$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa File: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (raw, json) Hash identifier: /1aH28uRj5sCLfB+J4QIfQMHYuWp9lasDemp4Sum7JI= Subject key identifier: E2:6D:E8:31:DD:87:56:55:06:49:62:B8:A4:D9:53:A7:EB:10:24:00 Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Certificate serial: 0266 Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa Signing time: Sat 29 Aug 2026 02:53:33 +0000 ROA not before: Sat 29 Aug 2026 02:53:33 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 55933 IP address blocks: 103.245.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 614 (0x266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Validity Not Before: Aug 29 02:53:33 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9249ad-34cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:34:6e:e2:59:d5:1e:04:fb:20:88:7e:72: aa:8f:ef:84:d3:9b:49:d2:d5:6d:24:29:ff:c0:ea: 99:57:97:1c:fe:1b:d0:41:67:76:fb:a1:2f:97:9d: cf:62:7d:19:87:c9:20:6c:02:e3:32:a8:37:fd:55: 5e:8e:6a:56:19:ee:9c:aa:a4:5e:bb:53:9d:aa:bd: 49:4e:95:bd:5c:79:a9:b2:fb:fe:95:39:e7:c7:ec: fe:64:04:07:62:14:d8:97:f9:67:58:f2:7e:02:ea: 2b:c0:de:bc:1b:c0:e5:1f:e2:8c:ed:bc:74:6d:b6: 3a:50:52:1f:83:06:a0:7e:1a:a4:58:87:d4:a1:04: 45:a0:fa:df:c4:35:1d:87:2c:6d:ed:5d:b6:14:ee: 39:60:ab:c8:b4:92:9e:3a:29:19:63:3d:d5:cc:bc: 53:df:9b:1a:7b:43:46:b3:46:07:9a:6b:37:12:f1: 01:5e:57:3f:81:9b:b8:e4:dc:9c:0e:4c:ae:87:e2: 51:31:a5:2b:c1:1e:55:15:d8:dd:29:31:ae:62:f8: f7:01:a6:28:93:22:a1:87:60:e3:47:d8:b3:ef:14: b5:a6:29:50:15:98:cf:cf:c0:e3:1e:77:32:63:06: 39:e0:d3:88:f0:88:1c:0e:2f:54:23:99:fa:df:1b: 87:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6D:E8:31:DD:87:56:55:06:49:62:B8:A4:D9:53:A7:EB:10:24:00 X509v3 Authority Key Identifier: keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.245.24.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:a2:91:31:35:42:96:ba:9f:3d:6c:31:7a:f7:0f:63:f0:b0: 4d:35:f3:97:86:7e:3e:af:bb:23:9c:e0:53:d2:60:31:8c:5e: 35:6a:5d:6a:df:a9:5e:79:57:b0:1a:86:5f:04:a2:46:87:28: cb:a0:0a:f7:cf:c5:a6:7e:c5:b4:3e:c5:58:53:a3:76:17:41: 11:e5:b0:40:3c:e7:d5:72:92:37:34:ef:0c:ef:49:e5:2d:99: cc:be:e9:13:9a:c7:98:e4:ce:59:89:20:0b:c7:00:d9:09:6d: e9:6f:ce:c2:88:06:a0:89:d3:d1:b4:cf:95:89:ca:22:29:94: f6:63:8c:2a:f6:42:34:df:61:21:0a:35:d1:77:b9:13:34:e7: 93:0e:50:00:a5:fc:f6:2d:1f:ca:46:8e:2c:67:0b:52:39:e6: 16:77:ac:30:23:fb:8d:2f:50:da:ce:66:ec:1e:46:5f:60:75: a8:e5:ec:77:81:ae:c5:ea:5c:53:b1:1b:e6:3e:1a:55:27:b2: 5d:c7:84:50:f5:5a:c3:de:90:04:b4:7a:fd:92:80:6d:db:1f: 00:8e:95:18:e8:da:97:3b:8a:0c:52:54:a5:9e:93:fc:13:16: c4:89:92:9b:ba:08:74:e5:15:26:73:74:48:f7:65:a9:7c:e6: a8:f8:e3:59 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOTkxMTAvBgNVBAUTKEY5QUE2MzZCNUMzRTMwQzdBMEJBOTc0MzAxNUI1QjEy MTA0Q0I3QTgwHhcNMjYwODI5MDI1MzMzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkyNDlhZC0zNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2Y0buJZ1R4E+yCIfnKqj++E05tJ0tVtJCn/wOqZV5cc/hvQQWd2+6Evl53P Yn0Zh8kgbALjMqg3/VVejmpWGe6cqqReu1Odqr1JTpW9XHmpsvv+lTnnx+z+ZAQH YhTYl/lnWPJ+AuorwN68G8DlH+KM7bx0bbY6UFIfgwagfhqkWIfUoQRFoPrfxDUd hyxt7V22FO45YKvItJKeOikZYz3VzLxT35sae0NGs0YHmms3EvEBXlc/gZu45Nyc Dkyuh+JRMaUrwR5VFdjdKTGuYvj3AaYokyKhh2DjR9iz7xS1pilQFZjPz8DjHncy YwY54NOI8IgcDi9UI5n63xuHGQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOJt6DHd h1ZVBkliuKTZU6frECQAMB8GA1UdIwQYMBaAFPmqY2tcPjDHoLqXQwFbWxIQTLeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5OS8wMjIxRDdDRTJG NjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1NZWd1cGREQVZ0YkVoQk10 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwOTkvMDIyMUQ3Q0UyRjY3MTFFRTgyNEFEQzU5QzRGOUFFMDIvODA0RkVDODAy RjY3MTFFRUI2RUVDQTVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ/UYMA0GCSqGSIb3DQEBCwUAA4IBAQCKopExNUKWup89bDF69w9j 8LBNNfOXhn4+r7sjnOBT0mAxjF41al1q36leeVewGoZfBKJGhyjLoAr3z8WmfsW0 PsVYU6N2F0ER5bBAPOfVcpI3NO8M70nlLZnMvukTmseY5M5ZiSALxwDZCW3pb87C iAagidPRtM+VicoiKZT2Y4wq9kI032EhCjXRd7kTNOeTDlAApfz2LR/KRo4sZwtS OeYWd6wwI/uNL1DazmbsHkZfYHWo5ex3ga7F6lxTsRvmPhpVJ7Jdx4RQ9VrD3pAE tHr9koBt2x8AjpUY6NqXO4oMUlSlnpP8ExbEiZKbugh05RUmc3RI92WpfOao+ONZ -----END CERTIFICATE-----Generated at Sat Sep 19 04:03:04 2026 by rpki-client