$ rpki-client -vvvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/CA290E34341311EFA3C99F09C4F9AE02.roa File: CA290E34341311EFA3C99F09C4F9AE02.roa (raw, json) Hash identifier: cepvfPk5aRhcV6ifyClz2uGdFwT8xfcOukKpkS9k3FE= Subject key identifier: B4:3C:03:EC:56:C0:1D:31:0C:41:AD:17:CB:C8:99:71:0C:CD:D9:38 Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 090D Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/CA290E34341311EFA3C99F09C4F9AE02.roa Signing time: Wed 16 Sep 2026 20:41:21 +0000 ROA not before: Wed 16 Sep 2026 20:41:21 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 132113 IP address blocks: 103.70.192.0/22 maxlen: 22 103.76.158.0/23 maxlen: 23 2401:5840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: Sep 16 20:41:21 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aaafef1-47eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a1:67:32:c1:52:3f:f2:d6:79:1c:47:2e:5c: 5d:64:e9:1a:d5:2b:4a:f7:90:27:69:2f:5e:b7:47: a0:1b:e0:4c:67:d0:68:ae:f8:37:3c:5c:be:0d:a9: 24:3d:a7:e7:7b:26:b8:4a:1a:60:f1:2a:13:52:5c: 14:2b:d7:5d:de:df:d9:49:85:ff:dd:ec:f6:a1:02: ff:ac:8c:d2:f6:cd:90:51:cf:ca:85:27:e9:8e:9a: 80:09:3a:ff:5f:8d:2e:e4:33:82:ad:95:a1:da:d4: 46:13:c2:d2:f3:68:cf:1c:43:0d:39:36:c8:a1:20: 85:6a:0a:b4:78:38:71:3e:45:c0:e7:cf:dc:fd:7b: ad:b3:5e:d4:65:f4:b4:6e:03:3e:64:ba:ff:bb:2a: 68:4d:5e:7a:0b:20:a0:89:b1:87:97:e6:dd:7d:fa: d8:f0:c9:73:f8:8a:38:d3:dd:b4:38:f8:09:91:a2: f1:61:f8:5d:69:3e:81:15:d0:b2:17:eb:f2:99:e9: e9:25:02:a6:f6:24:78:ba:be:51:38:d6:a1:81:76: 74:9c:f0:1b:89:63:4a:9c:29:66:03:4c:8a:a6:8e: 9f:db:8a:0d:85:e6:fc:5b:8d:6f:8b:c2:0a:6c:fc: af:ab:cf:02:2f:ac:5c:0e:b3:b3:e5:41:34:5e:0c: 9f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:03:EC:56:C0:1D:31:0C:41:AD:17:CB:C8:99:71:0C:CD:D9:38 X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/CA290E34341311EFA3C99F09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.70.192.0/22 103.76.158.0/23 IPv6: 2401:5840::/32 Signature Algorithm: sha256WithRSAEncryption 33:c4:57:77:e3:bb:ce:38:79:a0:ee:fa:37:3c:e5:97:a8:66: e7:ac:87:3f:50:44:ec:d6:39:67:38:6b:95:1b:b0:71:23:ae: 74:31:80:8b:7b:3d:d2:ca:51:10:a0:1a:18:b5:9a:be:31:97: 5b:87:d2:8f:b1:9d:8f:cb:7d:8b:fe:e4:bc:ee:74:ac:3c:fa: 1c:df:f6:ae:fd:63:90:6a:dc:d9:c0:ca:25:cd:b5:98:c0:73: c1:ea:5b:94:63:cf:c9:48:0f:13:fd:7a:62:ad:44:07:9a:5e: 34:9b:0a:ae:fa:88:5b:eb:70:70:ce:a8:81:de:42:12:d7:43: be:be:72:dd:a5:bf:97:05:a5:c4:bc:f6:1a:e8:80:c6:bf:ca: cc:55:eb:64:2c:3f:10:9a:62:4f:09:7c:3c:da:16:c8:0c:e6: 92:18:d8:5e:dd:95:2f:17:e8:5f:10:b1:f0:cd:d3:31:f5:62: 0e:1a:34:d3:0d:3b:1c:34:1a:b4:9e:7b:b7:97:cd:d5:48:48: 81:05:9a:f1:7d:55:6a:37:4d:2b:2f:d3:bd:d3:8f:db:7b:fe: 4f:05:e1:3a:e2:8b:50:d6:d2:bc:31:5e:3f:f9:ab:1d:31:ae: 50:2f:e0:78:ee:b7:be:b1:04:81:57:95:99:d1:9a:78:e9:90: 0d:ff:98:41 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjYwOTE2MjA0MTIxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhZmVmMS00N2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaFnMsFSP/LWeRxHLlxdZOka1StK95AnaS9et0egG+BMZ9Borvg3PFy+Dakk Pafneya4Shpg8SoTUlwUK9dd3t/ZSYX/3ez2oQL/rIzS9s2QUc/KhSfpjpqACTr/ X40u5DOCrZWh2tRGE8LS82jPHEMNOTbIoSCFagq0eDhxPkXA58/c/Xuts17UZfS0 bgM+ZLr/uypoTV56CyCgibGHl+bdffrY8Mlz+Io40920OPgJkaLxYfhdaT6BFdCy F+vymenpJQKm9iR4ur5RONahgXZ0nPAbiWNKnClmA0yKpo6f24oNheb8W41vi8IK bPyvq88CL6xcDrOz5UE0XgyfgwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFLQ8A+xW wB0xDEGtF8vImXEMzdk4MB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTczQjYvMTBGNDg0ODZFMTlGMTFFQUJENEEyMzEzQzRGOUFFMDIvQ0EyOTBFMzQz NDEzMTFFRkEzQzk5RjA5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ0bAAwQBZ0yeMA0EAgACMAcDBQAkAVhAMA0GCSqGSIb3DQEBCwUA A4IBAQAzxFd347vOOHmg7vo3POWXqGbnrIc/UETs1jlnOGuVG7BxI650MYCLez3S ylEQoBoYtZq+MZdbh9KPsZ2Py32L/uS87nSsPPoc3/au/WOQatzZwMolzbWYwHPB 6luUY8/JSA8T/XpirUQHml40mwqu+ohb63BwzqiB3kIS10O+vnLdpb+XBaXEvPYa 6IDGv8rMVetkLD8QmmJPCXw82hbIDOaSGNhe3ZUvF+hfELHwzdMx9WIOGjTTDTsc NBq0nnu3l83VSEiBBZrxfVVqN00rL9O904/be/5PBeE64otQ1tK8MV4/+asdMa5Q L+B47re+sQSBV5WZ0Zp46ZAN/5hB -----END CERTIFICATE-----Generated at Sun Sep 27 15:41:44 2026 by rpki-client