$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/EAF9ABE0918211F1A32E296B3711F970.roa File: EAF9ABE0918211F1A32E296B3711F970.roa (raw, json) Hash identifier: MQaAIG5r20ociKbohW5fnr7qAW+027Wmnt0l3Iid9ak= Subject key identifier: EC:BE:C7:3D:A9:2B:D3:A3:0D:D0:0E:19:F2:58:07:3D:31:D4:FC:2F Certificate issuer: /CN=A91AA71B/serialNumber=847C580E65A393F0C1F5B831953568F6F6E9C55F Certificate serial: 05 Authority key identifier: 84:7C:58:0E:65:A3:93:F0:C1:F5:B8:31:95:35:68:F6:F6:E9:C5:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHxYDmWjk_DB9bgxlTVo9vbpxV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/EAF9ABE0918211F1A32E296B3711F970.roa Signing time: Thu 06 Aug 2026 10:52:21 +0000 ROA not before: Thu 06 Aug 2026 10:52:21 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141388 IP address blocks: 103.249.118.0/24 maxlen: 24 103.249.119.0/24 maxlen: 24 2001:df3:140::/48 maxlen: 48 2001:df3:141::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/hHxYDmWjk_DB9bgxlTVo9vbpxV8.crl rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/hHxYDmWjk_DB9bgxlTVo9vbpxV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHxYDmWjk_DB9bgxlTVo9vbpxV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA71B, serialNumber=847C580E65A393F0C1F5B831953568F6F6E9C55F Validity Not Before: Aug 6 10:52:21 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a746765-3b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e5:ee:c6:3d:21:91:ca:89:ee:55:e8:e3:1a: b0:8d:40:ce:d9:b5:4a:0f:2b:37:fa:0e:0e:64:8e: 48:2c:2a:62:e6:e7:b2:3c:a8:29:34:64:84:58:a0: 11:13:37:b8:9a:67:84:25:c1:32:74:a3:d4:01:80: 3b:bc:29:5a:44:a5:cd:7a:d6:0d:9b:f4:0b:51:60: 92:0e:6a:2e:66:6e:97:67:e3:6c:6d:8f:78:b6:9c: b9:5d:4c:bc:d1:e6:d6:62:2f:6f:d7:5d:e6:fd:ab: 5e:68:e5:be:82:db:2e:28:39:3a:d5:13:59:14:f0: 24:dc:68:45:27:b2:dc:ae:23:d4:5c:a7:11:17:20: 31:da:cd:3b:67:58:2c:6f:df:81:89:0b:84:d0:83: 97:ef:04:79:6d:71:d5:73:14:a4:9d:7e:63:57:8b: a7:48:82:bb:ec:30:18:38:9d:cf:0e:24:49:e8:4f: 29:63:93:42:f0:9b:14:16:cf:82:cf:7b:cc:16:56: 01:21:8f:5d:d5:52:b9:dc:b3:96:6b:50:83:0f:07: dd:31:52:d2:d5:2b:4e:dd:74:e4:12:73:19:d0:9f: cf:96:32:10:6f:6a:57:7f:b5:a3:cc:f3:95:fc:a3: 1f:1c:36:ae:ee:01:2f:ab:5e:7a:d5:54:e4:de:a6: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BE:C7:3D:A9:2B:D3:A3:0D:D0:0E:19:F2:58:07:3D:31:D4:FC:2F X509v3 Authority Key Identifier: keyid:84:7C:58:0E:65:A3:93:F0:C1:F5:B8:31:95:35:68:F6:F6:E9:C5:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/hHxYDmWjk_DB9bgxlTVo9vbpxV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHxYDmWjk_DB9bgxlTVo9vbpxV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/EAF9ABE0918211F1A32E296B3711F970.roa