$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/90647F2EA14A11ED8FFBA684C4F9AE02.roa File: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (raw, json) Hash identifier: 4beFvb4hxPowcDYshVeExpQg/8txXAvZVZ0I7WzOu3o= Subject key identifier: A9:DF:3C:E7:81:D9:FD:25:87:D7:EF:89:40:4F:06:49:77:3B:74:B8 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 0477 Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/90647F2EA14A11ED8FFBA684C4F9AE02.roa Signing time: Sun 13 Sep 2026 01:51:20 +0000 ROA not before: Sun 13 Sep 2026 01:51:20 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 132335 IP address blocks: 45.252.190.0/24 maxlen: 24 103.205.140.0/24 maxlen: 24 103.205.141.0/24 maxlen: 24 103.205.142.0/24 maxlen: 24 103.205.143.0/24 maxlen: 24 103.217.220.0/24 maxlen: 24 103.217.221.0/24 maxlen: 24 103.217.222.0/24 maxlen: 24 103.217.223.0/24 maxlen: 24 103.227.1.0/24 maxlen: 24 103.247.19.0/24 maxlen: 24 202.94.172.0/24 maxlen: 24 202.94.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Sep 13 01:51:20 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa60197-34be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e2:bb:91:1a:d4:1d:96:7f:06:1f:9c:ea:ce: 77:e8:10:8e:e9:30:15:db:80:79:8d:97:59:4e:0a: 81:78:0e:c2:a2:89:07:27:fd:32:db:42:cc:59:55: 51:ba:4a:f4:03:07:a7:a1:b5:ac:43:3d:42:04:fe: db:ff:40:54:2a:72:f6:1a:2c:27:64:00:ab:41:5e: 25:7e:35:93:16:c0:f9:61:ab:e3:77:f5:cb:bc:9e: 07:8b:be:3c:03:44:93:7c:86:6f:a4:ee:f6:df:77: 17:d5:e6:74:be:ee:80:0c:54:de:1d:ae:89:69:6d: d2:ba:02:fc:36:f0:d7:cc:4f:b7:8d:c9:ac:1f:dd: 7e:8b:f9:2b:df:97:32:3c:66:16:8d:05:f0:a9:2a: 51:dd:a1:40:74:5e:ca:ce:47:d5:c1:2d:57:c1:24: 40:48:91:69:a8:49:0c:6b:46:1d:de:12:86:34:79: 1a:8e:ce:c9:c9:e2:54:6c:f6:ea:77:54:b1:2a:18: c2:0d:60:71:28:89:16:bc:17:74:2e:4d:88:f5:e9: 62:d5:c1:f5:ca:18:d9:31:e6:1d:77:f6:92:d8:b1: c2:af:08:fc:19:37:eb:aa:9a:ed:de:c3:8e:ea:14: 94:4a:76:51:d1:0e:8a:f0:b8:1f:04:31:54:77:ae: 7b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DF:3C:E7:81:D9:FD:25:87:D7:EF:89:40:4F:06:49:77:3B:74:B8 X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/90647F2EA14A11ED8FFBA684C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.252.190.0/24 103.205.140.0/22 103.217.220.0/22 103.227.1.0/24 103.247.19.0/24 202.94.172.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:57:bc:55:0e:8a:9b:01:26:3b:96:03:77:01:94:b1:e4:47: 49:ef:46:da:7f:67:fd:d9:ae:18:4e:f5:51:24:fa:c0:cd:ef: ee:05:48:92:0e:3a:1d:a2:22:b1:59:24:71:60:26:92:d3:dd: 5e:52:10:9e:b1:9a:5b:f8:bc:0e:d1:61:4d:9f:bb:ce:21:07: d0:c9:a4:24:ff:c9:6a:6c:58:15:b9:36:fe:39:4e:53:52:99: b2:b7:84:0d:ae:0c:ac:ba:f1:c8:39:fa:d9:25:dd:22:c3:e6: 18:c3:48:b1:ff:81:21:f4:7d:0c:47:be:f6:af:0e:09:11:73: 77:3e:1a:67:08:01:67:6e:90:c8:26:b9:f0:54:eb:23:cb:29: cb:26:77:6a:37:e3:72:07:0b:c2:5e:3f:11:91:e8:34:6a:76: f4:d9:df:e0:ca:bb:d5:95:55:88:1c:dc:c1:db:35:1a:bc:d3: df:d6:6e:87:76:c2:c4:84:89:1f:45:c4:c7:79:07:fe:45:21: 91:8e:0b:95:75:56:92:f4:ad:7e:8f:99:19:0b:24:b9:19:09: f3:9f:21:c4:b5:ef:d7:07:cb:eb:4c:3d:47:e5:d3:a2:db:d2: 47:82:1f:b9:80:3c:dd:d4:52:73:35:4a:c5:10:0d:db:64:2e: d9:78:ab:3b -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjYwOTEzMDE1MTIwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE2MDE5Ny0zNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OK7kRrUHZZ/Bh+c6s536BCO6TAV24B5jZdZTgqBeA7CookHJ/0y20LMWVVR ukr0AwenobWsQz1CBP7b/0BUKnL2GiwnZACrQV4lfjWTFsD5Yavjd/XLvJ4Hi748 A0STfIZvpO7233cX1eZ0vu6ADFTeHa6JaW3SugL8NvDXzE+3jcmsH91+i/kr35cy PGYWjQXwqSpR3aFAdF7KzkfVwS1XwSRASJFpqEkMa0Yd3hKGNHkajs7JyeJUbPbq d1SxKhjCDWBxKIkWvBd0Lk2I9eli1cH1yhjZMeYdd/aS2LHCrwj8GTfrqprt3sOO 6hSUSnZR0Q6K8LgfBDFUd657XQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKnfPOeB 2f0lh9fviUBPBkl3O3S4MB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvOTA2NDdGMkVB MTRBMTFFRDhGRkJBNjg0QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQALfy+AwQCZ82MAwQCZ9ncAwQAZ+MBAwQAZ/cTAwQByl6sMA0GCSqG SIb3DQEBCwUAA4IBAQBdV7xVDoqbASY7lgN3AZSx5EdJ70baf2f92a4YTvVRJPrA ze/uBUiSDjodoiKxWSRxYCaS091eUhCesZpb+LwO0WFNn7vOIQfQyaQk/8lqbFgV uTb+OU5TUpmyt4QNrgysuvHIOfrZJd0iw+YYw0ix/4Eh9H0MR772rw4JEXN3Phpn CAFnbpDIJrnwVOsjyynLJndqN+NyBwvCXj8Rkeg0anb02d/gyrvVlVWIHNzB2zUa vNPf1m6HdsLEhIkfRcTHeQf+RSGRjguVdVaS9K1+j5kZCyS5GQnznyHEte/XB8vr TD1H5dOi29JHgh+5gDzd1FJzNUrFEA3bZC7ZeKs7 -----END CERTIFICATE-----Generated at Mon Sep 21 02:27:56 2026 by rpki-client