$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/D8D9323A962A11F19F8219DF6311F970.roa File: D8D9323A962A11F19F8219DF6311F970.roa (raw, json) Hash identifier: pVYFs3HRNNehYpuljIjcWfILlhr7bBotjOW/wIaOGyg= Subject key identifier: E9:68:D4:42:EC:12:E2:E2:3F:1E:5A:A2:ED:AF:AD:C2:55:DD:E2:1F Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1253 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/D8D9323A962A11F19F8219DF6311F970.roa Signing time: Wed 12 Aug 2026 08:50:20 +0000 ROA not before: Wed 12 Aug 2026 08:50:20 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 136406 IP address blocks: 103.86.193.0/24 maxlen: 24 103.86.195.0/24 maxlen: 24 220.152.114.0/24 maxlen: 24 2400:c640::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4691 (0x1253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Aug 12 08:50:20 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a7c33cc-9f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:af:22:62:07:11:84:ff:98:d6:7a:63:79:49: 74:e1:37:6d:76:12:b0:77:ef:36:c8:0a:fe:93:44: f4:ed:5a:f6:93:0c:33:62:be:35:a2:7a:51:49:b7: 3c:7d:0d:f7:5a:1d:16:db:5c:e5:43:b5:70:fc:4f: 9e:08:0e:e8:47:e0:44:7a:a2:10:4e:b1:b9:39:6c: a0:70:39:e1:1c:c3:60:9c:31:f1:20:57:15:0f:52: 61:5d:f4:77:de:ef:94:75:90:7e:8f:93:68:ca:a0: 5a:9e:59:78:32:11:b2:18:12:fd:5f:c8:db:ad:45: 5f:f3:bc:5b:ee:c7:95:bb:b3:ee:f2:71:2a:c9:7d: 96:91:b5:04:a8:d8:42:f1:fa:e4:67:6f:52:24:99: a4:57:3a:e6:00:b0:af:85:8d:6b:90:09:5e:2a:fa: b0:10:69:7c:bf:de:d1:2d:08:25:1e:a7:6b:2b:dc: 42:11:f7:6c:99:3a:29:28:e5:e9:fe:f6:f9:c4:e0: e2:aa:0d:e3:66:43:82:e9:38:b9:11:8a:dc:f5:29: c0:f5:d7:b1:c7:c2:13:61:ce:86:4b:3a:26:f8:6d: 7c:df:97:e6:4e:2e:58:a7:ad:40:ca:3a:5f:3e:72: 6e:1b:a7:0a:7b:16:69:9b:27:14:79:e8:f3:db:0a: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:68:D4:42:EC:12:E2:E2:3F:1E:5A:A2:ED:AF:AD:C2:55:DD:E2:1F X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/D8D9323A962A11F19F8219DF6311F970.roa sbgp-ipAddrBlock: critical IPv4: 103.86.193.0/24 103.86.195.0/24 220.152.114.0/24 IPv6: 2400:c640::/32 Signature Algorithm: sha256WithRSAEncryption 6a:6c:65:f7:2e:fa:a9:85:72:e7:4f:9f:13:93:cd:02:47:26: 09:08:98:cf:ed:0c:be:fb:a6:22:2d:b1:ea:34:e0:3a:81:25: 5d:b1:b3:ba:da:3d:9e:22:c7:a8:d3:5d:6f:69:27:8b:19:98: 19:f0:99:ac:91:14:85:3c:c6:58:25:5d:32:d9:07:e5:1b:48: d2:b6:17:8e:42:80:8f:ea:de:01:a1:5c:48:cc:d5:ca:52:fa: c0:28:cb:48:87:23:3e:ad:4e:fa:fb:4a:f3:b7:73:3c:f2:5c: a6:be:06:25:74:e9:95:8b:25:ad:8d:e0:03:fc:b5:56:4f:48: 38:13:63:09:bb:33:3f:bd:24:b3:ce:4c:78:b1:72:ec:94:cd: 10:06:2b:88:65:61:89:76:18:98:21:57:c4:15:4f:c0:80:32: 1f:43:aa:b7:7c:73:68:7a:bb:8d:69:b0:52:60:77:25:56:68: f3:5a:a6:9f:f9:0d:0b:b0:a2:15:c2:54:22:f2:7e:4b:61:cf: 29:14:2e:45:fa:60:de:14:53:9c:38:93:d5:f8:63:47:2b:dd: 65:50:94:6b:50:04:3e:41:cc:9d:55:4c:b8:5f:c5:fa:4b:ea: 47:f3:16:a1:38:f7:e3:a0:23:21:26:34:0c:dd:64:ef:ef:d6: 95:51:05:a7 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICElMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwODEyMDg1MDIwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTdjMzNjYy05ZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl68iYgcRhP+Y1npjeUl04TdtdhKwd+82yAr+k0T07Vr2kwwzYr41onpRSbc8 fQ33Wh0W21zlQ7Vw/E+eCA7oR+BEeqIQTrG5OWygcDnhHMNgnDHxIFcVD1JhXfR3 3u+UdZB+j5NoyqBanll4MhGyGBL9X8jbrUVf87xb7seVu7Pu8nEqyX2WkbUEqNhC 8frkZ29SJJmkVzrmALCvhY1rkAleKvqwEGl8v97RLQglHqdrK9xCEfdsmTopKOXp /vb5xODiqg3jZkOC6Ti5EYrc9SnA9dexx8ITYc6GSzom+G1835fmTi5Yp61Ayjpf PnJuG6cKexZpmycUeejz2wqWTwIDAQABo4ICezCCAncwHQYDVR0OBBYEFOlo1ELs EuLiPx5aou2vrcJV3eIfMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvRDhEOTMyM0E5 NjJBMTFGMTlGODIxOURGNjMxMUY5NzAucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZ1bBAwQAZ1bDAwQA3JhyMA0EAgACMAcDBQAkAMZAMA0GCSqGSIb3 DQEBCwUAA4IBAQBqbGX3LvqphXLnT58Tk80CRyYJCJjP7Qy++6YiLbHqNOA6gSVd sbO62j2eIseo011vaSeLGZgZ8JmskRSFPMZYJV0y2QflG0jStheOQoCP6t4BoVxI zNXKUvrAKMtIhyM+rU76+0rzt3M88lymvgYldOmViyWtjeAD/LVWT0g4E2MJuzM/ vSSzzkx4sXLslM0QBiuIZWGJdhiYIVfEFU/AgDIfQ6q3fHNoeruNabBSYHclVmjz Wqaf+Q0LsKIVwlQi8n5LYc8pFC5F+mDeFFOcOJPV+GNHK91lUJRrUAQ+QcydVUy4 X8X6S+pH8xahOPfjoCMhJjQM3WTv79aVUQWn -----END CERTIFICATE-----Generated at Fri Sep 11 07:07:34 2026 by rpki-client