$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/46D6261876A511EB82E04A2FC4F9AE02.roa File: 46D6261876A511EB82E04A2FC4F9AE02.roa (raw, json) Hash identifier: 07NAb6FOG0gx0PdJkYwOwcdGyYjuHpfxXfS2cSkaRXw= Subject key identifier: D2:2E:14:59:BE:B5:5D:F7:DD:7C:67:73:5B:8C:A3:B6:C1:0F:C8:DB Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 08F1 Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/46D6261876A511EB82E04A2FC4F9AE02.roa Signing time: Fri 28 Aug 2026 21:41:08 +0000 ROA not before: Fri 28 Aug 2026 21:41:08 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 45843 IP address blocks: 103.86.38.0/24 maxlen: 24 117.20.16.0/24 maxlen: 24 117.20.19.0/24 maxlen: 24 119.63.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Aug 28 21:41:08 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a920074-0e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:1a:eb:0a:b5:59:cf:bf:b1:c6:67:df:d1: 64:72:4e:a6:32:b1:89:a5:85:c8:e2:77:83:3b:98: 4b:06:16:73:2a:07:62:06:3a:da:c0:dd:d8:e3:64: d4:a0:ff:fc:a9:1b:cf:4a:04:62:52:2e:20:90:1a: a7:3e:30:ed:eb:4a:81:f2:3a:ef:20:4b:7e:8b:0c: 10:10:d6:88:cd:1b:83:89:45:3c:c5:1d:81:f4:86: 03:9f:9c:43:7d:8c:ee:f7:a1:8d:e9:34:bd:2d:27: 5a:89:29:2e:9c:0f:78:5a:ba:c5:82:18:97:7a:11: 3f:7a:9f:74:64:7f:26:10:37:22:2f:9d:02:d1:34: 86:44:09:74:7a:16:75:3a:55:1d:cc:49:1d:68:b3: fa:30:bc:f4:ca:eb:ff:f6:54:8a:a3:fc:1d:98:4f: 6f:43:2d:df:21:bc:08:37:e5:6c:00:ad:47:b9:fc: f2:ca:c6:62:57:d4:fd:af:df:2b:61:57:9e:a6:90: d2:c0:f1:46:8f:d4:17:b8:4b:df:da:e3:4b:56:06: f0:3e:4b:60:e6:d4:76:54:26:f4:5e:73:16:e2:bf: 25:5a:57:92:cf:79:75:42:6d:11:c4:e6:fd:a8:de: 11:23:2a:e9:b2:31:f8:0f:80:a6:8e:f4:f7:66:5a: 98:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:14:59:BE:B5:5D:F7:DD:7C:67:73:5B:8C:A3:B6:C1:0F:C8:DB X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/46D6261876A511EB82E04A2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.38.0/24 117.20.16.0/24 117.20.19.0/24 119.63.132.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:b5:9e:61:f6:3f:e1:85:d6:1f:d3:0e:81:29:93:28:dd:f5: ef:c5:b2:be:7e:b9:57:40:32:fe:de:99:a0:c3:55:dd:ef:6b: 82:24:32:04:2e:ed:f1:f0:8d:56:f8:d5:ee:1c:d4:d7:75:34: eb:76:f3:55:bd:b6:14:a2:39:17:9f:73:ab:07:de:99:92:5d: 60:0c:94:f1:0a:48:1f:8d:e3:1f:40:a1:b0:1b:7c:d3:d6:94: 36:51:90:bb:77:a9:de:50:29:b1:f6:b6:3b:9a:81:d8:9a:4f: a1:6b:85:02:dc:a6:46:24:15:63:e5:ea:d0:1d:69:1e:b0:6a: d6:5e:9a:49:91:b7:e5:3f:75:56:2c:b3:cc:a9:fd:23:61:94: b5:c2:56:33:b5:22:4c:63:5c:17:3b:d1:c6:c3:18:00:4b:10: 5b:6b:9b:c6:62:21:aa:71:8e:63:16:47:00:27:4b:cb:72:0b: 5d:4e:90:c7:5d:7b:36:40:c5:17:8b:6e:a8:90:57:31:6e:43: 94:79:c0:f4:ef:a7:33:aa:d3:8b:6b:a1:41:4a:81:cb:2b:19: 8e:97:78:db:fc:85:31:e9:33:0d:e7:ed:27:ec:14:4a:d4:14: ab:e9:bd:28:3c:fe:2f:7e:76:f8:4d:31:a9:65:79:63:5c:10: bb:27:d4:00 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjYwODI4MjE0MTA4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkyMDA3NC0wZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqt0a6wq1Wc+/scZn39Fkck6mMrGJpYXI4neDO5hLBhZzKgdiBjrawN3Y42TU oP/8qRvPSgRiUi4gkBqnPjDt60qB8jrvIEt+iwwQENaIzRuDiUU8xR2B9IYDn5xD fYzu96GN6TS9LSdaiSkunA94WrrFghiXehE/ep90ZH8mEDciL50C0TSGRAl0ehZ1 OlUdzEkdaLP6MLz0yuv/9lSKo/wdmE9vQy3fIbwIN+VsAK1HufzyysZiV9T9r98r YVeeppDSwPFGj9QXuEvf2uNLVgbwPktg5tR2VCb0XnMW4r8lWleSz3l1Qm0RxOb9 qN4RIyrpsjH4D4CmjvT3ZlqYcQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFNIuFFm+ tV333Xxnc1uMo7bBD8jbMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIyMEIvQkE3MUI2NDgxMjAzMTFFQkJBQTE5NDE0QzRGOUFFMDIvNDZENjI2MTg3 NkE1MTFFQjgyRTA0QTJGQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAZ1YmAwQAdRQQAwQAdRQTAwQAdz+EMA0GCSqGSIb3DQEBCwUAA4IB AQAMtZ5h9j/hhdYf0w6BKZMo3fXvxbK+frlXQDL+3pmgw1Xd72uCJDIELu3x8I1W +NXuHNTXdTTrdvNVvbYUojkXn3OrB96Zkl1gDJTxCkgfjeMfQKGwG3zT1pQ2UZC7 d6neUCmx9rY7moHYmk+ha4UC3KZGJBVj5erQHWkesGrWXppJkbflP3VWLLPMqf0j YZS1wlYztSJMY1wXO9HGwxgASxBba5vGYiGqcY5jFkcAJ0vLcgtdTpDHXXs2QMUX i26okFcxbkOUecD076czqtOLa6FBSoHLKxmOl3jb/IUx6TMN5+0n7BRK1BSr6b0o PP4vfnb4TTGpZXljXBC7J9QA -----END CERTIFICATE-----Generated at Fri Sep 11 14:29:59 2026 by rpki-client