$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/959C0ABE93EA11EE91A46031C4F9AE02.roa File: 959C0ABE93EA11EE91A46031C4F9AE02.roa (raw, json) Hash identifier: q1gjCTdAS3F0uPKIjZZ3Y1TxvLBQNfS3V1+2v6Kg7I0= Subject key identifier: 15:F0:43:FA:DF:21:CD:D5:C9:45:C5:F5:3C:21:83:C3:9F:2A:CA:13 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0E26 Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/959C0ABE93EA11EE91A46031C4F9AE02.roa Signing time: Tue 06 Oct 2026 18:34:51 +0000 ROA not before: Tue 06 Oct 2026 18:34:51 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 58726 IP address blocks: 103.20.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 17:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3622 (0xe26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Oct 6 18:34:51 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac53f4a-b360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:03:b9:40:aa:89:18:f6:1f:f2:81:e0:ad:6a: 44:e4:da:5f:ad:52:0c:25:e0:fc:ff:44:c0:9d:d5: dd:fb:f7:16:b0:6e:b7:ed:56:04:92:4d:85:1f:44: cd:e6:1c:02:cd:0c:7c:5b:72:8d:35:56:39:20:d7: 20:6c:8e:08:75:11:d3:2e:a7:bf:4d:11:93:cf:71: 24:9d:2d:18:9b:a1:cf:07:b0:ad:54:86:31:f0:31: 06:14:ef:82:eb:b4:85:ca:dc:2a:dc:e6:c6:03:25: df:5a:7b:85:38:d6:de:f2:f6:2c:4b:89:3c:3f:80: 61:79:38:20:92:48:2c:4e:04:7d:69:58:8e:06:fb: ff:a1:2d:5b:1c:4e:e5:b2:cc:80:cd:af:a6:94:67: 41:12:24:0a:76:7d:42:b8:9c:ae:3f:ae:f5:50:e6: cd:13:54:8a:86:55:14:c7:71:9a:be:77:b5:e6:62: 81:7b:84:49:49:00:bc:a0:85:36:bc:df:7a:df:3b: 95:87:ee:a3:d1:e6:bb:1d:62:5c:fd:7a:a9:ae:35: cc:61:53:a9:12:35:69:9b:19:31:84:6d:fa:2e:1a: 2a:d8:14:ec:b7:f9:a2:f8:43:a8:6d:67:b6:ca:25: e0:30:49:d9:3c:0d:e5:4e:40:e9:eb:9f:0e:9d:ef: 64:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F0:43:FA:DF:21:CD:D5:C9:45:C5:F5:3C:21:83:C3:9F:2A:CA:13 X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/959C0ABE93EA11EE91A46031C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.20.152.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:93:c8:e7:fd:52:87:f8:0d:0a:8e:9e:3a:4f:63:38:6f:2c: 36:b9:fa:5b:53:11:0f:3a:8a:c6:d1:9b:40:98:aa:30:d6:d9: 81:af:63:a7:46:32:85:7e:fa:a0:ea:ed:2c:d0:af:dc:8f:62: 97:2d:8f:24:9a:b4:76:6f:db:e4:5a:84:56:43:4c:6e:7d:bd: a2:bb:bd:ed:13:a8:0c:e3:db:92:ee:af:cc:23:26:31:3d:7d: 42:05:ee:5a:e6:c3:a3:c9:c4:1a:af:71:bf:7d:98:f0:92:c1: 49:ba:ba:a1:b1:2c:2b:3f:db:e4:f3:6d:b4:5e:0b:da:9f:d1: 5d:e3:ba:ab:b3:d2:20:68:3c:9f:64:a4:e8:6f:4e:65:d2:7a: 04:ec:34:18:05:29:f2:aa:c8:8b:ca:23:e1:d0:73:00:97:45: db:c7:0f:e2:5f:39:56:a6:8e:be:63:47:bb:81:03:f0:a2:cf: f9:d9:42:f2:44:79:da:17:21:3e:68:f7:f2:51:8c:d4:56:7b: 39:8c:cb:c8:f8:19:56:c5:f0:29:c7:7d:7c:ef:09:54:0e:ed: 7b:09:fa:f7:db:2b:1f:3a:43:d4:da:5f:8c:92:4b:45:0b:f9: 99:1a:b3:c7:87:24:ba:33:99:ea:b9:c7:74:39:6e:ca:11:1f: 4a:8a:7d:ed -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjYxMDA2MTgzNDUxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM1M2Y0YS1iMzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQO5QKqJGPYf8oHgrWpE5NpfrVIMJeD8/0TAndXd+/cWsG637VYEkk2FH0TN 5hwCzQx8W3KNNVY5INcgbI4IdRHTLqe/TRGTz3EknS0Ym6HPB7CtVIYx8DEGFO+C 67SFytwq3ObGAyXfWnuFONbe8vYsS4k8P4BheTggkkgsTgR9aViOBvv/oS1bHE7l ssyAza+mlGdBEiQKdn1CuJyuP671UObNE1SKhlUUx3Gavne15mKBe4RJSQC8oIU2 vN963zuVh+6j0ea7HWJc/XqprjXMYVOpEjVpmxkxhG36Lhoq2BTst/mi+EOobWe2 yiXgMEnZPA3lTkDp658One9kswIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBXwQ/rf Ic3VyUXF9Twhg8OfKsoTMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlBNkQvQTIxRTcxRDJEQjhFMTFFOUEzNTI2MjI0QzRGOUFFMDIvOTU5QzBBQkU5 M0VBMTFFRTkxQTQ2MDMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxSYMA0GCSqGSIb3DQEBCwUAA4IBAQBrk8jn/VKH+A0Kjp46T2M4 byw2ufpbUxEPOorG0ZtAmKow1tmBr2OnRjKFfvqg6u0s0K/cj2KXLY8kmrR2b9vk WoRWQ0xufb2iu73tE6gM49uS7q/MIyYxPX1CBe5a5sOjycQar3G/fZjwksFJurqh sSwrP9vk8220Xgvan9Fd47qrs9IgaDyfZKTob05l0noE7DQYBSnyqsiLyiPh0HMA l0Xbxw/iXzlWpo6+Y0e7gQPwos/52ULyRHnaFyE+aPfyUYzUVns5jMvI+BlWxfAp x3187wlUDu17Cfr32ysfOkPU2l+MkktFC/mZGrPHhyS6M5nqucd0OW7KER9Kin3t -----END CERTIFICATE-----Generated at Sun Oct 11 06:35:49 2026 by rpki-client