$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/D36559D68D7511F1A94DC67B3211F970.roa File: D36559D68D7511F1A94DC67B3211F970.roa (raw, json) Hash identifier: Fy8jBtvRVu9jhps9hbfZRQWKRAOfiyIIynpps0EdNs4= Subject key identifier: 61:7C:D8:77:9B:1B:6A:15:09:74:79:93:31:61:9B:0B:D6:02:0F:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0DB7 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/D36559D68D7511F1A94DC67B3211F970.roa Signing time: Sat 01 Aug 2026 06:54:23 +0000 ROA not before: Sat 01 Aug 2026 06:54:23 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 197537 IP address blocks: 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 18:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3511 (0xdb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Aug 1 06:54:23 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a6d981f-2bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:d0:e1:09:b5:35:47:90:d0:c1:5b:09:d4: ef:f0:fa:c5:d9:34:ce:12:72:fa:fd:df:b3:76:ce: 03:4d:8e:f9:fd:f8:3f:aa:8a:b4:25:cb:fd:7c:b6: ac:5a:a1:79:15:91:58:f6:75:1d:0a:2c:29:a9:76: 6e:78:19:8b:a8:e5:27:05:67:f1:bf:43:bf:c9:43: 28:c1:e8:47:4a:a5:75:00:12:fb:08:ee:15:16:57: 73:e1:13:35:22:d8:04:5a:f5:b9:4d:3c:23:e1:4d: 42:53:38:33:9e:ae:09:bc:1e:f2:13:e3:fa:e6:6e: c3:48:78:ff:77:4a:3d:19:06:5a:8a:81:51:ee:94: 1f:b6:3c:33:5d:b2:0e:75:5b:f0:7d:55:0c:66:9b: 7d:a3:14:9a:6f:e6:ab:30:0b:38:0b:de:4e:f4:0f: 24:58:df:fc:60:4d:96:91:76:85:fd:87:b5:65:01: 95:d0:ab:b4:08:db:bd:51:53:6c:cd:54:ca:cf:90: 61:5d:da:e9:cd:2d:96:44:01:e0:8d:5a:37:97:3c: 25:ba:01:bc:7b:19:d8:8d:43:99:c1:41:16:38:2e: e1:4b:45:8e:e7:3e:9b:5a:c5:65:9d:b8:51:f5:b1: 09:52:1f:4c:2b:25:92:0e:22:77:c0:9f:b8:ce:03: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7C:D8:77:9B:1B:6A:15:09:74:79:93:31:61:9B:0B:D6:02:0F:46 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/D36559D68D7511F1A94DC67B3211F970.roa sbgp-ipAddrBlock: critical IPv4: 103.7.209.0-103.7.210.255 103.26.164.0/23 Signature Algorithm: sha256WithRSAEncryption 90:38:df:40:81:88:56:51:34:1b:aa:71:06:e4:55:d9:a8:da: 5b:15:17:89:ef:56:e9:54:74:51:55:72:af:e7:a4:a1:d0:a7: 4c:28:9d:61:94:11:75:b8:9d:6c:2e:49:f1:43:85:22:4f:b0: 77:10:7a:6d:88:2b:b8:7c:83:e7:56:41:3c:84:46:bf:67:31: 1a:72:a5:e2:9b:b2:38:f2:99:90:79:31:16:55:74:22:b1:cc: ef:f7:07:9e:da:ab:c2:ae:91:9c:09:1f:d3:44:3f:95:b2:9c: 21:b5:59:0b:69:c7:c9:ad:dd:0e:be:ab:60:f7:d7:04:02:cb: 02:d8:36:b1:d7:93:db:cb:dc:24:b5:3a:4e:85:d6:ea:bc:35: 94:e7:cb:3e:ba:5b:c2:75:ab:09:57:a4:c9:e8:41:f1:ee:88: 00:a7:2f:b7:f5:b6:38:93:57:6e:3f:8d:95:49:15:6f:fa:87: 6f:2e:50:43:24:6b:5e:8f:14:e2:02:98:1f:68:a7:d4:af:c3: 92:3c:a9:d1:c1:14:3b:dc:44:2f:35:a7:e9:3c:7b:c7:b2:89: 12:19:7e:61:d3:3d:37:52:40:c0:ff:70:67:83:9a:a9:9b:1d: 0e:84:7b:25:fb:ac:13:3e:7d:e9:72:83:9c:3d:d7:21:f7:64: b9:4d:8f:e3 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwODAxMDY1NDIzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTZkOTgxZi0yYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3bQ4Qm1NUeQ0MFbCdTv8PrF2TTOEnL6/d+zds4DTY75/fg/qoq0Jcv9fLas WqF5FZFY9nUdCiwpqXZueBmLqOUnBWfxv0O/yUMowehHSqV1ABL7CO4VFldz4RM1 ItgEWvW5TTwj4U1CUzgznq4JvB7yE+P65m7DSHj/d0o9GQZaioFR7pQftjwzXbIO dVvwfVUMZpt9oxSab+arMAs4C95O9A8kWN/8YE2WkXaF/Ye1ZQGV0Ku0CNu9UVNs zVTKz5BhXdrpzS2WRAHgjVo3lzwlugG8exnYjUOZwUEWOC7hS0WO5z6bWsVlnbhR 9bEJUh9MKyWSDiJ3wJ+4zgPqBwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFGF82Heb G2oVCXR5kzFhmwvWAg9GMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvRDM2NTU5RDY4 RDc1MTFGMUE5NERDNjdCMzIxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBABnB9EDBABnB9IDBAFnGqQwDQYJKoZIhvcNAQELBQADggEBAJA4 30CBiFZRNBuqcQbkVdmo2lsVF4nvVulUdFFVcq/npKHQp0wonWGUEXW4nWwuSfFD hSJPsHcQem2IK7h8g+dWQTyERr9nMRpypeKbsjjymZB5MRZVdCKxzO/3B57aq8Ku kZwJH9NEP5WynCG1WQtpx8mt3Q6+q2D31wQCywLYNrHXk9vL3CS1Ok6F1uq8NZTn yz66W8J1qwlXpMnoQfHuiACnL7f1tjiTV24/jZVJFW/6h28uUEMka16PFOICmB9o p9Svw5I8qdHBFDvcRC81p+k8e8eyiRIZfmHTPTdSQMD/cGeDmqmbHQ6EeyX7rBM+ felyg5w91yH3ZLlNj+M= -----END CERTIFICATE-----Generated at Tue Sep 1 01:48:55 2026 by rpki-client