$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/A5B7D874091F11EFA6EDE141C4F9AE02.roa File: A5B7D874091F11EFA6EDE141C4F9AE02.roa (raw, json) Hash identifier: YNBFBbDYDj4mNBC+V1HiyO4vpNMunMhvxcfcPzCMYGs= Subject key identifier: 07:28:4D:29:87:31:EB:2C:58:9A:76:1A:8D:7E:46:4F:13:C7:CD:D9 Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Certificate serial: 0F86 Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/A5B7D874091F11EFA6EDE141C4F9AE02.roa Signing time: Wed 30 Sep 2026 18:34:26 +0000 ROA not before: Wed 30 Sep 2026 18:34:25 +0000 ROA not after: Sat 30 Jan 2027 00:00:00 +0000 asID: 136617 IP address blocks: 103.94.68.0/22 maxlen: 24 203.109.36.0/22 maxlen: 22 203.109.36.0/24 maxlen: 24 203.109.37.0/24 maxlen: 24 203.109.38.0/24 maxlen: 24 203.109.39.0/24 maxlen: 24 2401:35c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3974 (0xf86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Validity Not Before: Sep 30 18:34:25 2026 GMT Not After : Jan 30 00:00:00 2027 GMT Subject: CN=6abd5631-c841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:03:10:e8:25:8c:3f:77:df:66:10:3f:e9:88: 57:6b:88:c6:1a:60:bc:8c:4a:2f:14:29:f5:4b:fc: 54:15:7b:b3:f6:af:a3:33:11:79:e7:b7:fa:65:97: 05:c9:f3:e8:33:48:97:66:6a:35:c4:f8:d1:3d:6c: ea:6d:35:99:fb:5e:18:15:c2:a3:e9:c0:ff:1e:6d: 39:97:b7:83:20:bf:63:8b:bf:a7:3c:fb:1d:3a:87: c4:bb:fc:a3:d1:c4:55:a9:a2:36:36:e6:77:0a:11: 69:8a:fa:21:af:f5:80:2b:1e:3e:e9:7e:5e:34:6a: 91:bf:bc:8b:da:e3:cd:80:04:2e:89:de:d2:54:d0: 2f:fb:89:43:cf:3e:e7:4e:2c:72:e4:24:19:e8:ad: 96:b7:d5:18:eb:99:40:0a:11:64:6c:62:66:33:7d: 20:07:37:02:bd:2f:a7:36:d9:76:0a:df:ae:ef:b9: 04:5e:e8:34:23:fb:ab:e7:44:72:d5:81:99:8a:2e: 8d:02:6c:04:39:1d:d0:fa:19:0d:ac:36:27:f1:b3: 40:9f:fa:fd:9f:78:15:6f:17:09:96:f9:7b:cf:b1: 2d:1f:bf:f0:ca:7f:c5:c1:36:4a:20:c2:37:4e:08: 3f:3d:cd:3f:ef:7b:c4:60:d5:64:95:fe:47:fc:ee: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:28:4D:29:87:31:EB:2C:58:9A:76:1A:8D:7E:46:4F:13:C7:CD:D9 X509v3 Authority Key Identifier: keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/A5B7D874091F11EFA6EDE141C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.94.68.0/22 203.109.36.0/22 IPv6: 2401:35c0::/32 Signature Algorithm: sha256WithRSAEncryption 99:cf:25:25:c1:2a:d1:12:ea:c1:10:f0:17:15:e8:9e:6b:e0: 4b:93:63:99:c6:34:8d:3c:05:8d:db:20:8c:03:02:92:74:d2: ab:7a:99:0a:4c:b1:1c:21:b0:42:d3:0b:1b:5c:f8:08:35:ef: 7a:c8:0c:55:0f:c9:79:dd:33:72:8b:72:c9:3e:67:c2:7e:b9: 92:53:27:af:da:81:e2:39:a2:2c:c9:ef:c1:94:d3:83:4d:b2: 80:23:e4:d3:74:bb:9c:4f:f0:b8:ab:4c:40:b4:a0:51:82:1b: 67:77:00:b7:2c:3d:ea:5c:ca:82:3a:dd:b1:27:ee:95:77:b5: 89:cd:9b:fd:0f:b1:ff:4b:59:9f:cf:72:03:6a:bb:b5:28:e3: 05:a3:93:7e:2a:3f:7d:9f:52:73:be:54:11:02:7d:d4:61:30: 01:9c:de:0c:44:0c:39:c5:6e:92:6b:2a:39:2a:8e:b2:c3:e2: 2a:54:cc:e9:3c:f0:c2:29:90:b3:cb:aa:17:ed:d6:8c:71:8a: 19:32:c0:cb:a3:12:4e:48:26:7e:54:22:42:28:71:c5:76:1f: c1:c3:50:df:49:b5:37:aa:f1:fe:bc:f7:32:bb:82:f0:f8:af: ec:2c:b2:b4:e0:47:30:a4:9a:77:30:b2:ad:38:00:17:96:7d: 65:b1:2f:3d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICD4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5 N0VDNUQ1RDYwHhcNMjYwOTMwMTgzNDI1WhcNMjcwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkNTYzMS1jODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wMQ6CWMP3ffZhA/6YhXa4jGGmC8jEovFCn1S/xUFXuz9q+jMxF557f6ZZcF yfPoM0iXZmo1xPjRPWzqbTWZ+14YFcKj6cD/Hm05l7eDIL9ji7+nPPsdOofEu/yj 0cRVqaI2NuZ3ChFpivohr/WAKx4+6X5eNGqRv7yL2uPNgAQuid7SVNAv+4lDzz7n Tixy5CQZ6K2Wt9UY65lAChFkbGJmM30gBzcCvS+nNtl2Ct+u77kEXug0I/ur50Ry 1YGZii6NAmwEOR3Q+hkNrDYn8bNAn/r9n3gVbxcJlvl7z7EtH7/wyn/FwTZKIMI3 Tgg/Pc0/73vEYNVklf5H/O4aNwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAcoTSmH MessWJp2Go1+Rk8Tx83ZMB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3 RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ2NjgvN0M5MDA5QUM5N0YxMTFFOUEyRTUxOTgxQzRGOUFFMDIvQTVCN0Q4NzQw OTFGMTFFRkE2RURFMTQxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ15EAwQCy20kMA0EAgACMAcDBQAkATXAMA0GCSqGSIb3DQEBCwUA A4IBAQCZzyUlwSrREurBEPAXFeiea+BLk2OZxjSNPAWN2yCMAwKSdNKrepkKTLEc IbBC0wsbXPgINe96yAxVD8l53TNyi3LJPmfCfrmSUyev2oHiOaIsye/BlNODTbKA I+TTdLucT/C4q0xAtKBRghtndwC3LD3qXMqCOt2xJ+6Vd7WJzZv9D7H/S1mfz3ID aru1KOMFo5N+Kj99n1JzvlQRAn3UYTABnN4MRAw5xW6Sayo5Ko6yw+IqVMzpPPDC KZCzy6oX7daMcYoZMsDLoxJOSCZ+VCJCKHHFdh/Bw1DfSbU3qvH+vPcyu4Lw+K/s LLK04EcwpJp3MLKtOAAXln1lsS89 -----END CERTIFICATE-----Generated at Mon Oct 5 22:05:01 2026 by rpki-client