$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/027BB6D4C38611F19E9080EB4211F970.roa File: 027BB6D4C38611F19E9080EB4211F970.roa (raw, json) Hash identifier: 6K0Lsc1VKFK9ljEbC/GmhWaksxlBu3GJroLndVYDTE4= Subject key identifier: E2:62:35:73:33:78:64:0B:78:7A:60:67:DA:84:DA:80:9F:6C:20:37 Certificate issuer: /CN=A91AC70D/serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661 Certificate serial: 19 Authority key identifier: 1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/027BB6D4C38611F19E9080EB4211F970.roa Signing time: Fri 09 Oct 2026 02:06:16 +0000 ROA not before: Fri 09 Oct 2026 02:06:16 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 9587 IP address blocks: 103.26.20.0/22 maxlen: 24 124.40.224.0/20 maxlen: 20 124.40.230.0/24 maxlen: 24 124.40.231.0/24 maxlen: 24 124.40.233.0/24 maxlen: 24 124.40.234.0/24 maxlen: 24 124.40.238.0/24 maxlen: 24 2407:ed00::/32 maxlen: 32 2407:ed00:1eff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC70D, serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661 Validity Not Before: Oct 9 02:06:16 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac84c18-c702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1e:b1:ad:0b:a7:94:7b:c6:76:ea:60:df:be: 40:45:5e:fb:a8:97:a3:fc:3f:52:4f:5b:ee:25:76: cf:8a:36:61:27:9b:04:11:e8:c3:6a:6a:10:2a:1f: 8d:b6:46:9c:8d:bc:9f:c0:f9:51:58:b7:ca:0d:ba: 82:0e:b5:aa:95:90:24:96:2d:61:ae:f2:18:11:06: de:f3:94:c7:a8:ad:15:a7:5d:36:01:6b:32:e8:6f: 9e:f7:ae:32:cb:97:7a:e6:6b:f0:3b:d0:5f:5f:2e: f0:b2:6c:0f:ff:ee:79:ed:c6:d6:8c:0b:47:c6:fe: 6b:ac:a3:89:c7:7c:16:ad:95:6a:aa:45:be:65:8e: e5:02:5f:61:2e:c9:f5:30:0f:c0:da:84:84:09:f3: 7e:09:36:e9:49:1d:33:c5:58:ce:fa:92:3e:30:b6: d8:12:e7:2c:d0:5a:5e:fd:31:da:8a:a4:bb:cf:c1: ce:6f:57:69:61:6d:8d:46:45:8a:f5:23:4f:98:01: 13:7b:f3:4f:5b:64:88:1c:05:ef:7e:93:51:7f:0c: 90:25:fd:9f:fb:d4:a2:93:94:41:52:dc:f0:a8:ca: a5:50:46:45:b8:54:3a:16:70:99:53:9a:21:79:95: a5:e5:c8:80:d4:30:79:22:4f:25:a8:2e:ca:a5:88: c6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:62:35:73:33:78:64:0B:78:7A:60:67:DA:84:DA:80:9F:6C:20:37 X509v3 Authority Key Identifier: keyid:1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/027BB6D4C38611F19E9080EB4211F970.roa sbgp-ipAddrBlock: critical IPv4: 103.26.20.0/22 124.40.224.0/20 IPv6: 2407:ed00::/32 Signature Algorithm: sha256WithRSAEncryption 7a:86:e7:8d:9e:b5:c6:60:c5:3a:70:da:ab:c4:3f:e0:12:a7: 