$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FDC6A888AEB111EE9A78E132C4F9AE02.roa File: FDC6A888AEB111EE9A78E132C4F9AE02.roa (raw, json) Hash identifier: aTh/szGkbByCO+bl8x7ZpvLQYMqSV+pbAIP3Duch7WM= Subject key identifier: 01:DD:91:4B:AC:A2:02:56:82:A6:F1:36:CA:93:40:57:49:52:E8:F9 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 047C Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FDC6A888AEB111EE9A78E132C4F9AE02.roa Signing time: Sun 13 Sep 2026 01:51:29 +0000 ROA not before: Sun 13 Sep 2026 01:51:29 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 146943 IP address blocks: 103.101.58.0/24 maxlen: 24 103.101.59.0/24 maxlen: 24 103.205.140.0/24 maxlen: 24 103.205.142.0/24 maxlen: 24 103.205.143.0/24 maxlen: 24 103.217.222.0/24 maxlen: 24 103.217.223.0/24 maxlen: 24 103.227.1.0/24 maxlen: 24 202.94.172.0/24 maxlen: 24 202.94.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Sep 13 01:51:29 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa601a1-5f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:01:bb:45:87:9c:dd:e5:c6:59:ee:4b:18: 9c:ab:ac:b8:58:08:b8:9a:b3:fd:c7:d8:5f:23:72: 04:b4:09:5e:7e:ca:59:7f:5b:92:a7:5e:0f:d3:4b: 7a:a3:ee:b4:b7:c5:2b:24:5b:85:4c:bb:13:2a:eb: 77:4a:a3:91:b4:ca:a6:ec:58:9f:2b:0f:d1:0c:09: 22:b8:53:4f:a4:ba:75:76:57:27:04:64:19:1f:d5: 31:bc:77:2d:98:76:8d:4d:ab:05:ce:b8:22:c3:d0: 80:72:08:ab:f9:47:7b:90:5d:0a:14:a2:c4:9f:1f: 96:86:90:e0:86:70:22:ef:80:73:14:33:f5:c0:2e: 65:fc:2b:02:87:67:91:7e:1f:a2:1d:e6:00:e9:df: cf:ab:fd:40:09:85:f9:19:77:7b:56:9b:39:54:02: 76:3c:bc:4a:c3:06:fc:2e:f2:fb:c2:92:e4:5a:64: 3a:15:b1:84:86:17:f7:a4:6b:09:af:87:2c:ec:0c: 45:5a:47:c7:c7:b8:e2:a1:ae:21:f0:f2:d8:2e:36: 77:31:06:b1:e6:02:43:50:87:ae:0f:cf:53:d6:de: 5e:a1:1d:a1:16:f1:39:6c:64:45:81:9b:64:c5:70: 9b:c4:0a:06:a6:aa:bf:dc:73:f4:7f:e3:68:25:19: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DD:91:4B:AC:A2:02:56:82:A6:F1:36:CA:93:40:57:49:52:E8:F9 X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FDC6A888AEB111EE9A78E132C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.58.0/23 103.205.140.0/24 103.205.142.0/23 103.217.222.0/23 103.227.1.0/24 202.94.172.0/23 Signature Algorithm: sha256WithRSAEncryption 79:5a:20:f4:46:00:53:d7:ca:b7:97:51:b3:a3:3f:09:85:c8: 73:3a:c2:e1:3a:32:59:ea:88:50:81:be:0a:2d:95:55:dd:c4: a0:b8:03:56:45:89:7b:97:5b:a6:16:5b:7d:4b:3c:36:42:19: e0:01:38:b6:fd:c5:54:76:4a:4d:66:f4:56:9a:b8:50:55:1f: aa:e5:80:00:8a:ee:1e:8f:12:f9:e8:51:af:3d:d9:18:ce:a9: 92:17:cb:b0:a5:57:99:ea:39:40:c1:75:66:3e:f9:13:16:e8: 6c:4a:f0:9e:fa:b5:b9:a2:2d:37:51:09:28:4a:43:9c:f3:db: 5f:a0:b1:de:bf:78:dc:27:c4:7c:99:21:7d:07:88:90:6c:62: ce:27:66:3b:e2:2b:cd:e4:bc:c0:09:f1:0a:15:46:db:33:5e: f4:b4:47:0a:94:36:37:0d:fc:04:9f:ae:ad:a5:10:b0:40:1e: 12:6d:c7:79:db:a8:9c:37:8b:86:93:4b:32:4e:36:13:5f:f8: 2b:48:f5:29:56:48:7f:80:2c:26:89:51:a5:f6:41:06:9c:af: c0:c9:cd:40:01:d1:d5:7e:5b:98:2d:27:af:58:43:e6:b8:37: d3:45:42:73:83:f4:f2:b4:bc:c1:7c:86:7e:45:0f:ac:4e:32: dd:c6:56:fa -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjYwOTEzMDE1MTI5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE2MDFhMS01ZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3UBu0WHnN3lxlnuSxicq6y4WAi4mrP9x9hfI3IEtAlefspZf1uSp14P00t6 o+60t8UrJFuFTLsTKut3SqORtMqm7FifKw/RDAkiuFNPpLp1dlcnBGQZH9UxvHct mHaNTasFzrgiw9CAcgir+Ud7kF0KFKLEnx+WhpDghnAi74BzFDP1wC5l/CsCh2eR fh+iHeYA6d/Pq/1ACYX5GXd7Vps5VAJ2PLxKwwb8LvL7wpLkWmQ6FbGEhhf3pGsJ r4cs7AxFWkfHx7jioa4h8PLYLjZ3MQax5gJDUIeuD89T1t5eoR2hFvE5bGRFgZtk xXCbxAoGpqq/3HP0f+NoJRnedQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFAHdkUus ogJWgqbxNsqTQFdJUuj5MB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvRkRDNkE4ODhB RUIxMTFFRTlBNzhFMTMyQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQBZ2U6AwQAZ82MAwQBZ82OAwQBZ9neAwQAZ+MBAwQByl6sMA0GCSqG SIb3DQEBCwUAA4IBAQB5WiD0RgBT18q3l1Gzoz8JhchzOsLhOjJZ6ohQgb4KLZVV 3cSguANWRYl7l1umFlt9Szw2QhngATi2/cVUdkpNZvRWmrhQVR+q5YAAiu4ejxL5 6FGvPdkYzqmSF8uwpVeZ6jlAwXVmPvkTFuhsSvCe+rW5oi03UQkoSkOc89tfoLHe v3jcJ8R8mSF9B4iQbGLOJ2Y74ivN5LzACfEKFUbbM170tEcKlDY3DfwEn66tpRCw QB4Sbcd526icN4uGk0syTjYTX/grSPUpVkh/gCwmiVGl9kEGnK/Ayc1AAdHVfluY LSevWEPmuDfTRUJzg/TytLzBfIZ+RQ+sTjLdxlb6 -----END CERTIFICATE-----Generated at Mon Sep 21 18:04:04 2026 by rpki-client