$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa File: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (raw, json) Hash identifier: aFVSGijB/ihv4Zbx6wzchv39nUq4RkYxcKN+StYj5uw= Subject key identifier: 14:B5:8A:37:59:F9:33:C5:14:7F:39:21:0F:AF:4E:C7:5A:7E:E5:CF Certificate issuer: /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Certificate serial: 0495 Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa Signing time: Tue 25 Aug 2026 21:40:10 +0000 ROA not before: Tue 25 Aug 2026 21:40:10 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 135069 IP address blocks: 103.208.140.0/22 maxlen: 22 103.208.140.0/24 maxlen: 24 103.208.141.0/24 maxlen: 24 103.208.142.0/24 maxlen: 24 103.208.143.0/24 maxlen: 24 163.47.109.0/24 maxlen: 24 180.235.104.0/22 maxlen: 22 180.235.104.0/24 maxlen: 24 180.235.105.0/24 maxlen: 24 180.235.106.0/24 maxlen: 24 180.235.107.0/24 maxlen: 24 202.37.108.0/24 maxlen: 24 203.25.23.0/24 maxlen: 24 203.28.247.0/24 maxlen: 24 223.26.24.0/22 maxlen: 22 223.26.24.0/24 maxlen: 24 223.26.25.0/24 maxlen: 24 223.26.26.0/24 maxlen: 24 223.26.27.0/24 maxlen: 24 2404:4880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Validity Not Before: Aug 25 21:40:10 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a8e0bba-f32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:68:db:b8:30:08:56:6a:61:2e:8b:55:1b: 72:3d:49:17:cc:e8:b4:cb:fe:8b:96:2b:75:c8:9e: e5:dd:51:47:a8:cf:7e:b3:29:77:5a:57:d1:b8:a3: 27:f9:bd:4f:1d:52:3a:e8:d7:92:6a:eb:ef:f5:71: 98:1b:28:58:7a:2f:1a:0a:d8:8a:d9:be:d3:08:a1: d3:8f:c4:2f:71:5e:4e:85:8d:24:d7:91:e7:61:0b: 2f:e7:a9:b8:de:81:1a:f6:54:16:2b:db:88:bd:92: 24:5d:78:b8:d4:33:c5:8f:70:6c:c6:27:cf:89:ab: 66:04:46:46:e8:b7:c4:ff:83:3a:10:1f:27:67:97: d0:47:11:69:cb:96:2d:46:9c:4f:41:2a:cd:38:2a: c0:2f:4e:62:df:40:3c:e8:c7:a2:83:eb:7b:e8:8a: 12:3d:2c:2e:9c:f0:65:51:e2:95:dc:10:12:95:9c: cf:57:9c:4b:e1:a4:75:b6:cc:62:c4:ec:c3:de:ee: 0f:9a:49:84:48:ab:88:cd:b3:d7:77:0c:db:d4:bb: e1:c9:9a:f3:a9:87:af:12:59:8c:7c:0b:8a:6d:20: 6b:78:e3:1f:2c:a5:1f:cc:9d:05:dc:e1:1a:64:1b: a8:63:d1:08:69:ce:60:f4:a4:9b:a2:58:bb:19:77: fc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B5:8A:37:59:F9:33:C5:14:7F:39:21:0F:AF:4E:C7:5A:7E:E5:CF X509v3 Authority Key Identifier: keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.208.140.0/22 163.47.109.0/24 180.235.104.0/22 202.37.108.0/24 203.25.23.0/24 203.28.247.0/24 223.26.24.0/22 IPv6: 2404:4880::/32 Signature Algorithm: sha256WithRSAEncryption 