$ rpki-client -vvvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/0BAA5EA48F1511F1B6C55BB93411F970.roa File: 0BAA5EA48F1511F1B6C55BB93411F970.roa (raw, json) Hash identifier: c3Mop7J5W4/U4LMXQ8x8AkNhdnsz8zWL9efaSeIVYug= Subject key identifier: 67:3A:04:48:B7:ED:B7:90:12:B6:FC:6E:D9:9D:AB:C5:C2:05:E2:90 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0C59 Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/0BAA5EA48F1511F1B6C55BB93411F970.roa Signing time: Fri 28 Aug 2026 19:38:07 +0000 ROA not before: Fri 28 Aug 2026 19:38:07 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 153844 IP address blocks: 103.72.84.0/22 maxlen: 22 103.72.84.0/24 maxlen: 24 103.72.85.0/24 maxlen: 24 103.72.86.0/24 maxlen: 24 103.72.87.0/24 maxlen: 24 203.3.132.0/24 maxlen: 24 203.11.65.0/24 maxlen: 24 203.142.218.0/24 maxlen: 24 203.161.179.0/24 maxlen: 24 2406:c380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3161 (0xc59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Aug 28 19:38:07 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a91e39f-33c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:5d:fe:22:5f:86:a6:15:fa:cc:20:e2:ea: 91:2b:7f:68:3a:08:20:e8:96:94:07:f7:85:9e:09: 77:03:bf:b2:ed:67:93:a8:b3:64:1f:30:e2:08:68: e1:71:2f:61:76:77:28:a1:80:96:62:47:90:42:b4: e4:0a:1d:0f:13:18:2a:c5:80:25:b4:40:7c:0f:97: 9e:35:16:f8:10:ed:e1:17:fb:21:e3:6d:0b:e0:76: 4e:a6:e1:90:26:42:8a:43:b2:bb:e9:18:3f:f9:86: f8:bd:8b:bb:81:8d:d2:90:13:81:f5:99:19:25:6d: 1c:59:c7:c1:7c:1f:8d:96:f8:c6:ac:36:93:37:c4: 08:15:e2:57:2e:20:b5:18:9a:4c:94:32:aa:89:42: c4:27:d5:74:07:6d:2b:a5:35:81:5c:f1:4a:65:bd: 8e:e2:22:34:5d:ca:bc:05:dc:00:92:a1:b2:7e:af: f8:33:8c:a3:9a:9d:1f:9f:72:12:e7:3b:05:9b:c0: 62:d3:df:69:9d:f4:0b:10:b3:2b:ca:20:f8:92:f2: 20:0a:89:c7:09:8e:a9:aa:f9:a2:e3:25:77:35:b9: 7a:ba:38:6a:53:d1:b6:bb:3b:f2:38:6f:ef:0e:e3: df:fa:18:17:7a:cf:87:a5:bc:06:a8:e8:4e:3a:8c: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3A:04:48:B7:ED:B7:90:12:B6:FC:6E:D9:9D:AB:C5:C2:05:E2:90 X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/0BAA5EA48F1511F1B6C55BB93411F970.roa sbgp-ipAddrBlock: critical IPv4: 103.72.84.0/22 203.3.132.0/24 203.11.65.0/24 203.142.218.0/24 203.161.179.0/24 IPv6: 2406:c380::/32 Signature Algorithm: sha256WithRSAEncryption 34:4c:7f:af:1e:df:fa:48:6b:bc:fb:69:c5:09:49:83:5d:67: 59:53:44:97:62:f4:4c:d7:78:5e:83:03:66:89:d0:70:a3:b3: bb:59:67:b5:14:ca:23:11:9f:ba:89:d3:25:10:da:36:65:e5: 2a:ed:ac:c2:df:8f:8b:9d:04:43:55:77:ac:7a:9c:ba:ec:a5: d8:c4:df:ad:14:6d:5c:dd:98:e6:b8:b6:43:39:af:6c:32:75: e8:cc:a8:b3:d9:6d:bc:95:83:6c:3b:30:6f:ed:a4:7b:44:7a: 1e:3d:af:24:06:31:b7:29:76:87:0e:1e:1e:8a:4e:bf:a2:5a: f9:5e:2e:9b:6f:a4:b9:ad:49:f2:45:29:fd:7a:6c:49:99:5f: c7:19:d3:97:ef:b9:87:49:7f:6a:f5:35:75:01:7e:62:70:b2: 16:e7:f2:63:15:14:cd:1d:aa:27:30:69:82:ca:da:27:b3:26: 30:95:93:12:df:7d:1e:b0:1d:b9:e9:d5:1f:ae:16:ed:74:2a: aa:2c:1d:22:4c:97:91:bd:6b:7a:7d:3f:b9:6b:9e:6a:48:0f: 9d:5b:58:d8:ac:16:4a:a7:60:9e:13:13:23:f4:e0:23:38:5d: 51:c4:1c:dc:b1:db:be:71:c5:d5:f1:3c:f1:f9:d3:d7:8b:cb: 47:5c:fe:94 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICDFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjYwODI4MTkzODA3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkxZTM5Zi0zM2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwitd/iJfhqYV+swg4uqRK39oOggg6JaUB/eFngl3A7+y7WeTqLNkHzDiCGjh cS9hdncooYCWYkeQQrTkCh0PExgqxYAltEB8D5eeNRb4EO3hF/sh420L4HZOpuGQ JkKKQ7K76Rg/+Yb4vYu7gY3SkBOB9ZkZJW0cWcfBfB+NlvjGrDaTN8QIFeJXLiC1 GJpMlDKqiULEJ9V0B20rpTWBXPFKZb2O4iI0Xcq8BdwAkqGyfq/4M4yjmp0fn3IS 5zsFm8Bi099pnfQLELMryiD4kvIgConHCY6pqvmi4yV3Nbl6ujhqU9G2uzvyOG/v DuPf+hgXes+HpbwGqOhOOoxYoQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFGc6BEi3 7beQErb8btmdq8XCBeKQMB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUwRkEvQUFBMEVCRTAzNjhFMTFFQUE3NjhGQzdFQzRGOUFFMDIvMEJBQTVFQTQ4 RjE1MTFGMUI2QzU1QkI5MzQxMUY5NzAucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCZ0hUAwQAywOEAwQAywtBAwQAy47aAwQAy6GzMA0EAgACMAcDBQAk BsOAMA0GCSqGSIb3DQEBCwUAA4IBAQA0TH+vHt/6SGu8+2nFCUmDXWdZU0SXYvRM 13hegwNmidBwo7O7WWe1FMojEZ+6idMlENo2ZeUq7azC34+LnQRDVXesepy67KXY xN+tFG1c3ZjmuLZDOa9sMnXozKiz2W28lYNsOzBv7aR7RHoePa8kBjG3KXaHDh4e ik6/olr5Xi6bb6S5rUnyRSn9emxJmV/HGdOX77mHSX9q9TV1AX5icLIW5/JjFRTN HaonMGmCytonsyYwlZMS330esB256dUfrhbtdCqqLB0iTJeRvWt6fT+5a55qSA+d W1jYrBZKp2CeExMj9OAjOF1RxBzcsdu+ccXV8Tzx+dPXi8tHXP6U -----END CERTIFICATE-----Generated at Tue Sep 22 15:13:51 2026 by rpki-client