$ rpki-client -vvvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/4D12993446CC11F08EB9471AC4F9AE02.roa File: 4D12993446CC11F08EB9471AC4F9AE02.roa (raw, json) Hash identifier: BHNDuj9K244s6t1iglEgS7bhpF4vnCXa964XNOR+sCk= Subject key identifier: 93:C6:4A:D8:20:3D:56:72:57:40:25:68:14:3B:BA:57:74:B2:CA:ED Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 1A15 Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/4D12993446CC11F08EB9471AC4F9AE02.roa Signing time: Thu 08 Oct 2026 16:30:15 +0000 ROA not before: Thu 08 Oct 2026 16:30:14 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136948 IP address blocks: 103.99.248.0/22 maxlen: 23 103.99.248.0/24 maxlen: 24 103.99.249.0/24 maxlen: 24 103.99.250.0/24 maxlen: 24 103.99.251.0/24 maxlen: 24 2401:b640::/32 maxlen: 32 2401:b640::/48 maxlen: 48 2401:b640:1::/48 maxlen: 48 2401:b640:2::/48 maxlen: 48 2401:b640:3::/48 maxlen: 48 2401:b640:5::/48 maxlen: 48 2401:b640:6::/48 maxlen: 48 2401:b640:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6677 (0x1a15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: Oct 8 16:30:14 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac7c516-0c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:60:30:68:52:8a:c4:a2:08:60:e9:78:2f: d8:9c:b1:29:d2:d5:ae:57:da:0e:b5:69:ba:15:47: e6:36:76:5f:57:25:86:c5:10:99:31:78:5c:ed:20: 8f:ab:e7:02:39:37:31:0a:98:9e:b2:38:fd:95:17: 52:c1:02:68:aa:6b:25:fd:a6:2b:ff:b7:9a:5a:00: 1b:e6:ae:ff:e3:e4:22:0e:a5:9f:8f:e8:7b:6a:c3: 23:37:6e:ff:87:e6:84:33:05:eb:3a:20:52:a1:6e: 33:d9:ae:5c:f2:4e:3b:e7:12:1a:7a:9f:71:8c:9d: 9c:a9:e0:a2:0a:d1:9a:b3:71:fb:1a:7c:c0:ea:1b: e8:65:9a:b5:21:ac:2b:7b:6a:80:55:1b:8a:6e:74: 22:62:c3:8c:50:32:8a:97:73:68:4d:a5:7e:b1:1f: 7c:26:9d:a0:45:84:69:72:d5:2f:48:da:22:1e:b5: c7:f0:6e:c7:a4:aa:f2:b4:8f:f9:60:30:a9:16:ee: 72:04:20:ca:e5:46:90:4e:6e:4f:4a:63:14:64:77: 43:2c:9c:03:87:20:09:85:f2:c8:48:9a:09:e0:a4: db:06:5d:e1:f2:e7:9c:e1:f8:f3:50:a8:6c:b8:7f: 5c:c0:68:1c:64:ff:36:53:be:91:29:c0:9f:b5:59: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C6:4A:D8:20:3D:56:72:57:40:25:68:14:3B:BA:57:74:B2:CA:ED X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/4D12993446CC11F08EB9471AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.248.0/22 IPv6: 2401:b640::/32 Signature Algorithm: sha256WithRSAEncryption 12:af:ac:30:d3:6f:26:43:d5:e0:51:d2:e3:d8:19:e4:f2:df: ba:64:d3:a0:56:ef:5f:38:10:f9:52:3c:86:bc:65:e4:d8:73: 2e:38:c0:cb:a8:57:f5:42:c4:f6:f3:71:34:59:64:93:fb:ae: 64:00:30:da:fe:e8:8b:44:d6:75:6c:46:71:f2:b6:fe:00:d9: 3b:53:66:3c:64:c9:e3:90:41:4f:3b:1a:27:3f:b2:85:bc:33: 30:54:47:70:5f:55:50:4e:5c:03:98:f9:bd:e8:ed:a4:6f:55: b6:5e:04:0a:f8:36:4c:37:07:dd:37:d5:62:e7:d1:6c:ed:74: 2d:b5:5e:a6:91:b5:27:8d:76:a8:ed:02:dc:36:f5:40:f9:cc: 56:eb:50:c9:5c:de:9f:c0:e8:05:bf:8c:67:b0:53:c0:84:a2: 78:7c:59:19:ea:60:55:60:5a:72:61:9e:83:b1:7f:20:a2:3f: 9a:a6:55:69:b0:23:7c:7e:d0:72:7d:fc:b3:d3:c4:96:af:18: 20:8c:68:6c:0c:1b:d8:c3:6e:d1:51:77:6e:08:5e:5e:ff:13: d8:c2:88:be:6f:d9:91:64:c3:ab:14:c4:b7:e2:92:e5:7a:cb: 3d:d8:38:09:1a:57:eb:a1:53:c7:03:04:41:fe:e0:4e:5a:bd: 58:ab:57:3c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjYxMDA4MTYzMDE0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM3YzUxNi0wYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4hgMGhSisSiCGDpeC/YnLEp0tWuV9oOtWm6FUfmNnZfVyWGxRCZMXhc7SCP q+cCOTcxCpiesjj9lRdSwQJoqmsl/aYr/7eaWgAb5q7/4+QiDqWfj+h7asMjN27/ h+aEMwXrOiBSoW4z2a5c8k475xIaep9xjJ2cqeCiCtGas3H7GnzA6hvoZZq1Iawr e2qAVRuKbnQiYsOMUDKKl3NoTaV+sR98Jp2gRYRpctUvSNoiHrXH8G7HpKrytI/5 YDCpFu5yBCDK5UaQTm5PSmMUZHdDLJwDhyAJhfLISJoJ4KTbBl3h8uec4fjzUKhs uH9cwGgcZP82U76RKcCftVmtawIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJPGStgg PVZyV0AlaBQ7uld0ssrtMB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTkwRTMvREExOEIxODQ5QTQ5MTFFNzlBOUYzMDMwQzRGOUFFMDIvNEQxMjk5MzQ0 NkNDMTFGMDhFQjk0NzFBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2P4MA0EAgACMAcDBQAkAbZAMA0GCSqGSIb3DQEBCwUAA4IBAQAS r6ww028mQ9XgUdLj2Bnk8t+6ZNOgVu9fOBD5UjyGvGXk2HMuOMDLqFf1QsT283E0 WWST+65kADDa/uiLRNZ1bEZx8rb+ANk7U2Y8ZMnjkEFPOxonP7KFvDMwVEdwX1VQ TlwDmPm96O2kb1W2XgQK+DZMNwfdN9Vi59Fs7XQttV6mkbUnjXao7QLcNvVA+cxW 61DJXN6fwOgFv4xnsFPAhKJ4fFkZ6mBVYFpyYZ6DsX8goj+aplVpsCN8ftByffyz 08SWrxggjGhsDBvYw27RUXduCF5e/xPYwoi+b9mRZMOrFMS34pLless92DgJGlfr oVPHAwRB/uBOWr1Yq1c8 -----END CERTIFICATE-----Generated at Sat Oct 10 16:45:59 2026 by rpki-client