$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/5AA3FD0868D111ED99477B87C4F9AE02.roa File: 5AA3FD0868D111ED99477B87C4F9AE02.roa (raw, json) Hash identifier: CGowp4w2GBQ9qV/GHYQUjgIY+WC1P2t6NRtsfQxE+ag= Subject key identifier: 0F:F6:07:9E:F0:4D:80:AF:59:54:9C:37:9B:1E:B8:B8:94:6A:7E:72 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0D27 Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/5AA3FD0868D111ED99477B87C4F9AE02.roa Signing time: Wed 12 Aug 2026 18:35:57 +0000 ROA not before: Wed 12 Aug 2026 18:35:57 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 137961 IP address blocks: 103.118.84.0/24 maxlen: 24 103.118.85.0/24 maxlen: 24 103.118.86.0/24 maxlen: 24 2403:2ec0::/32 maxlen: 40 2403:2ec0:2000::/48 maxlen: 48 2403:2ec0:20ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3367 (0xd27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Aug 12 18:35:57 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7cbd0d-161b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:26:b3:cd:d6:6d:88:84:f5:e7:e1:e3:9d: f2:a4:b2:b1:d1:bd:fb:9b:67:07:12:c4:18:ef:b2: 9a:df:61:76:91:4f:48:f2:08:0b:2f:11:8a:43:f8: f9:bb:5f:79:0f:20:d2:5c:7a:b4:59:93:65:cd:33: 8a:3a:68:56:71:12:b0:e2:e1:e0:d1:a2:d1:ad:65: 68:41:12:b5:60:80:dd:26:4a:1d:cf:ca:24:a1:88: af:f4:ac:3e:cb:61:af:fe:75:c6:65:be:e9:1e:72: 45:8d:00:9d:f9:2c:e5:a4:bb:a2:1f:82:66:2c:56: 10:51:eb:32:6f:7e:39:13:83:6c:f2:92:d7:f7:23: 8f:c1:35:1b:ec:5f:b7:86:65:b9:54:6e:9b:2b:1e: 61:c6:af:cc:96:f2:cf:eb:75:f8:c8:68:5d:28:30: 12:f3:dc:95:bd:63:55:50:fd:a9:da:59:61:e3:77: 54:57:79:0e:b3:3e:61:7c:61:71:88:b7:30:c4:c9: 75:c1:7f:c9:c4:1e:42:c7:b7:40:17:4f:45:c3:8c: 54:9f:6d:d3:c4:74:76:9d:57:d5:9c:07:cd:f2:e8: ed:6c:97:4f:3a:ac:43:3c:63:73:4d:c5:f5:38:8f: 5f:98:02:2f:5c:57:2d:0c:c0:32:cc:7f:4d:65:6f: be:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F6:07:9E:F0:4D:80:AF:59:54:9C:37:9B:1E:B8:B8:94:6A:7E:72 X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/5AA3FD0868D111ED99477B87C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.118.84.0-103.118.86.255 IPv6: 2403:2ec0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:39:b7:98:62:fb:ac:5a:c0:df:17:0c:61:9b:41:dd:64:55: 5a:0a:ab:ad:00:54:ce:c7:1f:ec:d5:89:de:1c:75:0c:43:c6: 35:02:76:08:58:21:c5:30:b7:c8:dc:32:eb:08:bf:41:2d:7c: 74:44:d2:d7:27:48:5c:f7:e8:64:8e:ec:f2:da:d8:da:be:57: 58:fc:97:91:4b:c2:8c:f6:17:6e:4c:ee:08:31:c3:c5:ec:2d: ac:1b:df:02:67:7c:77:03:51:8f:5a:d7:ab:e3:db:b5:7a:5d: 34:d1:96:82:97:42:18:30:ce:8c:0e:79:74:0b:57:52:af:51: c4:e6:60:7b:62:5d:4d:28:83:50:7d:39:ce:85:9b:11:4d:f0: 99:13:96:09:61:c5:5f:14:8c:cd:08:32:dc:e2:bd:a1:95:86: 74:a2:3c:43:59:47:d5:ef:34:75:ac:23:7b:ca:ea:85:b3:97: d5:a0:61:60:2b:b5:81:79:c4:95:b4:a8:8a:44:62:c9:a8:d2: 50:67:8f:e9:c8:0a:b4:06:71:68:ac:1c:96:61:b9:bf:43:86: 9e:8a:3c:f2:3e:3d:69:a5:53:29:8b:3c:d8:9f:54:a2:d8:e8: 8a:79:96:b1:3a:d2:ce:4c:c6:68:82:07:70:a7:62:6f:0b:d1: a3:a4:e6:a2 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICDScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjYwODEyMTgzNTU3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdjYmQwZC0xNjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBkms83WbYiE9efh453ypLKx0b37m2cHEsQY77Ka32F2kU9I8ggLLxGKQ/j5 u195DyDSXHq0WZNlzTOKOmhWcRKw4uHg0aLRrWVoQRK1YIDdJkodz8okoYiv9Kw+ y2Gv/nXGZb7pHnJFjQCd+SzlpLuiH4JmLFYQUesyb345E4Ns8pLX9yOPwTUb7F+3 hmW5VG6bKx5hxq/MlvLP63X4yGhdKDAS89yVvWNVUP2p2llh43dUV3kOsz5hfGFx iLcwxMl1wX/JxB5Cx7dAF09Fw4xUn23TxHR2nVfVnAfN8ujtbJdPOqxDPGNzTcX1 OI9fmAIvXFctDMAyzH9NZW++0QIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFA/2B57w TYCvWVScN5seuLiUan5yMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzIzREMvMDY2MzlGODYwQTkzMTFFQTg1QUQ4ODZBQzRGOUFFMDIvNUFBM0ZEMDg2 OEQxMTFFRDk5NDc3Qjg3QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBAJndlQDBABndlYwDQQCAAIwBwMFACQDLsAwDQYJKoZIhvcNAQEL BQADggEBAC45t5hi+6xawN8XDGGbQd1kVVoKq60AVM7HH+zVid4cdQxDxjUCdghY IcUwt8jcMusIv0EtfHRE0tcnSFz36GSO7PLa2Nq+V1j8l5FLwoz2F25M7ggxw8Xs Lawb3wJnfHcDUY9a16vj27V6XTTRloKXQhgwzowOeXQLV1KvUcTmYHtiXU0og1B9 Oc6FmxFN8JkTlglhxV8UjM0IMtzivaGVhnSiPENZR9XvNHWsI3vK6oWzl9WgYWAr tYF5xJW0qIpEYsmo0lBnj+nICrQGcWisHJZhub9Dhp6KPPI+PWmlUymLPNifVKLY 6Ip5lrE60s5MxmiCB3CnYm8L0aOk5qI= -----END CERTIFICATE-----Generated at Sat Sep 5 10:24:18 2026 by rpki-client