$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/97EA257424D611F1948C90B8AB833773.roa File: 97EA257424D611F1948C90B8AB833773.roa (raw, json) Hash identifier: iMnTaKTLE0PnkxDRT3oZSMIY1tIVMUe3VwWc8pxo+ZY= Subject key identifier: 89:0E:7A:EC:DB:35:34:36:EF:3B:F7:B1:DE:DC:8A:EC:C7:1C:C4:95 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0DE0 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/97EA257424D611F1948C90B8AB833773.roa Signing time: Fri 04 Sep 2026 18:35:14 +0000 ROA not before: Fri 04 Sep 2026 18:35:14 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 54702 IP address blocks: 103.99.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3552 (0xde0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Sep 4 18:35:14 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9b0f62-5313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:08:f2:78:81:43:a6:95:a2:9f:2f:82:5f:f8: 1c:22:a2:e7:0c:1c:ad:b5:ea:28:e0:a2:59:82:fc: 50:73:91:b0:36:e2:26:4d:82:62:b0:2d:b2:cd:84: 19:7d:0d:7d:e5:4a:27:51:f2:39:54:66:cb:95:1a: b9:d3:40:7e:ec:0e:78:ae:b4:16:91:39:90:3c:ce: 28:e8:3c:42:7f:8a:c5:bf:7e:a7:d4:74:1e:cd:3f: 90:e4:41:f3:2c:6f:52:aa:3a:ab:31:4b:13:63:1e: 08:6e:1a:76:ae:a2:b4:8d:19:87:ff:f4:0f:e9:9b: 70:f3:0a:a0:b9:ef:86:53:de:31:68:5b:d4:70:16: f4:76:ba:a4:9d:bd:c5:89:b2:a8:02:68:00:0a:0f: 74:dc:22:9a:32:77:54:79:90:06:b4:ae:50:96:7d: 34:26:12:d8:b3:1e:69:22:d8:6a:13:6c:15:96:7a: be:f0:d0:c4:b0:4b:ff:69:6e:dd:d9:6d:00:1c:c4: 6b:44:82:b1:ef:52:9a:a5:26:09:bf:ce:6a:cc:ac: 14:c3:1f:3f:09:a1:a9:32:df:8e:4f:5a:8f:0c:a3: dc:00:45:ec:24:fe:64:8f:e0:1e:39:fc:8e:36:d9: 96:70:4c:75:e1:50:d8:30:57:cf:ad:f4:03:ff:e3: 0e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0E:7A:EC:DB:35:34:36:EF:3B:F7:B1:DE:DC:8A:EC:C7:1C:C4:95 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/97EA257424D611F1948C90B8AB833773.roa sbgp-ipAddrBlock: critical IPv4: 103.99.86.0/24 Signature Algorithm: sha256WithRSAEncryption 82:4b:15:2a:e1:7a:50:04:b6:e5:92:de:e7:fd:67:e6:f5:02: c2:6a:7e:00:e5:f4:aa:e5:3d:d6:4c:3d:6e:62:5f:40:c2:14: b0:e7:a7:47:40:df:93:85:ef:be:76:e7:44:e0:89:51:02:cf: af:b5:16:d2:9b:8c:4a:d5:32:f0:38:3a:d9:24:fb:c3:4f:0a: 23:b7:5f:13:ea:de:4e:43:9a:7e:91:9e:d6:9b:46:a7:a1:4d: e0:6c:9c:6f:a4:15:49:e6:13:91:47:e3:72:50:fa:97:cc:e5: bd:f5:7c:83:a7:b3:64:b2:e9:63:d8:dc:60:21:d6:90:39:7e: cb:35:d2:36:55:9d:fe:0b:4a:ed:88:f8:97:69:c9:32:79:50: 8e:f0:18:b7:5a:9a:33:c8:a8:fa:12:96:03:51:f4:9e:1b:6f: 25:8b:20:23:43:89:d3:f1:ed:a6:d3:77:56:d2:e7:0d:e4:19: c3:2a:0c:f6:a9:cd:53:36:d8:21:21:81:51:0d:98:ee:02:3d: 3e:28:5d:7b:04:fd:bc:d8:21:5c:5c:86:22:4a:73:23:6e:c4: fe:52:36:60:27:2c:78:a6:42:13:9d:78:7d:17:7b:32:0f:5f: 69:c7:1f:cf:19:20:71:37:b7:07:df:21:9e:38:ac:ba:5e:3b: 9c:fe:26:ff -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjYwOTA0MTgzNTE0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliMGY2Mi01MzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wjyeIFDppWiny+CX/gcIqLnDBytteoo4KJZgvxQc5GwNuImTYJisC2yzYQZ fQ195UonUfI5VGbLlRq500B+7A54rrQWkTmQPM4o6DxCf4rFv36n1HQezT+Q5EHz LG9SqjqrMUsTYx4Ibhp2rqK0jRmH//QP6Ztw8wqgue+GU94xaFvUcBb0drqknb3F ibKoAmgACg903CKaMndUeZAGtK5Qln00JhLYsx5pIthqE2wVlnq+8NDEsEv/aW7d 2W0AHMRrRIKx71KapSYJv85qzKwUwx8/CaGpMt+OT1qPDKPcAEXsJP5kj+AeOfyO NtmWcEx14VDYMFfPrfQD/+MOQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIkOeuzb NTQ27zv3sd7ciuzHHMSVMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI1NTEvREJGNkUxRDRFMkU0MTFFOTlDRDBBOTY5QzRGOUFFMDIvOTdFQTI1NzQy NEQ2MTFGMTk0OEM5MEI4QUI4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ2NWMA0GCSqGSIb3DQEBCwUAA4IBAQCCSxUq4XpQBLblkt7n/Wfm 9QLCan4A5fSq5T3WTD1uYl9AwhSw56dHQN+The++dudE4IlRAs+vtRbSm4xK1TLw ODrZJPvDTwojt18T6t5OQ5p+kZ7Wm0anoU3gbJxvpBVJ5hORR+NyUPqXzOW99XyD p7Nksulj2NxgIdaQOX7LNdI2VZ3+C0rtiPiXackyeVCO8Bi3WpozyKj6EpYDUfSe G28liyAjQ4nT8e2m03dW0ucN5BnDKgz2qc1TNtghIYFRDZjuAj0+KF17BP282CFc XIYiSnMjbsT+UjZgJyx4pkITnXh9F3syD19pxx/PGSBxN7cH3yGeOKy6Xjuc/ib/ -----END CERTIFICATE-----Generated at Tue Sep 22 07:17:37 2026 by rpki-client