$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D6A69CF45AD711EF8665FF81C4F9AE02.roa File: D6A69CF45AD711EF8665FF81C4F9AE02.roa (raw, json) Hash identifier: 2rJz07ou4vSpX5JnrTMQgxdJR1a87eEGMUNp0szeRmA= Subject key identifier: 11:46:40:5A:F0:EF:E3:53:4F:2F:55:A2:7F:92:F8:DE:0F:E8:AB:53 Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 0234 Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D6A69CF45AD711EF8665FF81C4F9AE02.roa Signing time: Fri 11 Sep 2026 02:53:36 +0000 ROA not before: Fri 11 Sep 2026 02:53:36 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 137996 IP address blocks: 103.120.4.0/24 maxlen: 24 103.120.5.0/24 maxlen: 24 2407:b140:1379::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Sep 11 02:53:36 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa36d30-5e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5b:ff:e9:33:d1:7a:c1:28:29:86:37:0f:86: 51:65:4f:4b:f9:cb:c4:c3:52:a7:38:53:ce:b4:11: cb:0f:8c:b6:e6:8c:1f:51:bc:b6:55:f9:68:2f:7d: 87:fc:74:f8:cb:7d:20:e1:dc:aa:8a:14:4e:a2:d4: bf:22:49:b2:b3:b4:78:6f:12:9f:af:75:97:78:2e: 5a:c2:1d:92:49:7f:3a:f7:c7:4f:90:80:78:23:fc: 95:fc:02:e9:97:1b:ee:74:32:bb:80:6a:0c:56:30: 37:14:ff:7b:a8:78:45:aa:d3:4c:3a:43:40:52:8b: 76:08:6c:b3:7a:02:74:77:42:58:65:78:72:52:d1: 85:88:e6:e7:22:86:25:d5:bd:b7:d1:66:39:f4:a7: 92:6a:56:5c:37:8b:04:9b:8e:ab:0f:ba:ee:2a:f0: fd:ff:d1:c6:93:18:7c:46:b4:bc:a7:ec:f6:cf:fa: 6f:99:83:ca:49:f5:31:c6:79:50:0f:61:ed:ae:45: 55:29:24:3e:3a:e1:c4:ca:ac:83:54:92:9f:09:45: 9a:11:67:ba:74:7f:db:ea:d5:94:da:85:e1:1f:a8: d8:82:55:4f:39:7d:34:65:23:52:7b:60:31:f8:b6: 80:c1:11:f2:c1:b0:89:ff:c6:a0:b7:1b:e7:c3:93: 67:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:46:40:5A:F0:EF:E3:53:4F:2F:55:A2:7F:92:F8:DE:0F:E8:AB:53 X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D6A69CF45AD711EF8665FF81C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.4.0/23 IPv6: 2407:b140:1379::/48 Signature Algorithm: sha256WithRSAEncryption 34:40:c0:71:bf:89:1c:f4:3c:2e:9b:ea:7a:f8:9e:4d:55:93: 8e:de:ce:94:40:91:1d:d3:c3:04:9a:30:5c:7d:c9:2c:6a:6a: 22:a8:4c:51:ed:8a:e5:ef:40:7a:26:f3:cb:36:bd:7f:bb:ff: 63:6b:c8:73:23:fd:d3:d4:81:cc:e2:19:58:8c:a9:8b:07:a3: a9:0a:9c:4e:cb:38:1f:91:e7:2c:4e:ee:76:c0:80:f2:c6:b8: a9:30:80:53:45:c3:3b:98:26:4a:e6:3f:0a:67:6b:24:0c:3b: 09:ac:05:46:d0:8a:77:5f:e4:c3:14:8e:73:d3:17:ef:b0:0f: d1:53:49:c5:47:e0:fb:ff:d4:e9:24:89:3b:27:5d:19:33:a0: be:3e:26:6a:0c:59:cf:8b:fd:59:b8:c7:31:bd:89:62:c0:eb: 3c:40:b1:5a:e3:6f:ec:1d:00:ed:35:8d:40:80:5a:c6:19:c5: c6:07:81:f3:45:85:44:c7:fb:11:3f:11:d7:17:e0:09:a1:94: b0:d1:23:44:8a:70:c8:cf:74:f8:74:50:54:34:8f:9f:cc:3d: 29:89:74:b5:2c:51:60:30:4e:1b:c2:96:c0:b7:90:6d:d9:13: 19:c7:6e:c2:47:60:e3:56:25:d5:d2:1c:8e:82:ae:85:01:83: 59:8b:ad:42 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjYwOTExMDI1MzM2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEzNmQzMC01ZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFv/6TPResEoKYY3D4ZRZU9L+cvEw1KnOFPOtBHLD4y25owfUby2VfloL32H /HT4y30g4dyqihROotS/Ikmys7R4bxKfr3WXeC5awh2SSX8698dPkIB4I/yV/ALp lxvudDK7gGoMVjA3FP97qHhFqtNMOkNAUot2CGyzegJ0d0JYZXhyUtGFiObnIoYl 1b230WY59KeSalZcN4sEm46rD7ruKvD9/9HGkxh8RrS8p+z2z/pvmYPKSfUxxnlQ D2HtrkVVKSQ+OuHEyqyDVJKfCUWaEWe6dH/b6tWU2oXhH6jYglVPOX00ZSNSe2Ax +LaAwRHywbCJ/8agtxvnw5Nn4QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBFGQFrw 7+NTTy9Von+S+N4P6KtTMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTZEOEIvQjJGMjM1QjI2NzIwMTFFRUExNDZDMjJEQzRGOUFFMDIvRDZBNjlDRjQ1 QUQ3MTFFRjg2NjVGRjgxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ3gEMA8EAgACMAkDBwAkB7FAE3kwDQYJKoZIhvcNAQELBQADggEB ADRAwHG/iRz0PC6b6nr4nk1Vk47ezpRAkR3TwwSaMFx9ySxqaiKoTFHtiuXvQHom 88s2vX+7/2NryHMj/dPUgcziGViMqYsHo6kKnE7LOB+R5yxO7nbAgPLGuKkwgFNF wzuYJkrmPwpnayQMOwmsBUbQindf5MMUjnPTF++wD9FTScVH4Pv/1OkkiTsnXRkz oL4+JmoMWc+L/Vm4xzG9iWLA6zxAsVrjb+wdAO01jUCAWsYZxcYHgfNFhUTH+xE/ EdcX4AmhlLDRI0SKcMjPdPh0UFQ0j5/MPSmJdLUsUWAwThvClsC3kG3ZExnHbsJH YONWJdXSHI6CroUBg1mLrUI= -----END CERTIFICATE-----Generated at Tue Sep 22 10:43:21 2026 by rpki-client