$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/6DB93158AB7911F1BECE43F54111F970.roa File: 6DB93158AB7911F1BECE43F54111F970.roa (raw, json) Hash identifier: IRcbgEsi3KJFHU7B78l5Vz4OTToECdQQnAQEosAbwLM= Subject key identifier: 4F:01:63:D2:10:C5:BC:57:D7:F1:F2:6C:00:81:7B:97:78:39:96:29 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0D34 Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/6DB93158AB7911F1BECE43F54111F970.roa Signing time: Mon 26 Oct 2026 10:10:50 +0000 ROA not before: Mon 26 Oct 2026 10:10:50 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 9387 IP address blocks: 103.11.60.0/24 maxlen: 24 113.203.233.0/24 maxlen: 24 113.203.234.0/24 maxlen: 24 113.203.235.0/24 maxlen: 24 113.203.236.0/24 maxlen: 24 113.203.237.0/24 maxlen: 24 113.203.238.0/24 maxlen: 24 113.203.239.0/24 maxlen: 24 113.203.240.0/24 maxlen: 24 180.178.128.0/24 maxlen: 24 180.178.129.0/24 maxlen: 24 180.178.132.0/24 maxlen: 24 180.178.133.0/24 maxlen: 24 180.178.134.0/24 maxlen: 24 180.178.135.0/24 maxlen: 24 180.178.136.0/24 maxlen: 24 180.178.137.0/24 maxlen: 24 180.178.138.0/24 maxlen: 24 180.178.139.0/24 maxlen: 24 180.178.172.0/24 maxlen: 24 180.178.174.0/24 maxlen: 24 180.178.175.0/24 maxlen: 24 2401:4100::/32 maxlen: 32 2401:4100::/33 maxlen: 33 2401:4100:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 10:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3380 (0xd34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Oct 26 10:10:50 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6adf272a-cfee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:d3:b4:21:65:95:c6:9b:06:5a:e7:02:99: 57:f1:33:87:9d:6e:ea:55:54:56:fb:05:ff:e8:fb: 49:cd:b2:f0:97:bc:ea:37:be:86:9b:61:39:cc:05: 16:52:9b:4f:3e:3c:f4:08:b8:ad:4b:14:a3:de:50: a9:35:77:fd:8d:9b:37:f1:9a:d2:cb:9b:bd:d2:ab: 4e:ee:23:ed:f8:20:bb:4c:8d:7a:4a:a4:8c:f2:95: 1a:2b:94:67:13:04:24:90:80:0e:4c:4f:bb:bb:c2: 24:35:cc:ad:5f:54:b0:06:e6:5b:e1:b3:df:bb:6f: 7c:90:c7:cf:cd:32:b0:4d:e9:2f:f1:04:bf:f3:06: 46:c0:ce:d3:1b:0b:e3:a1:4f:08:3f:47:13:c5:ec: 96:68:9d:ed:a4:02:35:51:0d:69:fd:9f:23:e7:47: 38:3f:02:ff:5a:e1:48:d2:3e:ea:73:ee:dc:0b:c9: f5:88:7d:38:f4:d0:e2:28:5a:6e:b5:bc:57:fb:2d: b8:e1:7b:77:83:9a:28:39:63:62:10:24:76:e8:50: 5a:f5:cc:70:1c:8e:26:46:ac:75:32:99:a5:cf:a7: 02:d4:44:e4:35:01:09:01:21:1f:98:a2:dc:67:c4: 13:be:6a:dd:98:b5:7c:db:2e:6b:5f:23:c9:5b:a9: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:01:63:D2:10:C5:BC:57:D7:F1:F2:6C:00:81:7B:97:78:39:96:29 