$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/5417C204181311F1BB2D572D153D8C67.roa File: 5417C204181311F1BB2D572D153D8C67.roa (raw, json) Hash identifier: zJkgueGHn82J9kxPh9Ojean9JnFzwHRZHhlrlDNf/4o= Subject key identifier: A0:D3:A9:23:31:3C:F4:97:64:AD:8D:08:C5:C7:AD:EE:05:98:97:90 Certificate issuer: /CN=A91D30A3/serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7 Certificate serial: 6B Authority key identifier: 13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/5417C204181311F1BB2D572D153D8C67.roa Signing time: Fri 11 Sep 2026 08:59:12 +0000 ROA not before: Fri 11 Sep 2026 08:59:12 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 133624 IP address blocks: 103.36.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 08:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D30A3, serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7 Validity Not Before: Sep 11 08:59:12 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa3c2e0-f4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1c:cf:8c:de:fb:98:53:3e:7e:eb:94:cc:78: ce:48:37:dc:10:f9:88:49:ce:45:3e:9a:9a:19:0c: 54:93:e2:5c:87:1b:74:7d:d7:cd:14:f4:b6:69:31: c3:59:31:44:9b:7f:59:74:ef:d7:75:71:b1:9c:51: 61:ff:96:cb:12:80:0e:62:10:d7:1c:bc:8f:f8:43: c7:b3:84:e9:9a:ca:e1:35:75:d9:0a:cc:17:81:01: 4c:a8:64:79:71:74:8f:8f:7a:93:16:8b:2c:fa:73: 15:b1:4f:80:0d:ba:58:a6:dd:59:14:b5:49:4d:e7: 58:4a:6d:77:14:db:9b:21:25:9d:07:5c:40:a7:dc: 41:34:5c:df:1b:35:26:8a:fc:d4:18:f3:1b:0e:75: e7:c1:55:7b:5d:a3:03:b1:9c:51:df:39:49:dc:d4: 8c:06:7c:e1:49:60:e2:76:1c:3f:d7:1c:63:18:a8: 5c:b5:3c:82:e7:92:6e:37:81:ef:2e:63:b6:e3:c1: ed:dd:de:5e:3f:b7:3e:fc:54:56:6d:0d:9f:3d:d1: 0b:2a:41:b5:db:d9:63:af:75:5d:8b:17:27:24:6c: d6:d4:9d:98:9d:24:8b:97:2f:68:f8:b9:01:5e:5f: 75:89:72:31:29:9f:ec:d4:8e:aa:86:a0:b1:54:9f: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D3:A9:23:31:3C:F4:97:64:AD:8D:08:C5:C7:AD:EE:05:98:97:90 X509v3 Authority Key Identifier: keyid:13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/5417C204181311F1BB2D572D153D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.36.0.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:31:5c:64:ab:c7:19:82:50:b1:40:57:1b:fc:aa:8b:62:96: b6:62:01:00:5a:6b:31:37:d5:e4:c8:d1:b2:bc:da:6d:4e:ab: a7:c8:e5:fb:20:f8:19:ad:40:0e:9b:01:b8:76:97:2a:e7:95: d6:11:8a:8e:57:25:18:59:a2:2c:22:13:70:58:9c:fa:86:ce: 95:fa:3e:c0:d5:2b:06:9e:26:99:bd:c9:82:d0:41:21:e3:a1: d3:73:d5:0c:7f:e3:a7:91:c9:a4:9f:ae:9c:ed:93:86:ae:44: 60:3e:e3:fa:11:37:0f:2e:b6:c3:c2:ef:30:26:08:83:31:1f: 84:8f:86:3c:0b:8b:d1:ad:73:7f:8b:5b:89:7b:8e:5d:fb:3e: ac:cc:3e:f5:fc:4b:ec:91:68:c6:61:69:ec:8c:24:56:a7:10: 2b:73:b1:40:7d:39:41:d8:b1:25:9b:00:4f:97:1b:e6:b1:34: 19:a2:a0:4b:8d:76:17:7b:23:c1:ec:94:62:65:10:98:9e:b6: 9d:2c:59:29:fc:df:14:ae:19:48:37:5e:e0:f4:a4:ec:12:86: 38:24:15:86:23:3f:62:b8:86:89:62:61:1a:0e:04:5f:b2:6d: fe:8f:c6:3d:60:59:fb:bd:c1:bf:db:6b:f8:57:7f:45:d5:14: e9:a9:34:7f -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzBBMzExMC8GA1UEBRMoMTM0OEQ0NkFBNzBCMDMwM0IwNDAyM0YwNEE2MzA1OEI0 RDY5NjNCNzAeFw0yNjA5MTEwODU5MTJaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTNjMmUwLWY0YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZHM+M3vuYUz5+65TMeM5IN9wQ+YhJzkU+mpoZDFST4lyHG3R9180U9LZpMcNZ MUSbf1l079d1cbGcUWH/lssSgA5iENccvI/4Q8ezhOmayuE1ddkKzBeBAUyoZHlx dI+PepMWiyz6cxWxT4ANulim3VkUtUlN51hKbXcU25shJZ0HXECn3EE0XN8bNSaK /NQY8xsOdefBVXtdowOxnFHfOUnc1IwGfOFJYOJ2HD/XHGMYqFy1PILnkm43ge8u Y7bjwe3d3l4/tz78VFZtDZ890QsqQbXb2WOvdV2LFyckbNbUnZidJIuXL2j4uQFe X3WJcjEpn+zUjqqGoLFUn6FDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUoNOpIzE8 9JdkrY0Ixcet7gWYl5AwHwYDVR0jBBgwFoAUE0jUaqcLAwOwQCPwSmMFi01pY7cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMEEzLzYwMDY0QkMyMTgw ODExRjE5OTY1NzA1NjExM0Q4QzY3L0UwalVhcWNMQXdPd1FDUHdTbU1GaTAxcFk3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRTBqVWFxY0xBd093UUNQd1NtTUZpMDFwWTdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzBBMy82MDA2NEJDMjE4MDgxMUYxOTk2NTcwNTYxMTNEOEM2Ny81NDE3QzIwNDE4 MTMxMUYxQkIyRDU3MkQxNTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJnJAAwDQYJKoZIhvcNAQELBQADggEBADoxXGSrxxmCULFAVxv8qoti lrZiAQBaazE31eTI0bK82m1Oq6fI5fsg+BmtQA6bAbh2lyrnldYRio5XJRhZoiwi E3BYnPqGzpX6PsDVKwaeJpm9yYLQQSHjodNz1Qx/46eRyaSfrpztk4auRGA+4/oR Nw8utsPC7zAmCIMxH4SPhjwLi9Gtc3+LW4l7jl37PqzMPvX8S+yRaMZhaeyMJFan ECtzsUB9OUHYsSWbAE+XG+axNBmioEuNdhd7I8HslGJlEJietp0sWSn83xSuGUg3 XuD0pOwShjgkFYYjP2K4holiYRoOBF+ybf6Pxj1gWfu9wb/ba/hXf0XVFOmpNH8= -----END CERTIFICATE-----Generated at Tue Oct 13 22:57:38 2026 by rpki-client