$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/9FB920BEA5C511F18632EDD27011F970.roa File: 9FB920BEA5C511F18632EDD27011F970.roa (raw, json) Hash identifier: vni6LOersqphxAAA0PtOf81q8lCLShlvhIJBlUO6fNA= Subject key identifier: 5F:15:30:D6:3F:36:65:B7:3F:DE:01:0A:45:FD:C9:F0:97:C5:88:23 Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0C9C Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/9FB920BEA5C511F18632EDD27011F970.roa Signing time: Tue 01 Sep 2026 05:26:03 +0000 ROA not before: Tue 01 Sep 2026 05:26:03 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 6939 IP address blocks: 43.239.104.0/24 maxlen: 24 45.124.204.0/24 maxlen: 24 45.124.205.0/24 maxlen: 24 45.124.206.0/24 maxlen: 24 45.124.207.0/24 maxlen: 24 103.25.100.0/24 maxlen: 24 103.25.101.0/24 maxlen: 24 103.25.102.0/24 maxlen: 24 103.25.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Sep 1 05:26:03 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a9661eb-c240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:ef:53:5b:12:70:b3:54:17:25:46:48:ad: e0:ec:90:75:7b:c4:dc:37:dd:37:a5:d2:06:ab:f9: 7a:d7:da:e7:96:8c:9d:9d:a1:38:45:82:4d:38:84: 76:30:5f:95:c5:9d:13:2e:6f:bb:ee:a9:55:6b:f8: 44:0b:4e:c0:a0:ab:c5:02:df:bc:7b:d0:b1:33:e6: f2:c3:7a:81:14:7a:b5:28:2a:d1:85:63:e3:e3:b5: e0:01:e6:8c:ee:11:a0:e0:8f:13:3e:66:36:7e:52: 8c:0d:e9:5b:77:1d:eb:d5:96:e9:09:78:2e:6d:4c: 57:0c:74:22:75:cf:fd:28:e9:a8:73:b0:9b:98:8f: 0b:94:d8:69:10:22:42:d9:00:af:4b:f6:bb:a6:ec: 50:82:43:fa:8a:cd:a7:fe:3f:f6:0c:62:4c:56:33: da:b5:8e:cc:0a:a4:75:a6:cf:27:86:b5:92:75:26: 00:5d:c3:f2:51:4a:78:17:c4:bc:a4:cc:72:d8:02: b9:b3:2e:34:66:7c:a7:d8:25:ba:31:84:35:80:26: a5:cb:b0:d2:ef:ac:32:86:8a:97:e2:97:51:10:68: ca:a0:dd:f3:d2:f1:e9:dd:e2:d0:37:4b:29:b7:a4: d9:fa:9f:fe:2b:ad:a1:36:eb:a4:cc:7a:02:af:e0: bf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:15:30:D6:3F:36:65:B7:3F:DE:01:0A:45:FD:C9:F0:97:C5:88:23 X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/9FB920BEA5C511F18632EDD27011F970.roa sbgp-ipAddrBlock: critical IPv4: 43.239.104.0/24 45.124.204.0/22 103.25.100.0/22 Signature Algorithm: sha256WithRSAEncryption 05:36:ba:b4:45:13:96:57:6c:b9:ff:ca:8c:3f:4e:96:39:01: d4:80:c3:e6:00:22:c7:19:20:9e:24:5f:30:ff:b0:8f:f3:5f: a4:32:56:4a:91:1b:46:6c:4f:55:cb:e7:a7:89:64:73:a2:5c: bd:50:40:86:e2:4f:25:b3:e9:b9:01:70:9f:38:6f:e8:01:5c: 8c:8b:16:6f:87:cd:3c:1c:2e:b2:3f:fe:f2:0f:0d:20:8f:fb: 97:3e:d2:d9:9f:c1:e0:3c:37:03:b3:8b:4f:53:40:8d:43:ad: 98:e9:b4:e2:91:45:1c:7c:bd:80:64:e1:ac:14:84:5c:24:af: a8:bf:a7:2c:22:26:1e:0f:3b:8b:6a:be:59:72:b7:20:eb:6e: 15:e2:1a:f5:36:76:6d:80:f4:77:6a:be:3d:45:e1:b3:5d:1d: ac:fc:29:68:90:7c:4d:b5:bd:bc:ed:64:c3:85:af:2a:c1:ff: 96:68:27:b6:d9:9f:d4:53:d6:25:f4:01:10:cb:f5:68:dc:5d: 2d:e9:f7:a3:36:37:50:26:3d:71:5a:ba:4d:99:1e:0b:13:77: a5:38:49:cb:b4:c7:25:d8:e4:7b:dd:c0:50:a3:6a:4b:4f:93: 7d:2c:03:d9:8b:cc:21:bc:c9:c4:f0:0c:97:ac:88:a1:a7:22: 67:38:9e:5a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjYwOTAxMDUyNjAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2NjFlYi1jMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWbvU1sScLNUFyVGSK3g7JB1e8TcN903pdIGq/l619rnloydnaE4RYJNOIR2 MF+VxZ0TLm+77qlVa/hEC07AoKvFAt+8e9CxM+byw3qBFHq1KCrRhWPj47XgAeaM 7hGg4I8TPmY2flKMDelbdx3r1ZbpCXgubUxXDHQidc/9KOmoc7CbmI8LlNhpECJC 2QCvS/a7puxQgkP6is2n/j/2DGJMVjPatY7MCqR1ps8nhrWSdSYAXcPyUUp4F8S8 pMxy2AK5sy40Znyn2CW6MYQ1gCaly7DS76wyhoqX4pdREGjKoN3z0vHp3eLQN0sp t6TZ+p/+K62hNuukzHoCr+C/QwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFF8VMNY/ NmW3P94BCkX9yfCXxYgjMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvOUZCOTIwQkVB NUM1MTFGMTg2MzJFREQyNzAxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK+9oAwQCLXzMAwQCZxlkMA0GCSqGSIb3DQEBCwUAA4IBAQAFNrq0 RROWV2y5/8qMP06WOQHUgMPmACLHGSCeJF8w/7CP81+kMlZKkRtGbE9Vy+eniWRz oly9UECG4k8ls+m5AXCfOG/oAVyMixZvh808HC6yP/7yDw0gj/uXPtLZn8HgPDcD s4tPU0CNQ62Y6bTikUUcfL2AZOGsFIRcJK+ov6csIiYeDzuLar5Zcrcg624V4hr1 NnZtgPR3ar49ReGzXR2s/ClokHxNtb287WTDha8qwf+WaCe22Z/UU9Yl9AEQy/Vo 3F0t6fejNjdQJj1xWrpNmR4LE3elOEnLtMcl2OR73cBQo2pLT5N9LAPZi8whvMnE 8AyXrIihpyJnOJ5a -----END CERTIFICATE-----Generated at Sat Sep 5 06:27:16 2026 by rpki-client