$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/970894AE3C0F11EEB8F0554FC4F9AE02.roa File: 970894AE3C0F11EEB8F0554FC4F9AE02.roa (raw, json) Hash identifier: Q3vLqQMFVaz9K47C6jRlK0MXXlAouRiiwaPXxkj8tOk= Subject key identifier: 8C:9F:DB:B2:6F:E7:97:02:B3:01:F3:DA:2D:A9:06:5D:4C:9A:74:C4 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6E6A Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/970894AE3C0F11EEB8F0554FC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:29:55 +0000 ROA not before: Fri 02 Oct 2026 15:29:55 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 150866 IP address blocks: 103.243.168.0/24 maxlen: 24 103.243.169.0/24 maxlen: 24 2401:1d60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28266 (0x6e6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:29:55 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcdf3-3c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:6d:0a:75:7d:4d:37:27:fa:ff:01:ce:e4: e5:d3:30:27:b6:7e:50:f2:1c:27:0d:1c:cc:ee:0d: 18:f7:00:f7:14:0c:06:bc:b9:fa:cc:69:08:07:3f: 5f:a2:53:a9:b9:8c:a1:c5:7d:11:71:dc:11:32:4e: df:7b:1f:39:d4:35:41:6f:d0:13:c4:83:6b:3e:0b: f5:89:7f:21:76:88:f9:2f:f1:16:db:62:48:a9:c2: a4:ea:f7:f9:ac:f3:47:e3:d5:47:63:1c:b2:27:87: 55:fb:e0:0a:f0:ab:4e:75:36:ff:a5:f2:7c:17:45: 89:b7:bf:d9:5c:a6:74:99:7a:b5:69:16:7a:c7:ff: 1d:2c:a8:b2:df:ca:06:0b:5e:96:bb:b6:ca:69:58: d6:89:d1:64:f8:6f:1d:42:49:75:02:d3:73:c7:8f: 42:7a:83:d7:80:54:78:02:05:f5:10:56:ca:c3:32: 18:15:ea:c8:28:10:d6:b5:9f:36:81:4e:fe:52:b1: 99:0b:16:ac:9a:bb:ad:d2:0a:d1:02:a4:25:8a:0a: ae:ee:b0:96:f0:5f:80:44:49:d1:d1:d2:b7:5e:ea: a5:9c:ec:20:f4:ec:c8:c8:09:69:e6:84:ed:da:4b: da:32:c4:30:62:83:8b:1a:1d:df:d7:45:28:c7:bf: 1f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9F:DB:B2:6F:E7:97:02:B3:01:F3:DA:2D:A9:06:5D:4C:9A:74:C4 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/970894AE3C0F11EEB8F0554FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.243.168.0/23 IPv6: 2401:1d60::/48 Signature Algorithm: sha256WithRSAEncryption 14:15:df:42:50:46:69:4f:74:4f:75:e9:e1:b6:58:80:a9:28: 9f:70:7a:02:13:e1:1d:0c:6d:93:49:44:3b:a6:d7:5e:35:65: 23:1f:aa:97:e1:d5:67:80:47:4b:1e:32:bd:29:1c:be:e0:11: 19:18:aa:a1:d8:a6:46:98:d4:b6:8f:2d:12:61:c2:16:16:3c: 79:57:0b:b7:e8:fa:02:9f:66:5e:f9:d8:0d:8f:31:30:dc:64: e1:d8:6c:18:10:8f:2a:44:f2:37:82:f1:a4:dc:73:d8:36:f5: 49:16:1e:11:ce:58:66:a5:4d:9c:46:70:a3:b0:6c:19:95:84: de:22:8a:7b:99:71:a9:53:37:35:06:76:50:19:d4:f2:f0:99: 51:49:6b:b4:46:ec:5a:ab:09:6e:7e:ef:91:77:b7:99:8e:54: 35:02:26:5f:c8:88:46:5b:8f:ff:22:57:7b:5f:5f:57:88:71: ee:94:c9:b7:0f:4d:7b:89:18:7f:71:c1:2e:19:7d:e2:4f:a2: 12:8d:4c:22:c8:07:6d:f8:ef:ed:3e:f9:6a:a1:1c:da:92:fb: 13:3f:ce:83:7c:f3:0f:04:7a:c3:66:43:97:30:97:8c:04:92: ce:02:7d:49:ba:dd:40:43:7d:39:69:42:2f:bb:c9:f0:2f:31: 89:ae:32:cd -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICbmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyOTU1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2RmMy0zYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAhtCnV9TTcn+v8BzuTl0zAntn5Q8hwnDRzM7g0Y9wD3FAwGvLn6zGkIBz9f olOpuYyhxX0RcdwRMk7fex851DVBb9ATxINrPgv1iX8hdoj5L/EW22JIqcKk6vf5 rPNH49VHYxyyJ4dV++AK8KtOdTb/pfJ8F0WJt7/ZXKZ0mXq1aRZ6x/8dLKiy38oG C16Wu7bKaVjWidFk+G8dQkl1AtNzx49CeoPXgFR4AgX1EFbKwzIYFerIKBDWtZ82 gU7+UrGZCxasmrut0grRAqQligqu7rCW8F+AREnR0dK3XuqlnOwg9OzIyAlp5oTt 2kvaMsQwYoOLGh3f10Uox78f/QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIyf27Jv 55cCswHz2i2pBl1MmnTEMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOTcwODk0QUUz QzBGMTFFRUI4RjA1NTRGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ/OoMA8EAgACMAkDBwAkAR1gAAAwDQYJKoZIhvcNAQELBQADggEB ABQV30JQRmlPdE916eG2WICpKJ9wegIT4R0MbZNJRDum1141ZSMfqpfh1WeAR0se Mr0pHL7gERkYqqHYpkaY1LaPLRJhwhYWPHlXC7fo+gKfZl752A2PMTDcZOHYbBgQ jypE8jeC8aTcc9g29UkWHhHOWGalTZxGcKOwbBmVhN4iinuZcalTNzUGdlAZ1PLw mVFJa7RG7FqrCW5+75F3t5mOVDUCJl/IiEZbj/8iV3tfX1eIce6UybcPTXuJGH9x wS4ZfeJPohKNTCLIB2347+0++WqhHNqS+xM/zoN88w8EesNmQ5cwl4wEks4CfUm6 3UBDfTlpQi+7yfAvMYmuMs0= -----END CERTIFICATE-----Generated at Sat Oct 24 20:43:56 2026 by rpki-client