$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/AAA33A7A74B011EF85E1C348C4F9AE02.roa File: AAA33A7A74B011EF85E1C348C4F9AE02.roa (raw, json) Hash identifier: t/GwUUNb7tEahxNoYBzuYwEmPFEhCTW8k/WHCWvOMyU= Subject key identifier: F6:27:9D:08:AA:FF:AC:A3:52:9E:E9:B5:FD:9B:E7:F9:1C:F2:80:1A Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Certificate serial: 0187 Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/AAA33A7A74B011EF85E1C348C4F9AE02.roa Signing time: Sat 03 Oct 2026 05:54:02 +0000 ROA not before: Sat 03 Oct 2026 05:54:02 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 132300 IP address blocks: 103.74.252.0/22 maxlen: 22 103.74.252.0/24 maxlen: 24 103.74.253.0/24 maxlen: 24 103.74.254.0/24 maxlen: 24 103.74.255.0/24 maxlen: 24 202.94.168.0/22 maxlen: 22 202.94.168.0/24 maxlen: 24 202.94.169.0/24 maxlen: 24 202.94.170.0/24 maxlen: 24 202.94.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D14, serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Validity Not Before: Oct 3 05:54:02 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac0987a-7708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:ea:d9:ec:13:c9:51:03:db:e1:9a:97:ce: 4e:0e:53:31:57:fc:58:7a:07:70:24:05:70:89:f7: 26:c2:3b:94:f8:91:96:0d:4e:d8:d4:90:3d:d0:d0: a3:40:52:43:f5:99:b7:04:9c:19:0c:b8:22:dc:3d: 44:89:03:a2:0e:37:01:d8:e8:0d:c0:7e:ad:5f:49: 9d:29:7a:88:7c:4c:84:56:92:5f:ce:83:4f:5c:74: f1:b6:29:e6:d1:99:50:a2:03:49:16:f7:62:cf:f7: 58:37:6b:3e:65:78:9a:76:62:18:7a:be:bd:1f:bb: 2f:9f:33:a6:0e:8a:9c:36:11:aa:c6:ea:b1:6e:00: be:7d:a5:4e:3d:ed:c9:00:8d:d9:1f:f4:7d:ed:e5: 81:95:dc:a9:c0:e0:4d:ce:58:ac:c1:4b:cd:06:2d: b5:2b:ab:a7:84:a8:98:3b:28:04:c2:8e:6a:4e:e2: 2c:d2:f4:86:38:02:ef:49:fa:82:fd:1f:35:ce:09: dd:48:0f:8c:54:b6:56:8f:39:ca:23:c4:45:e8:f8: a4:b7:89:81:63:3a:f6:32:f9:59:49:fe:1d:48:cf: c6:e2:40:33:17:7b:ec:59:61:c3:de:ac:eb:08:c0: 6d:3b:24:f4:f3:ec:35:89:2a:f6:71:72:bb:a5:cb: 24:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:27:9D:08:AA:FF:AC:A3:52:9E:E9:B5:FD:9B:E7:F9:1C:F2:80:1A X509v3 Authority Key Identifier: keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/AAA33A7A74B011EF85E1C348C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.74.252.0/22 202.94.168.0/22 Signature Algorithm: sha256WithRSAEncryption 15:d6:35:77:f0:b6:f8:b6:f7:32:2c:a5:49:77:58:84:f0:35: 0e:d8:e3:e3:12:0a:02:95:e0:de:b7:57:c3:c2:c4:06:cd:87: f7:ad:c7:6a:20:c4:78:c8:fc:d5:61:78:7d:ef:77:17:b4:a7: 54:cd:ec:8b:a4:ee:9f:a1:f9:0b:01:14:8b:86:10:62:ca:33: f9:b2:a4:65:70:80:2f:88:bc:39:20:fd:1f:2f:7e:e7:5c:80: f0:a1:8b:a4:a0:a8:fd:0d:59:48:73:2d:e0:eb:db:44:62:75: 88:ab:b7:1d:84:bb:44:49:36:c4:65:c2:f9:b0:65:f7:ac:e4: f6:9c:57:44:3f:db:ce:84:b3:ca:0e:9b:b1:b3:c8:a9:59:1d: 01:cf:62:37:b6:4c:b7:59:61:77:87:6d:c1:c2:9f:28:55:07: 8a:75:94:6e:4a:ef:d1:ac:a6:4e:dc:2e:dd:98:c6:5d:2e:40: 0d:78:11:c2:f2:f8:9d:83:a0:53:99:3e:c4:d7:3c:9c:c4:ad: b3:bd:ec:53:ba:98:ae:60:ac:ce:91:98:13:a4:83:c2:9b:5a: aa:37:66:82:4b:28:4c:64:1c:53:c9:81:db:d1:7b:db:b0:f3: 33:4d:05:34:91:26:12:37:a2:39:95:e3:14:28:79:04:11:3c: 85:ce:22:f1 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEMTQxMTAvBgNVBAUTKEJDNDJDM0JDODc1QzA2NzZCMjlGRDdBQkM5RjgxQjRB OTFGRDhBODkwHhcNMjYxMDAzMDU1NDAyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMwOTg3YS03NzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1/q2ewTyVED2+Gal85ODlMxV/xYegdwJAVwifcmwjuU+JGWDU7Y1JA90NCj QFJD9Zm3BJwZDLgi3D1EiQOiDjcB2OgNwH6tX0mdKXqIfEyEVpJfzoNPXHTxtinm 0ZlQogNJFvdiz/dYN2s+ZXiadmIYer69H7svnzOmDoqcNhGqxuqxbgC+faVOPe3J AI3ZH/R97eWBldypwOBNzliswUvNBi21K6unhKiYOygEwo5qTuIs0vSGOALvSfqC /R81zgndSA+MVLZWjznKI8RF6Pikt4mBYzr2MvlZSf4dSM/G4kAzF3vsWWHD3qzr CMBtOyT08+w1iSr2cXK7pcskuwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPYnnQiq /6yjUp7ptf2b5/kc8oAaMB8GA1UdIwQYMBaAFLxCw7yHXAZ2sp/Xq8n4G0qR/YqJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QxNC9DREIzQjlBQTc0 QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0JuYXluOWVyeWZnYlNwSDlp b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdEMTQvQ0RCM0I5QUE3NEFGMTFFRjkxQTY2MTQ2QzRGOUFFMDIvQUFBMzNBN0E3 NEIwMTFFRjg1RTFDMzQ4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ0r8AwQCyl6oMA0GCSqGSIb3DQEBCwUAA4IBAQAV1jV38Lb4tvcy LKVJd1iE8DUO2OPjEgoCleDet1fDwsQGzYf3rcdqIMR4yPzVYXh973cXtKdUzeyL pO6fofkLARSLhhBiyjP5sqRlcIAviLw5IP0fL37nXIDwoYukoKj9DVlIcy3g69tE YnWIq7cdhLtESTbEZcL5sGX3rOT2nFdEP9vOhLPKDpuxs8ipWR0Bz2I3tky3WWF3 h23Bwp8oVQeKdZRuSu/RrKZO3C7dmMZdLkANeBHC8vidg6BTmT7E1zycxK2zvexT upiuYKzOkZgTpIPCm1qqN2aCSyhMZBxTyYHb0XvbsPMzTQU0kSYSN6I5leMUKHkE ETyFziLx -----END CERTIFICATE-----Generated at Mon Oct 5 08:30:50 2026 by rpki-client