$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa File: 3D8EDEB442FB11ED8178A936C4F9AE02.roa (raw, json) Hash identifier: QopkUspo1eJ1xSGkrDCzxrI/93rjZhxteCqtAPuLtpM= Subject key identifier: F5:E9:DB:57:BF:EE:4D:38:59:A1:31:43:3A:12:32:19:E7:72:4B:92 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6D76 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:21:58 +0000 ROA not before: Fri 02 Oct 2026 15:21:58 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131358 IP address blocks: 103.9.0.0/24 maxlen: 24 103.9.1.0/24 maxlen: 24 103.9.2.0/24 maxlen: 24 103.9.3.0/24 maxlen: 24 2402:4ae0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28022 (0x6d76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:21:58 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcc16-62c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:7e:30:e1:31:0a:f3:4a:09:12:75:8a:83: 2b:50:f3:c7:ff:9b:27:3b:a0:75:e4:13:a3:53:85: 38:16:8d:44:c2:74:ce:d2:be:98:b6:35:74:4a:f3: 7f:10:b1:ef:d5:07:c2:b5:bc:39:8c:1d:2e:c6:a6: 22:6e:16:29:05:dc:0c:d4:65:d7:78:86:3d:88:bc: d8:fe:6c:08:cc:a1:9f:a1:86:1d:49:52:74:c9:d9: 5d:ba:12:78:ff:be:2e:04:ab:be:af:3e:42:f6:ff: 67:bc:06:99:b4:ae:37:35:6b:0c:b6:d7:bb:22:04: ba:0c:a9:42:7d:70:5b:63:2c:91:9d:9a:63:92:8d: e0:68:07:95:50:db:95:63:25:5b:29:bc:8b:4a:b0: 18:af:aa:4c:2d:9b:26:ae:5e:f0:92:e7:2c:6d:ae: 78:cd:82:d9:d4:4b:6c:d7:a4:cb:b8:5b:99:50:4c: 7e:65:b5:3a:84:0d:c4:e7:2b:30:84:3a:09:b1:c6: 0a:85:7c:8f:b3:70:a2:36:29:ff:e1:31:59:c3:6d: f9:2c:dd:19:30:99:8e:0a:dc:0c:35:19:f7:8e:41: a1:46:20:4c:f0:da:08:3d:88:0e:0a:4f:ba:b2:13: c0:41:f8:13:28:30:20:45:90:52:11:09:9a:2f:33: 8e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E9:DB:57:BF:EE:4D:38:59:A1:31:43:3A:12:32:19:E7:72:4B:92 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.9.0.0/22 IPv6: 2402:4ae0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:dd:30:2f:fa:c7:08:65:48:e7:68:c4:e8:38:23:f0:07:6f: 5a:ad:69:e4:8d:09:e9:17:c5:80:ea:4e:bd:b6:15:6a:44:59: e3:29:1c:bc:20:78:f2:42:04:13:b7:ad:40:a9:9b:cd:e7:97: 71:d7:70:1d:03:0f:ba:fd:ee:d5:73:77:54:66:8d:90:64:3a: e3:75:7c:c2:2b:ab:ab:07:46:9b:8e:b1:9e:91:50:e7:39:1c: 84:f8:4f:28:13:26:88:8c:7b:7e:76:8d:b1:e6:94:41:8d:c1: 1b:e2:5f:cf:21:4e:10:e6:c7:25:37:e5:39:76:9a:c0:55:66: d4:d9:5d:c2:a2:2d:52:42:a1:f8:a6:ff:ce:0d:8d:f3:70:b6: 35:36:2f:c5:2d:58:56:16:93:6a:3d:74:65:a4:f5:d6:30:20: d1:e4:bd:79:2a:1a:5a:41:c7:4c:6f:75:98:af:31:25:85:4f: 0d:84:25:92:11:73:d1:bb:bc:be:3b:7e:5c:eb:c8:fd:64:8c: ed:a7:6b:fb:20:03:c5:12:74:29:e7:40:60:99:c8:f0:23:09: c7:80:ff:be:ff:f5:8a:6c:a8:68:df:07:28:9d:73:eb:af:7e: 75:24:bc:0e:67:54:94:b7:3e:6b:43:9f:c7:4b:67:b4:44:69: fe:9e:9d:cc -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICbXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyMTU4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2MxNi02MmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRd+MOExCvNKCRJ1ioMrUPPH/5snO6B15BOjU4U4Fo1EwnTO0r6YtjV0SvN/ ELHv1QfCtbw5jB0uxqYibhYpBdwM1GXXeIY9iLzY/mwIzKGfoYYdSVJ0ydlduhJ4 /74uBKu+rz5C9v9nvAaZtK43NWsMtte7IgS6DKlCfXBbYyyRnZpjko3gaAeVUNuV YyVbKbyLSrAYr6pMLZsmrl7wkucsba54zYLZ1Ets16TLuFuZUEx+ZbU6hA3E5ysw hDoJscYKhXyPs3CiNin/4TFZw235LN0ZMJmOCtwMNRn3jkGhRiBM8NoIPYgOCk+6 shPAQfgTKDAgRZBSEQmaLzOOywIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPXp21e/ 7k04WaExQzoSMhnnckuSMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0Q4RURFQjQ0 MkZCMTFFRDgxNzhBOTM2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZwkAMA0EAgACMAcDBQAkAkrgMA0GCSqGSIb3DQEBCwUAA4IBAQBP 3TAv+scIZUjnaMToOCPwB29arWnkjQnpF8WA6k69thVqRFnjKRy8IHjyQgQTt61A qZvN55dx13AdAw+6/e7Vc3dUZo2QZDrjdXzCK6urB0abjrGekVDnORyE+E8oEyaI jHt+do2x5pRBjcEb4l/PIU4Q5sclN+U5dprAVWbU2V3Coi1SQqH4pv/ODY3zcLY1 Ni/FLVhWFpNqPXRlpPXWMCDR5L15KhpaQcdMb3WYrzElhU8NhCWSEXPRu7y+O35c 68j9ZIztp2v7IAPFEnQp50BgmcjwIwnHgP++//WKbKho3wconXPrr351JLwOZ1SU tz5rQ5/HS2e0RGn+np3M -----END CERTIFICATE-----Generated at Sun Oct 25 10:45:27 2026 by rpki-client