$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/DB3006F8962A11F19F8219DF6311F970.roa File: DB3006F8962A11F19F8219DF6311F970.roa (raw, json) Hash identifier: El/juh33gOh26Nr9+88ixW3exl2598cwf/qJ0h1IURE= Subject key identifier: C1:1B:6F:63:3E:4C:6C:DC:2D:C9:5A:72:6E:FF:31:A6:E8:72:28:12 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1259 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/DB3006F8962A11F19F8219DF6311F970.roa Signing time: Wed 12 Aug 2026 09:01:13 +0000 ROA not before: Wed 12 Aug 2026 09:01:13 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 149765 IP address blocks: 103.86.195.0/24 maxlen: 24 220.152.114.0/24 maxlen: 24 2400:c640:80::/48 maxlen: 48 2400:c640:81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4697 (0x1259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Aug 12 09:01:13 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a7c3659-99c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:68:c6:6a:29:76:9e:23:ff:59:0c:f9:79: 4f:44:76:2a:bf:cc:3b:57:dc:d2:e2:c8:6a:fc:23: db:fd:ad:83:1a:a3:ab:af:ef:c0:d6:e1:05:20:fe: 8e:8a:05:8e:ac:75:0f:75:17:2e:06:94:8c:22:18: aa:3f:f6:81:3f:b1:a0:70:fb:9a:a4:39:80:9b:60: f8:b4:37:bb:0e:7a:25:68:36:9d:2e:cf:5d:5b:f4: dc:c2:fd:1d:7b:97:aa:4e:c2:05:52:b6:70:12:9a: 17:86:06:3e:d7:fb:48:ce:be:c9:88:92:73:58:3c: 4b:27:50:ee:32:82:6d:fb:78:0a:33:73:8a:b2:d8: 67:54:b5:00:9d:9d:c1:08:8d:fb:02:44:0e:99:be: 9c:e1:94:f8:0e:f6:62:54:55:75:35:79:e7:09:e9: bd:ed:ce:b1:2c:d3:88:0d:a5:c6:fa:a1:78:52:1c: 53:d0:8a:1a:2f:12:ca:95:5f:c5:7a:18:39:b9:f7: e8:f9:6c:00:3c:bf:aa:c3:1f:26:4b:84:38:d1:e6: 83:da:8a:be:97:78:ed:7c:ef:42:98:0c:0e:20:40: 1d:e2:ed:6d:72:bb:ac:da:b0:da:cd:68:9c:b1:86: 69:23:e5:2a:df:ef:20:f4:1a:4e:bb:d0:35:73:f5: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:6F:63:3E:4C:6C:DC:2D:C9:5A:72:6E:FF:31:A6:E8:72:28:12 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/DB3006F8962A11F19F8219DF6311F970.roa sbgp-ipAddrBlock: critical IPv4: 103.86.195.0/24 220.152.114.0/24 IPv6: 2400:c640:80::/47 Signature Algorithm: sha256WithRSAEncryption a3:da:7c:23:07:e8:ed:5f:d5:f5:53:aa:e6:fb:5c:de:4c:c8: 79:94:c5:22:45:22:ee:9b:43:05:e4:56:8a:84:be:29:2d:86: 1e:53:0e:2a:35:ff:51:6e:ee:bf:83:56:3d:59:48:12:dc:ae: 90:ac:34:78:ed:73:7b:72:9c:d8:f8:33:ab:33:21:50:a5:d3: 41:d5:2f:e0:ca:68:98:f4:04:72:c3:61:a5:5d:f7:bc:49:8a: b5:fe:c2:ef:50:5c:47:0a:f8:8c:ee:66:1f:11:11:56:86:44: 36:55:5d:75:66:9e:15:a7:c6:7b:9d:95:fa:fc:c8:da:da:9b: f4:db:eb:69:37:9e:fa:44:13:a1:ea:a9:46:e6:58:13:e6:68: c3:51:01:3f:a2:1a:97:bf:e3:3e:6c:38:98:52:91:6f:6d:a7: a9:ba:68:00:66:ef:ee:e9:59:50:8c:2d:7a:38:85:59:47:5a: e4:13:c3:a3:23:6d:6e:97:4e:e5:40:b7:bc:6e:0f:d6:5e:e1: 0e:84:40:7c:92:d8:50:21:17:90:00:1d:b2:47:d6:21:39:1a: 25:5d:7f:2d:76:18:d5:e1:34:db:c8:a4:09:ad:64:ca:24:2f: 25:be:7b:92:0c:08:73:65:45:40:94:42:a4:96:19:17:b7:d9: 5d:e6:33:a8 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICElkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwODEyMDkwMTEzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTdjMzY1OS05OWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtftoxmopdp4j/1kM+XlPRHYqv8w7V9zS4shq/CPb/a2DGqOrr+/A1uEFIP6O igWOrHUPdRcuBpSMIhiqP/aBP7GgcPuapDmAm2D4tDe7DnolaDadLs9dW/Tcwv0d e5eqTsIFUrZwEpoXhgY+1/tIzr7JiJJzWDxLJ1DuMoJt+3gKM3OKsthnVLUAnZ3B CI37AkQOmb6c4ZT4DvZiVFV1NXnnCem97c6xLNOIDaXG+qF4UhxT0IoaLxLKlV/F ehg5uffo+WwAPL+qwx8mS4Q40eaD2oq+l3jtfO9CmAwOIEAd4u1tcrus2rDazWic sYZpI+Uq3+8g9BpOu9A1c/X4awIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFMEbb2M+ TGzcLclacm7/MabocigSMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvREIzMDA2Rjg5 NjJBMTFGMTlGODIxOURGNjMxMUY5NzAucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ1bDAwQA3JhyMA8EAgACMAkDBwEkAMZAAIAwDQYJKoZIhvcNAQEL BQADggEBAKPafCMH6O1f1fVTqub7XN5MyHmUxSJFIu6bQwXkVoqEvikthh5TDio1 /1Fu7r+DVj1ZSBLcrpCsNHjtc3tynNj4M6szIVCl00HVL+DKaJj0BHLDYaVd97xJ irX+wu9QXEcK+IzuZh8REVaGRDZVXXVmnhWnxnudlfr8yNram/Tb62k3nvpEE6Hq qUbmWBPmaMNRAT+iGpe/4z5sOJhSkW9tp6m6aABm7+7pWVCMLXo4hVlHWuQTw6Mj bW6XTuVAt7xuD9Ze4Q6EQHyS2FAhF5AAHbJH1iE5GiVdfy12GNXhNNvIpAmtZMok LyW+e5IMCHNlRUCUQqSWGRe32V3mM6g= -----END CERTIFICATE-----Generated at Fri Sep 11 07:07:33 2026 by rpki-client