sbgp-ipAddrBlock: critical IPv4: 103.249.118.0/23 IPv6: 2001:df3:140::/47 Signature Algorithm: sha256WithRSAEncryption 2e:bb:30:2e:54:e1:70:3d:5a:8a:08:02:d3:37:49:1b:8c:9d: 39:ab:31:49:04:f6:65:74:3a:89:b4:8a:13:47:ae:b4:e1:82: ba:05:bc:18:49:5f:0c:af:44:49:49:34:94:9c:dd:f9:d2:e5: b9:af:9f:2c:1a:84:62:8f:94:ef:98:cc:4c:c0:2d:85:5d:4e: c1:71:b9:83:91:8e:09:b7:53:be:a3:55:d4:50:b2:35:e0:f0: 86:9f:36:df:30:c8:cd:6e:d5:04:a2:bc:5f:68:eb:c7:b0:42: f5:17:fc:5e:32:30:21:27:c5:b3:ba:48:0f:b0:2f:15:d5:67: 27:90:6c:11:7b:4f:59:ff:0a:8c:e4:b9:4c:33:fe:fe:a3:d5: 92:c9:a8:d1:ac:60:c1:b4:3e:3a:b5:29:4e:12:13:0c:13:97: 45:83:53:dc:71:f4:c2:aa:63:5b:20:83:55:74:6b:da:41:64: 71:c8:66:16:14:a1:6a:ed:62:c6:70:1e:36:6d:7a:c2:3a:e5: 7e:4c:00:01:5e:47:35:bf:66:27:22:13:cd:fe:f7:c6:22:58: af:c6:34:9c:62:14:a7:23:fa:1d:0c:2b:94:46:d4:0e:06:4b: 70:48:6f:8a:ff:d0:ea:50:f2:17:d0:43:b2:35:4a:de:a7:4f: 43:b4:3b:85 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTcxQjExMC8GA1UEBRMoODQ3QzU4MEU2NUEzOTNGMEMxRjVCODMxOTUzNTY4RjZG NkU5QzU1RjAeFw0yNjA4MDYxMDUyMjFaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNzQ2NzY1LTNiMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCN5e7GPSGRyonuVejjGrCNQM7ZtUoPKzf6Dg5kjkgsKmLm57I8qCk0ZIRYoBET N7iaZ4QlwTJ0o9QBgDu8KVpEpc161g2b9AtRYJIOai5mbpdn42xtj3i2nLldTLzR 5tZiL2/XXeb9q15o5b6C2y4oOTrVE1kU8CTcaEUnstyuI9RcpxEXIDHazTtnWCxv 34GJC4TQg5fvBHltcdVzFKSdfmNXi6dIgrvsMBg4nc8OJEnoTyljk0LwmxQWz4LP e8wWVgEhj13VUrncs5ZrUIMPB90xUtLVK07ddOQScxnQn8+WMhBvald/taPM85X8 ox8cNq7uAS+rXnrVVOTepqtHAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU7L7HPakr 06MN0A4Z8lgHPTHU/C8wHwYDVR0jBBgwFoAUhHxYDmWjk/DB9bgxlTVo9vbpxV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNzFCLzkxNkIyNDQyOTA5 MTExRjFBMEVDMEQ4OTY5MTFGOTcwL2hIeFlEbVdqa19EQjliZ3hsVFZvOXZicHhW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEh4WURtV2prX0RCOWJneGxUVm85dmJweFY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTcxQi85MTZCMjQ0MjkwOTExMUYxQTBFQzBEODk2OTExRjk3MC9FQUY5QUJFMDkx ODIxMUYxQTMyRTI5NkIzNzExRjk3MC5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBAFn+XYwDwQCAAIwCQMHASABDfMBQDANBgkqhkiG9w0BAQsFAAOCAQEA LrswLlThcD1aiggC0zdJG4ydOasxSQT2ZXQ6ibSKE0eutOGCugW8GElfDK9ESUk0 lJzd+dLlua+fLBqEYo+U75jMTMAthV1OwXG5g5GOCbdTvqNV1FCyNeDwhp823zDI zW7VBKK8X2jrx7BC9Rf8XjIwISfFs7pID7AvFdVnJ5BsEXtPWf8KjOS5TDP+/qPV ksmo0axgwbQ+OrUpThITDBOXRYNT3HH0wqpjWyCDVXRr2kFkcchmFhShau1ixnAe Nm16wjrlfkwAAV5HNb9mJyITzf73xiJYr8Y0nGIUpyP6HQwrlEbUDgZLcEhviv/Q 6lDyF9BDsjVK3qdPQ7Q7hQ== -----END CERTIFICATE-----Generated at Sun Oct 4 19:55:21 2026 by rpki-client