$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AEA8D3CDFFC11ECAE7CE631C4F9AE02.roa File: 8AEA8D3CDFFC11ECAE7CE631C4F9AE02.roa (raw, json) Hash identifier: U0Du2j7s46Za11MVij09BTdow8PVs1rM6JlIP5DtuQA= Subject key identifier: 97:AE:26:49:30:22:58:26:46:0F:2E:90:1F:65:5C:55:C1:29:37:93 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6F3D Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AEA8D3CDFFC11ECAE7CE631C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:37:30 +0000 ROA not before: Fri 02 Oct 2026 15:37:30 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 63741 IP address blocks: 103.51.120.0/23 maxlen: 24 103.216.72.0/22 maxlen: 24 103.245.244.0/22 maxlen: 24 163.227.120.0/24 maxlen: 24 163.227.121.0/24 maxlen: 24 163.227.228.0/23 maxlen: 24 203.167.8.0/22 maxlen: 24 2001:df5:66c0::/48 maxlen: 48 2001:df5:7c40::/48 maxlen: 48 2404:ee80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 10:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28477 (0x6f3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:37:30 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcfba-c658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:02:cd:de:05:e8:fa:7b:01:87:8d:89:a1:1a: 2c:98:8f:a9:4d:66:36:29:7b:3a:39:4f:63:af:06: ad:b4:66:70:42:14:08:24:c2:65:a8:1d:da:cc:2c: fa:d7:d8:f8:a3:01:23:73:84:57:99:f6:12:03:32: 74:6e:8f:bd:2e:9f:97:93:59:c0:23:75:64:f5:3d: 78:39:07:04:86:68:5c:50:f3:8a:66:4c:0d:8a:90: d0:64:87:c6:d8:13:b6:a4:75:fa:bf:9f:b1:a6:0e: 9d:b6:bc:15:b4:d5:09:21:80:93:db:3f:f2:10:65: 00:4d:48:d7:b7:47:ff:7f:c4:b9:b5:fe:58:22:20: d3:0f:4b:ee:8f:b0:ce:82:33:e9:51:0e:f9:0a:53: 84:29:26:45:10:41:68:0f:73:92:86:55:10:b4:c9: d3:77:6d:71:98:92:50:93:53:ff:bb:49:7e:e8:62: d3:36:4a:e4:73:ed:c8:f4:f1:e9:ac:d9:20:ef:bb: 06:2f:a1:17:37:96:ce:79:97:f8:59:6e:92:89:34: 65:53:1c:41:e2:a7:36:3c:30:c4:8b:ff:68:20:da: 40:36:eb:ce:7a:96:56:a9:de:bb:7a:2f:69:22:9a: 77:1d:a0:b3:3d:ae:25:48:cb:83:d2:65:6e:90:6c: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AE:26:49:30:22:58:26:46:0F:2E:90:1F:65:5C:55:C1:29:37:93 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AEA8D3CDFFC11ECAE7CE631C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.51.120.0/23 103.216.72.0/22 103.245.244.0/22 163.227.120.0/23 163.227.228.0/23 203.167.8.0/22 IPv6: 2001:df5:66c0::/48 2001:df5:7c40::/48 2404:ee80::/48 Signature Algorithm: sha256WithRSAEncryption 3f:89:e6:cb:aa:40:49:e3:7a:ed:f4:e5:65:e3:5f:6f:6b:a5: 9d:28:e4:f3:cc:88:06:b3:c7:58:c5:42:d5:c6:41:ab:a5:d2: be:56:77:1a:67:92:02:0a:9d:75:62:69:4e:6a:46:0a:74:6b: ca:3a:9a:44:74:12:44:10:c4:66:7e:f7:6e:66:16:58:62:11: 99:af:33:ac:7f:d6:83:c9:c8:6c:cb:8d:df:4c:d4:ce:77:b6: 0e:a6:d2:e7:2b:15:a5:19:2d:47:b7:fa:56:a7:78:8a:96:aa: e0:a4:19:5f:eb:1d:08:da:98:8d:17:cd:c7:37:c5:b8:32:a8: f1:d1:f4:7b:81:5e:da:e2:ba:cd:2e:3d:97:a3:2a:b8:27:13: 5c:bd:a5:58:3a:7a:78:8a:b4:78:1b:26:33:9b:0f:e4:47:f0: de:01:b3:30:31:f7:b2:1b:ca:4b:67:4c:84:a4:36:92:62:5c: 9c:4a:9f:ef:37:56:95:ca:2b:ee:fc:13:58:68:df:83:c3:98: db:14:29:e0:b7:c2:93:28:2c:b4:80:7c:40:88:ad:d9:9e:5d: cd:7b:72:17:e6:be:2f:ba:d2:03:f1:25:8a:43:b2:3c:4f:36: cb:34:ee:4d:78:41:3d:ae:50:92:b1:b9:52:af:12:1c:7d:e9: 68:33:36:f2 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICbz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNzMwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2ZiYS1jNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwLN3gXo+nsBh42JoRosmI+pTWY2KXs6OU9jrwattGZwQhQIJMJlqB3azCz6 19j4owEjc4RXmfYSAzJ0bo+9Lp+Xk1nAI3Vk9T14OQcEhmhcUPOKZkwNipDQZIfG 2BO2pHX6v5+xpg6dtrwVtNUJIYCT2z/yEGUATUjXt0f/f8S5tf5YIiDTD0vuj7DO gjPpUQ75ClOEKSZFEEFoD3OShlUQtMnTd21xmJJQk1P/u0l+6GLTNkrkc+3I9PHp rNkg77sGL6EXN5bOeZf4WW6SiTRlUxxB4qc2PDDEi/9oINpANuvOepZWqd67ei9p Ipp3HaCzPa4lSMuD0mVukGwPQQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJeuJkkw IlgmRg8ukB9lXFXBKTeTMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOEFFQThEM0NE RkZDMTFFQ0FFN0NFNjMxQzRGOUFFMDIucm9hMGAGCCsGAQUFBwEHAQH/BFEwTzAq BAIAATAkAwQBZzN4AwQCZ9hIAwQCZ/X0AwQBo+N4AwQBo+PkAwQCy6cIMCEEAgAC MBsDBwAgAQ31ZsADBwAgAQ31fEADBwAkBO6AAAAwDQYJKoZIhvcNAQELBQADggEB AD+J5suqQEnjeu305WXjX29rpZ0o5PPMiAazx1jFQtXGQaul0r5WdxpnkgIKnXVi aU5qRgp0a8o6mkR0EkQQxGZ+925mFlhiEZmvM6x/1oPJyGzLjd9M1M53tg6m0ucr FaUZLUe3+laneIqWquCkGV/rHQjamI0Xzcc3xbgyqPHR9HuBXtrius0uPZejKrgn E1y9pVg6eniKtHgbJjObD+RH8N4BszAx97IbyktnTISkNpJiXJxKn+83VpXKK+78 E1ho34PDmNsUKeC3wpMoLLSAfECIrdmeXc17chfmvi+60gPxJYpDsjxPNss07k14 QT2uUJKxuVKvEhx96WgzNvI= -----END CERTIFICATE-----Generated at Sat Oct 24 12:19:43 2026 by rpki-client