$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/86B7FE9005FF11EAB499A845C4F9AE02.roa File: 86B7FE9005FF11EAB499A845C4F9AE02.roa (raw, json) Hash identifier: 6i+0csobfxcLhowCrLQuJdS1e1VNTQamZWFCkNPd7So= Subject key identifier: A5:01:E9:E0:B5:33:47:BD:E1:E2:1C:45:E7:C1:A6:84:FE:3D:A6:5D Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0D3E Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/86B7FE9005FF11EAB499A845C4F9AE02.roa Signing time: Mon 14 Sep 2026 18:36:09 +0000 ROA not before: Mon 14 Sep 2026 18:36:09 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136901 IP address blocks: 103.98.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3390 (0xd3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Sep 14 18:36:09 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa83e99-ff57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:06:e5:78:77:13:1b:f1:eb:b8:7a:4c:0a: a3:b3:dd:b5:00:1a:c7:4d:63:c7:06:54:17:8b:4c: 3d:df:89:a7:7b:1f:a5:6c:25:14:72:43:7f:aa:d8: 55:a2:11:56:88:87:a1:db:5c:23:68:f6:b1:80:72: 5b:b6:0e:5d:f5:cf:50:5d:de:c1:6b:dc:58:72:3c: dc:aa:d4:92:7f:98:5b:fd:3a:20:fa:d7:9d:7e:86: 94:c1:71:04:36:d5:e1:ed:f3:18:26:7e:a2:a7:53: 0f:14:6b:8f:04:66:a5:3e:43:57:ab:a6:3b:98:da: 89:de:c7:8d:41:89:2e:39:4e:94:47:be:99:b1:41: a4:1d:54:f8:b9:08:a7:8b:ea:97:1b:c3:ae:1b:a5: 7c:b4:1e:91:a8:64:b7:42:5d:e6:80:26:6d:09:62: 09:a6:21:a9:24:c9:c9:a3:e8:df:a9:30:8d:1f:a9: 1b:d6:4d:73:24:7e:ca:3d:b8:9a:bb:11:35:01:28: 59:4a:d1:3f:28:fe:8b:0c:0f:c9:a4:07:c7:a7:6b: ff:cc:74:4e:1e:09:83:64:57:00:75:ee:89:73:37: 11:a7:57:57:38:12:43:d2:35:99:54:f1:75:f0:b1: be:e8:0c:a4:d3:08:98:82:84:94:8e:e2:82:cc:61: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:01:E9:E0:B5:33:47:BD:E1:E2:1C:45:E7:C1:A6:84:FE:3D:A6:5D X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/86B7FE9005FF11EAB499A845C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.98.64.0/22 Signature Algorithm: sha256WithRSAEncryption 13:05:9a:dc:c3:24:0e:b5:75:e8:43:aa:75:2a:32:63:11:60: 10:19:83:87:4c:07:29:7d:70:8b:c1:46:70:f6:7d:d8:97:d9: 4f:84:6f:a7:c7:c5:04:39:5a:b1:8a:99:75:68:63:3b:0b:52: 8f:5b:ad:e2:8b:32:4c:e2:05:54:18:f2:74:3d:69:62:08:b8: ea:c8:dc:cf:9c:53:fe:7b:22:f8:83:a1:8d:c4:68:82:92:d8: 0f:ef:ee:6c:c5:22:de:83:ab:73:25:5d:c8:67:dd:e5:14:c4: b5:a0:22:6b:ad:c6:60:68:12:a1:51:b7:fb:81:59:c9:62:3e: ce:be:b8:33:e8:96:10:a9:d9:57:dc:a2:55:a3:6f:ed:cb:82: c2:ea:f7:01:b0:2d:0c:1c:6c:47:97:90:ac:8e:4e:a6:6d:ad: 4d:25:94:02:23:ab:3b:df:37:59:66:f0:d0:19:55:db:fe:dd: 7e:53:11:8f:18:dd:91:da:47:b2:9b:27:90:4f:28:90:79:b4: 58:65:27:1c:44:4d:70:5c:f4:8e:db:7a:ba:b4:96:3e:77:0e: 37:9e:0a:30:4b:a2:10:33:28:fa:7c:7e:5a:59:8c:94:a2:e4: 6e:d1:52:38:43:39:75:0e:41:c1:c1:9a:e4:38:b1:52:c9:a5: d7:12:73:b1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjYwOTE0MTgzNjA5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4M2U5OS1mZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1l4G5Xh3Exvx67h6TAqjs921ABrHTWPHBlQXi0w934mnex+lbCUUckN/qthV ohFWiIeh21wjaPaxgHJbtg5d9c9QXd7Ba9xYcjzcqtSSf5hb/Tog+tedfoaUwXEE NtXh7fMYJn6ip1MPFGuPBGalPkNXq6Y7mNqJ3seNQYkuOU6UR76ZsUGkHVT4uQin i+qXG8OuG6V8tB6RqGS3Ql3mgCZtCWIJpiGpJMnJo+jfqTCNH6kb1k1zJH7KPbia uxE1AShZStE/KP6LDA/JpAfHp2v/zHROHgmDZFcAde6JczcRp1dXOBJD0jWZVPF1 8LG+6Ayk0wiYgoSUjuKCzGH7nQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKUB6eC1 M0e94eIcRefBpoT+PaZdMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFGQUMvNjgxOUJGNDIwNUZFMTFFQTg3NjNDMjQzQzRGOUFFMDIvODZCN0ZFOTAw NUZGMTFFQUI0OTlBODQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2JAMA0GCSqGSIb3DQEBCwUAA4IBAQATBZrcwyQOtXXoQ6p1KjJj EWAQGYOHTAcpfXCLwUZw9n3Yl9lPhG+nx8UEOVqxipl1aGM7C1KPW63iizJM4gVU GPJ0PWliCLjqyNzPnFP+eyL4g6GNxGiCktgP7+5sxSLeg6tzJV3IZ93lFMS1oCJr rcZgaBKhUbf7gVnJYj7Ovrgz6JYQqdlX3KJVo2/ty4LC6vcBsC0MHGxHl5Csjk6m ba1NJZQCI6s73zdZZvDQGVXb/t1+UxGPGN2R2keymyeQTyiQebRYZSccRE1wXPSO 23q6tJY+dw43ngowS6IQMyj6fH5aWYyUouRu0VI4Qzl1DkHBwZrkOLFSyaXXEnOx -----END CERTIFICATE-----Generated at Tue Sep 22 18:25:47 2026 by rpki-client