$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/87C417D4AD1811F1A4C6F2B14011F970.roa File: 87C417D4AD1811F1A4C6F2B14011F970.roa (raw, json) Hash identifier: F9QyhjA4QNdilU+ShIfAj3a6gliCU8PF/F7dlar+ZO8= Subject key identifier: 42:E1:0C:63:B7:B8:80:24:91:7E:C5:08:32:7B:46:C7:BF:64:59:4F Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Certificate serial: 367D Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/87C417D4AD1811F1A4C6F2B14011F970.roa Signing time: Thu 10 Sep 2026 13:07:09 +0000 ROA not before: Thu 10 Sep 2026 13:07:09 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 137412 IP address blocks: 118.103.138.0/24 maxlen: 24 2405:ec01::/32 maxlen: 32 2405:ec01:1000::/36 maxlen: 36 2405:ec01:5000::/36 maxlen: 36 2405:ec01:a000::/36 maxlen: 36 2405:ec01:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13949 (0x367d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Validity Not Before: Sep 10 13:07:09 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6aa2ab7d-cd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:b3:54:78:47:1a:df:65:f3:53:bc:5b:b2: 9f:79:2b:6f:20:51:3d:f2:4b:c0:33:62:6b:f1:c9: 46:0b:71:b5:86:c5:f5:e4:84:ce:0b:63:79:fb:63: b7:e7:d6:ed:53:2e:06:01:57:a6:30:02:22:ff:d5: 38:e2:18:a1:94:6e:15:95:e2:41:71:08:d1:da:b5: 7f:7a:df:ad:4a:4a:9a:15:fc:e3:57:9f:7e:da:68: fa:60:74:a7:9a:a2:0a:4c:e2:0d:aa:b5:1e:c8:44: de:cc:28:94:4b:22:fa:8e:f4:7d:32:24:50:51:fb: e0:a0:ce:8b:84:71:44:ee:85:9f:78:50:a6:cb:b2: 39:0f:84:83:77:1d:ab:41:dc:04:45:88:de:64:24: 88:a8:f6:42:50:5e:43:03:69:ba:06:ff:33:16:5c: 1d:be:35:93:dc:a6:12:f7:fb:b5:1a:12:3a:72:df: fc:a0:62:7e:02:78:9c:36:0d:12:60:51:18:ed:f7: 48:cd:11:81:d3:b6:de:dd:13:63:32:cd:5c:39:c3: c6:84:74:9f:64:10:55:7d:64:44:5d:03:9b:a1:79: 87:07:02:86:3a:57:42:43:4d:17:ee:a7:b2:d2:51: 56:a3:64:f2:1d:33:4f:4d:a1:70:57:5e:99:ce:64: 11:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E1:0C:63:B7:B8:80:24:91:7E:C5:08:32:7B:46:C7:BF:64:59:4F X509v3 Authority Key Identifier: keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/87C417D4AD1811F1A4C6F2B14011F970.roa sbgp-ipAddrBlock: critical IPv4: 118.103.138.0/24 IPv6: 2405:ec01::/32 Signature Algorithm: sha256WithRSAEncryption 02:8c:05:5f:f7:ff:48:3b:48:f5:62:6e:db:ea:95:b7:a2:f9: fd:80:71:df:1a:49:81:54:b9:a9:a0:a9:6c:e1:35:f4:2a:7d: 5a:57:67:06:ef:f6:b0:53:17:2d:9a:3f:fc:87:c6:91:4a:5a: c2:73:8e:85:17:d8:2b:49:56:00:95:ce:b1:d5:11:ef:7c:f7: 71:d4:40:37:16:03:ed:cd:36:b4:47:ca:c8:f9:21:77:38:d4: f0:fb:14:24:28:ad:25:cb:9f:50:48:2a:5a:82:73:7f:2d:a1: 38:41:d6:46:e2:b6:19:10:40:24:e2:b5:cd:2e:39:f6:e7:cd: 31:59:ef:1d:1f:67:67:37:46:7c:9f:97:c5:19:1c:17:30:b8: 1d:b1:0e:e5:a9:dd:32:6c:57:2e:c4:1c:94:4e:b3:03:d6:ae: e5:c6:a0:e5:e6:ab:4f:ef:35:ac:08:6b:35:2d:35:c9:19:0b: 0f:6c:3c:f4:b0:82:d7:c0:c8:bf:d1:41:ea:37:9c:c7:91:fc: 60:da:2d:97:39:cb:54:d4:72:12:9b:07:48:27:c5:fc:3b:b0: ba:86:31:14:91:c2:d1:fb:3a:b5:d7:83:f6:ba:4b:79:39:3e: 24:a5:08:65:90:6d:73:f5:33:a6:b8:59:59:89:4e:39:a1:ba: 88:d8:3e:b1 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICNn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMDYxMTAvBgNVBAUTKDNBQUY4MEVBOTdFOTlCOTUyNUIzM0JDMTMzNUJCMDk1 QzJEMjc4QTcwHhcNMjYwOTEwMTMwNzA5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEyYWI3ZC1jZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviSzVHhHGt9l81O8W7KfeStvIFE98kvAM2Jr8clGC3G1hsX15ITOC2N5+2O3 59btUy4GAVemMAIi/9U44hihlG4VleJBcQjR2rV/et+tSkqaFfzjV59+2mj6YHSn mqIKTOINqrUeyETezCiUSyL6jvR9MiRQUfvgoM6LhHFE7oWfeFCmy7I5D4SDdx2r QdwERYjeZCSIqPZCUF5DA2m6Bv8zFlwdvjWT3KYS9/u1GhI6ct/8oGJ+AnicNg0S YFEY7fdIzRGB07be3RNjMs1cOcPGhHSfZBBVfWREXQOboXmHBwKGOldCQ00X7qey 0lFWo2TyHTNPTaFwV16ZzmQRVQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFELhDGO3 uIAkkX7FCDJ7Rse/ZFlPMB8GA1UdIwQYMBaAFDqvgOqX6ZuVJbM7wTNbsJXC0nin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYwNi83NkUxQzQ3RTFE OTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01VWxzenZCTTF1d2xjTFNl S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xLUE2cGZwbTVVbHN6dkJNMXV3bGNMU2VLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRGMDYvNzZFMUM0N0UxRDk1MTFFMkJFNTk1RTdEMDhCMDJDRDIvODdDNDE3RDRB RDE4MTFGMUE0QzZGMkIxNDAxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAdmeKMA0EAgACMAcDBQAkBewBMA0GCSqGSIb3DQEBCwUAA4IBAQAC jAVf9/9IO0j1Ym7b6pW3ovn9gHHfGkmBVLmpoKls4TX0Kn1aV2cG7/awUxctmj/8 h8aRSlrCc46FF9grSVYAlc6x1RHvfPdx1EA3FgPtzTa0R8rI+SF3ONTw+xQkKK0l y59QSCpagnN/LaE4QdZG4rYZEEAk4rXNLjn2580xWe8dH2dnN0Z8n5fFGRwXMLgd sQ7lqd0ybFcuxByUTrMD1q7lxqDl5qtP7zWsCGs1LTXJGQsPbDz0sILXwMi/0UHq N5zHkfxg2i2XOctU1HISmwdIJ8X8O7C6hjEUkcLR+zq114P2ukt5OT4kpQhlkG1z 9TOmuFlZiU45obqI2D6x -----END CERTIFICATE-----Generated at Sun Sep 20 10:21:36 2026 by rpki-client