$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa File: 03EE880413F511EA8D120C65C4F9AE02.roa (raw, json) Hash identifier: 5LQSvZiQRtcpiVGRvUHsnqIGsr4GbY3WPSSrXUw5HV0= Subject key identifier: 96:43:25:D9:8C:F5:36:A5:A9:0F:E8:E8:3C:F0:56:CB:42:C7:5B:FB Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Certificate serial: 0D02 Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa Signing time: Fri 02 Oct 2026 19:35:40 +0000 ROA not before: Fri 02 Oct 2026 19:35:40 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 136007 IP address blocks: 103.78.248.0/24 maxlen: 24 103.78.249.0/24 maxlen: 24 103.78.250.0/24 maxlen: 24 103.78.251.0/24 maxlen: 24 2400:10c0::/32 maxlen: 32 2400:10c0::/35 maxlen: 35 2400:10c0:2000::/35 maxlen: 35 2400:10c0:4000::/35 maxlen: 35 2400:10c0:6000::/35 maxlen: 35 2400:10c0:8000::/35 maxlen: 35 2400:10c0:a000::/35 maxlen: 35 2400:10c0:c000::/35 maxlen: 35 2400:10c0:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Validity Not Before: Oct 2 19:35:40 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ac0078c-8e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8f:ce:c9:6d:d9:95:cb:f5:94:50:93:13:64: c7:74:68:8a:04:5a:2b:0a:ab:3d:7d:a9:e1:4e:77: a5:bb:81:36:63:f6:b6:d1:d1:04:54:c1:91:b5:ab: 6e:b9:45:0f:19:36:fe:95:1a:f7:80:09:9b:1a:08: 07:c5:be:79:9d:2a:ff:14:d1:e3:bd:55:fd:84:ca: 94:25:a3:74:58:6c:12:b8:8a:24:4f:f2:cb:b1:5b: d9:44:19:63:f0:1f:6b:29:82:18:0b:6a:e0:14:b1: 3c:c3:bf:0a:f0:eb:21:36:6b:a8:0a:98:64:7b:ab: 3e:ea:9b:81:b3:ff:4c:85:8f:e3:c7:56:bf:21:47: 14:9c:46:8a:68:70:b9:29:2e:15:63:8c:27:0e:57: 89:4b:e6:cf:ff:50:31:3f:ac:1c:e2:07:57:08:25: 95:ce:67:d4:02:69:05:34:ea:37:d2:90:91:8e:cb: bb:78:19:e6:9f:b1:61:fc:02:5a:d8:80:3f:92:1f: 8c:09:62:e6:b8:28:9b:9e:3c:72:fb:9e:2c:0d:49: 54:ac:18:bf:69:de:98:49:d2:3a:32:96:58:7c:0c: af:12:94:82:a1:4a:f1:ff:f6:af:e3:a3:e6:83:d9: d7:68:0f:4d:fd:ee:12:b6:f4:64:b1:97:26:56:c0: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:43:25:D9:8C:F5:36:A5:A9:0F:E8:E8:3C:F0:56:CB:42:C7:5B:FB X509v3 Authority Key Identifier: keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.78.248.0/22 IPv6: 2400:10c0::/32 Signature Algorithm: sha256WithRSAEncryption 77:8a:b0:a0:49:30:ce:6c:15:75:6f:38:1b:72:18:e0:c5:54: b4:83:a7:12:8a:da:8e:83:b6:2a:83:68:6d:1b:c7:73:e3:d2: b2:e6:29:3d:95:fc:ec:27:ec:79:41:0f:b0:c8:f0:56:ff:d3: 5d:55:e3:14:28:1c:64:e4:c9:44:77:6b:fb:17:0b:9c:4a:bb: 38:73:2f:1b:c3:02:b9:a1:33:4f:a1:1e:68:b2:28:4f:d8:0c: a6:b1:22:55:7b:73:59:04:e8:92:e2:6a:22:98:cf:72:fa:18: 8f:b3:66:a0:8f:04:9b:c9:cd:ed:41:6f:09:2a:22:6d:a9:cc: 38:6c:56:ce:2b:9d:16:63:21:41:48:14:11:9a:9f:b2:bb:28: f8:cd:e8:7f:cf:47:03:65:f0:da:bc:fd:23:ff:b1:88:2d:50: a0:c3:45:33:d1:83:27:fa:73:64:92:d9:19:3e:1f:bb:a2:04: db:23:2f:ec:89:2e:f9:36:5b:4a:82:2f:d7:e0:71:af:0d:88: 55:ff:8a:80:06:c6:56:ca:eb:8b:d3:69:1b:cd:dc:c9:e9:b9: cb:c4:19:89:61:79:2d:77:09:9b:c9:dd:c2:64:ee:00:24:b1: 7a:58:b4:5b:df:4f:92:de:5b:e6:08:06:e1:f8:2e:5e:7d:14: 2f:4a:cb:bf -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5 OEExMjExM0YwHhcNMjYxMDAyMTkzNTQwWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMwMDc4Yy04ZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmY/OyW3Zlcv1lFCTE2THdGiKBForCqs9fanhTnelu4E2Y/a20dEEVMGRtatu uUUPGTb+lRr3gAmbGggHxb55nSr/FNHjvVX9hMqUJaN0WGwSuIokT/LLsVvZRBlj 8B9rKYIYC2rgFLE8w78K8OshNmuoCphke6s+6puBs/9MhY/jx1a/IUcUnEaKaHC5 KS4VY4wnDleJS+bP/1AxP6wc4gdXCCWVzmfUAmkFNOo30pCRjsu7eBnmn7Fh/AJa 2IA/kh+MCWLmuCibnjxy+54sDUlUrBi/ad6YSdI6MpZYfAyvEpSCoUrx//av46Pm g9nXaA9N/e4StvRksZcmVsApowIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJZDJdmM 9TalqQ/o6DzwVstCx1v7MB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTZCRjUvOUQwQjQyMjIxM0YzMTFFQTgwQjM3NDVGQzRGOUFFMDIvMDNFRTg4MDQx M0Y1MTFFQThEMTIwQzY1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ074MA0EAgACMAcDBQAkABDAMA0GCSqGSIb3DQEBCwUAA4IBAQB3 irCgSTDObBV1bzgbchjgxVS0g6cSitqOg7Yqg2htG8dz49Ky5ik9lfzsJ+x5QQ+w yPBW/9NdVeMUKBxk5MlEd2v7FwucSrs4cy8bwwK5oTNPoR5osihP2AymsSJVe3NZ BOiS4moimM9y+hiPs2agjwSbyc3tQW8JKiJtqcw4bFbOK50WYyFBSBQRmp+yuyj4 zeh/z0cDZfDavP0j/7GILVCgw0Uz0YMn+nNkktkZPh+7ogTbIy/siS75NltKgi/X 4HGvDYhV/4qABsZWyuuL02kbzdzJ6bnLxBmJYXktdwmbyd3CZO4AJLF6WLRb30+S 3lvmCAbh+C5efRQvSsu/ -----END CERTIFICATE-----Generated at Fri Oct 9 20:27:01 2026 by rpki-client