$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/DA0D94B6962A11F19F8219DF6311F970.roa File: DA0D94B6962A11F19F8219DF6311F970.roa (raw, json) Hash identifier: 0eDYd5bx4V8RD3fWCK7H0P6J+7V3ULJb/N3cYKdbtWg= Subject key identifier: 6F:99:8C:4F:0B:89:9B:DE:E9:AE:5A:DC:0C:8C:73:7F:41:6B:4B:B0 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1257 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/DA0D94B6962A11F19F8219DF6311F970.roa Signing time: Wed 12 Aug 2026 08:53:46 +0000 ROA not before: Wed 12 Aug 2026 08:53:46 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138640 IP address blocks: 103.86.195.0/24 maxlen: 24 220.152.114.0/24 maxlen: 24 2400:c640:80::/48 maxlen: 48 2400:c640:81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4695 (0x1257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Aug 12 08:53:46 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a7c349a-d283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:0b:17:a4:73:58:a5:77:37:2d:b6:f1:c1: f7:48:55:82:2b:df:b4:3d:ee:7e:c8:1c:6f:f7:9c: 2a:22:6b:22:17:86:44:da:16:f7:cd:9a:41:f3:51: 96:93:50:27:7f:4b:b3:7d:a6:46:ad:27:81:93:0c: c3:50:f2:b2:f4:59:ff:0b:81:29:1c:60:a2:d5:41: 7e:db:3c:8c:53:83:fe:6d:e6:0c:83:e2:1f:71:e4: ce:3e:86:7d:4c:d9:c7:74:de:04:1f:ec:d5:e5:e3: 9b:73:ea:f8:9d:e5:2a:1c:5e:10:ec:9d:32:c3:80: 5c:7f:33:d2:ec:18:86:00:88:60:74:cf:2c:3a:f7: 60:aa:01:b1:36:35:88:85:71:aa:0b:0d:6b:42:10: b1:c3:6c:cc:34:0c:37:9f:d3:50:a3:89:55:5c:f4: 95:c3:3a:43:fa:de:7f:61:02:11:94:42:a4:df:67: d0:73:96:b5:77:30:53:09:04:2b:1f:5e:15:aa:b9: 1d:08:27:a5:e6:b1:8c:f5:06:e2:f7:a2:4d:1e:f6: f6:bf:cd:3b:8a:da:a3:00:09:00:56:fd:f4:79:d2: 59:65:2b:70:40:e2:61:93:b0:12:66:5f:a5:7a:01: 36:c8:ba:74:81:e2:62:f3:c4:9a:8a:22:21:b1:91: f6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:99:8C:4F:0B:89:9B:DE:E9:AE:5A:DC:0C:8C:73:7F:41:6B:4B:B0 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/DA0D94B6962A11F19F8219DF6311F970.roa sbgp-ipAddrBlock: critical IPv4: 103.86.195.0/24 220.152.114.0/24 IPv6: 2400:c640:80::/47 Signature Algorithm: sha256WithRSAEncryption 1c:9e:d9:e5:51:a2:76:87:e6:b9:62:77:b4:64:4c:da:7d:90: 89:e7:20:24:8d:a8:09:33:e7:78:47:b3:27:f7:fa:71:2e:d2: ba:21:22:9e:a9:9a:f1:8c:4e:9b:d3:35:7c:ce:ea:9f:da:95: a6:6a:cf:8b:b1:43:57:ea:43:10:9c:d6:ec:51:c8:61:d8:cc: ab:c1:c0:3c:40:ba:45:5c:96:5f:5b:8c:b3:35:19:09:5d:21: 4a:e3:f6:87:11:7d:49:8b:13:8f:ca:ce:b8:b6:a2:38:6c:f0: f0:79:d3:03:38:55:c5:6c:8d:16:3c:0c:96:b7:7d:2a:87:67: 0a:48:b3:45:3a:e6:cd:5f:56:8a:68:59:75:bf:34:61:c4:f0: c4:74:b7:45:eb:25:91:bb:1d:86:4b:03:db:5a:bf:c1:4b:6a: 7e:ca:fb:56:b4:f7:cf:6b:cd:98:66:17:be:6c:da:2b:24:7a: ff:c8:6f:fd:45:b4:b2:37:2c:9a:b5:81:0d:18:a6:93:91:38: 1c:08:45:93:b3:91:6d:e6:3e:f0:71:8f:df:78:26:ea:5b:82: 4b:bd:8f:7e:86:c8:43:3c:5c:2d:31:03:7f:9b:ac:f9:3a:00: 8f:00:92:b1:30:42:b2:0d:ae:f8:4d:e3:a8:85:49:b6:61:a4: c4:11:0f:09 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICElcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwODEyMDg1MzQ2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTdjMzQ5YS1kMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJ8LF6RzWKV3Ny228cH3SFWCK9+0Pe5+yBxv95wqImsiF4ZE2hb3zZpB81GW k1Anf0uzfaZGrSeBkwzDUPKy9Fn/C4EpHGCi1UF+2zyMU4P+beYMg+IfceTOPoZ9 TNnHdN4EH+zV5eObc+r4neUqHF4Q7J0yw4BcfzPS7BiGAIhgdM8sOvdgqgGxNjWI hXGqCw1rQhCxw2zMNAw3n9NQo4lVXPSVwzpD+t5/YQIRlEKk32fQc5a1dzBTCQQr H14VqrkdCCel5rGM9Qbi96JNHvb2v807itqjAAkAVv30edJZZStwQOJhk7ASZl+l egE2yLp0geJi88SaiiIhsZH2VQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFG+ZjE8L iZve6a5a3AyMc39Ba0uwMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvREEwRDk0QjY5 NjJBMTFGMTlGODIxOURGNjMxMUY5NzAucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ1bDAwQA3JhyMA8EAgACMAkDBwEkAMZAAIAwDQYJKoZIhvcNAQEL BQADggEBABye2eVRonaH5rlid7RkTNp9kInnICSNqAkz53hHsyf3+nEu0rohIp6p mvGMTpvTNXzO6p/alaZqz4uxQ1fqQxCc1uxRyGHYzKvBwDxAukVcll9bjLM1GQld IUrj9ocRfUmLE4/Kzri2ojhs8PB50wM4VcVsjRY8DJa3fSqHZwpIs0U65s1fVopo WXW/NGHE8MR0t0XrJZG7HYZLA9tav8FLan7K+1a0989rzZhmF75s2iskev/Ib/1F tLI3LJq1gQ0YppOROBwIRZOzkW3mPvBxj994Jupbgku9j36GyEM8XC0xA3+brPk6 AI8AkrEwQrINrvhN46iFSbZhpMQRDwk= -----END CERTIFICATE-----Generated at Fri Sep 11 07:07:33 2026 by rpki-client