$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/884C5FB8E60411EFBF5A7957C4F9AE02.roa File: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (raw, json) Hash identifier: fEpbldH1/tKfccs2TsiUqmrYo/SlcFg4zmqd7qCQ1IY= Subject key identifier: 0C:92:FA:A9:24:A3:97:34:D4:D5:BC:90:9E:6A:FF:AB:CF:1F:40:AC Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0D52 Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/884C5FB8E60411EFBF5A7957C4F9AE02.roa Signing time: Wed 14 Oct 2026 18:36:23 +0000 ROA not before: Wed 14 Oct 2026 18:36:23 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 139013 IP address blocks: 103.100.232.0/22 maxlen: 22 103.100.232.0/23 maxlen: 23 103.100.232.0/24 maxlen: 24 103.100.234.0/23 maxlen: 23 103.100.234.0/24 maxlen: 24 103.100.235.0/24 maxlen: 24 2404:cec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 18:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3410 (0xd52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Oct 14 18:36:23 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6acfcba7-1f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0f:a0:aa:33:2c:a2:40:d4:be:20:15:d0:ba: 4b:8d:76:a4:a4:9e:10:eb:80:6c:6b:81:11:96:65: 3e:e3:81:ad:5a:83:83:c3:c3:fc:aa:65:47:51:61: 1b:f7:77:77:6c:ad:d5:0f:2a:61:05:0b:b3:8e:db: 5f:93:ca:fa:1c:75:93:60:29:fa:87:ee:8f:7a:19: 43:27:89:e3:2c:a8:08:a0:6a:dc:26:4e:8e:10:cf: 1c:fc:9a:33:cb:04:f2:f5:03:cd:13:c9:19:71:5f: 29:3f:2f:75:04:f8:63:c2:c4:a1:2f:9e:d3:f5:b5: 35:09:42:bf:8b:ff:df:f5:3f:24:dc:47:1a:76:83: c0:95:94:a4:0b:81:f3:c3:4c:f1:d8:ad:11:b3:44: cd:6b:57:e6:16:a1:11:ea:5b:fa:bb:e5:9b:c7:3f: 6b:6e:36:13:db:ec:e5:39:37:be:ed:f0:05:11:1b: d2:0a:1b:a2:e2:5a:87:55:ff:a8:96:5b:11:dd:a1: a8:9b:e4:e8:bb:36:4d:7e:e8:4c:f5:d1:54:f7:73: e6:b5:5a:a2:6b:78:3a:c4:26:25:aa:b8:73:37:71: 99:1d:fc:f7:e2:6d:98:dc:e3:20:cb:67:bb:7c:ee: cf:43:0e:cd:cd:cb:11:b8:90:40:f4:34:1c:84:c8: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:92:FA:A9:24:A3:97:34:D4:D5:BC:90:9E:6A:FF:AB:CF:1F:40:AC X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/884C5FB8E60411EFBF5A7957C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.100.232.0/22 IPv6: 2404:cec0::/32 Signature Algorithm: sha256WithRSAEncryption 78:70:df:bc:14:cd:08:1d:87:1d:62:88:c5:fc:dc:6e:98:7f: 23:62:66:8e:75:e5:db:94:c6:25:0a:0b:eb:51:01:9f:11:c6: 7a:46:30:f0:00:96:94:63:38:18:35:d2:ad:8c:98:c6:6d:f2: 04:b0:fe:9b:5a:7b:33:c6:93:14:1b:0e:b0:78:53:99:07:a1: fc:2b:2f:21:b0:27:b8:1a:32:5e:6b:2a:ee:90:92:c4:00:ee: ef:7d:da:bb:6a:44:ba:ef:d7:dd:57:ec:b5:7b:45:a7:1c:d8: b5:bc:f7:5b:3f:9f:a4:4d:c1:31:a7:3d:30:8b:6e:0e:2b:9e: 4d:59:2f:aa:67:a0:67:f0:da:c6:bd:7f:b2:52:6f:ea:8c:d5: 92:5d:54:c9:40:73:19:aa:2e:41:de:52:33:a1:21:c0:58:fc: 31:e5:4e:1f:14:a4:dc:50:31:3a:d6:a0:b2:5e:d6:02:76:53: 71:56:0c:c4:39:d9:55:9c:bd:2b:42:36:15:1f:97:9e:e3:3b: e5:b7:f3:95:84:6b:61:f7:82:b6:a2:7c:8a:02:c9:88:a9:0b: 0e:45:e4:a2:ba:0d:d7:04:d9:0a:74:1a:81:48:b9:9f:a5:99: 9d:8e:be:0b:38:90:b6:c9:97:03:10:b1:1c:1f:40:5a:bc:25: be:f8:20:c3 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjYxMDE0MTgzNjIzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNmY2JhNy0xZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Q+gqjMsokDUviAV0LpLjXakpJ4Q64Bsa4ERlmU+44GtWoODw8P8qmVHUWEb 93d3bK3VDyphBQuzjttfk8r6HHWTYCn6h+6PehlDJ4njLKgIoGrcJk6OEM8c/Joz ywTy9QPNE8kZcV8pPy91BPhjwsShL57T9bU1CUK/i//f9T8k3EcadoPAlZSkC4Hz w0zx2K0Rs0TNa1fmFqER6lv6u+Wbxz9rbjYT2+zlOTe+7fAFERvSChui4lqHVf+o llsR3aGom+TouzZNfuhM9dFU93PmtVqia3g6xCYlqrhzN3GZHfz34m2Y3OMgy2e7 fO7PQw7NzcsRuJBA9DQchMh6UwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFAyS+qkk o5c01NW8kJ5q/6vPH0CsMB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1RTAvMjNCRjJGMjYxMTNFMTFFQTg4RTg3ODc2QzRGOUFFMDIvODg0QzVGQjhF NjA0MTFFRkJGNUE3OTU3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2ToMA0EAgACMAcDBQAkBM7AMA0GCSqGSIb3DQEBCwUAA4IBAQB4 cN+8FM0IHYcdYojF/NxumH8jYmaOdeXblMYlCgvrUQGfEcZ6RjDwAJaUYzgYNdKt jJjGbfIEsP6bWnszxpMUGw6weFOZB6H8Ky8hsCe4GjJeayrukJLEAO7vfdq7akS6 79fdV+y1e0WnHNi1vPdbP5+kTcExpz0wi24OK55NWS+qZ6Bn8NrGvX+yUm/qjNWS XVTJQHMZqi5B3lIzoSHAWPwx5U4fFKTcUDE61qCyXtYCdlNxVgzEOdlVnL0rQjYV H5ee4zvlt/OVhGth94K2onyKAsmIqQsOReSiug3XBNkKdBqBSLmfpZmdjr4LOJC2 yZcDELEcH0BavCW++CDD -----END CERTIFICATE-----Generated at Mon Oct 19 02:17:23 2026 by rpki-client