$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/5AFFB9E48C2211EDAE44DD87C4F9AE02.roa File: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (raw, json) Hash identifier: HngBFWxCeGdGGI7K1NehqNXwpSksJGC331CYSdk3V3Y= Subject key identifier: 06:08:81:02:C4:6F:40:C7:81:F6:7D:8C:DB:9C:CE:E8:42:34:3C:A1 Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Certificate serial: 02D3 Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/5AFFB9E48C2211EDAE44DD87C4F9AE02.roa Signing time: Fri 31 Jul 2026 02:51:47 +0000 ROA not before: Fri 31 Jul 2026 02:51:47 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 131471 IP address blocks: 103.221.246.0/24 maxlen: 24 103.221.247.0/24 maxlen: 24 2001:df0:7880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Validity Not Before: Jul 31 02:51:47 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a6c0dc3-e881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b2:9b:9c:1a:47:c2:70:8f:b3:de:fc:67:bc: 35:43:dd:b3:27:b8:69:55:1a:14:ec:0e:7d:4a:c6: ef:ce:eb:f5:64:63:54:2e:ce:49:c8:0e:57:44:1b: ed:e5:b4:d1:4a:83:6f:ec:c6:7d:79:df:f0:69:de: 34:c3:87:26:22:31:1f:4a:ec:4e:e3:8a:91:c4:da: ff:c4:cc:f5:e8:26:8d:06:ca:e7:f2:59:f4:af:7d: 48:be:e7:8a:be:24:69:cf:63:ec:60:63:d6:01:ef: 5d:07:97:28:8a:da:7a:ac:46:24:9d:91:e5:e0:7f: cb:a5:72:a8:e4:ff:45:e9:4b:c2:b1:48:6e:a1:2a: a9:67:67:94:ab:bb:f9:a7:20:71:10:90:c9:84:93: b9:1c:1b:6e:ad:66:17:1b:2c:c0:7c:c7:e1:76:5a: f7:4a:45:ff:b5:98:0d:cd:39:5c:13:c6:38:74:84: d9:86:82:b9:a5:b6:db:f2:91:23:ce:f5:49:87:27: ae:64:9d:f2:60:15:df:71:33:d4:f4:81:61:c9:dc: 0b:03:64:88:65:9c:2a:7f:80:64:b2:32:15:9c:82: 90:d8:24:69:ac:92:8e:b3:ff:51:17:1e:c1:21:dd: f9:bb:da:80:1b:a6:8d:a4:40:cc:30:ad:61:77:1e: 4b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:08:81:02:C4:6F:40:C7:81:F6:7D:8C:DB:9C:CE:E8:42:34:3C:A1 X509v3 Authority Key Identifier: keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/5AFFB9E48C2211EDAE44DD87C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.221.246.0/23 IPv6: 2001:df0:7880::/48 Signature Algorithm: sha256WithRSAEncryption 5f:9b:72:32:97:3a:ec:dc:c2:83:76:25:b5:5f:35:32:b5:15: d6:a0:e2:54:e7:8e:fd:3b:17:74:9a:75:d7:18:8f:55:11:65: 72:c4:7f:f8:31:ec:68:59:2c:e5:54:b1:99:45:f5:6e:1e:30: 6c:c7:ff:2c:0e:1e:34:7c:b9:13:17:d6:fc:ff:b7:c5:0c:2b: 39:a0:01:0d:2a:03:88:63:ef:8b:3e:53:b7:37:82:b5:94:89: cf:2b:9d:8e:c2:10:3f:c2:2b:04:12:b0:3b:50:2c:bd:a3:dc: 8d:55:84:07:65:b6:d4:7f:04:e4:bf:12:27:68:93:96:f1:14: 93:66:06:94:d1:e2:3c:0c:13:fd:54:25:ad:dc:84:04:59:0e: 23:80:b8:ee:7a:1d:56:eb:81:93:df:8b:a1:f4:c5:09:f5:c2: e7:5d:da:49:31:1c:80:12:44:a2:24:52:bd:28:b2:2d:0f:cb: 09:80:c4:96:df:6a:b0:4b:2d:32:c1:00:72:bc:f7:6a:1d:f0: 76:00:74:3b:35:39:2b:19:ba:ba:ab:0f:01:49:2b:0b:80:5f: 3d:a8:04:22:d6:80:b1:53:48:67:58:33:07:94:4f:32:f8:78: dc:6d:6c:12:85:ac:71:b0:dd:12:24:7f:18:1c:24:a5:87:b8: cf:6f:12:34 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MDMxMTAvBgNVBAUTKDQ1NkFGNUU1NjY3REUyNDhBOUNGMENFQjkwQzZEMUIz RDNFRDZGQTgwHhcNMjYwNzMxMDI1MTQ3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZjMGRjMy1lODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LKbnBpHwnCPs978Z7w1Q92zJ7hpVRoU7A59Ssbvzuv1ZGNULs5JyA5XRBvt 5bTRSoNv7MZ9ed/wad40w4cmIjEfSuxO44qRxNr/xMz16CaNBsrn8ln0r31IvueK viRpz2PsYGPWAe9dB5coitp6rEYknZHl4H/LpXKo5P9F6UvCsUhuoSqpZ2eUq7v5 pyBxEJDJhJO5HBturWYXGyzAfMfhdlr3SkX/tZgNzTlcE8Y4dITZhoK5pbbb8pEj zvVJhyeuZJ3yYBXfcTPU9IFhydwLA2SIZZwqf4BksjIVnIKQ2CRprJKOs/9RFx7B Id35u9qAG6aNpEDMMK1hdx5LVwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAYIgQLE b0DHgfZ9jNuczuhCNDyhMB8GA1UdIwQYMBaAFEVq9eVmfeJIqc8M65DG0bPT7W+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkwMy9EODk4MjY1QThD MUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRraXB6d3pya01iUnM5UHRi NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXcjE1V1o5NGtpcHp3enJrTWJSczlQdGI2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg5MDMvRDg5ODI2NUE4QzFGMTFFREFFNDQxRDg3QzRGOUFFMDIvNUFGRkI5RTQ4 QzIyMTFFREFFNDRERDg3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ932MA8EAgACMAkDBwAgAQ3weIAwDQYJKoZIhvcNAQELBQADggEB AF+bcjKXOuzcwoN2JbVfNTK1Fdag4lTnjv07F3SaddcYj1URZXLEf/gx7GhZLOVU sZlF9W4eMGzH/ywOHjR8uRMX1vz/t8UMKzmgAQ0qA4hj74s+U7c3grWUic8rnY7C ED/CKwQSsDtQLL2j3I1VhAdlttR/BOS/Eidok5bxFJNmBpTR4jwME/1UJa3chARZ DiOAuO56HVbrgZPfi6H0xQn1wudd2kkxHIASRKIkUr0osi0PywmAxJbfarBLLTLB AHK892od8HYAdDs1OSsZurqrDwFJKwuAXz2oBCLWgLFTSGdYMweUTzL4eNxtbBKF rHGw3RIkfxgcJKWHuM9vEjQ= -----END CERTIFICATE-----Generated at Fri Sep 11 10:38:09 2026 by rpki-client