$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/05B67AF8C6A011EAA70D183FC4F9AE02.roa File: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (raw, json) Hash identifier: vpJ6nJYa+oTT4zALbbck30yw6BMCJHydPSk2mtiOxSY= Subject key identifier: 95:C1:C7:D4:C1:0F:F0:EC:F5:0E:D6:51:00:92:4F:46:10:61:D5:F6 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 0957 Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/05B67AF8C6A011EAA70D183FC4F9AE02.roa Signing time: Mon 24 Aug 2026 20:40:10 +0000 ROA not before: Mon 24 Aug 2026 20:40:10 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 140906 IP address blocks: 103.153.48.0/23 maxlen: 23 103.153.48.0/24 maxlen: 24 103.153.49.0/24 maxlen: 24 2406:3f40::/32 maxlen: 32 2406:3f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 20:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2391 (0x957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Aug 24 20:40:10 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a8cac29-cce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:da:86:2b:fc:17:44:51:b3:28:e0:2a:be: dd:fe:c9:e7:6d:3f:bd:05:1a:0e:5d:01:b3:39:be: 81:67:40:72:4d:0a:ee:b2:65:45:17:8f:b1:f9:29: 3e:d7:dd:f1:2e:f6:74:06:9e:1b:7f:a4:8a:01:fc: a1:62:ae:bd:c1:f0:ab:e7:32:45:4b:c6:c4:9d:1b: 19:7e:c3:fb:33:0c:f1:2a:91:f6:ee:cb:4f:b8:7c: 38:cd:45:d8:8e:f7:d6:88:b7:a6:62:4b:62:3e:66: ae:38:22:18:28:ba:86:a7:0d:79:28:d0:7b:51:84: 45:39:21:f2:e9:06:4b:c5:f7:85:70:4b:a2:27:a9: d4:ff:d4:cd:23:9e:16:ad:2f:9f:8a:00:1b:4a:f4: 7a:91:fa:2e:79:61:f2:89:57:c8:2b:e9:db:c5:89: 52:7a:40:65:c7:70:44:c9:90:a1:60:cc:96:a4:f4: 5f:ea:4d:6a:b8:81:3a:6d:4a:2e:40:b5:0c:e8:6d: 54:00:a3:86:54:8c:25:20:88:7b:3a:71:e8:8c:4b: c6:1b:39:d0:46:5f:95:6d:ce:eb:2d:2d:05:d5:5a: e7:ac:9e:6e:92:20:c8:4b:80:1c:23:b0:51:c3:2e: f1:8f:4e:9a:6e:ec:3a:a7:cb:9f:c9:85:0b:4c:f4: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C1:C7:D4:C1:0F:F0:EC:F5:0E:D6:51:00:92:4F:46:10:61:D5:F6 X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/05B67AF8C6A011EAA70D183FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.48.0/23 IPv6: 2406:3f40::/32 Signature Algorithm: sha256WithRSAEncryption cc:0d:5c:5a:d5:0e:fe:60:c7:24:9e:8e:f9:1c:de:df:7b:ba: 22:27:14:cc:15:7a:58:6e:af:76:4a:48:a4:9b:cb:44:ea:37: 38:79:d9:24:1d:4b:01:1c:cc:1e:f2:d3:9e:a9:d2:c4:39:98: 8e:56:0b:f4:ae:4c:bd:62:46:1c:96:9e:ae:99:97:6d:ec:d9: 71:65:92:20:2c:86:16:b0:86:a9:e3:62:c1:09:f0:ed:61:7e: 17:70:ae:0d:32:ba:43:84:b7:d7:e7:77:55:f8:9c:4f:eb:a9: 1d:3c:2c:88:8d:23:95:e8:04:44:a2:7f:4a:a7:12:6d:e4:1c: 8f:78:d8:b9:fe:f4:65:91:03:c2:4f:db:9b:de:29:39:dc:ce: c2:80:87:27:c2:39:3e:18:68:d1:31:30:3a:a9:bd:56:83:5c: 5b:7f:3e:34:8f:9d:dd:78:9b:ca:0a:40:76:17:b8:1d:ea:5b: f8:94:8f:90:a0:ac:95:ad:56:14:1b:5c:89:0f:ad:41:74:50: fc:a8:10:25:e7:5f:2f:44:d3:47:b3:2a:2e:e3:08:25:47:bb: 71:d8:1d:7b:9b:04:7f:ab:03:4d:45:73:53:b7:3e:5e:40:2f: ae:00:f7:13:59:8e:b8:f3:2c:5b:1f:37:1a:35:bf:28:7b:ef: 0b:b9:41:f5 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjYwODI0MjA0MDEwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThjYWMyOS1jY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/zahiv8F0RRsyjgKr7d/snnbT+9BRoOXQGzOb6BZ0ByTQrusmVFF4+x+Sk+ 193xLvZ0Bp4bf6SKAfyhYq69wfCr5zJFS8bEnRsZfsP7MwzxKpH27stPuHw4zUXY jvfWiLemYktiPmauOCIYKLqGpw15KNB7UYRFOSHy6QZLxfeFcEuiJ6nU/9TNI54W rS+figAbSvR6kfoueWHyiVfIK+nbxYlSekBlx3BEyZChYMyWpPRf6k1quIE6bUou QLUM6G1UAKOGVIwlIIh7OnHojEvGGznQRl+Vbc7rLS0F1VrnrJ5ukiDIS4AcI7BR wy7xj06abuw6p8ufyYULTPSWSwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJXBx9TB D/Ds9Q7WUQCST0YQYdX2MB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlGODkvNUJFNzQ4NzhDNjlFMTFFQTlCRjhBMzNDQzRGOUFFMDIvMDVCNjdBRjhD NkEwMTFFQUE3MEQxODNGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ5kwMA0EAgACMAcDBQAkBj9AMA0GCSqGSIb3DQEBCwUAA4IBAQDM DVxa1Q7+YMckno75HN7fe7oiJxTMFXpYbq92Skikm8tE6jc4edkkHUsBHMwe8tOe qdLEOZiOVgv0rky9YkYclp6umZdt7NlxZZIgLIYWsIap42LBCfDtYX4XcK4NMrpD hLfX53dV+JxP66kdPCyIjSOV6AREon9KpxJt5ByPeNi5/vRlkQPCT9ub3ik53M7C gIcnwjk+GGjRMTA6qb1Wg1xbfz40j53deJvKCkB2F7gd6lv4lI+QoKyVrVYUG1yJ D61BdFD8qBAl518vRNNHsyou4wglR7tx2B17mwR/qwNNRXNTtz5eQC+uAPcTWY64 8yxbHzcaNb8oe+8LuUH1 -----END CERTIFICATE-----Generated at Mon Oct 5 16:57:13 2026 by rpki-client