$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/FF57D3205A4611EF88B33287C4F9AE02.roa File: FF57D3205A4611EF88B33287C4F9AE02.roa (raw, json) Hash identifier: rI4b1YgzMPn2BfRwdTDQyxiYnkW+OyQNTTa1mQYXQvM= Subject key identifier: E7:60:3B:31:B0:D9:F3:F0:25:60:FD:B9:C8:82:8E:98:7F:22:EB:27 Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 0A21 Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/FF57D3205A4611EF88B33287C4F9AE02.roa Signing time: Fri 14 Aug 2026 20:39:33 +0000 ROA not before: Fri 14 Aug 2026 20:39:33 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 38084 IP address blocks: 103.72.88.0/24 maxlen: 24 103.108.168.0/22 maxlen: 24 203.27.21.0/24 maxlen: 24 210.48.208.0/21 maxlen: 24 2406:7600::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2593 (0xa21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Aug 14 20:39:33 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7f7d04-05e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:be:db:47:74:7d:b2:18:f8:e5:75:31:e0: 59:61:ce:ae:e4:fe:d9:f2:3f:d0:a8:c4:f9:ae:6d: 8b:7c:83:30:61:3d:45:44:c6:2c:c0:17:80:5c:2d: ed:22:1d:44:94:18:25:a7:59:76:8a:d9:7f:b9:3f: 75:39:a8:14:31:85:02:31:cd:eb:1a:56:73:4e:29: 94:8c:00:2a:44:c6:0d:3a:db:f3:38:ba:72:21:6c: c0:7e:69:92:e8:10:30:85:1d:5f:e0:f6:06:a2:b7: b5:79:9e:31:41:37:99:fd:ca:4f:62:b7:54:e6:ec: 27:b6:d3:a3:3b:fb:ac:b1:a9:c0:54:50:83:8a:1f: 9c:04:0c:dd:83:e7:33:67:a9:45:10:1c:00:df:5e: 36:39:d7:62:14:cd:d9:8d:cc:ad:18:1a:52:ab:1a: cc:9d:71:15:ad:b0:42:b1:34:fa:c4:45:55:96:10: 31:08:4d:21:06:0b:1f:6a:38:96:74:35:c9:46:51: 56:74:c1:aa:ae:38:96:cf:88:e3:c8:54:5b:45:99: 8d:03:23:25:35:20:e8:be:af:81:7e:bd:7d:eb:92: 19:ed:ed:cc:0a:6e:e3:e2:98:22:a9:3a:e9:81:f5: 6f:c6:94:aa:7b:3e:21:7e:eb:4f:3f:5d:f5:4f:2b: 7a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:3B:31:B0:D9:F3:F0:25:60:FD:B9:C8:82:8E:98:7F:22:EB:27 X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/FF57D3205A4611EF88B33287C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.72.88.0/24 103.108.168.0/22 203.27.21.0/24 210.48.208.0/21 IPv6: 2406:7600::/32 Signature Algorithm: sha256WithRSAEncryption 1e:5f:2a:9e:29:4b:d9:e2:ea:93:31:3f:72:49:18:a9:94:e1: a4:78:49:d1:79:40:88:7f:56:10:c3:5a:cf:06:f3:7d:ea:24: a6:e7:e1:5f:c2:24:e5:17:28:3e:5d:e9:71:4d:95:fe:c2:ae: da:be:bf:67:9a:87:9d:e0:8b:db:5d:f1:20:8a:f9:b3:ff:9c: bf:b3:df:c8:7b:b3:e4:aa:ca:50:a9:13:b7:58:01:54:c9:2d: 03:ae:d8:b1:1d:2f:74:de:c9:9e:39:e6:cb:31:0c:9c:99:a7: 9c:d4:f3:43:f8:b8:2c:9c:b7:f8:d8:7c:b8:78:23:53:c6:5e: e3:bd:d2:93:fe:e3:70:30:73:9f:61:db:f4:bf:50:49:62:bb: 22:e9:4e:7e:e8:36:b9:77:a7:9b:bc:0b:85:d1:31:df:f2:2c: d8:6f:ef:fd:f7:94:27:e5:d0:26:3d:22:dc:74:21:7d:b9:3a: 5a:71:8e:00:8b:1c:28:fb:43:28:5f:98:11:27:62:31:61:a3: 24:30:3f:4f:a0:6b:42:8b:00:58:18:59:c3:d1:b5:30:ff:c4: e1:8e:d4:00:bc:ce:ae:7d:2f:77:14:d8:43:43:f1:f3:33:27: 07:bd:80:f8:99:88:9e:48:4a:2a:2d:f2:c1:79:63:2a:63:a7: d7:f0:c8:91 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjYwODE0MjAzOTMzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdmN2QwNC0wNWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkS+20d0fbIY+OV1MeBZYc6u5P7Z8j/QqMT5rm2LfIMwYT1FRMYswBeAXC3t Ih1ElBglp1l2itl/uT91OagUMYUCMc3rGlZzTimUjAAqRMYNOtvzOLpyIWzAfmmS 6BAwhR1f4PYGore1eZ4xQTeZ/cpPYrdU5uwnttOjO/ussanAVFCDih+cBAzdg+cz Z6lFEBwA3142OddiFM3ZjcytGBpSqxrMnXEVrbBCsTT6xEVVlhAxCE0hBgsfajiW dDXJRlFWdMGqrjiWz4jjyFRbRZmNAyMlNSDovq+Bfr1965IZ7e3MCm7j4pgiqTrp gfVvxpSqez4hfutPP131Tyt6IQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFOdgOzGw 2fPwJWD9uciCjph/IusnMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI2M0IvMkUyQ0VBMTY5RjQ2MTFFQTk4OEQwQjY1QzRGOUFFMDIvRkY1N0QzMjA1 QTQ2MTFFRjg4QjMzMjg3QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQAZ0hYAwQCZ2yoAwQAyxsVAwQD0jDQMA0EAgACMAcDBQAkBnYAMA0G CSqGSIb3DQEBCwUAA4IBAQAeXyqeKUvZ4uqTMT9ySRiplOGkeEnReUCIf1YQw1rP BvN96iSm5+FfwiTlFyg+XelxTZX+wq7avr9nmoed4IvbXfEgivmz/5y/s9/Ie7Pk qspQqRO3WAFUyS0DrtixHS903smeOebLMQycmaec1PND+LgsnLf42Hy4eCNTxl7j vdKT/uNwMHOfYdv0v1BJYrsi6U5+6Da5d6ebvAuF0THf8izYb+/995Qn5dAmPSLc dCF9uTpacY4Aixwo+0MoX5gRJ2IxYaMkMD9PoGtCiwBYGFnD0bUw/8ThjtQAvM6u fS93FNhDQ/HzMycHvYD4mYieSEoqLfLBeWMqY6fX8MiR -----END CERTIFICATE-----Generated at Sat Sep 19 08:21:46 2026 by rpki-client