$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/7D0F1974A5CF11F19A324F273411F970.roa File: 7D0F1974A5CF11F19A324F273411F970.roa (raw, json) Hash identifier: o8Wx36hTPMpR2tmvCxvAKJuYuXt4ThZAU0/8KVd9Sn4= Subject key identifier: C6:C8:65:6A:35:D5:9E:3B:C3:AF:51:8A:26:B3:37:26:A2:D8:63:12 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0C3D Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/7D0F1974A5CF11F19A324F273411F970.roa Signing time: Tue 01 Sep 2026 06:36:40 +0000 ROA not before: Tue 01 Sep 2026 06:36:40 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 4637 IP address blocks: 103.231.38.0/24 maxlen: 24 103.231.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 18:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Sep 1 06:36:40 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a967278-e317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:18:c1:e0:ce:75:1b:f5:c4:1b:38:a6:a6:6a: a0:91:22:67:20:a8:df:7b:6a:ce:6e:19:b5:2e:95: ab:8e:81:36:b7:80:f4:5a:8c:66:3b:b9:06:6f:31: 09:7d:db:86:1a:f3:49:6b:db:58:b2:77:8e:ca:f5: ee:44:c1:f7:d2:96:97:15:22:41:ff:02:39:3c:84: 8a:35:ec:8d:f7:3e:7e:1a:46:28:24:27:ef:a2:d2: 4d:f9:87:44:a3:51:70:bf:f7:09:4d:2a:73:bb:05: 48:5e:83:82:53:3d:ed:2f:0f:66:e8:d6:c5:77:63: 57:df:bd:9e:b7:c5:c9:4d:c1:9e:8e:e0:35:8f:76: 77:f0:bd:8d:f6:ba:50:8f:b1:f3:d8:cb:0b:37:f3: 11:eb:65:6c:7b:78:2b:0b:30:d5:83:98:a4:76:a2: f7:06:d4:42:66:e4:f9:10:08:27:21:91:f6:78:9b: 8d:c1:41:91:d1:cf:6e:63:c2:e3:36:a9:a3:9d:5d: 2e:4c:5b:a4:c6:f7:5c:1f:e7:b7:15:2f:3d:77:9a: 48:dd:48:bb:d3:de:41:9a:ae:14:89:46:aa:a5:94: 28:54:6c:01:ee:88:f8:49:3e:4a:58:87:ab:bb:05: 12:8a:b3:00:1c:cb:39:16:72:5c:6f:f5:a5:ce:f0: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C8:65:6A:35:D5:9E:3B:C3:AF:51:8A:26:B3:37:26:A2:D8:63:12 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/7D0F1974A5CF11F19A324F273411F970.roa sbgp-ipAddrBlock: critical IPv4: 103.231.38.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:5b:16:36:6d:ea:dc:da:05:49:cf:61:12:a9:cf:a5:10:03: 7f:e4:40:27:ac:5a:95:69:75:31:9a:a3:82:5b:c9:ad:69:08: 0b:19:d2:ff:d0:47:f6:9d:6a:93:62:c6:b8:a3:43:4e:a9:95: 8c:1a:c5:fe:71:00:ba:1c:94:3a:b5:86:03:95:f9:a7:55:c1: 48:8d:20:4e:7a:21:eb:1c:c5:a2:33:98:aa:54:38:10:4e:da: b8:c4:42:ca:3d:d0:f8:64:ce:ca:ce:e8:e6:d7:e5:69:d4:a5: d9:6c:80:f3:de:08:96:dc:8d:8d:c2:f8:34:51:61:69:78:2c: 40:9f:e4:63:91:7b:7c:5c:cb:bb:5e:1f:4b:a2:28:c2:91:af: 45:aa:f9:a2:34:c3:2c:e7:1e:84:27:7c:01:2c:65:4d:50:3c: 82:56:6a:bd:24:cb:02:9d:51:f7:74:24:c8:bf:57:77:d7:c2: 11:86:f8:44:3f:97:75:b5:a5:2f:67:0a:c8:03:d4:7e:48:ad: 47:d6:b8:ef:bf:0a:f6:61:e2:10:80:d6:16:15:95:3c:c1:69: d3:dc:82:27:ee:db:40:51:7d:e1:46:5f:ce:3c:ac:9b:19:13: f1:b5:9f:70:4d:95:01:51:84:d3:9d:de:f1:3d:6a:39:55:35: f8:f0:f7:ba -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjYwOTAxMDYzNjQwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2NzI3OC1lMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlxjB4M51G/XEGzimpmqgkSJnIKjfe2rObhm1LpWrjoE2t4D0WoxmO7kGbzEJ fduGGvNJa9tYsneOyvXuRMH30paXFSJB/wI5PISKNeyN9z5+GkYoJCfvotJN+YdE o1Fwv/cJTSpzuwVIXoOCUz3tLw9m6NbFd2NX372et8XJTcGejuA1j3Z38L2N9rpQ j7Hz2MsLN/MR62Vse3grCzDVg5ikdqL3BtRCZuT5EAgnIZH2eJuNwUGR0c9uY8Lj NqmjnV0uTFukxvdcH+e3FS89d5pI3Ui7095Bmq4UiUaqpZQoVGwB7oj4ST5KWIer uwUSirMAHMs5FnJcb/WlzvDEIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMbIZWo1 1Z47w69RiiazNyai2GMSMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJCNUIvMjlERTc0OEE0MTlFMTFFQUI4NjZFNzdBQzRGOUFFMDIvN0QwRjE5NzRB NUNGMTFGMTlBMzI0RjI3MzQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+cmMA0GCSqGSIb3DQEBCwUAA4IBAQAqWxY2berc2gVJz2ESqc+l EAN/5EAnrFqVaXUxmqOCW8mtaQgLGdL/0Ef2nWqTYsa4o0NOqZWMGsX+cQC6HJQ6 tYYDlfmnVcFIjSBOeiHrHMWiM5iqVDgQTtq4xELKPdD4ZM7Kzujm1+Vp1KXZbIDz 3giW3I2Nwvg0UWFpeCxAn+RjkXt8XMu7Xh9LoijCka9FqvmiNMMs5x6EJ3wBLGVN UDyCVmq9JMsCnVH3dCTIv1d318IRhvhEP5d1taUvZwrIA9R+SK1H1rjvvwr2YeIQ gNYWFZU8wWnT3IIn7ttAUX3hRl/OPKybGRPxtZ9wTZUBUYTTnd7xPWo5VTX48Pe6 -----END CERTIFICATE-----Generated at Wed Sep 9 01:59:28 2026 by rpki-client