$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/AE41D3E686EF11F19E006003A7EE528E.roa File: AE41D3E686EF11F19E006003A7EE528E.roa (raw, json) Hash identifier: 4pQpk3p6aMXj55Oacbm1qFqGIyP8w+dcV2l2n/cRoBM= Subject key identifier: DB:79:A8:BB:4C:58:8F:7A:54:09:37:3A:0C:20:4A:23:07:71:74:14 Certificate issuer: /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Certificate serial: 206B Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/AE41D3E686EF11F19E006003A7EE528E.roa Signing time: Sun 16 Aug 2026 16:28:52 +0000 ROA not before: Sun 16 Aug 2026 16:28:51 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 38719 IP address blocks: 103.68.164.0/22 maxlen: 22 103.68.164.0/24 maxlen: 24 103.68.165.0/24 maxlen: 24 103.68.166.0/24 maxlen: 24 103.68.167.0/24 maxlen: 24 2400:8240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8299 (0x206b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Validity Not Before: Aug 16 16:28:51 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a81e543-8db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:df:5f:20:25:9a:1a:4d:ea:7e:bb:37:74:36: 03:df:12:5b:09:4d:a1:f1:2a:1f:25:69:82:10:b7: 66:0b:8a:04:11:36:61:0d:96:77:86:b7:a7:fa:e1: 61:92:23:b5:46:ae:10:de:1c:98:e2:f2:6f:70:17: 3c:72:24:60:30:2f:7c:f5:1a:39:c0:3b:6e:32:a5: c5:d8:10:b6:17:53:e1:3a:fe:72:1b:e8:b6:a5:a7: 06:b7:33:0b:12:1a:08:a8:00:43:0f:3c:f7:ed:39: b3:db:ca:bd:e9:d3:5c:fc:a5:e0:b5:3d:c5:f7:2b: 58:ac:db:1b:43:47:14:09:81:66:60:fa:ad:5a:02: 8f:78:19:36:75:b1:e4:85:c7:5a:3f:d2:e6:8c:e1: be:4a:19:f1:d2:bd:40:c7:f6:b0:45:d7:4f:e5:6a: fe:0d:09:15:9c:64:99:45:59:3e:1b:b9:7d:52:ad: 43:4d:b5:12:78:02:81:98:bc:35:36:17:6f:73:e5: 9a:d2:d7:55:02:ea:18:58:fe:16:71:5a:fd:7f:f4: a7:b7:6b:18:25:ea:38:05:ab:9d:f4:53:c3:e9:9b: f2:d0:33:2a:ca:5a:6a:8a:b0:9e:9b:1c:db:66:cf: 57:80:e9:ae:cd:49:d8:62:fe:d6:de:ef:f6:3d:d9: cf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:79:A8:BB:4C:58:8F:7A:54:09:37:3A:0C:20:4A:23:07:71:74:14 X509v3 Authority Key Identifier: keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/AE41D3E686EF11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.68.164.0/22 IPv6: 2400:8240::/32 Signature Algorithm: sha256WithRSAEncryption 52:3b:3d:24:4b:6a:bc:48:0d:f0:09:ec:67:2e:a7:7e:76:42: 56:ce:97:6c:4d:fd:8f:90:fe:c5:9a:d4:3e:d7:c2:d1:5c:e5: a0:cc:22:e0:37:42:c3:d8:08:6a:3e:5d:d5:79:b4:df:d5:ea: 47:69:7e:4f:60:5d:40:8e:d7:66:4d:4a:ed:d3:ab:82:bd:e7: d0:0a:c4:fd:69:47:77:ce:a4:a0:03:5b:e6:b4:cf:7f:b5:0d: d1:20:e5:7a:38:31:94:8f:6e:b5:91:d4:87:fb:24:b3:06:40: cf:fc:81:79:ee:d7:ad:cb:d0:b3:ec:21:14:fc:55:56:3b:2f: 63:35:b8:3e:4b:5f:30:d7:e6:db:1a:e8:56:91:28:85:f9:ab: 8b:da:fe:ca:0a:d2:01:43:ed:a4:23:d6:73:b7:52:a4:63:f8: ff:b7:05:4b:da:b3:00:de:43:c3:fb:8f:b3:be:74:51:89:e1: 01:42:64:b9:77:31:9c:ea:e9:04:10:57:bd:c9:7f:77:a1:e4: 5c:71:bd:75:bf:5a:be:28:49:74:39:1e:f0:6a:07:42:2b:f4: 3d:a3:88:50:76:3d:51:13:38:07:2b:ec:a6:60:25:0d:0b:be: f4:6e:97:a0:47:cc:e3:b1:55:d0:74:70:b4:26:a9:01:75:61: d7:6a:97:c7 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICIGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI0MEIxMTAvBgNVBAUTKDJBNkYxMjA0MTJEODIwRjlGRjI0Q0QwNUQ1RUNGNDlF NjYyRDk5Q0EwHhcNMjYwODE2MTYyODUxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgxZTU0My04ZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5N9fICWaGk3qfrs3dDYD3xJbCU2h8SofJWmCELdmC4oEETZhDZZ3hren+uFh kiO1Rq4Q3hyY4vJvcBc8ciRgMC989Ro5wDtuMqXF2BC2F1PhOv5yG+i2pacGtzML EhoIqABDDzz37Tmz28q96dNc/KXgtT3F9ytYrNsbQ0cUCYFmYPqtWgKPeBk2dbHk hcdaP9LmjOG+Shnx0r1Ax/awRddP5Wr+DQkVnGSZRVk+G7l9Uq1DTbUSeAKBmLw1 Nhdvc+Wa0tdVAuoYWP4WcVr9f/Snt2sYJeo4Baud9FPD6Zvy0DMqylpqirCemxzb Zs9XgOmuzUnYYv7W3u/2PdnPFQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNt5qLtM WI96VAk3OgwgSiMHcXQUMB8GA1UdIwQYMBaAFCpvEgQS2CD5/yTNBdXs9J5mLZnK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjQwQi81QjczNkQ5MjQz MzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQbl9KTTBGMWV6MG5tWXRt Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ttOFNCQkxZSVBuX0pNMEYxZXowbm1ZdG1jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjI0MEIvNUI3MzZEOTI0MzMzMTFFNjk1OUE3ODE1QzRGOUFFMDIvQUU0MUQzRTY4 NkVGMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ0SkMA0EAgACMAcDBQAkAIJAMA0GCSqGSIb3DQEBCwUAA4IBAQBS Oz0kS2q8SA3wCexnLqd+dkJWzpdsTf2PkP7FmtQ+18LRXOWgzCLgN0LD2AhqPl3V ebTf1epHaX5PYF1AjtdmTUrt06uCvefQCsT9aUd3zqSgA1vmtM9/tQ3RIOV6ODGU j261kdSH+ySzBkDP/IF57tety9Cz7CEU/FVWOy9jNbg+S18w1+bbGuhWkSiF+auL 2v7KCtIBQ+2kI9Zzt1KkY/j/twVL2rMA3kPD+4+zvnRRieEBQmS5dzGc6ukEEFe9 yX93oeRccb11v1q+KEl0OR7wagdCK/Q9o4hQdj1REzgHK+ymYCUNC770bpegR8zj sVXQdHC0JqkBdWHXapfH -----END CERTIFICATE-----Generated at Wed Sep 23 18:39:52 2026 by rpki-client