$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/3F202DE4993911F18F87526B4F11F970.roa File: 3F202DE4993911F18F87526B4F11F970.roa (raw, json) Hash identifier: GSAC+7o5SvtGwbHQMbuD2JkQo56sQ3KcyyGSI1Idma8= Subject key identifier: 37:FF:EE:A6:FF:C5:41:F9:F5:96:D3:C1:B1:6D:AF:51:A1:EF:03:2C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 16D9 Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/3F202DE4993911F18F87526B4F11F970.roa Signing time: Sun 16 Aug 2026 06:10:58 +0000 ROA not before: Sun 16 Aug 2026 06:10:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136530 IP address blocks: 103.90.144.0/22 maxlen: 24 2400:f6c0::/32 maxlen: 32 2400:f6c0:100::/40 maxlen: 40 2400:f6c0:200::/40 maxlen: 40 2400:f6c0:300::/40 maxlen: 40 2400:f6c0:400::/40 maxlen: 40 2400:f6c0:500::/40 maxlen: 40 2400:f6c0:600::/40 maxlen: 40 2400:f6c0:700::/40 maxlen: 40 2400:f6c0:800::/40 maxlen: 40 2400:f6c0:900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5849 (0x16d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Aug 16 06:10:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a815472-d09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8f:28:c8:b8:5a:a4:98:f3:40:c4:bb:38:91: 6c:62:bf:ba:06:8b:a5:7f:43:3d:e5:d4:d1:f2:b4: 54:34:7a:bd:ae:ff:00:f0:bb:d3:72:30:36:3b:6d: a5:4c:a8:66:68:85:31:b7:10:2f:a0:6d:40:dd:bb: 76:62:52:83:a3:00:38:9c:cc:78:4f:f2:45:75:eb: 8a:b1:d2:b9:19:d5:c9:b7:f1:6d:be:36:3a:a9:f7: 59:d1:5b:a5:0a:05:2d:ea:e5:df:f5:31:10:57:99: 9f:d3:4a:c8:be:fc:71:f4:60:cc:41:e9:20:3d:e9: 63:79:5e:df:55:9b:79:12:99:63:81:60:85:14:ea: 09:58:06:76:41:e6:c2:84:a5:64:27:3d:de:03:5b: e6:2b:72:72:fa:12:a7:a2:46:e5:57:4f:79:01:f5: ab:67:3a:43:e4:bf:47:3b:68:ef:89:3c:1c:b1:c1: 4b:f8:f4:57:33:75:d4:af:9b:66:17:5a:27:1f:35: e1:fe:9d:a3:ce:62:df:16:13:ef:c3:9b:d7:86:b0: 6d:97:eb:83:11:0d:36:6e:03:76:2b:2b:2e:34:24: 8b:82:dc:ed:d7:4d:81:f9:2d:96:e2:93:30:e7:ff: 34:51:3c:2b:d3:79:3b:7f:ca:6a:39:e4:a9:9e:92: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FF:EE:A6:FF:C5:41:F9:F5:96:D3:C1:B1:6D:AF:51:A1:EF:03:2C X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/3F202DE4993911F18F87526B4F11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.90.144.0/22 IPv6: 2400:f6c0::/32 Signature Algorithm: sha256WithRSAEncryption 58:08:a8:3f:42:85:62:58:09:cd:53:90:6f:8d:ba:6b:cb:bc: 4f:34:73:5d:24:18:6a:d2:65:a1:12:35:1b:c9:94:5c:fe:a7: 4d:4e:2c:74:be:ff:13:e8:ac:65:5f:9c:14:4e:17:22:ab:5f: 52:68:dd:52:a3:1b:c5:eb:34:10:ba:ce:31:84:81:1c:4f:19: 24:b2:ec:56:7f:3d:34:c8:44:17:c8:d1:cc:e0:e5:24:45:bf: c1:84:e7:7a:6b:e9:01:d7:2b:4a:10:bb:52:27:66:6d:54:0a: 1a:85:31:5b:41:1c:2b:10:5d:b6:3f:04:6f:72:26:96:04:26: 2a:d5:83:39:bc:ae:e3:4b:03:7c:20:88:35:03:27:cf:3a:54: 41:f1:05:59:b4:e2:3e:95:e5:90:29:da:ce:13:9d:16:81:6b: 5f:f4:4e:60:95:d0:13:7c:b4:4d:fd:0a:ae:15:63:bc:d7:b3: d3:7a:84:5f:2b:84:de:83:f7:27:bd:0a:f6:0a:8c:b3:28:92: e3:82:f0:08:c1:fb:42:bd:c3:1c:63:71:8f:89:b7:12:5d:09: 1e:bb:b2:aa:93:e4:8d:46:47:f2:cd:72:63:07:d0:ff:e8:66: 41:62:47:b2:49:1c:a6:2c:1c:8b:ed:3f:9e:f0:1c:96:5e:22: 76:4f:8e:ef -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICFtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjYwODE2MDYxMDU4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgxNTQ3Mi1kMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7I8oyLhapJjzQMS7OJFsYr+6Boulf0M95dTR8rRUNHq9rv8A8LvTcjA2O22l TKhmaIUxtxAvoG1A3bt2YlKDowA4nMx4T/JFdeuKsdK5GdXJt/FtvjY6qfdZ0Vul CgUt6uXf9TEQV5mf00rIvvxx9GDMQekgPeljeV7fVZt5EpljgWCFFOoJWAZ2QebC hKVkJz3eA1vmK3Jy+hKnokblV095AfWrZzpD5L9HO2jviTwcscFL+PRXM3XUr5tm F1onHzXh/p2jzmLfFhPvw5vXhrBtl+uDEQ02bgN2KysuNCSLgtzt102B+S2W4pMw 5/80UTwr03k7f8pqOeSpnpLavwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDf/7qb/ xUH59ZbTwbFtr1Gh7wMsMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJDREEvRjRFMkJBQjgyNUMzMTFFOEEwNzE0QTM0QzRGOUFFMDIvM0YyMDJERTQ5 OTM5MTFGMThGODc1MjZCNEYxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ1qQMA0EAgACMAcDBQAkAPbAMA0GCSqGSIb3DQEBCwUAA4IBAQBY CKg/QoViWAnNU5Bvjbpry7xPNHNdJBhq0mWhEjUbyZRc/qdNTix0vv8T6KxlX5wU Thciq19SaN1SoxvF6zQQus4xhIEcTxkksuxWfz00yEQXyNHM4OUkRb/BhOd6a+kB 1ytKELtSJ2ZtVAoahTFbQRwrEF22PwRvciaWBCYq1YM5vK7jSwN8IIg1AyfPOlRB 8QVZtOI+leWQKdrOE50WgWtf9E5gldATfLRN/QquFWO817PTeoRfK4Teg/cnvQr2 CoyzKJLjgvAIwftCvcMcY3GPibcSXQkeu7Kqk+SNRkfyzXJjB9D/6GZBYkeySRym LByL7T+e8ByWXiJ2T47v -----END CERTIFICATE-----Generated at Fri Oct 9 02:29:06 2026 by rpki-client