$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/94AFDC66C7CC11F1ACF34C4A5511F970.roa File: 94AFDC66C7CC11F1ACF34C4A5511F970.roa (raw, json) Hash identifier: Ey9cmSz9vrRaa6o+xe2NiJVIsCtTEf701cikFQnUOmE= Subject key identifier: D3:E7:C3:83:9A:4F:83:04:14:D0:E5:97:8A:08:B8:1A:DF:A5:10:FD Certificate issuer: /CN=A91E3813/serialNumber=F4F9F02866EE562777276EE88E01CE48AF1F6C0E Certificate serial: 05 Authority key identifier: F4:F9:F0:28:66:EE:56:27:77:27:6E:E8:8E:01:CE:48:AF:1F:6C:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PnwKGbuVid3J27ojgHOSK8fbA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/94AFDC66C7CC11F1ACF34C4A5511F970.roa Signing time: Wed 14 Oct 2026 13:51:00 +0000 ROA not before: Wed 14 Oct 2026 13:51:00 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 132813 IP address blocks: 103.84.88.0/22 maxlen: 22 103.84.88.0/24 maxlen: 24 103.84.89.0/24 maxlen: 24 103.84.90.0/24 maxlen: 24 103.84.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.crl rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PnwKGbuVid3J27ojgHOSK8fbA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 10:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3813, serialNumber=F4F9F02866EE562777276EE88E01CE48AF1F6C0E Validity Not Before: Oct 14 13:51:00 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6acf88c4-d31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:4b:f1:f1:27:93:cb:61:72:23:30:87:a7: ce:ba:54:82:d8:e1:d8:08:57:21:7f:af:aa:e4:41: 3c:2e:3e:8e:99:2b:e7:3a:52:36:b3:e6:11:e7:f1: 4a:6a:8e:0b:85:16:60:8b:7e:ab:35:8b:59:1f:01: e2:72:e3:b6:25:6b:03:2b:e9:e3:1f:c6:a9:e4:59: e8:f5:e3:e4:d7:dd:67:81:b9:d1:84:48:ff:24:7e: 34:00:e9:e0:6b:7e:bc:17:de:f7:a7:89:62:aa:dc: 94:12:5f:3f:a0:96:fc:3d:59:ba:f0:e9:73:07:cf: 7c:ed:0f:6c:88:1b:bd:c5:44:d6:06:46:90:a4:2e: 97:2f:43:ea:94:fd:4b:0b:07:a5:a5:48:4d:54:ee: aa:f3:3f:8f:ab:47:3e:33:c5:d6:a8:ea:b6:44:e5: 5e:ed:d5:17:a0:5e:ab:d3:ad:38:50:30:50:3e:e1: 23:33:80:45:6d:7b:72:f1:90:73:46:35:c8:85:db: 0a:8f:64:eb:1d:79:79:81:0f:8b:8b:e4:cd:45:37: ed:dd:0b:db:9e:2d:3a:74:b8:93:57:95:b9:14:a0: b3:07:a9:18:c4:67:51:4f:f9:2a:18:ff:42:37:f3: 02:97:83:2e:97:11:c0:42:32:86:14:d0:c2:e2:bd: ae:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E7:C3:83:9A:4F:83:04:14:D0:E5:97:8A:08:B8:1A:DF:A5:10:FD X509v3 Authority Key Identifier: keyid:F4:F9:F0:28:66:EE:56:27:77:27:6E:E8:8E:01:CE:48:AF:1F:6C:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PnwKGbuVid3J27ojgHOSK8fbA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/94AFDC66C7CC11F1ACF34C4A5511F970.roa