$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/CC5A0854D0DD11EFB1C6656DC4F9AE02.roa File: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (raw, json) Hash identifier: 9MUJ5ahbTn/0nfX/uwJrKv31jpeuSAMP0+bUKlRgGCg= Subject key identifier: 73:0B:CE:A3:4C:69:88:62:F5:0D:27:FA:C0:D8:8C:5A:36:4E:A4:8A Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 046F Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/CC5A0854D0DD11EFB1C6656DC4F9AE02.roa Signing time: Mon 17 Aug 2026 00:49:04 +0000 ROA not before: Mon 17 Aug 2026 00:49:03 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 58945 IP address blocks: 103.26.112.0/22 maxlen: 24 103.35.157.0/24 maxlen: 24 103.35.159.0/24 maxlen: 24 106.0.52.0/22 maxlen: 24 2401:4440::/32 maxlen: 32 2401:4440::/36 maxlen: 36 2401:4440::/48 maxlen: 48 2401:4440:1000::/36 maxlen: 36 2401:4440:2000::/36 maxlen: 36 2401:4440:3000::/36 maxlen: 36 2401:4440:4000::/36 maxlen: 36 2401:4440:5000::/36 maxlen: 36 2401:4440:6000::/36 maxlen: 36 2401:4440:7000::/36 maxlen: 36 2401:4440:8000::/36 maxlen: 36 2401:4440:9000::/36 maxlen: 36 2401:4440:a000::/36 maxlen: 36 2401:4440:a001::/48 maxlen: 48 2401:4440:a002::/48 maxlen: 48 2401:4440:b000::/36 maxlen: 36 2401:4440:c000::/36 maxlen: 36 2401:4440:d000::/36 maxlen: 36 2401:4440:e000::/36 maxlen: 36 2401:4440:f000::/36 maxlen: 36 2401:4440:fb00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1135 (0x46f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: Aug 17 00:49:03 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a825a7f-1464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:3d:ea:21:96:fd:77:50:33:7b:d6:c1:eb: 30:a0:01:57:68:f8:43:42:88:cb:86:43:82:ba:a3: 0c:81:5a:59:0f:80:42:ab:25:13:6d:e2:91:6b:a8: a7:16:3f:05:11:e5:fa:95:2e:62:6f:cb:87:5d:53: f6:3a:02:0a:0d:68:80:fa:c7:f1:a0:08:e3:7f:67: f2:99:fe:55:29:af:16:c8:3d:ca:8f:e2:26:05:9b: 10:86:a9:a7:38:4a:f6:f5:14:bf:70:87:09:96:fb: 1c:43:6e:ea:40:f7:92:5b:29:fd:90:c3:09:7f:37: 7c:d9:e4:5a:1e:db:95:df:d2:6e:f2:94:5b:48:a5: b8:a2:40:a9:42:55:6b:82:c1:f8:b1:2a:91:90:80: a6:5d:86:bd:b4:ad:9a:59:10:5a:60:d6:91:a6:5c: 8a:35:70:c9:1a:0f:7f:5a:80:27:d3:8e:e7:e0:ae: c7:4c:03:10:d1:09:04:84:d4:0f:63:ae:ee:c5:a1: 67:73:90:53:70:5e:14:98:8e:00:40:54:70:00:f0: 1c:21:d7:5c:dd:d1:89:46:0c:18:de:99:91:36:21: 22:c9:c5:27:9f:01:12:b2:8e:08:49:89:6b:e9:81: 8e:d1:91:26:2a:f5:41:2a:76:a0:a7:2d:ee:d2:cf: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0B:CE:A3:4C:69:88:62:F5:0D:27:FA:C0:D8:8C:5A:36:4E:A4:8A