$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/683CD6083EF511F1AB4378F7C3833773.roa File: 683CD6083EF511F1AB4378F7C3833773.roa (raw, json) Hash identifier: T0lznJAaSKXYpbpLdqNeEVZXOC0Zvhur00MTPjvLVBM= Subject key identifier: CB:5B:12:84:9C:7C:7C:1A:57:3F:BE:5A:B6:92:21:48:04:7A:7D:40 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0B0F Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/683CD6083EF511F1AB4378F7C3833773.roa Signing time: Wed 30 Sep 2026 19:39:18 +0000 ROA not before: Wed 30 Sep 2026 19:39:18 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 135337 IP address blocks: 103.94.158.0/23 maxlen: 24 103.198.8.0/23 maxlen: 24 2406:6840::/32 maxlen: 32 2406:6840::/48 maxlen: 48 2406:6840:100::/48 maxlen: 48 2406:6840:101::/48 maxlen: 48 2406:6840:102::/48 maxlen: 48 2406:6840:103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Sep 30 19:39:18 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd6566-883f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:f4:b2:a1:b9:43:e7:fc:72:bb:46:9b:3d: 20:c4:3a:2a:17:ff:58:4a:8d:19:67:96:b7:01:e4: 55:32:77:76:b2:b9:39:35:a6:2b:99:5b:19:97:81: e0:18:bc:c4:e3:d1:19:a2:4d:86:92:64:50:29:1b: c2:98:4a:df:4f:b8:53:a4:9e:c6:04:af:0c:cd:99: f8:1c:1f:4d:19:fc:8b:a0:8c:3c:5d:aa:5a:a2:bb: 7a:4e:88:8d:8c:e4:d6:ff:44:ee:99:fe:5a:ce:d8: 92:f9:42:a3:a2:46:7b:81:a8:d3:e7:64:fc:c1:ae: e2:71:84:1c:e4:5a:27:92:f0:0c:72:8a:9d:3c:ff: 97:cb:29:62:53:b3:47:9a:d9:a1:ec:f7:5b:c2:c3: 2d:a5:bc:66:19:f8:ed:da:88:7b:1c:41:2c:2c:d9: 32:5f:86:a5:32:a8:79:64:16:5c:40:52:8c:d8:a9: 9b:dc:02:a5:ee:2c:66:4d:63:33:d4:8e:a0:cc:88: f9:62:bc:25:d7:3d:14:be:1f:86:b5:7c:6b:f5:17: 9d:29:e7:08:4c:89:aa:73:dd:bb:68:c2:0c:b0:5d: 1e:49:a4:d4:f5:67:9a:83:4b:af:e6:cd:44:13:4e: d9:44:76:0a:5a:51:5d:30:c7:21:9e:63:bc:09:ad: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5B:12:84:9C:7C:7C:1A:57:3F:BE:5A:B6:92:21:48:04:7A:7D:40 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/683CD6083EF511F1AB4378F7C3833773.roa sbgp-ipAddrBlock: critical IPv4: 103.94.158.0/23 103.198.8.0/23 IPv6: 2406:6840::/32 Signature Algorithm: sha256WithRSAEncryption 74:59:57:f6:47:29:cc:03:5b:dd:5f:a8:d9:a8:63:36:38:ca: 1d:d1:fa:33:ed:61:93:bd:e0:c6:23:ee:7f:5e:8f:0c:56:54: 73:30:95:eb:00:f4:60:c5:9b:a0:5a:92:31:2b:f2:66:3f:be: bc:99:90:9f:dc:3e:f7:8d:51:1d:e8:d1:29:d4:f3:9f:92:9f: 4b:23:f9:93:e7:e6:26:45:02:c2:b3:33:8c:91:57:84:84:8e: 68:4b:db:1d:4f:63:37:09:13:67:8f:19:cf:36:c7:53:9e:77: 1c:90:39:44:bb:24:48:31:b2:79:27:0f:18:90:1b:0d:50:9b: b1:4b:7f:8c:c8:4f:90:a3:5e:04:21:6b:fb:6b:cd:a0:2d:1a: 3c:e3:3d:5c:02:ef:37:e4:06:4e:b3:38:02:6c:c5:13:09:12: 45:1f:ba:2d:06:35:2a:d8:bf:5f:5a:e6:69:f8:5c:2f:6d:98: 4c:f3:1d:62:db:f1:99:8b:30:f6:1f:a4:bf:8d:96:7d:3a:4c: 5a:13:d7:e8:a3:fc:5c:09:ba:71:61:b7:29:9a:23:bb:97:cc: 56:c8:6f:a7:c2:4d:5d:64:5b:89:a2:33:48:c8:15:83:33:43: 64:fd:c7:ff:29:9a:e1:80:7f:6d:a5:83:ec:a3:71:a6:71:78: ed:1f:ac:00 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjYwOTMwMTkzOTE4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkNjU2Ni04ODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjL0sqG5Q+f8crtGmz0gxDoqF/9YSo0ZZ5a3AeRVMnd2srk5NaYrmVsZl4Hg GLzE49EZok2GkmRQKRvCmErfT7hTpJ7GBK8MzZn4HB9NGfyLoIw8Xapaort6ToiN jOTW/0Tumf5aztiS+UKjokZ7gajT52T8wa7icYQc5FonkvAMcoqdPP+XyyliU7NH mtmh7PdbwsMtpbxmGfjt2oh7HEEsLNkyX4alMqh5ZBZcQFKM2Kmb3AKl7ixmTWMz 1I6gzIj5Yrwl1z0Uvh+GtXxr9RedKecITImqc927aMIMsF0eSaTU9Weag0uv5s1E E07ZRHYKWlFdMMchnmO8Ca25lwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMtbEoSc fHwaVz++WraSIUgEen1AMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFEMjIvMjg0MDAxRUM3QjFGMTFFQTg1OEJDRDg2QzRGOUFFMDIvNjgzQ0Q2MDgz RUY1MTFGMUFCNDM3OEY3QzM4MzM3NzMucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ16eAwQBZ8YIMA0EAgACMAcDBQAkBmhAMA0GCSqGSIb3DQEBCwUA A4IBAQB0WVf2RynMA1vdX6jZqGM2OMod0foz7WGTveDGI+5/Xo8MVlRzMJXrAPRg xZugWpIxK/JmP768mZCf3D73jVEd6NEp1POfkp9LI/mT5+YmRQLCszOMkVeEhI5o S9sdT2M3CRNnjxnPNsdTnncckDlEuyRIMbJ5Jw8YkBsNUJuxS3+MyE+Qo14EIWv7 a82gLRo84z1cAu835AZOszgCbMUTCRJFH7otBjUq2L9fWuZp+FwvbZhM8x1i2/GZ izD2H6S/jZZ9OkxaE9foo/xcCbpxYbcpmiO7l8xWyG+nwk1dZFuJojNIyBWDM0Nk /cf/KZrhgH9tpYPso3GmcXjtH6wA -----END CERTIFICATE-----Generated at Wed Oct 7 05:57:48 2026 by rpki-client