$ rpki-client -vvvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/D68289BE984B11ECB04DAB38C4F9AE02.roa File: D68289BE984B11ECB04DAB38C4F9AE02.roa (raw, json) Hash identifier: XcRGzifAbD8nNLaizhBvxl/3s2M38329oybDy1dhDiA= Subject key identifier: BF:99:6C:41:54:7F:2E:B6:9E:5E:B8:F0:AA:F2:81:74:4F:5F:44:05 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0D46 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/D68289BE984B11ECB04DAB38C4F9AE02.roa Signing time: Fri 28 Aug 2026 18:36:09 +0000 ROA not before: Fri 28 Aug 2026 18:36:09 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 10148 IP address blocks: 45.113.232.0/22 maxlen: 22 103.6.252.0/22 maxlen: 22 103.12.108.0/22 maxlen: 24 115.146.80.0/20 maxlen: 20 203.0.40.0/24 maxlen: 24 203.5.64.0/21 maxlen: 21 203.21.130.0/23 maxlen: 24 203.62.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3398 (0xd46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Aug 28 18:36:09 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a91d519-6a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:50:c8:61:65:dd:70:96:13:7e:1d:8c:16:d5: 4c:2f:b4:e0:db:2c:fc:7a:c3:54:22:a6:bb:5f:10: b4:c6:a3:29:dd:cf:91:a6:35:b9:82:0e:7c:16:fb: 0d:cf:d1:82:49:34:06:92:67:2c:a7:f6:e3:11:f9: 27:7d:da:69:47:f5:86:da:35:38:ed:cc:b7:e7:25: b2:9e:62:5a:7b:64:3b:40:7b:a2:00:61:b3:c2:35: 92:11:80:2b:01:69:50:42:c6:a2:4c:b3:7b:f5:b7: 0e:2b:3d:a3:b6:10:27:96:c7:25:2e:0c:67:3f:f2: 16:8e:ce:a3:48:e4:8c:6c:28:8c:e9:23:17:fe:2e: 7a:fc:dd:8f:53:ff:10:8d:b8:13:65:b7:76:ed:d8: fc:47:a6:ce:a8:62:29:89:e5:34:29:3d:94:a7:8b: d1:21:c1:a1:0e:30:8a:fe:30:39:99:cb:2c:8b:6c: 9d:98:57:43:44:78:87:77:20:79:dc:83:b1:d8:9c: a9:b8:9d:77:35:b4:50:9f:7d:60:d8:ce:81:e2:a8: f2:94:79:65:84:65:ca:24:d4:2e:1c:bb:19:9a:b3: b8:23:4d:da:93:b9:85:4e:d3:de:e9:ff:40:6e:b8: 43:37:50:f7:07:30:3f:b0:32:30:04:3b:1a:30:ec: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:99:6C:41:54:7F:2E:B6:9E:5E:B8:F0:AA:F2:81:74:4F:5F:44:05 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/D68289BE984B11ECB04DAB38C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.113.232.0/22 103.6.252.0/22 103.12.108.0/22 115.146.80.0/20 203.0.40.0/24 203.5.64.0/21 203.21.130.0/23 203.62.232.0/23 Signature Algorithm: sha256WithRSAEncryption 20:c0:38:86:04:e0:49:31:ce:d5:24:a1:0c:a6:8a:a7:64:0f: 9e:65:49:fc:0f:64:7d:12:90:c9:30:15:7c:77:df:f3:65:75: c6:38:44:17:3a:8c:bd:55:52:81:e1:27:a6:e4:ad:0d:a6:5d: 00:50:db:b9:98:27:da:55:6a:74:f1:94:1e:78:41:38:a8:67: b1:b9:fe:28:0c:d7:e0:c5:9a:70:3d:03:59:ca:d2:b0:35:ab: 19:b9:48:a0:20:c8:7f:06:e3:91:28:6c:b3:ce:24:5b:6e:4d: fa:71:2f:fa:05:69:9c:40:8a:0e:17:67:00:8a:b5:3f:02:f5: a5:f6:8d:1c:93:51:8a:7a:9c:ab:14:08:76:aa:85:dd:ce:c8: cb:f3:3f:c5:d0:f4:d6:28:8e:a8:5b:51:ea:ba:a6:30:9d:e8: 68:a5:b1:ec:36:fe:c1:23:cd:87:0f:68:9a:9f:8d:6c:d7:9e: 33:b3:ed:f4:50:9a:53:17:f4:ae:e7:fa:6e:6b:59:d2:d9:f1: ce:f8:9c:cf:9d:3e:f0:4e:1c:43:17:0a:9d:eb:a0:64:eb:c5: e3:1d:91:ad:3a:c6:9e:35:1b:03:6f:2b:46:c1:72:ba:33:72: 9f:5c:32:8b:35:01:b8:58:47:01:0d:75:98:64:fc:69:52:39: 18:64:a2:5e -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjYwODI4MTgzNjA5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkxZDUxOS02YTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lDIYWXdcJYTfh2MFtVML7Tg2yz8esNUIqa7XxC0xqMp3c+RpjW5gg58FvsN z9GCSTQGkmcsp/bjEfknfdppR/WG2jU47cy35yWynmJae2Q7QHuiAGGzwjWSEYAr AWlQQsaiTLN79bcOKz2jthAnlsclLgxnP/IWjs6jSOSMbCiM6SMX/i56/N2PU/8Q jbgTZbd27dj8R6bOqGIpieU0KT2Up4vRIcGhDjCK/jA5mcssi2ydmFdDRHiHdyB5 3IOx2JypuJ13NbRQn31g2M6B4qjylHllhGXKJNQuHLsZmrO4I03ak7mFTtPe6f9A brhDN1D3BzA/sDIwBDsaMOwrswIDAQABo4ICijCCAoYwHQYDVR0OBBYEFL+ZbEFU fy62nl648KrygXRPX0QFMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU3QkEvNkU3NDk1MTAwNEVCMTFFQUE3MkZBMzYzQzRGOUFFMDIvRDY4Mjg5QkU5 ODRCMTFFQ0IwNERBQjM4QzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQCLXHoAwQCZwb8AwQCZwxsAwQEc5JQAwQAywAoAwQDywVAAwQByxWC AwQByz7oMA0GCSqGSIb3DQEBCwUAA4IBAQAgwDiGBOBJMc7VJKEMpoqnZA+eZUn8 D2R9EpDJMBV8d9/zZXXGOEQXOoy9VVKB4Sem5K0Npl0AUNu5mCfaVWp08ZQeeEE4 qGexuf4oDNfgxZpwPQNZytKwNasZuUigIMh/BuORKGyzziRbbk36cS/6BWmcQIoO F2cAirU/AvWl9o0ck1GKepyrFAh2qoXdzsjL8z/F0PTWKI6oW1HquqYwnehopbHs Nv7BI82HD2ian41s154zs+30UJpTF/Su5/pua1nS2fHO+JzPnT7wThxDFwqd66Bk 68XjHZGtOsaeNRsDbytGwXK6M3KfXDKLNQG4WEcBDXWYZPxpUjkYZKJe -----END CERTIFICATE-----Generated at Tue Sep 22 17:21:59 2026 by rpki-client