1e:26:31:47:aa:70:84:1d:a5:5d:2d:59:16:b7:b9:4c:85:91: ea:92:2d:4e:fe:b7:d2:e7:fd:7c:93:ce:13:4e:62:bc:ca:2b: a1:5c:cd:7b:d4:21:0c:dc:d3:4e:1a:b7:c6:1a:0a:d1:2b:1a: 37:d7:d6:16:23:84:64:66:c2:91:df:92:75:45:d3:5c:2a:95: e9:e2:8b:8e:36:6d:45:83:47:8e:ef:ab:25:9d:5b:d3:dc:ec: cd:b9:04:73:7d:15:a6:35:bb:89:bb:fc:98:e6:f0:46:48:6a: 8a:f4:58:1e:4c:7a:e5:f9:38:83:29:2e:50:7f:b9:e5:df:9c: cf:29:10:ee:c4:62:bf:c8:a0:dc:75:e7:3e:91:1c:b1:d9:6c: cd:ac:b3:60:b5:aa:3c:9c:e1:19:43:ee:42:a2:b1:c4:6a:da: 2d:c4:84:9b:a0:b2:aa:f9:04:33:f3:b8:c4:24:c7:53:2c:96: ad:8d:4f:86:e8:3f:10:12:65:cd:81:4c:66:a9:2c:18:10:ba: bd:6d:ea:5c:3e:6d:24:cb:ae:7d:c2:25:df:48:83:11:86:9a: 2d:89:c0:51:b5:93:c7:ee:0d:26:1c:61:67:58:1d:7b:e8:81: 8a:d6:53:ce -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzcwRDExMC8GA1UEBRMoMUQxNDRDRTI2MDE5NUU4Q0IzNUY4RjI4ODczMUUyRUEw ODgwMDY2MTAeFw0yNjEwMDkwMjA2MTZaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYzg0YzE4LWM3MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZHrGtC6eUe8Z26mDfvkBFXvuol6P8P1JPW+4lds+KNmEnmwQR6MNqahAqH422 RpyNvJ/A+VFYt8oNuoIOtaqVkCSWLWGu8hgRBt7zlMeorRWnXTYBazLob573rjLL l3rma/A70F9fLvCybA//7nntxtaMC0fG/muso4nHfBatlWqqRb5ljuUCX2EuyfUw D8DahIQJ834JNulJHTPFWM76kj4wttgS5yzQWl79MdqKpLvPwc5vV2lhbY1GRYr1 I0+YARN7809bZIgcBe9+k1F/DJAl/Z/71KKTlEFS3PCoyqVQRkW4VDoWcJlTmiF5 laXlyIDUMHkiTyWoLsqliMadAgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQU4mI1czN4 ZAt4emBn2oTagJ9sIDcwHwYDVR0jBBgwFoAUHRRM4mAZXoyzX48ohzHi6giABmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNzBELzkyREYzOTc0QzA4 QjExRjFCMTQwOEMwMDU0MTFGOTcwL0hSUk00bUFaWG95elg0OG9oekhpNmdpQUJt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFJSTTRtQVpYb3l6WDQ4b2h6SGk2Z2lBQm1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzcwRC85MkRGMzk3NEMwOEIxMUYxQjE0MDhDMDA1NDExRjk3MC8wMjdCQjZENEMz ODYxMUYxOUU5MDgwRUI0MjExRjk3MC5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAJnGhQDBAR8KOAwDQQCAAIwBwMFACQH7QAwDQYJKoZIhvcNAQELBQAD ggEBAHqG542etcZgxTpw2qvEP+ASpx4mMUeqcIQdpV0tWRa3uUyFkeqSLU7+t9Ln /XyTzhNOYrzKK6FczXvUIQzc004at8YaCtErGjfX1hYjhGRmwpHfknVF01wqleni i442bUWDR47vqyWdW9Pc7M25BHN9FaY1u4m7/Jjm8EZIaor0WB5MeuX5OIMpLlB/ ueXfnM8pEO7EYr/IoNx15z6RHLHZbM2ss2C1qjyc4RlD7kKiscRq2i3EhJugsqr5 BDPzuMQkx1Mslq2NT4boPxASZc2BTGapLBgQur1t6lw+bSTLrn3CJd9IgxGGmi2J wFG1k8fuDSYcYWdYHXvogYrWU84= -----END CERTIFICATE-----Generated at Sun Oct 11 19:03:58 2026 by rpki-client