$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/DE6E8CA8257F11F0823F9E46C4F9AE02.roa File: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (raw, json) Hash identifier: j601VB2aV1i6zHcGHGnI+gjwgTNPmShSUWofaXd/nyI= Subject key identifier: A7:E5:C9:57:CB:7D:F1:2E:DC:63:F3:8A:C4:15:8C:AD:D7:62:0E:56 Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 07FB Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/DE6E8CA8257F11F0823F9E46C4F9AE02.roa Signing time: Wed 02 Sep 2026 21:42:46 +0000 ROA not before: Wed 02 Sep 2026 21:42:46 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 62468 IP address blocks: 103.68.192.0/22 maxlen: 24 121.54.188.0/22 maxlen: 22 121.54.188.0/23 maxlen: 24 121.54.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: Sep 2 21:42:46 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a989856-04c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:2e:ac:83:23:9f:78:cf:29:d5:7b:00:9f: 58:37:c0:d1:b4:cd:06:0a:c3:aa:8a:da:df:2e:ee: 91:0e:99:ee:dd:d0:6c:8e:ad:5d:c2:f6:72:dd:36: 1f:dd:02:07:15:6d:c0:cc:57:ff:5b:ca:80:fd:bc: fc:90:61:ee:dc:bd:ef:7c:46:f7:3b:f7:30:eb:46: f1:cf:02:67:73:78:ae:2a:86:ca:85:c4:aa:8a:24: 23:21:4f:ce:58:5b:49:00:27:63:aa:0f:2b:3f:54: ff:c4:f6:b6:d4:b1:ed:2e:f7:cd:e0:7e:93:17:84: da:92:4d:f3:fc:36:43:e2:42:3a:65:ac:50:1f:01: 26:4e:d1:11:af:50:ec:9c:61:6f:b4:54:7a:d5:da: e0:5d:57:be:d0:dd:99:31:7b:3a:f9:b3:f1:e5:30: e2:f4:11:32:0f:67:54:c4:f6:c8:11:fe:76:67:5f: af:17:86:c6:14:f6:9b:3e:11:92:5c:d0:1c:db:44: b8:57:75:e1:a4:78:3c:a2:e8:bb:fc:46:d2:d1:f0: 7f:7b:d9:0e:d7:ce:a9:f8:88:dc:c9:6c:03:be:be: 30:1a:62:93:2b:db:42:29:d7:e8:69:d1:3c:de:62: 0f:25:63:75:43:3f:d4:9e:09:5a:0a:f6:ef:27:21: 97:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E5:C9:57:CB:7D:F1:2E:DC:63:F3:8A:C4:15:8C:AD:D7:62:0E:56 X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/DE6E8CA8257F11F0823F9E46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.192.0/22 121.54.188.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:bb:0b:72:3e:9f:a2:a3:fa:9a:3e:f8:e3:71:f0:86:2a:89: b9:ae:a7:14:4b:ee:38:77:47:0a:f2:68:70:a5:63:e9:ac:f8: 08:a8:7f:50:04:64:58:b1:30:d3:1d:86:43:fc:22:60:66:f0: 79:de:19:96:53:52:33:eb:d7:1a:08:eb:36:80:3c:38:7f:59: 29:a9:a5:17:c6:d3:2b:83:18:be:31:f1:83:6a:c7:c3:f7:09: 46:62:d8:83:52:b0:4c:e6:20:57:c1:57:c9:b2:f9:2b:93:d5: af:79:21:44:cd:15:26:2a:36:44:0f:4c:94:ba:e4:b7:3b:b3: b8:4e:8a:0f:a2:cc:a9:f8:50:f9:f0:27:90:75:fa:f4:90:72: 1f:f1:a4:8c:07:7f:21:9b:3f:8b:25:38:8e:57:ad:7f:35:87: 37:97:11:f6:b5:ae:5c:59:c6:c3:03:3f:a6:42:1b:22:fd:89: ad:c7:7e:d6:14:ba:10:82:43:d5:47:42:9d:76:a9:92:14:bb: 19:da:f2:bf:ca:b6:d2:64:ae:fa:92:6e:c5:70:c0:ee:f6:a6: 33:5b:ab:cb:ac:d2:16:f4:77:6b:fa:0e:2d:36:bb:12:e0:fe: 8e:67:79:a1:59:5f:ec:98:3f:0f:14:34:51:0a:f4:7a:55:f9: 18:22:bb:b9 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjYwOTAyMjE0MjQ2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4OTg1Ni0wNGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoW8urIMjn3jPKdV7AJ9YN8DRtM0GCsOqitrfLu6RDpnu3dBsjq1dwvZy3TYf 3QIHFW3AzFf/W8qA/bz8kGHu3L3vfEb3O/cw60bxzwJnc3iuKobKhcSqiiQjIU/O WFtJACdjqg8rP1T/xPa21LHtLvfN4H6TF4Takk3z/DZD4kI6ZaxQHwEmTtERr1Ds nGFvtFR61drgXVe+0N2ZMXs6+bPx5TDi9BEyD2dUxPbIEf52Z1+vF4bGFPabPhGS XNAc20S4V3XhpHg8oui7/EbS0fB/e9kO186p+IjcyWwDvr4wGmKTK9tCKdfoadE8 3mIPJWN1Qz/UnglaCvbvJyGXowIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKflyVfL ffEu3GPzisQVjK3XYg5WMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMyNkYvNzg2NkY1MzA1RkM3MTFFQjhBNjkyMDJFQzRGOUFFMDIvREU2RThDQTgy NTdGMTFGMDgyM0Y5RTQ2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ0TAAwQCeTa8MA0GCSqGSIb3DQEBCwUAA4IBAQB8uwtyPp+io/qa PvjjcfCGKom5rqcUS+44d0cK8mhwpWPprPgIqH9QBGRYsTDTHYZD/CJgZvB53hmW U1Iz69caCOs2gDw4f1kpqaUXxtMrgxi+MfGDasfD9wlGYtiDUrBM5iBXwVfJsvkr k9WveSFEzRUmKjZED0yUuuS3O7O4TooPosyp+FD58CeQdfr0kHIf8aSMB38hmz+L JTiOV61/NYc3lxH2ta5cWcbDAz+mQhsi/Ymtx37WFLoQgkPVR0KddqmSFLsZ2vK/ yrbSZK76km7FcMDu9qYzW6vLrNIW9Hdr+g4tNrsS4P6OZ3mhWV/smD8PFDRRCvR6 VfkYIru5 -----END CERTIFICATE-----Generated at Mon Sep 21 17:11:53 2026 by rpki-client