$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/433917A83D8211EEA0E4DD46C4F9AE02.roa File: 433917A83D8211EEA0E4DD46C4F9AE02.roa (raw, json) Hash identifier: 9k8Fht4Br+99Bt5Yrwgpw9dr0xvUubqA6YyCzt85eWA= Subject key identifier: E3:28:5D:52:C2:5C:F3:BF:44:CA:3F:36:83:1B:56:F5:84:76:E6:11 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0FAD Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/433917A83D8211EEA0E4DD46C4F9AE02.roa Signing time: Wed 12 Aug 2026 17:35:26 +0000 ROA not before: Wed 12 Aug 2026 17:35:26 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151465 IP address blocks: 103.5.0.0/22 maxlen: 22 103.5.0.0/23 maxlen: 23 103.5.0.0/24 maxlen: 24 103.5.1.0/24 maxlen: 24 103.5.2.0/23 maxlen: 23 103.5.2.0/24 maxlen: 24 103.5.3.0/24 maxlen: 24 126.209.88.0/22 maxlen: 22 126.209.88.0/23 maxlen: 23 126.209.88.0/24 maxlen: 24 126.209.89.0/24 maxlen: 24 126.209.90.0/24 maxlen: 24 126.209.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 17:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4013 (0xfad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Aug 12 17:35:26 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7caedd-1833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:fd:c8:56:37:68:e0:03:f0:07:8e:bf:b1: 2c:ce:9e:5f:c3:ba:2b:05:40:fd:47:a1:7c:58:8b: 5a:f0:6a:c1:bc:ea:93:c3:09:27:29:b1:59:01:f4: 96:3e:bf:51:42:94:38:eb:a2:46:4b:02:62:fb:10: ae:f4:61:f3:eb:e4:2b:4b:1e:a6:0e:71:53:13:79: 8e:b2:d4:c5:df:56:70:b5:87:a0:65:1c:e9:ad:b0: 8c:0e:e9:8b:35:ea:bd:38:ac:3b:9d:f3:75:88:c9: 35:21:1b:c0:2b:7d:0c:6b:ea:3c:f9:e6:0a:88:a9: 91:7c:ce:cd:09:a4:d1:9f:48:e1:6c:8d:60:a9:cd: 08:55:24:90:2e:23:e8:4b:83:96:f0:2f:2d:02:ad: d6:17:1d:e0:59:56:a2:2e:c1:a9:95:d3:6c:71:e0: a4:c6:21:f3:8d:32:57:51:24:e2:35:41:1c:5c:bd: 52:f8:c5:da:d1:2c:86:08:a9:b3:63:a1:12:c1:53: b1:96:55:ee:36:b4:70:f7:30:c4:d2:f3:17:34:87: 85:b0:70:08:9c:59:88:20:82:dc:f8:1f:fa:96:4a: 29:94:97:c7:b0:d8:2c:db:67:0c:cf:a6:6c:3d:ee: 8e:72:74:f4:6b:7c:79:ef:83:3f:b5:e3:a6:04:52: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:28:5D:52:C2:5C:F3:BF:44:CA:3F:36:83:1B:56:F5:84:76:E6:11 X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/433917A83D8211EEA0E4DD46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.5.0.0/22 126.209.88.0/22 Signature Algorithm: sha256WithRSAEncryption 48:66:20:9d:e3:1b:33:96:fb:1d:70:7c:cb:a3:d2:b0:fa:9c: aa:65:ba:07:45:c5:64:9f:78:b6:df:a0:b5:21:53:42:d9:60: 3d:3c:1b:a1:8b:e1:dc:04:58:d7:5b:ed:10:38:df:d5:2c:d1: fe:af:0d:6c:8a:11:25:83:1d:cc:39:93:81:b1:1b:8c:5b:d2: 18:47:82:4b:90:b8:f4:ce:23:51:12:37:40:dc:56:83:f6:53: 5e:48:61:23:73:7d:7e:43:4f:dc:d9:46:4d:a5:82:5f:1c:93: 6f:06:82:a9:64:04:1c:bd:10:0a:c9:66:de:b1:39:8b:8e:fb: 86:ec:5e:c8:e8:2f:ef:5b:0e:42:22:80:b5:ad:8a:64:6e:5e: 7f:ca:61:2c:46:e3:df:62:d6:53:87:e2:e3:33:73:6d:1f:c2: a5:28:b4:98:95:a8:30:19:23:6a:63:23:00:ea:b8:d9:a9:6b: 7c:6f:7f:06:a2:8f:87:3f:f9:c3:8e:9f:42:82:6d:c1:d8:d4: 7d:9a:f3:d0:8f:8a:41:26:23:64:20:1e:0f:cc:c8:51:b8:b9: 44:98:42:85:f9:9c:3d:9a:af:13:26:6a:92:43:d8:10:0e:a4: 93:87:d9:0d:42:90:2b:69:df:81:f8:e9:76:3b:08:63:47:c4: b9:2f:ad:99 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICD60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYwODEyMTczNTI2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdjYWVkZC0xODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqe/9yFY3aOAD8AeOv7Eszp5fw7orBUD9R6F8WIta8GrBvOqTwwknKbFZAfSW Pr9RQpQ466JGSwJi+xCu9GHz6+QrSx6mDnFTE3mOstTF31ZwtYegZRzprbCMDumL Neq9OKw7nfN1iMk1IRvAK30Ma+o8+eYKiKmRfM7NCaTRn0jhbI1gqc0IVSSQLiPo S4OW8C8tAq3WFx3gWVaiLsGpldNsceCkxiHzjTJXUSTiNUEcXL1S+MXa0SyGCKmz Y6ESwVOxllXuNrRw9zDE0vMXNIeFsHAInFmIIILc+B/6lkoplJfHsNgs22cMz6Zs Pe6OcnT0a3x574M/teOmBFJIiwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOMoXVLC XPO/RMo/NoMbVvWEduYRMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg2OEMvM0ZCOTMzNjhBOURCMTFFOTg0Mjg1Mjg2QzRGOUFFMDIvNDMzOTE3QTgz RDgyMTFFRUEwRTRERDQ2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZwUAAwQCftFYMA0GCSqGSIb3DQEBCwUAA4IBAQBIZiCd4xszlvsd cHzLo9Kw+pyqZboHRcVkn3i236C1IVNC2WA9PBuhi+HcBFjXW+0QON/VLNH+rw1s ihElgx3MOZOBsRuMW9IYR4JLkLj0ziNREjdA3FaD9lNeSGEjc31+Q0/c2UZNpYJf HJNvBoKpZAQcvRAKyWbesTmLjvuG7F7I6C/vWw5CIoC1rYpkbl5/ymEsRuPfYtZT h+LjM3NtH8KlKLSYlagwGSNqYyMA6rjZqWt8b38Goo+HP/nDjp9Cgm3B2NR9mvPQ j4pBJiNkIB4PzMhRuLlEmEKF+Zw9mq8TJmqSQ9gQDqSTh9kNQpArad+B+Ol2Owhj R8S5L62Z -----END CERTIFICATE-----Generated at Sat Aug 29 09:04:21 2026 by rpki-client