$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D543A66B32611ED847D3C6CC4F9AE02.roa File: 3D543A66B32611ED847D3C6CC4F9AE02.roa (raw, json) Hash identifier: VyLEBj1fTgI2RJqrCih8a9cFU5Ox0sJ9/Aj45ZRDsxc= Subject key identifier: 0C:07:90:6E:18:0F:F6:66:4E:CC:EE:BA:DB:C0:D4:ED:0F:83:8A:18 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6E20 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D543A66B32611ED847D3C6CC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:27:26 +0000 ROA not before: Fri 02 Oct 2026 15:27:26 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 149078 IP address blocks: 103.72.68.0/23 maxlen: 24 103.72.70.0/23 maxlen: 24 103.75.72.0/23 maxlen: 24 103.85.246.0/23 maxlen: 24 103.122.162.0/23 maxlen: 24 103.228.126.0/23 maxlen: 24 2400:6720::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28192 (0x6e20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:27:26 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcd5e-57c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ad:ae:25:68:73:55:bc:6f:dc:81:27:ca:44: 4c:5a:f9:f3:b1:96:10:f1:26:f9:8c:8f:13:fe:d8: 4d:7c:86:86:fe:6c:36:ec:cd:6d:1a:74:0f:14:8b: c2:bb:fd:63:2f:0a:77:4c:c2:97:8b:c0:f7:a3:09: 82:d1:8d:fb:10:67:a7:98:34:35:01:f4:af:1e:37: d1:86:60:a7:fa:7e:9c:38:42:91:7c:99:7f:f7:e8: 48:a6:72:00:8d:34:a1:b6:c7:96:14:02:4b:1f:99: 8d:08:7a:cf:44:08:ec:fe:e9:58:98:34:9f:35:7e: c6:65:ca:8b:82:aa:2d:4e:2c:75:8c:44:df:a5:46: 6e:12:28:86:ad:bc:0f:9f:21:73:5c:d0:a8:0b:eb: 68:84:0a:d4:ab:c1:8e:b2:e5:2f:5c:60:61:e4:68: 10:1e:d2:a6:2e:1e:06:65:32:6e:12:b0:2c:bd:71: 9f:d5:50:a6:5f:65:5b:76:21:a0:7e:cf:91:db:a9: 73:da:5b:e7:5d:a1:f6:72:a5:73:93:a4:63:de:be: 23:7e:7d:69:c2:c9:64:22:53:32:50:e2:cc:6f:31: c7:9c:69:f2:f1:d8:fe:08:34:f5:5c:41:24:88:70: 45:9e:b9:1b:6c:50:e0:2e:c9:d3:bf:bf:4d:a2:0e: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:07:90:6E:18:0F:F6:66:4E:CC:EE:BA:DB:C0:D4:ED:0F:83:8A:18 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D543A66B32611ED847D3C6CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.72.68.0/22 103.75.72.0/23 103.85.246.0/23 103.122.162.0/23 103.228.126.0/23 IPv6: 2400:6720::/48 Signature Algorithm: sha256WithRSAEncryption 75:8d:eb:3c:c0:83:b1:6d:7c:0e:82:c2:b0:8e:19:c5:e7:df: 46:c7:9b:8a:87:3e:60:44:87:bc:74:23:5d:cb:42:76:9f:bf: d6:c2:9f:d7:c8:57:20:2c:99:be:47:81:35:54:eb:fd:02:f1: ef:8b:75:6e:b2:10:01:47:81:d8:a3:ad:07:93:02:43:33:0b: c9:a4:a3:fd:f5:de:3f:ea:cb:e7:1e:b4:d3:eb:9e:c4:f7:cf: 83:3f:e1:3f:ea:37:58:a5:28:a4:7e:20:a7:17:d1:93:68:18: 33:cc:11:fe:fd:98:0a:cb:00:16:84:5e:d5:f2:d7:75:08:ab: 97:5a:cd:39:58:89:53:9e:f8:31:3c:e6:07:f8:51:c7:26:19: 7f:7e:75:f0:f2:a5:9a:c6:4c:d7:45:1d:2a:36:3f:01:de:f4: b7:8d:22:45:43:17:67:d7:de:30:eb:c0:5c:d0:6c:5e:c2:3b: b5:1a:e5:f3:81:6d:ec:9f:10:66:72:b6:a1:ca:45:ce:3e:eb: f6:ce:6a:9b:1c:da:6f:71:98:12:27:15:34:65:8b:9e:c9:b6: f4:07:b7:0b:cd:cd:6e:46:e6:11:f7:6b:aa:6d:a7:ac:10:eb: a5:f2:9f:8e:4b:7c:49:d1:3f:48:5b:d5:52:e3:3a:72:b1:23: ea:97:a1:76 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICbiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyNzI2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2Q1ZS01N2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4K2uJWhzVbxv3IEnykRMWvnzsZYQ8Sb5jI8T/thNfIaG/mw27M1tGnQPFIvC u/1jLwp3TMKXi8D3owmC0Y37EGenmDQ1AfSvHjfRhmCn+n6cOEKRfJl/9+hIpnIA jTShtseWFAJLH5mNCHrPRAjs/ulYmDSfNX7GZcqLgqotTix1jETfpUZuEiiGrbwP nyFzXNCoC+tohArUq8GOsuUvXGBh5GgQHtKmLh4GZTJuErAsvXGf1VCmX2VbdiGg fs+R26lz2lvnXaH2cqVzk6Rj3r4jfn1pwslkIlMyUOLMbzHHnGny8dj+CDT1XEEk iHBFnrkbbFDgLsnTv79Nog46fQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFAwHkG4Y D/ZmTszuutvA1O0Pg4oYMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0Q1NDNBNjZC MzI2MTFFRDg0N0QzQzZDQzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAk BAIAATAeAwQCZ0hEAwQBZ0tIAwQBZ1X2AwQBZ3qiAwQBZ+R+MA8EAgACMAkDBwAk AGcgAAAwDQYJKoZIhvcNAQELBQADggEBAHWN6zzAg7FtfA6CwrCOGcXn30bHm4qH PmBEh7x0I13LQnafv9bCn9fIVyAsmb5HgTVU6/0C8e+LdW6yEAFHgdijrQeTAkMz C8mko/313j/qy+cetNPrnsT3z4M/4T/qN1ilKKR+IKcX0ZNoGDPMEf79mArLABaE XtXy13UIq5dazTlYiVOe+DE85gf4UccmGX9+dfDypZrGTNdFHSo2PwHe9LeNIkVD F2fX3jDrwFzQbF7CO7Ua5fOBbeyfEGZytqHKRc4+6/bOapsc2m9xmBInFTRli57J tvQHtwvNzW5G5hH3a6ptp6wQ66Xyn45LfEnRP0hb1VLjOnKxI+qXoXY= -----END CERTIFICATE-----Generated at Sun Oct 25 20:06:54 2026 by rpki-client