$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/A4B89C5082B111EEB427125DC4F9AE02.roa File: A4B89C5082B111EEB427125DC4F9AE02.roa (raw, json) Hash identifier: NxYGUXPru1ELvBZ6qbFZeX9tHWu2f3PZOepm5U8d3eI= Subject key identifier: 5F:AD:CB:68:3A:1E:69:05:39:EB:37:C2:CA:0E:95:FB:36:0B:E0:DD Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Certificate serial: 020B Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/A4B89C5082B111EEB427125DC4F9AE02.roa Signing time: Fri 31 Jul 2026 04:52:38 +0000 ROA not before: Fri 31 Jul 2026 04:52:37 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 9651 IP address blocks: 103.29.104.0/23 maxlen: 23 103.29.104.0/24 maxlen: 24 103.29.105.0/24 maxlen: 24 103.250.42.0/23 maxlen: 23 103.250.42.0/24 maxlen: 24 103.250.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Validity Not Before: Jul 31 04:52:37 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6c2a15-4a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:c7:b8:8f:97:fe:96:a6:43:7a:2c:e1:ea: 71:91:a9:a0:14:3f:15:7b:d8:f6:ac:75:68:d8:4a: ba:8c:75:74:e0:83:1b:8f:fd:07:c0:18:89:8f:38: f8:90:75:ce:e3:5d:ef:c1:32:7e:95:4a:d8:31:c1: c7:31:d5:b8:4a:98:73:20:fa:1d:55:c5:07:9c:78: 88:c3:50:b1:99:1b:b4:a2:fd:3c:0f:48:2d:58:14: 7e:d7:d8:6c:ec:a4:c5:43:38:bd:71:a3:0a:2d:b2: f0:d8:1e:2b:e8:f2:19:f7:d6:7e:1b:77:f1:44:e3: b4:61:5e:61:65:3f:c9:8e:ce:82:86:95:0c:41:51: fa:f5:b8:9a:40:80:7f:40:02:11:c5:c1:26:5d:4e: 28:80:6d:4a:8e:62:8b:06:5e:65:0e:f9:41:87:52: 29:39:37:87:3c:83:f8:71:6f:a2:ea:8a:93:4b:0a: 6e:59:ea:58:ff:3e:44:ff:9c:82:fc:94:6f:fc:9c: 7e:42:8f:bb:e0:eb:00:a9:f4:ab:dd:c1:e2:d5:f7: 79:03:4e:fd:4d:72:b9:1a:86:b1:96:4b:04:67:a1: 41:ee:40:7d:27:77:4d:48:83:61:d8:7c:89:ea:6a: 1d:23:db:8a:da:34:ec:f9:4d:b8:77:52:36:97:35: 54:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AD:CB:68:3A:1E:69:05:39:EB:37:C2:CA:0E:95:FB:36:0B:E0:DD X509v3 Authority Key Identifier: keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/A4B89C5082B111EEB427125DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.29.104.0/23 103.250.42.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:18:bb:cb:c4:16:ab:2f:56:ec:e8:a8:61:bd:71:47:dd:48: 48:23:9e:92:df:da:77:d0:b1:a2:62:1e:fa:d1:5e:e0:78:2a: 22:34:37:a1:ff:8a:34:82:c5:f5:af:75:a7:ef:54:1d:04:6e: 90:6a:ea:ff:d7:4a:24:a1:fd:80:61:86:67:99:42:80:e7:f1: 98:29:c0:72:aa:6b:d8:c5:fa:96:aa:a8:9f:9b:79:53:cc:1a: e5:b4:29:11:5d:18:c7:3d:70:27:05:90:e5:fe:65:0c:1b:59: ea:90:94:3b:c7:eb:01:16:d8:ba:d4:d4:cb:66:52:32:af:e3: cb:9d:6e:ed:29:fc:90:7a:c4:f8:af:7e:4c:89:17:66:6d:4b: e5:59:d6:99:e4:01:13:be:29:05:3a:f8:50:02:f5:e3:ef:35: 0f:1a:91:4d:8e:2f:ae:c7:ce:ec:de:5a:ec:71:9f:a4:46:47: e8:65:08:cd:bc:c6:06:c3:5d:42:8b:08:8a:d9:9b:6d:d3:9c: 04:55:3d:56:cd:e7:8c:40:9f:d3:80:e3:27:53:08:ee:0d:19: db:40:15:dc:64:d7:7f:bc:a7:ba:bb:0f:04:56:00:ae:f7:a1: de:79:5f:e2:d4:04:ec:71:f3:85:50:c4:d5:d8:fe:24:46:d9: 27:00:bb:16 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEQjMxMTAvBgNVBAUTKDYzQTI5QUJEODdGNEExRkU1NUNCRjJBMEY0MDk3NTBB QzM0QUMyMzUwHhcNMjYwNzMxMDQ1MjM3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZjMmExNS00YTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs33HuI+X/pamQ3os4epxkamgFD8Ve9j2rHVo2Eq6jHV04IMbj/0HwBiJjzj4 kHXO413vwTJ+lUrYMcHHMdW4SphzIPodVcUHnHiIw1CxmRu0ov08D0gtWBR+19hs 7KTFQzi9caMKLbLw2B4r6PIZ99Z+G3fxROO0YV5hZT/Jjs6ChpUMQVH69biaQIB/ QAIRxcEmXU4ogG1KjmKLBl5lDvlBh1IpOTeHPIP4cW+i6oqTSwpuWepY/z5E/5yC /JRv/Jx+Qo+74OsAqfSr3cHi1fd5A079TXK5GoaxlksEZ6FB7kB9J3dNSINh2HyJ 6modI9uK2jTs+U24d1I2lzVUxwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFF+ty2g6 HmkFOes3wsoOlfs2C+DdMB8GA1UdIwQYMBaAFGOimr2H9KH+VcvyoPQJdQrDSsI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0RCMy85MzA1RDJFMDgy QUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9mNVZ5X0tnOUFsMUNzTkt3 alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k2S2F2WWYwb2Y1VnlfS2c5QWwxQ3NOS3dqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEQjMvOTMwNUQyRTA4MkFGMTFFRUJFQzU5NzU5QzRGOUFFMDIvQTRCODlDNTA4 MkIxMTFFRUI0MjcxMjVEQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZx1oAwQBZ/oqMA0GCSqGSIb3DQEBCwUAA4IBAQAsGLvLxBarL1bs 6KhhvXFH3UhII56S39p30LGiYh760V7geCoiNDeh/4o0gsX1r3Wn71QdBG6Qaur/ 10okof2AYYZnmUKA5/GYKcByqmvYxfqWqqifm3lTzBrltCkRXRjHPXAnBZDl/mUM G1nqkJQ7x+sBFti61NTLZlIyr+PLnW7tKfyQesT4r35MiRdmbUvlWdaZ5AETvikF OvhQAvXj7zUPGpFNji+ux87s3lrscZ+kRkfoZQjNvMYGw11CiwiK2Ztt05wEVT1W zeeMQJ/TgOMnUwjuDRnbQBXcZNd/vKe6uw8EVgCu96HeeV/i1ATscfOFUMTV2P4k RtknALsW -----END CERTIFICATE-----Generated at Tue Sep 22 09:32:58 2026 by rpki-client