDSY J8vQAw59YBIk8Kym1HqOykTP8bjkp4uGN7z0XeTavK3CqquxXx8NZAluFtV4ucqF E5STqoFDOttO+kozGSM+5rQ61T1QBhV9WOlY2dMFv/q77BG4mu7QF0E15DPyvt/t POmO6sQFYjwSZUQIffI2KCx+rPC4RY74EV4SG4Oi+QPx6VM2LXrvrB2Z+yn/cHsH -----END CERTIFICATE-----Generated at Mon Oct 5 05:17:54 2026 by rpki-client