sbgp-ipAddrBlock: critical IPv4: 103.84.88.0/22 Signature Algorithm: sha256WithRSAEncryption 18:36:74:6f:d9:43:0b:3f:92:e5:8c:81:61:e1:9d:a3:07:f2: a1:7f:80:89:02:67:a2:11:24:d3:57:6c:fa:8a:6d:5b:0b:ba: a5:5c:e5:d7:87:e3:64:21:ad:4c:d3:66:69:1e:61:b9:a4:78: 7a:69:76:f2:92:89:0c:46:45:4b:61:56:e5:2b:6f:99:81:41: a3:50:8a:94:68:cb:1c:df:86:dd:88:66:19:75:ab:72:77:51: 32:91:f8:48:b6:66:93:ac:ea:fa:eb:c6:89:e9:1d:d7:e1:33: a8:c7:ad:fa:81:3b:32:cc:8c:c1:c5:79:50:62:c5:7b:69:b3: 55:a2:67:fc:5b:41:2a:4c:9d:f0:8f:75:c8:51:eb:ac:28:43: 9f:d0:40:b9:e6:ed:31:fb:1b:9c:92:45:0f:b6:e6:95:dc:6f: 99:e2:dc:bc:b0:15:0b:7d:b6:9c:89:62:5e:02:ae:cd:63:cd: 59:b8:6d:60:00:eb:f2:57:52:ec:70:b2:86:d9:c0:8d:ed:b1: 79:34:e3:f0:d3:25:c1:5f:ae:fc:d4:89:16:34:05:53:28:29: 3e:25:3f:e4:91:09:39:95:47:58:d6:1f:0a:34:f2:78:1d:e7: 34:ff:9a:9c:8e:86:55:90:13:31:e3:9f:d5:26:5b:7b:10:3e: 58:cc:02:fa -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzgxMzExMC8GA1UEBRMoRjRGOUYwMjg2NkVFNTYyNzc3Mjc2RUU4OEUwMUNFNDhB RjFGNkMwRTAeFw0yNjEwMTQxMzUxMDBaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhY2Y4OGM0LWQzMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC98Uvx8SeTy2FyIzCHp866VILY4dgIVyF/r6rkQTwuPo6ZK+c6Ujaz5hHn8Upq jguFFmCLfqs1i1kfAeJy47YlawMr6eMfxqnkWej14+TX3WeBudGESP8kfjQA6eBr frwX3veniWKq3JQSXz+glvw9Wbrw6XMHz3ztD2yIG73FRNYGRpCkLpcvQ+qU/UsL B6WlSE1U7qrzP4+rRz4zxdao6rZE5V7t1RegXqvTrThQMFA+4SMzgEVte3LxkHNG NciF2wqPZOsdeXmBD4uL5M1FN+3dC9ueLTp0uJNXlbkUoLMHqRjEZ1FP+SoY/0I3 8wKXgy6XEcBCMoYU0MLiva5HAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU0+fDg5pP gwQU0OWXigi4Gt+lEP0wHwYDVR0jBBgwFoAU9PnwKGbuVid3J27ojgHOSK8fbA4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzODEzLzQ0NzdBRUVBQzdD QzExRjFBRDBFQUIzRjU1MTFGOTcwLzlQbndLR2J1VmlkM0oyN29qZ0hPU0s4ZmJB NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVBud0tHYnVWaWQzSjI3b2pnSE9TSzhmYkE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzgxMy80NDc3QUVFQUM3Q0MxMUYxQUQwRUFCM0Y1NTExRjk3MC85NEFGREM2NkM3 Q0MxMUYxQUNGMzRDNEE1NTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJnVFgwDQYJKoZIhvcNAQELBQADggEBABg2dG/ZQws/kuWMgWHhnaMH 8qF/gIkCZ6IRJNNXbPqKbVsLuqVc5deH42QhrUzTZmkeYbmkeHppdvKSiQxGRUth VuUrb5mBQaNQipRoyxzfht2IZhl1q3J3UTKR+Ei2ZpOs6vrrxonpHdfhM6jHrfqB OzLMjMHFeVBixXtps1WiZ/xbQSpMnfCPdchR66woQ5/QQLnm7TH7G5ySRQ+25pXc b5ni3LywFQt9tpyJYl4Crs1jzVm4bWAA6/JXUuxwsobZwI3tsXk04/DTJcFfrvzU iRY0BVMoKT4lP+SRCTmVR1jWHwo08ngd5zT/mpyOhlWQEzHjn9UmW3sQPljMAvo= -----END CERTIFICATE-----Generated at Tue Oct 20 20:48:25 2026 by rpki-client