$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/128DFF02E14611EE80D6C425C4F9AE02.roa File: 128DFF02E14611EE80D6C425C4F9AE02.roa (raw, json) Hash identifier: O4RI8nFWIUHGr3lrmWvMSynoOuRE0fzWotx1sdpRx0k= Subject key identifier: E8:D4:48:83:41:0C:60:7C:66:C3:93:86:47:44:40:C7:9A:DD:DC:7B Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 0669 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/128DFF02E14611EE80D6C425C4F9AE02.roa Signing time: Sun 02 Aug 2026 23:43:30 +0000 ROA not before: Sun 02 Aug 2026 23:43:30 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 142565 IP address blocks: 103.78.28.0/22 maxlen: 22 103.78.28.0/24 maxlen: 24 103.78.29.0/24 maxlen: 24 103.78.30.0/24 maxlen: 24 103.78.31.0/24 maxlen: 24 103.169.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Aug 2026 23:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Aug 2 23:43:30 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6fd622-7b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bd:df:28:95:7f:c8:be:ce:0e:88:e0:3d:0a: 4d:59:ff:9a:bb:41:8e:b7:b9:fa:63:65:be:24:f6: d6:26:88:24:d2:bc:92:f9:1e:bb:92:61:9a:32:73: 20:0d:8f:fb:63:10:ee:a2:be:69:4d:05:e7:02:1f: ad:5a:e4:6b:dd:05:21:44:c9:7e:d3:48:fe:13:70: 8f:8b:3d:9d:84:2c:62:13:73:72:3a:ee:3e:70:d8: a9:f4:06:42:31:0b:09:be:e2:08:16:2f:db:62:50: 36:ae:fa:b7:3c:a7:07:4f:38:f6:1f:74:31:0b:72: 29:70:1c:f5:90:a7:ce:da:d8:0c:21:c2:5c:50:72: 65:06:7b:6d:d5:ef:99:b8:ba:ec:3b:6c:13:05:f0: d6:fb:31:4f:3c:c0:30:92:f9:c4:f3:12:fe:34:c0: 9c:a0:7d:91:35:24:b9:62:54:b0:f4:de:f3:c7:b0: 96:80:8e:48:69:d4:e0:b8:8c:9c:12:38:e2:04:05: 93:b7:ae:f6:9c:27:17:1d:37:83:2d:2e:3f:e6:71: f5:81:18:a8:9b:af:e1:49:90:88:ab:38:24:47:37: 78:b9:4a:95:4b:9d:3b:7b:f0:73:f4:73:6e:83:3d: 89:cd:62:0c:d7:20:a9:16:af:2f:f1:d1:d1:c9:8e: ae:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D4:48:83:41:0C:60:7C:66:C3:93:86:47:44:40:C7:9A:DD:DC:7B X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/128DFF02E14611EE80D6C425C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.78.28.0/22 103.169.66.0/24 Signature Algorithm: sha256WithRSAEncryption c3:93:39:05:c0:c2:39:9c:2a:c4:d8:c1:04:87:38:5c:92:69: 92:54:f2:9b:a5:2a:72:b9:74:15:ee:0c:af:82:ff:e8:66:0d: a8:14:4f:56:ea:c9:1e:40:39:89:37:c6:20:9c:63:c4:cc:4b: 19:61:94:0a:56:94:33:b5:f9:ae:71:41:d4:02:b0:cd:f8:f7: 4d:2e:fa:dc:22:c4:4a:6b:4e:85:ef:d9:a6:73:17:54:c3:2e: 34:9f:6e:17:1f:78:c8:5e:f5:8a:19:92:80:20:e9:45:66:1f: 91:e9:3b:ff:7e:66:00:9f:30:71:bd:e5:dc:1b:d3:70:fd:60: cb:4d:3b:b1:3e:e5:70:57:47:a9:6e:75:11:80:b2:c7:51:26: 49:f9:22:d0:8a:9f:d8:e2:2b:44:cb:4a:aa:ae:91:eb:0e:de: 0e:62:d3:b0:32:25:30:76:06:78:90:5c:8b:10:7b:49:07:44: b7:c5:41:a6:b1:ea:54:6d:b0:4d:92:58:f1:74:91:41:18:bc: 4b:81:27:73:77:9f:52:8e:ea:b6:5c:84:f6:8e:2c:f9:50:9a: 0f:7e:fc:6a:8a:07:2d:a8:d8:dd:06:63:1b:36:13:52:9d:21: 36:a7:0b:a4:2f:14:fe:f1:ae:c4:14:d8:ce:12:74:a0:86:80: 5a:76:6b:d6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjYwODAyMjM0MzMwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZmZDYyMi03YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmL3fKJV/yL7ODojgPQpNWf+au0GOt7n6Y2W+JPbWJogk0ryS+R67kmGaMnMg DY/7YxDuor5pTQXnAh+tWuRr3QUhRMl+00j+E3CPiz2dhCxiE3NyOu4+cNip9AZC MQsJvuIIFi/bYlA2rvq3PKcHTzj2H3QxC3IpcBz1kKfO2tgMIcJcUHJlBntt1e+Z uLrsO2wTBfDW+zFPPMAwkvnE8xL+NMCcoH2RNSS5YlSw9N7zx7CWgI5IadTguIyc EjjiBAWTt672nCcXHTeDLS4/5nH1gRiom6/hSZCIqzgkRzd4uUqVS507e/Bz9HNu gz2JzWIM1yCpFq8v8dHRyY6umQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOjUSINB DGB8ZsOThkdEQMea3dx7MB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURERDUvOEIwRDBGRjJFM0Y4MTFFQjlFMDhEQjE0QzRGOUFFMDIvMTI4REZGMDJF MTQ2MTFFRTgwRDZDNDI1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ04cAwQAZ6lCMA0GCSqGSIb3DQEBCwUAA4IBAQDDkzkFwMI5nCrE 2MEEhzhckmmSVPKbpSpyuXQV7gyvgv/oZg2oFE9W6skeQDmJN8YgnGPEzEsZYZQK VpQztfmucUHUArDN+PdNLvrcIsRKa06F79mmcxdUwy40n24XH3jIXvWKGZKAIOlF Zh+R6Tv/fmYAnzBxveXcG9Nw/WDLTTuxPuVwV0epbnURgLLHUSZJ+SLQip/Y4itE y0qqrpHrDt4OYtOwMiUwdgZ4kFyLEHtJB0S3xUGmsepUbbBNkljxdJFBGLxLgSdz d59Sjuq2XIT2jiz5UJoPfvxqigctqNjdBmMbNhNSnSE2pwukLxT+8a7EFNjOEnSg hoBadmvW -----END CERTIFICATE-----Generated at Tue Aug 4 12:20:39 2026 by rpki-client