$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa File: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (raw, json) Hash identifier: aZPZjU2X9q7Uezgbc+/YwtYMqbcTXMspTEvxkBuOs1c= Subject key identifier: BC:F8:0F:94:CA:D0:F4:06:9E:83:6A:9F:68:8B:67:00:44:B9:5E:AA Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0FAA Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa Signing time: Wed 12 Aug 2026 17:35:20 +0000 ROA not before: Wed 12 Aug 2026 17:35:20 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 135366 IP address blocks: 103.5.0.0/22 maxlen: 22 103.5.0.0/23 maxlen: 23 103.5.0.0/24 maxlen: 24 103.5.1.0/24 maxlen: 24 103.5.2.0/23 maxlen: 23 103.5.2.0/24 maxlen: 24 103.5.3.0/24 maxlen: 24 126.209.88.0/22 maxlen: 22 126.209.88.0/23 maxlen: 23 126.209.88.0/24 maxlen: 24 126.209.89.0/24 maxlen: 24 126.209.90.0/24 maxlen: 24 126.209.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 17:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4010 (0xfaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Aug 12 17:35:20 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7caed8-c4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:ab:a7:95:e5:e5:bb:ca:88:22:de:63:ea: 7d:64:b6:f5:c8:23:cc:77:6c:ef:ff:28:fe:79:96: 41:91:af:1d:f3:51:1c:88:16:aa:e8:0a:dd:39:6a: 45:69:df:6a:a2:73:15:da:ae:88:bb:b1:1b:1d:f8: 73:27:23:40:f0:9a:58:77:60:26:5f:4a:33:a7:a2: 6f:4b:72:69:e4:c1:73:82:30:3b:70:5b:1c:b1:5c: 90:38:a5:47:85:1b:c3:1e:eb:00:04:8e:76:21:f3: 0c:09:6f:d8:1a:e3:71:63:48:e9:8d:69:04:81:eb: 8b:13:4b:1f:14:f5:aa:7a:d9:ff:57:26:6e:2c:c9: 60:66:58:47:b1:68:20:b9:56:63:cb:9f:a2:1c:21: 74:10:58:e8:80:cf:b1:c4:cc:8f:58:0e:95:f4:5a: fc:9c:b4:b7:d0:2f:16:8b:c9:8e:25:12:89:31:47: 78:bb:a3:f5:f6:98:19:c9:58:fc:32:ab:2b:85:87: 9e:5f:fe:72:34:f9:ff:19:69:1e:e3:e3:47:47:9f: 9d:0a:eb:af:8d:24:2c:ee:ea:a7:28:04:df:fe:0a: 10:eb:d8:d0:ca:f6:0c:a3:15:7b:4b:26:f6:2f:9c: ea:0f:74:6a:af:bb:c7:d1:a5:d3:24:6f:57:97:1f: 0a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F8:0F:94:CA:D0:F4:06:9E:83:6A:9F:68:8B:67:00:44:B9:5E:AA X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.5.0.0/22 126.209.88.0/22 Signature Algorithm: sha256WithRSAEncryption bc:71:c5:fb:f1:42:4b:66:69:e9:72:56:7e:8a:09:81:f0:16: d8:89:36:72:6f:00:8e:3e:21:79:b3:74:99:01:83:1d:a8:f1: ff:86:b1:cd:d2:71:60:ff:49:11:e8:09:f5:a9:93:3d:12:07: 43:00:a3:6e:4e:13:63:72:43:41:82:3b:6c:a9:08:5b:40:1a: f1:65:eb:7f:ed:d7:ed:39:28:95:27:0f:bf:bd:86:cb:cb:1d: 72:10:40:95:ad:35:4a:42:91:b1:83:80:08:95:ad:fb:59:bc: e2:21:04:4b:39:e1:75:c0:6f:7b:72:9b:e9:40:39:fb:08:04: bd:23:22:47:d7:06:67:7e:82:53:02:b9:57:7b:78:79:af:86: ab:eb:77:0e:8f:ee:5a:f5:c5:6c:f4:65:8d:bb:51:08:89:8b: a2:c7:cf:90:1a:6b:91:28:9f:29:cf:f0:cc:c0:2c:33:a6:41: c6:38:56:37:b5:2e:1f:e9:d8:0b:c0:61:3f:fa:fe:95:56:a4: db:ea:c3:49:23:b3:32:e9:23:00:5f:36:6f:61:96:23:d2:d6: 34:a4:58:13:df:90:f6:ec:c9:ac:80:94:36:95:43:16:ae:3d: 84:a4:3c:02:1b:1a:4e:0b:53:20:60:45:b4:b7:0b:3b:ef:1d: ed:2d:01:61 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICD6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYwODEyMTczNTIwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdjYWVkOC1jNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qWrp5Xl5bvKiCLeY+p9ZLb1yCPMd2zv/yj+eZZBka8d81EciBaq6ArdOWpF ad9qonMV2q6Iu7EbHfhzJyNA8JpYd2AmX0ozp6JvS3Jp5MFzgjA7cFscsVyQOKVH hRvDHusABI52IfMMCW/YGuNxY0jpjWkEgeuLE0sfFPWqetn/VyZuLMlgZlhHsWgg uVZjy5+iHCF0EFjogM+xxMyPWA6V9Fr8nLS30C8Wi8mOJRKJMUd4u6P19pgZyVj8 MqsrhYeeX/5yNPn/GWke4+NHR5+dCuuvjSQs7uqnKATf/goQ69jQyvYMoxV7Syb2 L5zqD3Rqr7vH0aXTJG9Xlx8KQwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLz4D5TK 0PQGnoNqn2iLZwBEuV6qMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg2OEMvM0ZCOTMzNjhBOURCMTFFOTg0Mjg1Mjg2QzRGOUFFMDIvNDBCQTNGNUMz RDgyMTFFRUEwRTRERDQ2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZwUAAwQCftFYMA0GCSqGSIb3DQEBCwUAA4IBAQC8ccX78UJLZmnp clZ+igmB8BbYiTZybwCOPiF5s3SZAYMdqPH/hrHN0nFg/0kR6An1qZM9EgdDAKNu ThNjckNBgjtsqQhbQBrxZet/7dftOSiVJw+/vYbLyx1yEECVrTVKQpGxg4AIla37 WbziIQRLOeF1wG97cpvpQDn7CAS9IyJH1wZnfoJTArlXe3h5r4ar63cOj+5a9cVs 9GWNu1EIiYuix8+QGmuRKJ8pz/DMwCwzpkHGOFY3tS4f6dgLwGE/+v6VVqTb6sNJ I7My6SMAXzZvYZYj0tY0pFgT35D27MmsgJQ2lUMWrj2EpDwCGxpOC1MgYEW0tws7 7x3tLQFh -----END CERTIFICATE-----Generated at Sat Aug 29 09:03:48 2026 by rpki-client