$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/312DC5B8405E11E7A28FCE45C4F9AE02.roa File: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (raw, json) Hash identifier: ln0833W0iILvJ6BBKmF88xoaRVorowRqdwy+YQy3chA= Subject key identifier: EE:88:E9:A4:78:94:07:13:03:AD:EB:4B:D2:15:39:D6:9A:15:18:18 Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 1B6A Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/312DC5B8405E11E7A28FCE45C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:33:09 +0000 ROA not before: Wed 30 Sep 2026 16:33:09 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134544 IP address blocks: 45.126.0.0/24 maxlen: 24 45.126.1.0/24 maxlen: 24 103.35.252.0/24 maxlen: 24 103.35.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7018 (0x1b6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E, serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: Sep 30 16:33:09 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd39c4-f5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:2e:11:c3:cc:52:f7:84:96:03:c6:99:10: 85:ff:6f:bb:da:c7:33:36:0c:4d:ce:f3:9b:12:f2: 8f:2f:79:92:fe:58:a0:f6:2f:b5:4d:35:ed:fb:54: 10:72:48:04:82:6c:2c:44:4d:ff:27:d8:94:fc:bd: 42:db:22:b8:e6:41:d8:6c:2b:c5:88:a3:0e:23:82: 84:65:63:f7:4e:9f:fa:52:1d:ae:e1:57:a2:e3:c4: 08:60:75:5e:10:57:50:74:e0:a0:39:e2:2d:2b:d1: d6:ef:4b:b5:35:23:27:f9:ea:66:a4:79:a6:fc:c3: 9f:69:f8:34:3f:18:bf:fd:bb:48:75:39:ef:c1:53: 1d:1e:5b:a9:a1:0e:a1:7d:d0:72:02:4c:28:db:07: 52:2d:e0:fd:ab:b4:e3:15:24:78:74:67:5c:d8:f7: 87:12:d8:40:fd:a9:30:ed:24:42:d8:be:13:48:0a: b3:fa:19:99:08:ff:53:e4:09:60:9a:23:58:f7:53: 41:36:64:56:95:1d:25:3c:f0:41:7f:29:e6:0a:3d: 66:4c:1f:ca:3c:36:48:43:8a:66:5c:1e:50:24:91: 48:1a:67:3c:2e:a7:3e:7a:8a:fc:1d:44:67:3e:2c: 56:5c:c4:dc:a2:d9:ba:27:96:d5:3e:81:f8:02:f0: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:88:E9:A4:78:94:07:13:03:AD:EB:4B:D2:15:39:D6:9A:15:18:18 X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/312DC5B8405E11E7A28FCE45C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.126.0.0/23 103.35.252.0/23 Signature Algorithm: sha256WithRSAEncryption a9:a8:92:02:5f:2a:8d:52:bd:e9:af:58:26:3c:68:c1:33:eb: ee:d8:65:26:ea:2d:d0:0c:94:f5:ad:fc:21:7a:1c:af:c5:01: 91:e7:dd:a8:4f:16:9a:37:81:7e:9e:f9:1d:7d:3d:4f:be:ec: d7:53:f4:1c:f1:1b:8d:9f:98:6a:2a:86:1f:c3:28:c4:6d:b3: 07:e7:17:5a:58:f9:09:61:0d:10:2e:de:28:a4:1f:75:98:79: 80:d6:61:29:db:b6:49:ac:f2:7a:95:c2:5e:de:d3:9e:18:dd: 26:ec:4b:d7:7f:e7:8b:12:11:07:67:74:de:7e:47:e8:85:0f: 09:2a:96:e2:94:2e:ec:e8:ea:83:04:ae:fe:ba:80:18:fb:d9: 90:11:0c:4b:45:71:d6:71:24:45:37:8f:d4:35:f1:91:10:ce: d1:fe:65:bc:fa:ae:a3:0b:36:bf:70:99:e2:ee:4d:1b:bf:61: 59:cb:6f:02:df:f8:7e:8c:03:57:fd:68:4e:be:a9:a2:12:7c: 68:f5:58:85:7a:02:35:73:b3:33:1d:db:89:6a:e4:a5:25:01: 47:f3:59:c1:bc:1e:66:79:0b:ff:9e:53:75:09:7e:e3:ba:91: 94:b6:9a:ce:01:f8:97:6a:2a:cb:56:95:87:a4:83:53:9d:0b: e1:a3:46:c6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICG2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjYwOTMwMTYzMzA5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzljNC1mNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+AuEcPMUveElgPGmRCF/2+72sczNgxNzvObEvKPL3mS/lig9i+1TTXt+1QQ ckgEgmwsRE3/J9iU/L1C2yK45kHYbCvFiKMOI4KEZWP3Tp/6Uh2u4Vei48QIYHVe EFdQdOCgOeItK9HW70u1NSMn+epmpHmm/MOfafg0Pxi//btIdTnvwVMdHlupoQ6h fdByAkwo2wdSLeD9q7TjFSR4dGdc2PeHEthA/akw7SRC2L4TSAqz+hmZCP9T5Alg miNY91NBNmRWlR0lPPBBfynmCj1mTB/KPDZIQ4pmXB5QJJFIGmc8Lqc+eor8HURn PixWXMTcotm6J5bVPoH4AvCpZQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFO6I6aR4 lAcTA63rS9IVOdaaFRgYMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY0NEUvRTQzQjZFNEE0MDVEMTFFN0IwMUJBMTQ1QzRGOUFFMDIvMzEyREM1Qjg0 MDVFMTFFN0EyOEZDRTQ1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBLX4AAwQBZyP8MA0GCSqGSIb3DQEBCwUAA4IBAQCpqJICXyqNUr3p r1gmPGjBM+vu2GUm6i3QDJT1rfwhehyvxQGR592oTxaaN4F+nvkdfT1PvuzXU/Qc 8RuNn5hqKoYfwyjEbbMH5xdaWPkJYQ0QLt4opB91mHmA1mEp27ZJrPJ6lcJe3tOe GN0m7EvXf+eLEhEHZ3TefkfohQ8JKpbilC7s6OqDBK7+uoAY+9mQEQxLRXHWcSRF N4/UNfGREM7R/mW8+q6jCza/cJni7k0bv2FZy28C3/h+jANX/WhOvqmiEnxo9ViF egI1c7MzHduJauSlJQFH81nBvB5meQv/nlN1CX7jupGUtprOAfiXairLVpWHpINT nQvho0bG -----END CERTIFICATE-----Generated at Sun Oct 4 16:59:15 2026 by rpki-client