$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/472BC6C6C4BB11F1B8FB54AA6011F970.roa File: 472BC6C6C4BB11F1B8FB54AA6011F970.roa (raw, json) Hash identifier: WadoUpPJ+23cUB8eA/9xxiXWKiL5UTb+WFYlpfI/Qks= Subject key identifier: 00:DC:F5:D6:EE:06:B4:EC:08:DB:B5:B8:82:9C:EC:07:A8:9D:8C:35 Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 029C Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/472BC6C6C4BB11F1B8FB54AA6011F970.roa Signing time: Sat 10 Oct 2026 15:00:06 +0000 ROA not before: Sat 10 Oct 2026 15:00:06 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 10075 IP address blocks: 103.219.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Oct 10 15:00:06 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6aca52f6-7fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:e8:8c:e8:b9:97:a1:61:d3:b8:d8:f4:3d: fa:69:62:9d:c3:03:dd:56:fa:ce:16:b9:40:f5:c8: dd:7c:0b:b6:e9:a8:eb:d8:e2:19:b2:d2:0e:ee:64: 7a:b4:46:2d:60:87:9e:6f:af:60:c3:f5:27:a2:22: d3:7c:16:b7:71:4f:54:f7:3a:41:52:d7:18:81:7a: 6a:b4:4a:29:c9:99:4b:f8:c9:e4:08:6e:40:f0:7c: 3f:53:62:81:af:0b:07:ab:92:97:e1:e0:ac:4b:74: 38:13:96:04:69:83:d3:7b:ff:9d:96:68:4f:22:6c: 19:3b:0c:94:2d:71:15:84:70:80:08:8a:6f:16:ef: f7:78:ff:49:6b:2b:f1:2f:c1:01:df:fc:ba:a6:b6: 00:5a:e7:d0:72:26:da:f9:3a:a7:9d:18:26:1b:76: fa:3f:71:fc:c0:e3:8e:9b:7f:41:85:8a:0e:2e:fb: b6:a6:00:33:40:69:90:8c:6b:66:72:cc:a1:8f:b0: 40:69:29:13:5f:41:18:01:de:23:3a:45:d9:6d:ff: 26:a4:7e:05:d4:ca:eb:8d:1b:e2:e6:7f:1b:23:f8: b7:be:b1:35:ea:4c:4c:f3:1c:50:9b:51:f5:44:36: 68:36:6f:57:00:40:79:2f:a4:28:79:96:e7:e6:13: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DC:F5:D6:EE:06:B4:EC:08:DB:B5:B8:82:9C:EC:07:A8:9D:8C:35 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/472BC6C6C4BB11F1B8FB54AA6011F970.roa sbgp-ipAddrBlock: critical IPv4: 103.219.224.0/24 Signature Algorithm: sha256WithRSAEncryption 73:dd:59:94:2d:54:d2:bf:d2:7e:30:16:bc:ea:c5:dd:77:8b: 59:83:d2:68:cb:00:cf:17:fa:f3:3f:5d:c0:22:a6:0b:2c:77: 2e:df:5b:c6:1a:7c:32:98:54:28:81:75:17:0a:b5:f0:93:f0: b7:5c:a4:e5:bc:4d:3d:ff:76:db:11:b1:07:db:1f:74:8e:da: 8e:3d:dd:5f:2b:bb:9f:60:96:cc:b5:99:e4:5f:62:fc:00:65: 2d:88:43:6f:ac:3f:99:7d:cf:83:08:f1:2c:34:d2:99:e0:7f: e1:f9:ff:c5:d6:46:56:59:0f:fc:cc:67:27:9b:85:43:32:37: 05:61:76:0f:a9:33:df:39:82:3a:97:11:7f:a1:0d:33:d5:2c: 7f:ff:6f:7c:8b:3e:32:e9:77:a9:69:c4:ae:71:40:80:81:08: c2:2f:31:e0:8c:10:89:44:e9:da:7f:07:51:20:12:85:e9:25: ed:f7:3c:5f:bd:f0:a7:8c:79:bb:c2:0a:17:e5:4c:6a:a2:59: 12:31:2f:8f:3c:b2:00:a0:62:5a:d1:72:89:2b:9d:c4:54:28: d9:81:7e:e8:9c:55:47:34:79:c6:54:1f:18:04:d8:05:c7:a3: d4:f6:b2:bb:b9:6b:24:2b:62:d9:ad:29:6f:1c:aa:36:06:51: 25:67:16:88 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjYxMDEwMTUwMDA2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhNTJmNi03ZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtjojOi5l6Fh07jY9D36aWKdwwPdVvrOFrlA9cjdfAu26ajr2OIZstIO7mR6 tEYtYIeeb69gw/UnoiLTfBa3cU9U9zpBUtcYgXpqtEopyZlL+MnkCG5A8Hw/U2KB rwsHq5KX4eCsS3Q4E5YEaYPTe/+dlmhPImwZOwyULXEVhHCACIpvFu/3eP9Jayvx L8EB3/y6prYAWufQciba+TqnnRgmG3b6P3H8wOOOm39BhYoOLvu2pgAzQGmQjGtm csyhj7BAaSkTX0EYAd4jOkXZbf8mpH4F1MrrjRvi5n8bI/i3vrE16kxM8xxQm1H1 RDZoNm9XAEB5L6QoeZbn5hPafwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFADc9dbu BrTsCNu1uIKc7AeonYw1MB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkJEN0UvMUFFRDA5QzQwQThBMTFFRTkzRTFBNzcwQzRGOUFFMDIvNDcyQkM2QzZD NEJCMTFGMUI4RkI1NEFBNjAxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ9vgMA0GCSqGSIb3DQEBCwUAA4IBAQBz3VmULVTSv9J+MBa86sXd d4tZg9JoywDPF/rzP13AIqYLLHcu31vGGnwymFQogXUXCrXwk/C3XKTlvE09/3bb EbEH2x90jtqOPd1fK7ufYJbMtZnkX2L8AGUtiENvrD+Zfc+DCPEsNNKZ4H/h+f/F 1kZWWQ/8zGcnm4VDMjcFYXYPqTPfOYI6lxF/oQ0z1Sx//298iz4y6XepacSucUCA gQjCLzHgjBCJROnafwdRIBKF6SXt9zxfvfCnjHm7wgoX5UxqolkSMS+PPLIAoGJa 0XKJK53EVCjZgX7onFVHNHnGVB8YBNgFx6PU9rK7uWskK2LZrSlvHKo2BlElZxaI -----END CERTIFICATE-----Generated at Mon Oct 26 20:58:55 2026 by rpki-client