$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/684DDD32CAB311ECBBCE9843C4F9AE02.roa File: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (raw, json) Hash identifier: eiv02IO2f8o0b+vZ8w8KGArq/59Z4CoOQOR5j29hzsU= Subject key identifier: F1:9C:30:ED:EB:A2:FB:76:36:4E:54:63:D9:F6:B1:AF:22:1A:D4:58 Certificate issuer: /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Certificate serial: 041C Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/684DDD32CAB311ECBBCE9843C4F9AE02.roa Signing time: Thu 03 Sep 2026 00:52:36 +0000 ROA not before: Thu 03 Sep 2026 00:52:36 +0000 ROA not after: Fri 01 Jan 2027 00:00:00 +0000 asID: 149660 IP address blocks: 103.185.222.0/23 maxlen: 23 103.185.222.0/24 maxlen: 24 103.185.223.0/24 maxlen: 24 2001:df0:9b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Validity Not Before: Sep 3 00:52:36 2026 GMT Not After : Jan 1 00:00:00 2027 GMT Subject: CN=6a98c4d4-862c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:dd:7d:37:04:98:91:ab:fa:c5:ac:47:f8: d7:d4:bf:6b:1d:12:5d:6a:cc:be:ef:0d:d7:b2:59: a3:a1:84:bd:2e:72:d3:a6:b2:bb:3a:3e:f0:2a:63: 73:97:84:79:84:02:5b:03:a4:21:d7:99:57:92:b4: 69:9f:51:41:34:5c:d1:07:3b:4b:96:be:92:c7:69: 51:59:63:1e:08:14:a1:61:e8:e2:2b:c1:19:0d:1e: eb:94:de:81:f5:d6:e4:48:3c:dc:76:ff:62:f7:66: 9e:7e:29:eb:54:4b:1d:c9:2c:92:8d:e2:a6:7d:39: 9c:36:43:f8:e1:4f:2c:93:cd:65:1a:f8:fe:e6:8a: 4d:28:eb:2a:63:e2:88:8d:f8:9c:c6:c4:da:8e:ad: c3:cf:03:9d:b4:a9:56:01:8a:81:dd:58:c2:86:8d: 25:bb:84:0d:86:4f:41:06:2e:cb:1a:e3:39:38:35: 71:76:a1:72:b9:67:f8:8a:4e:e5:f8:7d:ed:92:f7: ce:0d:b5:69:3d:33:c7:d1:66:90:b3:a2:b6:2c:36: 71:37:3d:31:3e:b7:59:65:82:35:a2:19:da:19:e2: cc:72:17:48:c6:53:7f:65:58:84:8c:8d:35:67:d4: 8d:ae:22:25:46:49:23:5b:00:d9:67:0b:39:e4:5c: 9a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9C:30:ED:EB:A2:FB:76:36:4E:54:63:D9:F6:B1:AF:22:1A:D4:58 X509v3 Authority Key Identifier: keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/684DDD32CAB311ECBBCE9843C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.185.222.0/23 IPv6: 2001:df0:9b40::/48 Signature Algorithm: sha256WithRSAEncryption 6f:5e:e9:5b:a0:9d:d4:4f:06:27:4f:a7:f9:b7:31:85:af:73: 3e:87:96:25:ed:e0:c6:36:20:15:67:13:4a:a0:0c:b3:31:0e: 31:91:d0:fd:51:f3:47:94:73:c6:04:b6:55:b7:b4:d6:8a:0e: e2:7e:78:92:2c:4c:e3:26:bf:1b:2e:76:47:8d:a5:d7:fd:21: de:7e:40:3a:f5:d9:80:d6:db:d3:df:8a:fe:c1:97:73:37:96: 3c:66:82:0b:aa:1a:d8:0f:44:95:f2:a1:b6:69:48:45:4d:23: 92:0a:8a:97:88:de:25:56:8c:d4:c8:56:04:2d:f5:fe:76:61: 70:45:1f:70:11:98:8d:ca:7a:b0:a7:20:58:ff:54:94:4a:1e: f1:37:77:84:85:f9:0d:8a:b5:9b:20:d5:73:02:74:49:fd:50: 91:b5:13:28:12:82:c6:2f:d6:98:a7:df:03:7e:9c:de:ab:df: c2:f1:91:d0:c7:e9:81:17:21:51:f7:5e:c9:d4:d1:b6:7e:7b: a7:b1:bb:f4:11:46:c6:cf:b8:41:f7:71:53:42:d6:e5:63:5c: 2a:92:25:d6:22:1f:e8:66:4d:4a:ba:ab:c3:2e:cf:b8:79:c8: 67:52:fb:96:8f:9e:74:c6:52:25:a6:16:b8:8b:76:74:71:c1: a1:9f:58:88 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ5M0IxMTAvBgNVBAUTKENDODNCQjZEMEFBMTc3OURFQTE2OUVEQkE0QTQwMjI4 REUyMUJEN0IwHhcNMjYwOTAzMDA1MjM2WhcNMjcwMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4YzRkNC04NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt93dfTcEmJGr+sWsR/jX1L9rHRJdasy+7w3XslmjoYS9LnLTprK7Oj7wKmNz l4R5hAJbA6Qh15lXkrRpn1FBNFzRBztLlr6Sx2lRWWMeCBShYejiK8EZDR7rlN6B 9dbkSDzcdv9i92aefinrVEsdySySjeKmfTmcNkP44U8sk81lGvj+5opNKOsqY+KI jficxsTajq3DzwOdtKlWAYqB3VjCho0lu4QNhk9BBi7LGuM5ODVxdqFyuWf4ik7l +H3tkvfODbVpPTPH0WaQs6K2LDZxNz0xPrdZZYI1ohnaGeLMchdIxlN/ZViEjI01 Z9SNriIlRkkjWwDZZws55FyaJQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPGcMO3r ovt2Nk5UY9n2sa8iGtRYMB8GA1UdIwQYMBaAFMyDu20KoXed6hae26SkAijeIb17 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDkzQi9EQkFEMzdBMENB QUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1M3FGcDdicEtRQ0tONGh2 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJTzdiUXFoZDUzcUZwN2JwS1FDS040aHZYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ5M0IvREJBRDM3QTBDQUFFMTFFQzgyNDEyODBEQzRGOUFFMDIvNjg0REREMzJD QUIzMTFFQ0JCQ0U5ODQzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ7neMA8EAgACMAkDBwAgAQ3wm0AwDQYJKoZIhvcNAQELBQADggEB AG9e6VugndRPBidPp/m3MYWvcz6HliXt4MY2IBVnE0qgDLMxDjGR0P1R80eUc8YE tlW3tNaKDuJ+eJIsTOMmvxsudkeNpdf9Id5+QDr12YDW29Pfiv7Bl3M3ljxmgguq GtgPRJXyobZpSEVNI5IKipeI3iVWjNTIVgQt9f52YXBFH3ARmI3KerCnIFj/VJRK HvE3d4SF+Q2KtZsg1XMCdEn9UJG1EygSgsYv1pin3wN+nN6r38LxkdDH6YEXIVH3 XsnU0bZ+e6exu/QRRsbPuEH3cVNC1uVjXCqSJdYiH+hmTUq6q8Muz7h5yGdS+5aP nnTGUiWmFriLdnRxwaGfWIg= -----END CERTIFICATE-----Generated at Thu Sep 24 01:39:23 2026 by rpki-client