$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/BCEA1EC6A02111F1ADA7A6847111F970.roa File: BCEA1EC6A02111F1ADA7A6847111F970.roa (raw, json) Hash identifier: k3r/C0IWGFkN/KCeB/dQuu2YRIj0aTBrV6PXQbEtxVY= Subject key identifier: C3:58:94:9C:10:07:E8:58:A9:34:54:A1:EE:11:75:8E:FF:47:E0:20 Certificate issuer: /CN=A91CCCF4/serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED Certificate serial: 90 Authority key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/BCEA1EC6A02111F1ADA7A6847111F970.roa Signing time: Tue 25 Aug 2026 01:10:19 +0000 ROA not before: Tue 25 Aug 2026 01:10:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4648 IP address blocks: 103.16.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Sep 2026 07:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED Validity Not Before: Aug 25 01:10:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a8ceb7b-53fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:d5:20:d5:ec:10:4e:16:82:41:6b:ba:a4: f0:a6:b5:95:fd:a4:10:87:49:f2:ba:5d:40:a3:af: cd:f0:ef:ba:bd:28:8b:29:cf:99:87:43:e0:07:ff: 09:3b:d4:15:1d:cc:dc:50:56:d7:4b:0a:97:1b:ca: 75:3f:82:1b:71:25:14:4d:f2:6b:e1:b3:82:14:38: e9:f2:a9:98:35:3d:f6:08:5b:7e:59:10:9f:22:77: 57:65:aa:44:a4:12:28:d5:14:76:d0:3e:9a:e2:b1: f8:04:3d:56:11:73:9f:88:98:a0:61:5a:44:ab:a4: 4e:13:fa:a7:99:0b:1a:77:9e:da:02:f1:e6:a8:95: 81:63:47:d2:2d:a3:32:c8:c6:eb:e6:72:84:18:ec: 2b:48:6b:68:1f:27:23:4e:1d:49:72:4f:bf:23:55: 6b:07:fd:a4:00:d4:fd:71:ef:fa:a1:62:03:b7:ef: 97:dd:10:61:fa:03:b6:5a:4c:f3:1e:dc:4e:69:83: 87:1b:bf:2e:df:71:c4:a2:7d:51:5c:5b:b4:02:a0: 5a:54:f8:3b:9a:9f:8d:90:48:1b:8e:04:7b:71:fb: 36:b6:d4:a7:00:5d:a5:72:38:4d:1b:ca:25:7b:90: e3:7c:a4:4e:7c:f4:45:f3:d6:4e:cd:3a:24:47:0b: 18:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:58:94:9C:10:07:E8:58:A9:34:54:A1:EE:11:75:8E:FF:47:E0:20 X509v3 Authority Key Identifier: keyid:AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/BCEA1EC6A02111F1ADA7A6847111F970.roa sbgp-ipAddrBlock: critical IPv4: 103.16.20.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:34:9d:0e:b5:8c:ed:93:46:83:a2:86:ce:64:20:f8:bf:a0: ae:22:ba:76:4d:af:f0:13:53:b5:bb:79:a6:75:23:74:50:9d: f3:52:00:2b:6d:4e:2f:12:91:51:8b:3e:3b:52:40:68:ba:3b: eb:e3:8b:aa:51:32:42:a8:93:eb:a5:aa:7b:c8:ca:fa:28:ed: 20:79:d3:16:19:3c:9b:32:e8:34:bc:84:73:78:39:83:ad:87: f6:0f:d0:0e:82:d2:25:c2:83:61:39:f6:72:32:c0:18:23:c1: 65:22:d6:c0:08:23:18:a8:ae:57:48:51:a0:57:cb:eb:f5:14: 63:1d:45:10:49:ac:01:7c:6a:30:22:12:c1:00:6e:90:02:1d: b0:69:f6:65:7e:ea:01:12:28:57:9f:e4:6a:04:9c:66:0f:34: 5f:f3:c9:1d:4a:10:74:60:3e:98:8b:3d:9b:64:b3:13:f8:ac: f5:1b:9c:ca:eb:d8:6f:a8:3d:3b:a5:ee:fa:59:ea:b1:f4:a4: 2f:6c:3b:d4:78:96:1f:fd:e6:e9:f6:3a:c0:f8:d2:51:c4:76: bd:54:9b:31:56:a3:67:17:7b:7b:82:3d:54:b7:f9:3d:ad:0f: f9:54:b5:05:0c:e7:5c:3d:c5:ac:4c:63:ad:5b:a6:b9:59:49: 66:ce:dc:72 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDRjQxMTAvBgNVBAUTKEFENUEzRjk5NkJDREExOUI4RkQ2OTJCMUFGQzhBNzBB RTMzMzNDRUQwHhcNMjYwODI1MDExMDE5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThjZWI3Yi01M2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsafVINXsEE4WgkFruqTwprWV/aQQh0nyul1Ao6/N8O+6vSiLKc+Zh0PgB/8J O9QVHczcUFbXSwqXG8p1P4IbcSUUTfJr4bOCFDjp8qmYNT32CFt+WRCfIndXZapE pBIo1RR20D6a4rH4BD1WEXOfiJigYVpEq6ROE/qnmQsad57aAvHmqJWBY0fSLaMy yMbr5nKEGOwrSGtoHycjTh1Jck+/I1VrB/2kANT9ce/6oWIDt++X3RBh+gO2Wkzz HtxOaYOHG78u33HEon1RXFu0AqBaVPg7mp+NkEgbjgR7cfs2ttSnAF2lcjhNG8ol e5DjfKROfPRF89ZOzTokRwsYRwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMNYlJwQ B+hYqTRUoe4RdY7/R+AgMB8GA1UdIwQYMBaAFK1aP5lrzaGbj9aSsa/IpwrjMzzt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NGNC9BQUQ1NzkzNkYw RjExMUYwQkQ2REY1NTU0MzZGNTZCQy9yVm9fbVd2Tm9adVAxcEt4cjhpbkN1TXpQ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWb19tV3ZOb1p1UDFwS3hyOGluQ3VNelBPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0NDRjQvQUFENTc5MzZGMEYxMTFGMEJENkRGNTU1NDM2RjU2QkMvQkNFQTFFQzZB MDIxMTFGMUFEQTdBNjg0NzExMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxAUMA0GCSqGSIb3DQEBCwUAA4IBAQA/NJ0OtYztk0aDoobOZCD4 v6CuIrp2Ta/wE1O1u3mmdSN0UJ3zUgArbU4vEpFRiz47UkBoujvr44uqUTJCqJPr pap7yMr6KO0gedMWGTybMug0vIRzeDmDrYf2D9AOgtIlwoNhOfZyMsAYI8FlItbA CCMYqK5XSFGgV8vr9RRjHUUQSawBfGowIhLBAG6QAh2wafZlfuoBEihXn+RqBJxm DzRf88kdShB0YD6Yiz2bZLMT+Kz1G5zK69hvqD07pe76Weqx9KQvbDvUeJYf/ebp 9jrA+NJRxHa9VJsxVqNnF3t7gj1Ut/k9rQ/5VLUFDOdcPcWsTGOtW6a5WUlmztxy -----END CERTIFICATE-----Generated at Mon Sep 7 19:49:39 2026 by rpki-client