$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/3DD8C628940111F09204AF71C4F9AE02.roa File: 3DD8C628940111F09204AF71C4F9AE02.roa (raw, json) Hash identifier: qyRCCyei3MShGysWy2y27h9mS62xktJLIpfB6ltBCO4= Subject key identifier: 27:6D:C0:87:47:55:5E:30:72:B5:6F:06:B0:54:0E:03:18:4F:0E:99 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 03E6 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/3DD8C628940111F09204AF71C4F9AE02.roa Signing time: Sun 16 Aug 2026 20:40:49 +0000 ROA not before: Sun 16 Aug 2026 20:40:49 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 134371 IP address blocks: 103.154.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 20:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Aug 16 20:40:49 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a822050-9f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:cf:2d:18:05:2e:8f:00:c6:4a:ba:14:10: a1:4c:2e:17:d9:7a:02:ae:6d:ef:8d:86:22:3a:ac: a8:d0:1b:0d:35:f6:11:30:96:4a:19:97:0d:5e:b4: 24:bf:65:18:6f:1e:66:a4:2a:f6:2c:cb:1a:2d:9a: 38:ef:33:f2:20:34:ea:a0:fc:f6:99:bb:b7:24:05: 12:3a:ab:35:74:00:6c:30:ec:d2:cd:82:97:dd:2b: 44:aa:5c:bf:30:e8:c3:93:8e:07:a6:b4:e7:06:db: f0:c5:c2:12:71:77:bd:5c:8d:8e:eb:a9:8f:fc:c4: ae:dd:a5:7d:ef:ca:6f:e3:3a:71:48:d3:ef:65:34: 8d:8c:fe:9c:3e:bb:f5:0c:59:11:6c:e8:96:27:52: bf:66:df:7f:99:31:43:0e:3a:68:0c:98:53:ce:0f: a9:22:29:66:30:83:b9:7c:07:d9:70:3b:f1:46:6c: f5:57:b9:f3:34:81:62:2a:02:f6:c9:d5:63:53:d8: 47:67:bc:6a:79:ac:08:c7:e6:0a:d7:02:9c:db:77: be:87:71:19:49:c9:b7:98:22:b6:a0:c8:06:54:a2: 9b:a1:6d:ba:44:bf:2c:56:14:e7:d9:df:20:59:76: 95:7e:74:c9:69:fc:0f:30:bd:2f:a8:c0:88:29:8b: c0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6D:C0:87:47:55:5E:30:72:B5:6F:06:B0:54:0E:03:18:4F:0E:99 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/3DD8C628940111F09204AF71C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.48.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:01:b5:f9:72:5e:f1:3a:7d:2c:05:54:b3:da:75:c9:e5:74: 13:17:17:d9:48:50:1a:a2:db:d4:1a:b9:52:4f:60:b7:77:a8: 90:44:8c:f7:a6:41:b6:77:ba:41:24:35:a0:ba:8b:d3:bf:aa: 96:c0:02:d5:d5:6e:24:14:a2:c7:44:b0:e8:c8:a9:f7:a8:f7: 83:11:e9:c3:55:50:1d:92:d9:be:71:45:23:37:ca:5a:74:c8: 89:c1:48:92:6e:51:29:12:36:48:c5:c5:06:45:9e:b9:b0:a0: 9e:87:f0:4d:70:1b:75:ef:60:63:30:8a:31:57:18:6d:1d:d6: fc:e0:15:52:b9:93:c0:e2:3c:ca:73:df:8d:65:bc:a2:33:61: 10:d6:20:20:1f:1a:d6:1a:b4:b6:59:d8:ec:d8:1f:ae:85:bf: 02:d6:d8:b1:cd:52:03:1c:02:a5:6f:a8:b6:b6:ce:b6:d0:a5: 13:00:47:bc:45:a1:ce:ca:a5:25:c8:e4:f3:ff:fa:72:42:9c: 4d:6e:63:c6:90:a5:26:b3:5a:b1:f1:4c:aa:6c:ef:52:43:16: 1f:6c:41:13:8a:1a:d5:8a:d9:82:5a:ad:2c:aa:ab:58:db:0a: 31:8a:e8:94:50:ce:d4:f5:bf:ba:83:be:fc:11:97:6e:a7:b2: ce:22:ac:1e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYwODE2MjA0MDQ5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgyMjA1MC05Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApArPLRgFLo8Axkq6FBChTC4X2XoCrm3vjYYiOqyo0BsNNfYRMJZKGZcNXrQk v2UYbx5mpCr2LMsaLZo47zPyIDTqoPz2mbu3JAUSOqs1dABsMOzSzYKX3StEqly/ MOjDk44HprTnBtvwxcIScXe9XI2O66mP/MSu3aV978pv4zpxSNPvZTSNjP6cPrv1 DFkRbOiWJ1K/Zt9/mTFDDjpoDJhTzg+pIilmMIO5fAfZcDvxRmz1V7nzNIFiKgL2 ydVjU9hHZ7xqeawIx+YK1wKc23e+h3EZScm3mCK2oMgGVKKboW26RL8sVhTn2d8g WXaVfnTJafwPML0vqMCIKYvAhwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCdtwIdH VV4wcrVvBrBUDgMYTw6ZMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDFFNEMvN0RBREE1NkNEOTREMTFFQUE2MDRBQzUzQzRGOUFFMDIvM0REOEM2Mjg5 NDAxMTFGMDkyMDRBRjcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ5owMA0GCSqGSIb3DQEBCwUAA4IBAQBfAbX5cl7xOn0sBVSz2nXJ 5XQTFxfZSFAaotvUGrlST2C3d6iQRIz3pkG2d7pBJDWguovTv6qWwALV1W4kFKLH RLDoyKn3qPeDEenDVVAdktm+cUUjN8padMiJwUiSblEpEjZIxcUGRZ65sKCeh/BN cBt172BjMIoxVxhtHdb84BVSuZPA4jzKc9+NZbyiM2EQ1iAgHxrWGrS2Wdjs2B+u hb8C1tixzVIDHAKlb6i2ts620KUTAEe8RaHOyqUlyOTz//pyQpxNbmPGkKUms1qx 8UyqbO9SQxYfbEETihrVitmCWq0sqqtY2woxiuiUUM7U9b+6g778EZdup7LOIqwe -----END CERTIFICATE-----Generated at Thu Aug 27 04:03:23 2026 by rpki-client