$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/A6C9934CA74111E88B3EAB2BC4F9AE02.roa File: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (raw, json) Hash identifier: Fg1IcAZ2A1EMwqD7lRtBcOmZe0TzbfUCsxVw7nft8S4= Subject key identifier: 8F:B5:D0:96:D3:67:53:F0:93:1C:9B:03:F3:D8:F0:D5:D5:9B:E2:D7 Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Certificate serial: 1456 Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/A6C9934CA74111E88B3EAB2BC4F9AE02.roa Signing time: Tue 16 Jun 2026 17:19:37 +0000 ROA not before: Tue 16 Jun 2026 17:19:37 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 136397 IP address blocks: 103.98.238.0/24 maxlen: 24 2001:df2:e700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 16:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5206 (0x1456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Validity Not Before: Jun 16 17:19:37 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3185a9-7f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:87:52:b0:45:25:7e:a4:05:67:65:05:af:8d: 2c:86:ab:e1:7f:26:55:82:e9:e6:a4:0f:88:1b:1a: 57:0b:bf:54:8b:57:9d:a7:6a:12:5d:a7:fd:9e:05: e1:17:bd:42:3b:bc:c0:9c:b6:b4:73:20:4d:6a:69: 22:c1:a6:5b:3d:24:83:ec:d1:98:43:f7:b5:2c:26: 30:ee:0d:2f:4a:13:fa:01:aa:df:2d:87:2e:e3:6e: e0:b7:33:41:80:a3:a9:43:e6:95:b8:60:ef:f9:f8: 46:fd:38:3e:29:d2:86:f6:9b:da:7f:57:99:54:6f: 2c:6e:f3:7c:8e:46:78:52:fb:37:fe:49:4a:a4:41: 6f:5e:af:15:08:4d:fe:02:9c:d8:c3:b3:18:4f:44: 90:bc:66:eb:01:1e:f3:cf:aa:9e:ef:ae:45:bc:04: 10:e4:a4:a3:f5:85:2b:96:59:65:9f:e2:f3:3e:3c: b0:ed:35:98:2a:4e:b8:2e:5e:6f:53:f8:f8:69:18: 70:93:3f:b5:1b:b3:01:e9:e9:cc:05:de:04:c4:2a: a7:83:50:f5:5d:01:4a:89:85:d6:91:0c:18:76:21: ba:29:46:e3:0f:99:22:b2:45:41:50:ba:bf:6d:90: d6:d1:76:bc:4d:bf:73:7d:63:ab:e6:b3:6e:ca:f1: 08:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B5:D0:96:D3:67:53:F0:93:1C:9B:03:F3:D8:F0:D5:D5:9B:E2:D7 X509v3 Authority Key Identifier: keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/A6C9934CA74111E88B3EAB2BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.98.238.0/24 IPv6: 2001:df2:e700::/48 Signature Algorithm: sha256WithRSAEncryption 1c:5b:9f:34:e8:81:2c:ca:a6:24:e5:c0:d3:4f:d7:32:e2:dc: 67:16:8a:ca:43:6c:46:f4:d3:ab:f6:10:a3:24:8a:ec:b5:1e: 0a:6e:7b:63:93:b5:78:55:1b:88:a7:8b:2c:0d:92:68:1f:0c: fb:f1:12:dc:e1:db:27:1b:67:69:1a:1c:bd:f9:e5:32:a5:06: 95:a6:fa:cc:98:9f:99:98:d3:df:4d:1a:74:5c:79:3d:82:8c: de:88:b3:ea:a6:f8:48:84:f5:e3:bd:3e:d9:ed:b3:f9:05:0a: a0:5a:cd:f0:b7:36:cd:ca:a9:ee:d4:64:a5:c8:3f:ae:a0:32: 9f:d2:a4:0e:b8:7f:99:00:ca:af:3a:aa:00:71:bf:a5:2c:37: 6e:aa:ae:89:3d:64:7f:8a:5f:05:fe:9a:40:1c:8e:0a:49:5b: e3:c7:27:3c:e2:ce:d0:41:b6:62:16:09:f2:56:3c:2a:cc:71: 75:25:01:55:9f:1e:ce:87:8d:ac:3d:3d:f3:57:16:2b:80:31: 15:e5:83:5f:4e:31:5e:d0:43:c1:f5:db:9c:d4:44:dd:6c:ec: f0:d5:1f:eb:0d:37:93:b7:93:11:5e:a2:fe:70:d5:07:7e:f9: e6:2b:8f:5d:25:27:84:02:67:d9:40:ca:18:92:95:c9:f8:ca: a4:90:5d:26 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICFFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4REIxMTAvBgNVBAUTKDk3RDI5QjBEMzI0NTVCQjVDNkYxMjU3ODVGNDBGNUJD MjcwOUY3RDQwHhcNMjYwNjE2MTcxOTM3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMxODVhOS03ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14dSsEUlfqQFZ2UFr40shqvhfyZVgunmpA+IGxpXC79Ui1edp2oSXaf9ngXh F71CO7zAnLa0cyBNamkiwaZbPSSD7NGYQ/e1LCYw7g0vShP6AarfLYcu427gtzNB gKOpQ+aVuGDv+fhG/Tg+KdKG9pvaf1eZVG8sbvN8jkZ4Uvs3/klKpEFvXq8VCE3+ ApzYw7MYT0SQvGbrAR7zz6qe765FvAQQ5KSj9YUrlllln+LzPjyw7TWYKk64Ll5v U/j4aRhwkz+1G7MB6enMBd4ExCqng1D1XQFKiYXWkQwYdiG6KUbjD5kiskVBULq/ bZDW0Xa8Tb9zfWOr5rNuyvEIlQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFI+10JbT Z1PwkxybA/PY8NXVm+LXMB8GA1UdIwQYMBaAFJfSmw0yRVu1xvEleF9A9bwnCffU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjhEQi82NTc5Mzc4Qzk5 MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3WEc4U1Y0WDBEMXZDY0o5 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5S2JEVEpGVzdYRzhTVjRYMEQxdkNjSjk5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY4REIvNjU3OTM3OEM5OTM0MTFFOEEwMzczNzI0QzRGOUFFMDIvQTZDOTkzNENB NzQxMTFFODhCM0VBQjJCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ2LuMA8EAgACMAkDBwAgAQ3y5wAwDQYJKoZIhvcNAQELBQADggEB ABxbnzTogSzKpiTlwNNP1zLi3GcWispDbEb006v2EKMkiuy1Hgpue2OTtXhVG4in iywNkmgfDPvxEtzh2ycbZ2kaHL355TKlBpWm+syYn5mY099NGnRceT2CjN6Is+qm +EiE9eO9Ptnts/kFCqBazfC3Ns3Kqe7UZKXIP66gMp/SpA64f5kAyq86qgBxv6Us N26qrok9ZH+KXwX+mkAcjgpJW+PHJzziztBBtmIWCfJWPCrMcXUlAVWfHs6Hjaw9 PfNXFiuAMRXlg19OMV7QQ8H125zURN1s7PDVH+sNN5O3kxFeov5w1Qd++eYrj10l J4QCZ9lAyhiSlcn4yqSQXSY= -----END CERTIFICATE-----Generated at Wed Jun 24 12:33:41 2026 by rpki-client