X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/CC5A0854D0DD11EFB1C6656DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.26.112.0/22 103.35.157.0/24 103.35.159.0/24 106.0.52.0/22 IPv6: 2401:4440::/32 Signature Algorithm: sha256WithRSAEncryption 6a:64:7c:92:1d:a2:99:2e:40:c7:49:7e:b0:39:b0:2b:dd:85: ad:10:40:73:69:f9:54:d8:3e:cd:07:58:fc:17:b0:a9:fb:05: ad:2a:77:99:05:84:03:74:16:52:11:4d:f9:8e:90:4d:46:b6: 3a:6f:77:db:5c:33:cc:47:e3:43:f3:41:9e:b3:4d:57:c3:7c: 14:d3:c1:82:e3:27:80:00:61:ef:e0:74:fc:60:56:df:56:5c: f9:54:49:ad:63:f7:a8:c3:15:d1:83:ca:2c:8c:2c:cc:ba:9d: 31:cd:dd:81:68:ad:96:66:c9:bd:b1:15:56:69:73:78:b0:ec: d3:1c:46:cf:9e:87:29:51:72:a7:47:c5:5c:6b:05:1e:1c:7a: 11:c7:8e:a8:cd:05:9d:e5:cc:b9:a8:46:68:39:5e:be:a9:96: 28:b1:9b:a2:22:ea:7a:6c:e7:5b:6b:79:cc:b9:00:eb:5b:af: 43:f8:1c:e6:65:6f:a6:fc:9c:61:21:8c:53:e8:df:9a:ea:6e: 84:d4:db:7a:71:70:33:b2:c8:6e:7c:1c:04:92:33:a2:53:97: 4c:cb:f2:41:81:0b:6d:96:ca:59:c8:67:31:7a:01:4f:b4:93: a5:59:3e:d9:d4:04:7d:cf:63:e2:5c:d3:76:d9:c3:9a:b3:4e: 6f:8c:6c:8e -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjYwODE3MDA0OTAzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgyNWE3Zi0xNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbw96iGW/XdQM3vWweswoAFXaPhDQojLhkOCuqMMgVpZD4BCqyUTbeKRa6in Fj8FEeX6lS5ib8uHXVP2OgIKDWiA+sfxoAjjf2fymf5VKa8WyD3Kj+ImBZsQhqmn OEr29RS/cIcJlvscQ27qQPeSWyn9kMMJfzd82eRaHtuV39Ju8pRbSKW4okCpQlVr gsH4sSqRkICmXYa9tK2aWRBaYNaRplyKNXDJGg9/WoAn047n4K7HTAMQ0QkEhNQP Y67uxaFnc5BTcF4UmI4AQFRwAPAcIddc3dGJRgwY3pmRNiEiycUnnwESso4ISYlr 6YGO0ZEmKvVBKnagpy3u0s+epQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFHMLzqNM aYhi9Q0n+sDYjFo2TqSKMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDkwQjkvRDFFQThDRjRCNTg3MTFFQ0JFREI5MjI5QzRGOUFFMDIvQ0M1QTA4NTRE MEREMTFFRkIxQzY2NTZEQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCZxpwAwQAZyOdAwQAZyOfAwQCagA0MA0EAgACMAcDBQAkAURAMA0G CSqGSIb3DQEBCwUAA4IBAQBqZHySHaKZLkDHSX6wObAr3YWtEEBzaflU2D7NB1j8 F7Cp+wWtKneZBYQDdBZSEU35jpBNRrY6b3fbXDPMR+ND80Ges01Xw3wU08GC4yeA AGHv4HT8YFbfVlz5VEmtY/eowxXRg8osjCzMup0xzd2BaK2WZsm9sRVWaXN4sOzT HEbPnocpUXKnR8VcawUeHHoRx46ozQWd5cy5qEZoOV6+qZYosZuiIup6bOdba3nM uQDrW69D+BzmZW+m/JxhIYxT6N+a6m6E1Nt6cXAzsshufBwEkjOiU5dMy/JBgQtt lspZyGcxegFPtJOlWT7Z1AR9z2PiXNN22cOas05vjGyO -----END CERTIFICATE-----Generated at Fri Sep 11 07:06:53 2026 by rpki-client