$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/9D1CF15E90EE11E8960E8480C4F9AE02.roa File: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (raw, json) Hash identifier: ur4N/Ym7730gLMcmvZVXxmLVxzyESrZWQJd4vnZemkQ= Subject key identifier: D2:BD:11:7D:EF:7F:E5:D7:01:8A:AB:81:1C:31:8D:87:9A:9C:66:D9 Certificate issuer: /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014 Certificate serial: 14A0 Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/9D1CF15E90EE11E8960E8480C4F9AE02.roa Signing time: Tue 18 Aug 2026 04:25:42 +0000 ROA not before: Tue 18 Aug 2026 04:25:42 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 135375 IP address blocks: 103.63.190.0/24 maxlen: 24 103.118.44.0/22 maxlen: 22 103.118.44.0/24 maxlen: 24 103.118.45.0/24 maxlen: 24 103.118.46.0/24 maxlen: 24 103.118.47.0/24 maxlen: 24 103.216.48.0/22 maxlen: 22 103.216.48.0/24 maxlen: 24 103.216.49.0/24 maxlen: 24 103.216.50.0/24 maxlen: 24 103.216.51.0/24 maxlen: 24 203.95.196.0/22 maxlen: 22 203.95.196.0/24 maxlen: 24 203.95.197.0/24 maxlen: 24 203.95.198.0/24 maxlen: 24 203.95.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5280 (0x14a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014 Validity Not Before: Aug 18 04:25:42 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a83dec5-65a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:ca:92:08:3f:09:6e:b9:f5:86:24:44:3d: 41:cb:c7:be:79:22:33:31:31:7d:61:14:99:bc:61: 75:7a:e1:ec:c8:55:5b:da:e9:79:a8:ff:ca:5f:e1: eb:46:0f:e2:13:ac:85:ab:6c:9a:b2:69:81:ee:39: 66:fc:b5:46:5e:4b:2f:62:ee:87:2c:a8:8b:43:df: 55:e5:e3:77:e2:6c:9c:4e:b6:05:b3:43:65:a8:dd: 87:b0:17:2e:a4:73:18:1d:0d:47:36:b1:58:30:77: c1:87:72:a7:56:84:f5:f1:2f:f3:5a:2f:1c:5d:7e: 92:7d:0f:fb:90:bb:ab:aa:21:dc:8f:86:14:0b:5b: 49:6f:83:66:48:71:4d:cf:37:c3:ee:2e:a4:46:c7: 4c:4e:8c:54:aa:44:63:7c:69:03:2b:14:0d:49:75: 63:47:cc:4e:57:ce:1a:48:2f:6c:c8:38:a9:2f:45: df:e8:96:82:6e:31:4c:52:5e:9b:aa:14:ec:9c:98: bf:33:56:fb:08:01:27:55:6b:67:84:fc:9c:1e:21: 93:69:c3:42:80:59:92:7d:e4:e1:04:91:a4:f2:43: ea:0e:99:3f:70:95:c0:76:19:e5:b7:8b:e8:d7:06: e8:2a:24:8a:76:3e:a0:82:dc:d8:f6:d7:4f:14:70: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BD:11:7D:EF:7F:E5:D7:01:8A:AB:81:1C:31:8D:87:9A:9C:66:D9 X509v3 Authority Key Identifier: keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/9D1CF15E90EE11E8960E8480C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.63.190.0/24 103.118.44.0/22 103.216.48.0/22 203.95.196.0/22 Signature Algorithm: