$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/87C417D4AD1811F1A4C6F2B14011F970.roa File: 87C417D4AD1811F1A4C6F2B14011F970.roa (raw, json) Hash identifier: vfxrhswzYVyis8nqhj1saPaXkKFUMc2dyL938MDx0Ks= Subject key identifier: 86:45:91:B3:89:43:D8:0B:98:20:D2:A0:6F:5D:CF:5E:1F:D5:43:55 Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Certificate serial: 3695 Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/87C417D4AD1811F1A4C6F2B14011F970.roa Signing time: Fri 02 Oct 2026 15:40:16 +0000 ROA not before: Fri 02 Oct 2026 15:40:16 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 137412 IP address blocks: 118.103.138.0/24 maxlen: 24 2405:ec01::/32 maxlen: 32 2405:ec01:1000::/36 maxlen: 36 2405:ec01:5000::/36 maxlen: 36 2405:ec01:a000::/36 maxlen: 36 2405:ec01:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 14:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13973 (0x3695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Validity Not Before: Oct 2 15:40:16 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abfd060-ec1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:4c:56:13:cc:ff:36:cf:1c:86:04:d4:6f: bb:e5:19:0d:a9:cf:28:8a:09:e9:cc:fd:0b:a0:f5: 2e:56:e9:e4:7a:fe:e1:11:32:65:9d:5c:22:4d:bf: 40:f0:2d:28:28:7c:a6:c9:f8:a6:ce:be:97:ad:fd: 92:9b:cc:9c:ca:b2:d8:30:3b:e0:90:83:c5:57:2c: f3:22:27:ca:6f:8b:45:48:44:09:f4:8c:94:ff:63: 25:b1:ac:25:f8:84:f6:32:e1:02:b0:ad:8f:e9:f2: bc:28:f2:44:93:59:fc:2c:51:b4:9e:63:a8:b0:47: 35:b8:00:92:ba:2b:67:7a:b6:7c:4e:51:b4:c3:f3: ed:b1:eb:a0:09:75:4b:80:97:14:49:9f:0d:39:f2: 1c:e9:99:de:b0:26:fe:c9:e5:56:b8:f6:03:14:a4: 83:a9:bb:bd:1c:1e:a9:92:60:bc:c5:07:02:fe:85: 04:16:4b:7a:14:18:ec:ca:6a:05:9e:57:8c:c9:f6: 85:d1:fe:f6:cf:d6:1a:97:88:b5:05:75:66:92:b1: 14:bf:85:7f:dc:c3:38:b2:01:70:e0:92:97:23:69: 02:7f:31:46:45:f2:17:68:65:3e:b8:7a:c0:13:87: 3f:54:2c:de:97:03:52:7a:45:38:38:03:e9:87:53: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:45:91:B3:89:43:D8:0B:98:20:D2:A0:6F:5D:CF:5E:1F:D5:43:55 X509v3 Authority Key Identifier: keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/87C417D4AD1811F1A4C6F2B14011F970.roa sbgp-ipAddrBlock: critical IPv4: 118.103.138.0/24 IPv6: 2405:ec01::/32 Signature Algorithm: sha256WithRSAEncryption 9a:1d:60:34:ca:e2:a1:b7:ea:4c:b1:67:fc:69:f8:f8:7a:5f: e1:79:c3:f8:4e:2a:e4:b7:23:dd:a9:fa:e7:94:45:b2:9a:e6: 04:4d:48:50:8d:96:78:f0:f5:f0:03:10:7f:92:e6:54:5a:96: d9:5c:5c:8b:4e:28:3e:a8:a0:1b:51:d0:5a:fc:3b:f3:a8:77: 83:2f:05:27:13:6d:9f:15:c3:70:3e:1f:7f:4c:9d:1b:59:74: dc:72:ff:e8:38:52:7a:6d:38:2d:3d:01:0f:f8:c5:4b:16:36: 9f:be:83:a7:35:3e:b8:59:33:78:0a:a6:49:fa:15:92:85:59: ab:9f:fa:67:05:bf:d1:ab:6c:7c:1a:f8:b3:40:4c:0a:1d:df: e6:d2:0e:9d:0c:b7:14:c5:04:66:90:7e:c6:b3:f0:de:6b:a7: 75:da:01:5c:bb:96:70:fe:63:8a:fc:4a:9d:48:7a:74:51:58: eb:97:43:fb:ae:51:47:44:b7:3a:76:b7:85:17:86:8c:f0:af: ed:3f:18:5c:16:02:1c:44:15:1a:eb:ee:2c:03:66:2e:f6:9f: 16:21:2a:c2:aa:78:33:58:86:03:7d:73:c8:d6:79:dc:47:9c: 0f:91:14:27:f2:5c:14:bd:f2:c6:56:4d:e7:4c:c4:a1:e9:1e: e3:24:5f:09 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICNpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMDYxMTAvBgNVBAUTKDNBQUY4MEVBOTdFOTlCOTUyNUIzM0JDMTMzNUJCMDk1 QzJEMjc4QTcwHhcNMjYxMDAyMTU0MDE2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmZDA2MC1lYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw31MVhPM/zbPHIYE1G+75RkNqc8oignpzP0LoPUuVunkev7hETJlnVwiTb9A 8C0oKHymyfimzr6Xrf2Sm8ycyrLYMDvgkIPFVyzzIifKb4tFSEQJ9IyU/2Mlsawl +IT2MuECsK2P6fK8KPJEk1n8LFG0nmOosEc1uACSuitnerZ8TlG0w/PtseugCXVL gJcUSZ8NOfIc6ZnesCb+yeVWuPYDFKSDqbu9HB6pkmC8xQcC/oUEFkt6FBjsymoF nleMyfaF0f72z9Yal4i1BXVmkrEUv4V/3MM4sgFw4JKXI2kCfzFGRfIXaGU+uHrA E4c/VCzelwNSekU4OAPph1NnxwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFIZFkbOJ Q9gLmCDSoG9dz14f1UNVMB8GA1UdIwQYMBaAFDqvgOqX6ZuVJbM7wTNbsJXC0nin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYwNi83NkUxQzQ3RTFE OTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01VWxzenZCTTF1d2xjTFNl S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xLUE2cGZwbTVVbHN6dkJNMXV3bGNMU2VLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRGMDYvNzZFMUM0N0UxRDk1MTFFMkJFNTk1RTdEMDhCMDJDRDIvODdDNDE3RDRB RDE4MTFGMUE0QzZGMkIxNDAxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAdmeKMA0EAgACMAcDBQAkBewBMA0GCSqGSIb3DQEBCwUAA4IBAQCa HWA0yuKht+pMsWf8afj4el/hecP4TirktyPdqfrnlEWymuYETUhQjZZ48PXwAxB/ kuZUWpbZXFyLTig+qKAbUdBa/DvzqHeDLwUnE22fFcNwPh9/TJ0bWXTccv/oOFJ6 bTgtPQEP+MVLFjafvoOnNT64WTN4CqZJ+hWShVmrn/pnBb/Rq2x8GvizQEwKHd/m 0g6dDLcUxQRmkH7Gs/Dea6d12gFcu5Zw/mOK/EqdSHp0UVjrl0P7rlFHRLc6dreF F4aM8K/tPxhcFgIcRBUa6+4sA2Yu9p8WISrCqngzWIYDfXPI1nncR5wPkRQn8lwU vfLGVk3nTMSh6R7jJF8J -----END CERTIFICATE-----Generated at Thu Nov 5 05:09:07 2026 by rpki-client