$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa File: 10EB4F2CC04811ECA5D31D72C4F9AE02.roa (raw, json) Hash identifier: 5lHOam17WuIpgBS6FMk3RTY2hXldxJsXuMpqXToAlw8= Subject key identifier: 93:7C:97:95:2B:9E:6B:93:8D:81:97:EB:C8:D7:69:CC:2B:92:9A:E1 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6D8D Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:22:44 +0000 ROA not before: Fri 02 Oct 2026 15:22:44 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131401 IP address blocks: 103.228.20.0/22 maxlen: 24 2001:df0:8380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28045 (0x6d8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:22:44 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcc44-2578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:50:76:e7:fe:94:7e:bb:74:f8:11:c1:83:b1: 25:eb:c2:94:05:b4:d9:9f:99:a1:3a:74:4f:62:1a: ae:39:e1:b6:0c:e8:f2:a8:38:46:98:0d:c7:89:de: b9:b5:71:cc:cc:ae:20:79:00:ff:41:27:18:82:ec: 9f:d9:72:55:fc:d0:f0:cb:94:53:bb:d9:9b:a3:2d: 60:22:f5:7f:73:d7:58:21:ea:52:ee:ec:a1:2a:75: ed:f0:77:a5:60:2a:d4:6e:76:ec:52:4d:9e:5e:65: ff:63:ab:9d:2a:26:bf:33:99:9d:ec:28:76:ca:36: 3f:a1:90:0d:1c:a8:52:96:e9:4e:4e:11:26:b4:9f: a2:c0:0b:35:84:2f:c6:d2:32:17:1d:40:1e:96:9f: f6:14:fe:79:f2:90:dc:25:2f:6e:da:37:2a:12:b1: 13:5c:09:f2:90:fe:ab:59:52:c6:15:da:4f:10:38: 75:e8:ba:9e:12:10:0c:3b:21:50:a7:46:1b:a2:79: e1:79:b9:bd:12:6e:1e:7b:60:dc:b9:8e:4f:9a:d9: a5:35:a6:d8:3f:9c:dd:0d:4a:1b:21:09:2a:e8:3a: 2d:ae:e2:2f:fd:33:98:b4:5e:be:9b:b6:0c:83:00: e4:06:ae:ea:13:87:27:48:f9:77:9d:49:90:ff:82: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7C:97:95:2B:9E:6B:93:8D:81:97:EB:C8:D7:69:CC:2B:92:9A:E1 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.228.20.0/22 IPv6: 2001:df0:8380::/48 Signature Algorithm: sha256WithRSAEncryption 37:ba:f9:55:cd:af:85:8d:41:ee:67:6d:e1:71:b7:f8:32:b6: e4:ba:40:16:16:94:9b:45:94:1d:78:0c:06:e3:1a:cd:d4:b6: 4f:ae:85:a9:36:c5:0b:61:ff:d1:3f:78:f9:fb:85:00:61:bb: c5:e9:04:29:51:41:b5:40:c7:79:02:2a:8c:53:5a:de:38:bf: 64:d7:5b:cc:54:e2:a5:c7:2f:e7:dc:22:05:13:f6:53:c9:d5: de:76:7c:80:92:0b:ac:ed:35:74:d2:f5:5e:ff:9e:7e:f5:0a: 16:0b:8f:1e:be:72:8e:c7:d6:28:20:42:37:6c:7b:7c:8e:d1: 02:15:77:61:af:f1:0a:08:0d:fc:aa:5e:1e:eb:df:94:ef:81: 22:96:22:38:42:4f:e7:58:79:ee:13:45:6c:01:d8:a2:d7:58: 9c:2a:bb:57:bc:f2:4b:7e:43:34:4d:1f:4c:31:f8:6d:94:6a: 4e:5a:bc:c6:fb:72:92:c2:56:8c:c0:92:bd:03:e6:3b:5a:a5: 7b:04:ba:6f:a0:a0:dd:46:d6:4d:bd:c6:46:74:a8:76:c6:ff: 0e:dd:8d:3c:ae:e8:5e:a6:cc:d3:fb:aa:b9:b2:fb:17:c3:5c: ff:36:5a:40:ee:12:ff:8d:e5:a3:2b:84:2a:a7:6f:24:3f:1c: 1d:b0:02:47 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICbY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyMjQ0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2M0NC0yNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFB25/6Ufrt0+BHBg7El68KUBbTZn5mhOnRPYhquOeG2DOjyqDhGmA3Hid65 tXHMzK4geQD/QScYguyf2XJV/NDwy5RTu9mboy1gIvV/c9dYIepS7uyhKnXt8Hel YCrUbnbsUk2eXmX/Y6udKia/M5md7Ch2yjY/oZANHKhSlulOThEmtJ+iwAs1hC/G 0jIXHUAelp/2FP558pDcJS9u2jcqErETXAnykP6rWVLGFdpPEDh16LqeEhAMOyFQ p0Ybonnhebm9Em4ee2DcuY5PmtmlNabYP5zdDUobIQkq6DotruIv/TOYtF6+m7YM gwDkBq7qE4cnSPl3nUmQ/4JJjwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJN8l5Ur nmuTjYGX68jXacwrkprhMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTBFQjRGMkND MDQ4MTFFQ0E1RDMxRDcyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ+QUMA8EAgACMAkDBwAgAQ3wg4AwDQYJKoZIhvcNAQELBQADggEB ADe6+VXNr4WNQe5nbeFxt/gytuS6QBYWlJtFlB14DAbjGs3Utk+uhak2xQth/9E/ ePn7hQBhu8XpBClRQbVAx3kCKoxTWt44v2TXW8xU4qXHL+fcIgUT9lPJ1d52fICS C6ztNXTS9V7/nn71ChYLjx6+co7H1iggQjdse3yO0QIVd2Gv8QoIDfyqXh7r35Tv gSKWIjhCT+dYee4TRWwB2KLXWJwqu1e88kt+QzRNH0wx+G2Uak5avMb7cpLCVozA kr0D5jtapXsEum+goN1G1k29xkZ0qHbG/w7djTyu6F6mzNP7qrmy+xfDXP82WkDu Ev+N5aMrhCqnbyQ/HB2wAkc= -----END CERTIFICATE-----Generated at Sat Oct 24 20:38:54 2026 by rpki-client