$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/0EF4DA3A38D011EC936A8C4FC4F9AE02.roa File: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (raw, json) Hash identifier: +ojUNJ+0LXpRUq2YvOJC2a3HW9his1KdABhw/922pzI= Subject key identifier: CD:E1:6E:4A:96:75:25:B1:7B:B7:F6:E4:71:39:1E:F2:5D:3F:25:11 Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Certificate serial: 063A Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/0EF4DA3A38D011EC936A8C4FC4F9AE02.roa Signing time: Thu 20 Aug 2026 22:44:48 +0000 ROA not before: Thu 20 Aug 2026 22:44:48 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 140499 IP address blocks: 103.169.64.0/24 maxlen: 24 2001:df6:ec80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 22:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Validity Not Before: Aug 20 22:44:48 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a878360-68a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:09:a9:8e:60:46:0f:59:9b:a2:86:d4:54: 9e:2a:a8:40:4f:2a:06:ca:04:46:6c:e5:c2:72:ce: 3c:75:81:4c:53:dc:ab:56:d1:f7:41:19:92:63:68: 13:ad:e2:06:c1:81:88:a0:03:99:db:00:56:67:40: 46:d0:84:c9:bf:29:76:79:44:9a:18:55:3c:8e:3f: 7a:51:26:e0:38:25:02:0e:37:fa:2f:4e:36:c7:88: 5c:29:ef:20:5b:97:ac:b7:bb:8c:ca:7c:a0:3d:c7: cf:92:10:f4:83:62:eb:2a:ed:ac:06:c9:9e:cb:ca: 9d:48:dd:dc:a3:45:c8:ad:3a:7b:ae:81:aa:c0:d4: 1e:28:e8:5f:2d:0d:1d:65:5a:7f:c4:45:9e:a8:c3: 0a:5b:a2:06:b2:1f:4a:ef:67:7e:61:6b:fb:3c:0a: c1:c9:55:d1:fa:f1:a4:58:50:a8:76:4b:b0:6a:6d: 69:8e:6c:4d:47:17:f4:a8:6f:bf:bb:f5:5b:ec:22: 80:1a:73:00:4c:f1:16:5f:53:67:06:c0:64:00:4a: b7:c7:d6:ec:71:99:df:28:31:19:47:bd:f1:15:82: fb:50:05:40:12:ed:8c:ec:0c:e4:be:0e:87:10:8b: 25:49:e0:37:6f:03:ef:ed:1c:29:b5:1b:f7:60:87: 8d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E1:6E:4A:96:75:25:B1:7B:B7:F6:E4:71:39:1E:F2:5D:3F:25:11 X509v3 Authority Key Identifier: keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/0EF4DA3A38D011EC936A8C4FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.169.64.0/24 IPv6: 2001:df6:ec80::/48 Signature Algorithm: sha256WithRSAEncryption 47:29:df:2f:7c:a2:49:2d:ff:25:76:ef:c1:c2:58:77:90:f3: ea:0d:4c:ce:4d:ba:91:af:df:1d:85:93:3d:cc:f1:3e:da:65: 1a:0c:3d:e1:04:cf:88:f0:02:ba:45:66:6f:7a:1a:92:43:73: f5:19:02:5b:b9:36:41:25:01:33:b2:ec:1b:b2:d9:36:1f:2e: 31:70:3c:07:8d:19:08:36:1a:f1:3d:64:78:fb:11:43:02:16: dd:c4:82:06:9c:38:23:1b:76:f4:52:ee:36:f3:18:d7:4c:1b: 8e:a4:8a:f9:8e:06:2b:7d:f8:98:77:fb:31:80:2c:21:f8:bd: cc:74:b0:45:3c:66:3a:f5:83:21:21:18:c0:fb:fe:0f:cf:96: 6f:84:63:aa:8a:d7:82:01:f7:58:7b:aa:74:07:41:54:b4:0b: 33:9d:ca:32:4f:f1:9a:8c:c5:26:03:f3:75:fc:ed:c5:11:19: 59:97:92:00:d1:a1:90:aa:4d:ac:a6:80:f7:89:b3:83:21:65: 12:df:77:68:a4:86:d0:1c:69:ed:df:4f:0c:57:99:e2:9b:96: 1d:11:3a:46:30:f4:fc:ee:48:f1:80:21:c3:21:24:93:31:af: f6:69:de:ec:ef:00:60:a5:81:73:42:df:8f:f2:09:b9:ff:80: 91:83:0d:a9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1 MUQ4MTExMzQwHhcNMjYwODIwMjI0NDQ4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3ODM2MC02OGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWkJqY5gRg9Zm6KG1FSeKqhATyoGygRGbOXCcs48dYFMU9yrVtH3QRmSY2gT reIGwYGIoAOZ2wBWZ0BG0ITJvyl2eUSaGFU8jj96USbgOCUCDjf6L042x4hcKe8g W5est7uMynygPcfPkhD0g2LrKu2sBsmey8qdSN3co0XIrTp7roGqwNQeKOhfLQ0d ZVp/xEWeqMMKW6IGsh9K72d+YWv7PArByVXR+vGkWFCodkuwam1pjmxNRxf0qG+/ u/Vb7CKAGnMATPEWX1NnBsBkAEq3x9bscZnfKDEZR73xFYL7UAVAEu2M7Azkvg6H EIslSeA3bwPv7RwptRv3YIeNMwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFM3hbkqW dSWxe7f25HE5HvJdPyURMB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1 QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjdDMjEvM0JDRDAwNzRGNUFFMTFFQjhFM0VGQjMzQzRGOUFFMDIvMEVGNERBM0Ez OEQwMTFFQzkzNkE4QzRGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ6lAMA8EAgACMAkDBwAgAQ327IAwDQYJKoZIhvcNAQELBQADggEB AEcp3y98okkt/yV278HCWHeQ8+oNTM5NupGv3x2Fkz3M8T7aZRoMPeEEz4jwArpF Zm96GpJDc/UZAlu5NkElATOy7Buy2TYfLjFwPAeNGQg2GvE9ZHj7EUMCFt3Eggac OCMbdvRS7jbzGNdMG46kivmOBit9+Jh3+zGALCH4vcx0sEU8Zjr1gyEhGMD7/g/P lm+EY6qK14IB91h7qnQHQVS0CzOdyjJP8ZqMxSYD83X87cURGVmXkgDRoZCqTaym gPeJs4MhZRLfd2ikhtAcae3fTwxXmeKblh0ROkYw9PzuSPGAIcMhJJMxr/Zp3uzv AGClgXNC34/yCbn/gJGDDak= -----END CERTIFICATE-----Generated at Sat Sep 5 09:25:45 2026 by rpki-client