$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa File: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (raw, json) Hash identifier: ScpjORZmn+vL8yc91GDtzc451SzfE69TeEu9yzTW0Wc= Subject key identifier: 41:99:E2:A2:6C:7F:95:CB:C9:81:71:36:78:40:67:38:E5:C8:FF:52 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 1156 Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa Signing time: Fri 18 Sep 2026 17:34:15 +0000 ROA not before: Fri 18 Sep 2026 17:34:15 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 58433 IP address blocks: 103.5.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4438 (0x1156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Sep 18 17:34:15 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6aad7617-dcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:70:b4:9e:49:53:7f:2e:37:b4:9c:de:da: 12:e4:91:f8:dd:51:fc:26:76:7c:13:75:7b:22:2f: ea:33:51:2d:78:fe:60:04:65:6d:70:dc:6f:12:c7: 46:08:bf:5f:19:99:26:1a:d0:21:7a:29:54:48:c5: f2:1c:f7:24:9f:ec:6e:74:ec:af:ba:8c:a6:e3:3c: 6b:1d:e8:9c:0a:94:d0:e0:9b:a7:67:02:b6:39:a2: 58:fe:59:98:26:d1:f6:da:4d:5c:cb:99:9c:76:09: 47:3f:42:a0:0a:e9:5f:27:d8:49:7c:01:36:e5:32: 50:09:b5:c3:45:51:3e:6e:e4:45:61:3a:95:66:cc: 95:1d:25:34:85:63:74:66:4b:53:16:c2:f6:63:39: c8:d1:d8:9f:c6:5e:cd:eb:f4:fa:78:ac:ec:57:91: 64:27:af:13:76:b9:bd:84:88:cb:2c:56:ff:2a:71: 4d:86:7e:93:31:98:52:2d:0f:98:84:89:6c:65:59: 42:a5:05:f1:bd:e3:1a:1a:a8:53:a4:ec:50:97:2c: b4:a7:8c:07:45:d5:af:da:fd:75:07:41:e5:07:73: 8b:54:16:98:da:29:ba:a9:89:10:c7:fc:3a:da:d1: a3:8a:c5:7d:40:fc:9b:7a:48:ef:34:bd:83:1e:7b: d9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:99:E2:A2:6C:7F:95:CB:C9:81:71:36:78:40:67:38:E5:C8:FF:52 X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.5.228.0/23 Signature Algorithm: sha256WithRSAEncryption 43:98:05:b9:4e:13:b2:9a:e2:9d:d5:11:a9:de:76:ce:14:3c: bf:4f:1a:13:fe:b3:90:2f:a8:38:28:b5:a7:72:94:f0:23:d7: 8e:8a:ad:c2:d9:77:45:0d:52:90:a7:44:9c:0c:60:2d:67:3a: a7:10:99:a5:5d:2b:8a:ba:03:96:f0:4e:db:98:a0:8c:06:9f: 36:81:9a:6d:96:bf:8e:fc:be:41:b2:c5:ac:9c:ed:a6:0c:38: 13:0a:d8:9b:73:bd:af:bc:3b:07:a3:ad:74:9a:a6:9c:70:ba: 47:07:e5:57:f7:cf:9f:29:29:f4:fe:ab:5a:7b:b4:f5:70:5e: d7:66:d8:2e:30:42:17:f1:10:a2:32:01:ce:dc:a4:d8:d0:cd: f7:4f:6a:74:0c:50:fa:dd:32:2a:4b:c6:92:fc:ff:fa:5f:3d: e2:16:40:8f:ff:fb:47:b0:41:ac:a2:4f:dc:ba:94:77:7e:e4: ea:dc:5b:e0:7e:4b:a8:b7:71:c6:65:ea:ab:64:2d:9f:73:45: 97:74:ba:0a:8b:27:e2:46:1a:0b:a2:6d:6f:e8:9c:36:bd:c8: c4:95:53:f8:ad:7a:cc:57:5a:29:fb:de:76:62:83:d1:ed:47: 26:7a:48:dc:47:cf:ed:44:03:6e:b6:e5:fe:ab:d3:ad:95:1a: 2a:41:d8:39 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjYwOTE4MTczNDE1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFkNzYxNy1kY2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYZwtJ5JU38uN7Sc3toS5JH43VH8JnZ8E3V7Ii/qM1EteP5gBGVtcNxvEsdG CL9fGZkmGtAheilUSMXyHPckn+xudOyvuoym4zxrHeicCpTQ4JunZwK2OaJY/lmY JtH22k1cy5mcdglHP0KgCulfJ9hJfAE25TJQCbXDRVE+buRFYTqVZsyVHSU0hWN0 ZktTFsL2YznI0difxl7N6/T6eKzsV5FkJ68Tdrm9hIjLLFb/KnFNhn6TMZhSLQ+Y hIlsZVlCpQXxveMaGqhTpOxQlyy0p4wHRdWv2v11B0HlB3OLVBaY2im6qYkQx/w6 2tGjisV9QPybekjvNL2DHnvZSQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEGZ4qJs f5XLyYFxNnhAZzjlyP9SMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMxQ0UvMjRGQTYwRTQzN0VDMTFFOUE4NzVFODQ4QzRGOUFFMDIvNDE3OEI4MzIz N0VEMTFFOTlCM0M5QzRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZwXkMA0GCSqGSIb3DQEBCwUAA4IBAQBDmAW5ThOymuKd1RGp3nbO FDy/TxoT/rOQL6g4KLWncpTwI9eOiq3C2XdFDVKQp0ScDGAtZzqnEJmlXSuKugOW 8E7bmKCMBp82gZptlr+O/L5BssWsnO2mDDgTCtibc72vvDsHo610mqaccLpHB+VX 98+fKSn0/qtae7T1cF7XZtguMEIX8RCiMgHO3KTY0M33T2p0DFD63TIqS8aS/P/6 Xz3iFkCP//tHsEGsok/cupR3fuTq3Fvgfkuot3HGZeqrZC2fc0WXdLoKiyfiRhoL om1v6Jw2vcjElVP4rXrMV1op+952YoPR7UcmekjcR8/tRANutuX+q9OtlRoqQdg5 -----END CERTIFICATE-----Generated at Fri Sep 25 16:16:05 2026 by rpki-client