sha256WithRSAEncryption 02:d1:08:b7:c9:20:a4:1e:4e:48:fa:ec:e5:a0:df:52:2c:b4: e8:58:e6:f3:4c:7c:b7:83:66:f8:43:b6:e7:c8:ce:09:14:45: c7:9c:96:06:4c:6e:c3:66:0a:0a:91:ec:a2:18:91:89:27:c6: 8b:c7:d0:37:8f:d9:44:b8:3e:23:2c:6d:c5:eb:07:71:49:19: 29:07:ef:4c:fd:2d:69:59:5c:f0:2e:47:9f:04:af:e0:26:97: cf:14:cc:4f:1e:f6:39:3b:a1:bc:64:8d:90:3c:80:b5:db:a5: d3:a6:d4:88:d3:8e:72:a6:0a:d0:82:cd:45:e7:4e:4a:a5:f5: 8c:47:65:71:47:bd:ba:c5:bf:99:73:23:2b:56:ac:a9:63:7f: 4a:78:2c:84:ca:11:a8:da:40:6e:7d:47:5c:84:ee:41:3b:a2: 1b:8e:ab:7f:0d:cf:d4:a0:c8:74:84:6f:48:7e:a1:33:17:fb: dc:9e:7a:64:34:70:96:0f:59:6f:e3:db:a3:70:e0:2f:d4:79: d4:81:93:21:1d:21:7a:9f:92:6c:cf:71:d7:f7:ee:5b:91:d3: 4a:5b:bb:18:50:35:fc:5f:c7:a7:df:18:92:e6:8b:cb:25:a7: d0:d4:51:72:25:86:0d:62:70:ac:65:dd:20:3c:43:0a:d9:20: 47:db:cb:4d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICFKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzkxMTAvBgNVBAUTKEExNDlFN0ZENEQ3OTA2RkMxQTYzNDEyOTg2NTVEQTgx ODVGMjkwMTQwHhcNMjYwODE4MDQyNTQyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgzZGVjNS02NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywPKkgg/CW659YYkRD1By8e+eSIzMTF9YRSZvGF1euHsyFVb2ul5qP/KX+Hr Rg/iE6yFq2yasmmB7jlm/LVGXksvYu6HLKiLQ99V5eN34mycTrYFs0NlqN2HsBcu pHMYHQ1HNrFYMHfBh3KnVoT18S/zWi8cXX6SfQ/7kLurqiHcj4YUC1tJb4NmSHFN zzfD7i6kRsdMToxUqkRjfGkDKxQNSXVjR8xOV84aSC9syDipL0Xf6JaCbjFMUl6b qhTsnJi/M1b7CAEnVWtnhPycHiGTacNCgFmSfeThBJGk8kPqDpk/cJXAdhnlt4vo 1wboKiSKdj6ggtzY9tdPFHBO1QIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFNK9EX3v f+XXAYqrgRwxjYeanGbZMB8GA1UdIwQYMBaAFKFJ5/1NeQb8GmNBKYZV2oGF8pAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzOS9BRUYwNjhCODkw RUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2d2FZMEVwaGxYYWdZWHlr QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Vbm5fVTE1QnZ3YVkwRXBobFhhZ1lYeWtCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY2MzkvQUVGMDY4Qjg5MEVDMTFFODgzQzNENDdCQzRGOUFFMDIvOUQxQ0YxNUU5 MEVFMTFFODk2MEU4NDgwQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAZz++AwQCZ3YsAwQCZ9gwAwQCy1/EMA0GCSqGSIb3DQEBCwUAA4IB AQAC0Qi3ySCkHk5I+uzloN9SLLToWObzTHy3g2b4Q7bnyM4JFEXHnJYGTG7DZgoK keyiGJGJJ8aLx9A3j9lEuD4jLG3F6wdxSRkpB+9M/S1pWVzwLkefBK/gJpfPFMxP HvY5O6G8ZI2QPIC126XTptSI045ypgrQgs1F505KpfWMR2VxR726xb+ZcyMrVqyp Y39KeCyEyhGo2kBufUdchO5BO6Ibjqt/Dc/UoMh0hG9IfqEzF/vcnnpkNHCWD1lv 49ujcOAv1HnUgZMhHSF6n5Jsz3HX9+5bkdNKW7sYUDX8X8en3xiS5ovLJafQ1FFy JYYNYnCsZd0gPEMK2SBH28tN -----END CERTIFICATE-----Generated at Wed Sep 16 15:36:54 2026 by rpki-client