$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/70B22B22950D11F0ACB76B28C4F9AE02.roa File: 70B22B22950D11F0ACB76B28C4F9AE02.roa (raw, json) Hash identifier: nxIsBCeH6bZA45blchpSBvwr1vYm3HddIuZtkfvSN2I= Subject key identifier: 76:53:96:2D:39:33:13:BE:A1:60:C8:32:A3:5A:23:7A:87:BB:DB:EA Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 35D7 Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/70B22B22950D11F0ACB76B28C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:40:55 +0000 ROA not before: Fri 02 Oct 2026 15:40:55 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 7594 IP address blocks: 103.136.122.0/24 maxlen: 24 103.136.123.0/24 maxlen: 24 103.195.14.0/24 maxlen: 24 103.195.15.0/24 maxlen: 24 203.176.158.0/24 maxlen: 24 203.176.159.0/24 maxlen: 24 2404:8e80:2::/48 maxlen: 48 2404:8e80:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 15:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13783 (0x35d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: Oct 2 15:40:55 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abfd087-5b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:c5:c1:6b:41:4b:91:8a:be:91:59:fa:b7: 43:4c:0d:ee:9b:f2:80:c2:8b:83:58:ac:e3:7d:c3: 06:2c:0b:df:54:59:9b:99:e5:1d:1e:19:01:58:be: 62:a8:5c:f2:bf:d5:1a:d1:ed:5b:73:38:45:12:54: 1f:8a:80:d9:5e:6a:f6:62:f5:47:ff:51:62:f8:3f: 1b:1f:00:10:51:6d:cd:f3:5e:37:39:c7:ce:c2:e6: af:15:3d:b4:8a:93:10:50:74:e6:dd:ac:6a:89:67: cd:a8:1a:43:b2:15:81:85:3e:c5:32:35:46:19:a6: 0d:fc:e0:87:5a:b9:f4:92:1f:e6:37:1a:fd:04:85: 68:e5:60:bd:c3:93:0b:09:d2:ff:c5:01:77:23:0b: 85:94:fd:01:80:34:72:9b:15:90:d2:f2:c4:e3:a0: 0e:ed:79:b3:69:e9:dd:78:0c:c6:72:85:9b:86:c6: 12:b3:db:3f:f2:66:ad:0b:da:5d:af:d3:4a:d8:ce: 6b:54:12:e1:52:83:1d:07:80:c8:68:e5:db:b8:d8: 95:f3:3b:d3:a8:25:a6:5a:ff:94:ad:29:9e:98:14: 0c:54:b8:94:ef:79:06:38:3f:55:c3:19:1c:f0:b6: b0:c3:5f:31:85:33:7c:77:ff:17:f5:70:a1:19:5c: 23:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:53:96:2D:39:33:13:BE:A1:60:C8:32:A3:5A:23:7A:87:BB:DB:EA X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/70B22B22950D11F0ACB76B28C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.122.0/23 103.195.14.0/23 203.176.158.0/23 IPv6: 2404:8e80:2::/47 Signature Algorithm: sha256WithRSAEncryption bf:d9:c4:0f:0c:77:46:59:db:80:95:e0:27:de:c0:42:7d:3f: 20:90:e5:4e:b3:41:97:06:d9:99:57:f4:b0:38:27:19:fd:86: f5:a8:f0:37:91:c6:96:25:e9:8e:2c:2d:9f:99:cb:ff:95:74: 08:9e:c9:29:54:25:b8:0e:f4:4b:dd:f5:95:ff:59:ac:04:0d: b4:32:09:a2:a2:15:4a:96:b4:86:9c:31:03:3f:84:e1:14:5b: 88:02:8e:98:83:11:3a:e7:df:ca:03:ab:ac:e0:f9:85:22:3b: fd:38:ec:f2:f3:e3:62:a9:ff:25:ce:c6:a8:3a:67:10:eb:76: cb:8c:33:5c:44:8e:99:e7:a7:0a:d4:48:4c:49:7c:42:bf:7a: 20:76:1c:16:54:93:05:39:bc:05:e6:3c:9a:dc:93:2b:28:6e: 35:31:b1:cb:ec:a6:99:5a:3a:0b:b5:90:fd:9c:92:93:aa:66: cb:5c:bb:a8:10:e9:7a:9b:ef:1d:fb:b1:d7:73:ff:c2:15:08: a7:2b:19:f8:58:2f:ea:77:74:8a:b2:08:89:e1:f9:cf:4a:96: 21:61:0b:be:6a:a0:c3:c3:c2:eb:4c:63:d9:c6:a6:c0:3d:0c: 1b:95:50:26:3c:ab:e0:83:6f:65:68:c1:fa:d8:47:cc:fa:0b: 14:dd:97:48 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICNdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjYxMDAyMTU0MDU1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmZDA4Ny01YjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzfFwWtBS5GKvpFZ+rdDTA3um/KAwouDWKzjfcMGLAvfVFmbmeUdHhkBWL5i qFzyv9Ua0e1bczhFElQfioDZXmr2YvVH/1Fi+D8bHwAQUW3N8143OcfOwuavFT20 ipMQUHTm3axqiWfNqBpDshWBhT7FMjVGGaYN/OCHWrn0kh/mNxr9BIVo5WC9w5ML CdL/xQF3IwuFlP0BgDRymxWQ0vLE46AO7XmzaendeAzGcoWbhsYSs9s/8matC9pd r9NK2M5rVBLhUoMdB4DIaOXbuNiV8zvTqCWmWv+UrSmemBQMVLiU73kGOD9Vwxkc 8Laww18xhTN8d/8X9XChGVwjeQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFHZTli05 MxO+oWDIMqNaI3qHu9vqMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVFQjgvOEUwRjJDQjYxREExMTFFMkI5MDZCQzkzMDhCMDJDRDIvNzBCMjJCMjI5 NTBEMTFGMEFDQjc2QjI4QzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQBZ4h6AwQBZ8MOAwQBy7CeMA8EAgACMAkDBwEkBI6AAAIwDQYJKoZI hvcNAQELBQADggEBAL/ZxA8Md0ZZ24CV4CfewEJ9PyCQ5U6zQZcG2ZlX9LA4Jxn9 hvWo8DeRxpYl6Y4sLZ+Zy/+VdAieySlUJbgO9Evd9ZX/WawEDbQyCaKiFUqWtIac MQM/hOEUW4gCjpiDETrn38oDq6zg+YUiO/047PLz42Kp/yXOxqg6ZxDrdsuMM1xE jpnnpwrUSExJfEK/eiB2HBZUkwU5vAXmPJrckysobjUxscvspplaOgu1kP2ckpOq Zstcu6gQ6Xqb7x37sddz/8IVCKcrGfhYL+p3dIqyCInh+c9KliFhC75qoMPDwutM Y9nGpsA9DBuVUCY8q+CDb2VowfrYR8z6CxTdl0g= -----END CERTIFICATE-----Generated at Mon Oct 5 16:10:41 2026 by rpki-client