$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/838BC7789A0F11F1B1C23B0D5111F970.roa File: 838BC7789A0F11F1B1C23B0D5111F970.roa (raw, json) Hash identifier: o595B/i1pDK8qP1YvaWFTUXyklKrhEuTIBaUZSJRvt0= Subject key identifier: 00:54:F9:2C:8E:0A:99:29:9E:EE:48:8A:62:E3:1B:E1:23:34:87:E6 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: 0289 Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/838BC7789A0F11F1B1C23B0D5111F970.roa Signing time: Mon 17 Aug 2026 07:45:34 +0000 ROA not before: Mon 17 Aug 2026 07:45:34 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 56196 IP address blocks: 103.197.104.0/24 maxlen: 24 103.197.105.0/24 maxlen: 24 2400:fe20::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: Aug 17 07:45:34 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a82bc1e-0258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:72:79:75:54:b7:d2:69:2a:86:41:c9:f9:22: 6c:d5:b2:ca:24:12:f5:b2:d3:a8:f8:4e:be:c9:86: 98:da:a2:cc:d6:0a:93:19:25:34:75:9f:a3:2b:87: 2f:a0:d5:b9:79:13:1b:b4:e2:69:c4:37:e5:86:23: 41:c2:5c:54:31:4c:27:13:7e:d5:a5:d1:3f:fa:bc: 0d:a5:24:c2:58:ec:39:ba:36:a8:e3:22:d9:05:62: fc:b2:69:f2:bc:33:21:7b:68:9b:3b:f8:ea:f5:b9: 98:19:ea:a8:7d:95:6b:c1:97:89:99:66:55:9d:34: 25:26:e0:5d:14:15:3d:19:f6:fc:b5:d6:71:31:9c: 3e:3b:f3:64:6b:6c:2c:f8:79:2a:43:3d:ed:ac:6a: 38:9a:86:c8:f5:7a:71:0a:a9:f5:9e:0d:91:2a:27: f4:fa:28:f8:83:b8:04:10:86:7c:d9:c5:66:9d:cd: ea:b9:70:2d:15:01:fb:44:67:71:d7:51:af:2d:17: df:8b:ae:ac:89:2c:81:fa:d3:55:bd:40:1f:83:52: 74:9c:14:54:19:d0:35:ec:d1:36:47:af:ec:2d:7e: f7:c3:66:32:b6:02:44:7a:b4:f0:04:39:c4:7d:30: ab:cd:96:b9:5f:af:d3:93:1d:e4:ea:5b:d2:cf:af: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:54:F9:2C:8E:0A:99:29:9E:EE:48:8A:62:E3:1B:E1:23:34:87:E6 X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/838BC7789A0F11F1B1C23B0D5111F970.roa sbgp-ipAddrBlock: critical IPv4: 103.197.104.0/23 IPv6: 2400:fe20::/32 Signature Algorithm: sha256WithRSAEncryption 37:30:c5:3d:23:b0:46:85:6d:40:c8:5f:40:47:2e:ff:80:7a: 77:a9:f9:a1:a1:1e:56:ff:e9:2b:a8:e6:8a:13:5b:1d:0a:b3: 5c:bc:f1:d4:65:8f:a1:53:15:66:c9:01:07:60:09:73:f7:be: 9a:b7:38:18:ab:9e:02:f5:1e:23:67:84:83:58:ad:f0:18:01: 8f:d0:7b:38:67:f5:bd:f0:fe:ed:92:99:99:d0:fc:f2:c9:9f: 87:32:2d:be:c3:4e:ee:a4:06:46:9a:25:90:c9:34:72:f9:50: 91:3e:37:fb:b8:e7:8a:6a:97:ae:7d:c8:96:21:c7:a7:02:81: d9:8c:5c:fe:c6:2e:54:31:56:a2:33:41:15:7c:30:59:93:29: 89:8e:72:f5:79:4f:37:f2:e4:df:81:42:c2:22:39:e7:8b:be: 87:df:b3:98:56:f3:95:f0:1d:d5:59:a4:d7:23:a3:45:b9:51: 0a:13:8a:ba:23:6d:7b:dd:3e:ed:5f:05:2b:ce:4d:5b:95:e2: bb:ac:df:5f:44:64:85:c6:50:10:4d:f6:da:b9:e8:b2:45:64: bd:b6:b3:81:37:54:b8:ce:8b:1d:82:43:e7:d8:07:a1:90:16: c2:a5:47:5c:57:84:f7:73:e1:39:d2:90:ce:54:fb:dd:7b:46: 0d:1c:8b:c7 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjYwODE3MDc0NTM0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgyYmMxZS0wMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7nJ5dVS30mkqhkHJ+SJs1bLKJBL1stOo+E6+yYaY2qLM1gqTGSU0dZ+jK4cv oNW5eRMbtOJpxDflhiNBwlxUMUwnE37VpdE/+rwNpSTCWOw5ujao4yLZBWL8smny vDMhe2ibO/jq9bmYGeqofZVrwZeJmWZVnTQlJuBdFBU9Gfb8tdZxMZw+O/Nka2ws +HkqQz3trGo4mobI9XpxCqn1ng2RKif0+ij4g7gEEIZ82cVmnc3quXAtFQH7RGdx 11GvLRffi66siSyB+tNVvUAfg1J0nBRUGdA17NE2R6/sLX73w2YytgJEerTwBDnE fTCrzZa5X6/Tkx3k6lvSz6//pwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFABU+SyO Cpkpnu5IimLjG+EjNIfmMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY0MDQvNTQ0MDgxRDJGNEQ4MTFFRDk4MDQ2QzRBQzRGOUFFMDIvODM4QkM3Nzg5 QTBGMTFGMUIxQzIzQjBENTExMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ8VoMA0EAgACMAcDBQAkAP4gMA0GCSqGSIb3DQEBCwUAA4IBAQA3 MMU9I7BGhW1AyF9ARy7/gHp3qfmhoR5W/+krqOaKE1sdCrNcvPHUZY+hUxVmyQEH YAlz976atzgYq54C9R4jZ4SDWK3wGAGP0Hs4Z/W98P7tkpmZ0PzyyZ+HMi2+w07u pAZGmiWQyTRy+VCRPjf7uOeKapeufciWIcenAoHZjFz+xi5UMVaiM0EVfDBZkymJ jnL1eU838uTfgULCIjnni76H37OYVvOV8B3VWaTXI6NFuVEKE4q6I2173T7tXwUr zk1bleK7rN9fRGSFxlAQTfbaueiyRWS9trOBN1S4zosdgkPn2AehkBbCpUdcV4T3 c+E50pDOVPvde0YNHIvH -----END CERTIFICATE-----Generated at Mon Sep 21 21:55:57 2026 by rpki-client