11:8f:60:c3:8f:33:be:45:f6:27:ba:47:95:70:a2:70:6e:ec: fe:30:2d:c4:bb:16:29:94:76:3e:c5:b8:34:7c:c2:33:6e:e4: 66:d0:a1:01:ef:e4:e1:3e:ac:01:15:fe:72:77:ca:72:3b:9a: 64:8b:37:ad:b3:42:71:00:3f:52:4d:a4:9d:e0:d2:2b:66:d9: 77:fc:27:e5:94:d6:09:23:4a:4b:36:e8:11:d9:00:e0:82:ac: 37:0b:a5:00:29:f6:2d:92:cd:69:f0:9a:37:8c:b2:fa:25:9f: 88:2d:9b:5b:b9:f5:15:06:3c:6d:c3:f5:19:8d:da:03:5b:b9: ca:69:aa:7d:38:19:d9:39:f1:69:85:7f:99:c8:3c:21:32:68: 28:a7:66:6b:c9:55:74:23:cf:28:87:8a:50:5b:e8:15:dd:5a: 4b:f2:ed:ee:5e:31:81:87:40:bd:20:c4:f4:2e:0b:5a:d4:b5: f1:76:09:af:18:f0:ee:5c:f4:4d:97:9b:3a:7e:8d:09:90:51: b1:85:b8:2a:41:bc:ea:6b:c5:84:a8:7d:a0:6b:24:09:fd:2b: af:2b:9e:a9:08:13:ea:7b:57:82:b7:2f:bf:64:97:2b:04:3e: 45:68:e5:0b:09:71:b0:59:52:65:3a:a8:de:ab:9b:bf:ef:a0: 34:82:64:05 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKEREOEEyQjg4NjU0QzMzNjZGRkU3RkNGNjU1NkE5Nzg2 MDAyQUE2NUIwHhcNMjYwODI1MjE0MDEwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YThlMGJiYS1mMzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvG5o27gwCFZqYS6LVRtyPUkXzOi0y/6Llit1yJ7l3VFHqM9+syl3WlfRuKMn +b1PHVI66NeSauvv9XGYGyhYei8aCtiK2b7TCKHTj8QvcV5OhY0k15HnYQsv56m4 3oEa9lQWK9uIvZIkXXi41DPFj3BsxifPiatmBEZG6LfE/4M6EB8nZ5fQRxFpy5Yt RpxPQSrNOCrAL05i30A86Meig+t76IoSPSwunPBlUeKV3BASlZzPV5xL4aR1tsxi xOzD3u4PmkmESKuIzbPXdwzb1LvhyZrzqYevElmMfAuKbSBreOMfLKUfzJ0F3OEa ZBuoY9EIac5g9KSboli7GXf8RwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFBS1ijdZ +TPFFH85IQ+vTsdafuXPMB8GA1UdIwQYMBaAFN2KK4hlTDNm/+f89lVql4YAKqZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS9FODUzMzgyQzlG MTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0yYl81X3oyVldxWGhnQXFw bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZb3JpR1ZNTTJiXzVfejJWV3FYaGdBcXBscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZBQjkvRTg1MzM4MkM5RjEzMTFFQzlFNDVENTcyQzRGOUFFMDIvNTk2Q0NDNEU5 RjE5MTFFQzhGREZFQTdEQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCZ9CMAwQAoy9tAwQCtOtoAwQAyiVsAwQAyxkXAwQAyxz3AwQC3xoY MA0EAgACMAcDBQAkBEiAMA0GCSqGSIb3DQEBCwUAA4IBAQARj2DDjzO+RfYnukeV cKJwbuz+MC3EuxYplHY+xbg0fMIzbuRm0KEB7+ThPqwBFf5yd8pyO5pkizets0Jx AD9STaSd4NIrZtl3/CfllNYJI0pLNugR2QDggqw3C6UAKfYtks1p8Jo3jLL6JZ+I LZtbufUVBjxtw/UZjdoDW7nKaap9OBnZOfFphX+ZyDwhMmgop2ZryVV0I88oh4pQ W+gV3VpL8u3uXjGBh0C9IMT0Lgta1LXxdgmvGPDuXPRNl5s6fo0JkFGxhbgqQbzq a8WEqH2gayQJ/SuvK56pCBPqe1eCty+/ZJcrBD5FaOULCXGwWVJlOqjeq5u/76A0 gmQF -----END CERTIFICATE-----Generated at Sat Sep 5 08:33:35 2026 by rpki-client