X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/6DB93158AB7911F1BECE43F54111F970.roa sbgp-ipAddrBlock: critical IPv4: 103.11.60.0/24 113.203.233.0-113.203.240.255 180.178.128.0/23 180.178.132.0-180.178.139.255 180.178.172.0/24 180.178.174.0/23 IPv6: 2401:4100::/32 Signature Algorithm: sha256WithRSAEncryption 40:31:68:40:c2:ae:7e:2f:44:10:53:1b:a9:32:fd:86:28:0e: 2b:f1:a3:b0:18:40:9f:1c:37:c4:f5:fb:42:40:9d:49:5b:e0: 43:97:72:ff:95:18:4c:c5:7b:ea:c5:f9:12:a2:06:9a:f0:c6: 2d:1f:84:02:ec:c7:9b:1b:62:a1:02:ac:9d:11:83:bc:3f:49: da:dc:4c:1e:4d:71:74:4e:ff:59:1c:c1:fc:a4:bf:93:d6:1b: 96:6c:1c:91:4f:f1:11:b7:48:97:d0:e6:ed:5e:be:97:ab:96: e8:bf:7f:a1:f9:4a:3f:86:79:44:ab:1f:f7:f9:ec:ec:b0:78: e6:91:7f:13:e9:5c:30:37:79:50:c6:74:a7:08:cf:68:47:16: 63:4d:ba:8e:dc:15:92:7c:57:f7:89:9b:38:54:69:ac:c5:79: 58:77:a1:f1:a0:3a:87:8f:0d:02:75:16:3c:46:a9:4d:2b:0b: ba:d9:d5:ac:44:af:39:8d:55:75:60:7f:c0:8f:6c:bc:d6:33: a3:84:54:69:65:c4:26:5d:43:6b:5a:9b:fd:e7:b0:46:16:f4: 95:f6:12:1d:46:b4:98:ee:84:a0:98:98:7e:9e:a2:41:00:81: b9:1a:54:7d:a7:ee:95:e7:84:99:64:b7:ef:87:ce:41:c0:25: 0b:2c:03:df -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICDTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYxMDI2MTAxMDUwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRmMjcyYS1jZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3jTtCFllcabBlrnAplX8TOHnW7qVVRW+wX/6PtJzbLwl7zqN76Gm2E5zAUW UptPPjz0CLitSxSj3lCpNXf9jZs38ZrSy5u90qtO7iPt+CC7TI16SqSM8pUaK5Rn EwQkkIAOTE+7u8IkNcytX1SwBuZb4bPfu298kMfPzTKwTekv8QS/8wZGwM7TGwvj oU8IP0cTxeyWaJ3tpAI1UQ1p/Z8j50c4PwL/WuFI0j7qc+7cC8n1iH049NDiKFpu tbxX+y244Xt3g5ooOWNiECR26FBa9cxwHI4mRqx1Mpmlz6cC1ETkNQEJASEfmKLc Z8QTvmrdmLV82y5rXyPJW6mPwQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFE8BY9IQ xbxX1/HybACBe5d4OZYpMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY5RTcvNDZBQUQ2QjI5MDQwMTFFQUE2ODhCRTQ1QzRGOUFFMDIvNkRCOTMxNThB Qjc5MTFGMUJFQ0U0M0Y1NDExMUY5NzAucm9hMFwGCCsGAQUFBwEHAQH/BE0wSzA6 BAIAATA0AwQAZws8MAwDBABxy+kDBABxy/ADBAG0soAwDAMEArSyhAMEArSyiAME ALSyrAMEAbSyrjANBAIAAjAHAwUAJAFBADANBgkqhkiG9w0BAQsFAAOCAQEAQDFo QMKufi9EEFMbqTL9higOK/GjsBhAnxw3xPX7QkCdSVvgQ5dy/5UYTMV76sX5EqIG mvDGLR+EAuzHmxtioQKsnRGDvD9J2txMHk1xdE7/WRzB/KS/k9YblmwckU/xEbdI l9Dm7V6+l6uW6L9/oflKP4Z5RKsf9/ns7LB45pF/E+lcMDd5UMZ0pwjPaEcWY026 jtwVknxX94mbOFRprMV5WHeh8aA6h48NAnUWPEapTSsLutnVrESvOY1VdWB/wI9s vNYzo4RUaWXEJl1Da1qb/eewRhb0lfYSHUa0mO6EoJiYfp6iQQCBuRpUfafuleeE mWS374fOQcAlCywD3w== -----END CERTIFICATE-----Generated at Mon Oct 26 19:07:48 2026 by rpki-client