$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A87393C8F86B11EF86A73884C4F9AE02.roa File: A87393C8F86B11EF86A73884C4F9AE02.roa (raw, json) Hash identifier: nj+oib/V31McsWuRSdIo8ebXzbzd0Aai1WTDOvqOntk= Subject key identifier: 8F:72:10:7B:F1:B6:35:62:8A:BF:15:54:F6:23:86:81:11:5F:DA:9C Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0CF7 Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A87393C8F86B11EF86A73884C4F9AE02.roa Signing time: Sun 24 May 2026 19:22:07 +0000 ROA not before: Sun 24 May 2026 19:22:07 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 136555 IP address blocks: 103.92.152.0/22 maxlen: 22 103.92.152.0/23 maxlen: 23 103.92.152.0/24 maxlen: 24 103.92.154.0/23 maxlen: 23 103.92.154.0/24 maxlen: 24 103.92.155.0/24 maxlen: 24 2403:bb40::/32 maxlen: 32 2403:bb40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: May 24 19:22:07 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a134fde-eae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:09:ab:27:b5:3c:13:9a:40:f6:04:e7:98: ab:b6:e2:2e:41:3b:ab:de:0c:82:0a:30:61:a6:0c: 38:47:a8:db:58:f9:2d:a1:3e:7d:f3:6a:76:9f:94: fb:d3:ae:01:4d:08:f7:d7:af:7a:a4:d7:8a:56:f3: 30:e2:e1:d6:aa:ea:33:d0:1e:6e:cb:3b:e3:77:8e: 57:52:c5:ee:a1:70:0c:af:f1:bf:df:48:f6:14:11: 65:92:58:7d:9f:b7:69:f1:8c:97:14:6e:e9:c1:73: be:c0:3d:f1:a3:53:b6:b7:51:46:8a:49:60:b5:28: 7f:57:ff:ad:a7:e3:76:e1:9e:69:61:6e:fd:79:f9: 98:3a:05:5e:a2:65:19:99:81:4b:49:dc:09:c7:97: 0a:72:94:9a:05:24:cf:83:3a:f2:f7:a4:8b:68:0f: e0:23:9c:4c:64:91:4d:ba:f5:4b:ee:e0:3a:df:ba: 98:43:d9:5e:7b:00:87:1c:9a:b8:3e:f3:67:86:37: 3b:e7:f7:6e:76:4b:a2:be:3b:51:1a:3f:c8:1b:d1: 51:76:00:69:ed:95:d1:c6:5a:71:88:f3:7d:71:c3: 34:bc:20:30:cb:a8:c1:1f:11:ca:49:74:fe:fe:8e: 99:94:96:2d:6d:3e:a8:66:ca:1e:8c:ea:7a:d7:5c: b0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:72:10:7B:F1:B6:35:62:8A:BF:15:54:F6:23:86:81:11:5F:DA:9C X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A87393C8F86B11EF86A73884C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.92.152.0/22 IPv6: 2403:bb40::/32 Signature Algorithm: sha256WithRSAEncryption ad:64:f1:b1:f4:bf:81:49:3c:89:15:60:7b:12:6d:4b:1e:d4: af:19:46:0f:7e:56:2e:42:82:2f:12:9a:46:82:1c:52:53:4e: 1d:bb:cd:37:68:b6:c2:f5:61:86:53:85:99:26:2c:28:1b:4d: e3:e4:6d:62:2b:4b:e5:9e:f4:60:11:d1:b3:17:df:71:ae:68: 90:de:e8:b7:7d:97:3f:a2:c3:7c:b5:0b:ec:fa:1d:b0:a6:c0: bc:91:20:7b:71:b2:d4:bd:b2:90:37:8b:4c:af:eb:d3:b2:48: f1:82:2b:03:6c:1b:04:bc:fa:80:a6:c5:42:67:10:ab:3f:20: e7:52:df:ee:32:1b:b9:94:3a:76:a0:a2:14:00:d9:65:7b:4c: 7f:57:7a:e1:30:84:a9:3c:bf:d8:4c:cf:74:05:73:55:5f:5c: 59:dd:69:3d:45:85:9e:c3:3e:7a:fd:20:ad:6a:40:ce:27:b3: 48:9c:68:bf:c1:a4:7c:74:5a:83:07:c6:05:0b:2b:e3:f9:71: c2:06:c9:cf:42:ea:9a:89:52:7b:ff:2e:5b:ea:d9:9b:10:d3: 41:4f:7b:1f:21:a0:05:6e:14:f7:9b:ba:97:d5:51:d3:c1:84: 40:d5:cf:1c:c1:2c:77:98:bd:4c:38:40:d2:b6:06:91:a4:5d: 6b:0a:e8:e1 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjYwNTI0MTkyMjA3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTEzNGZkZS1lYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1MJqye1PBOaQPYE55irtuIuQTur3gyCCjBhpgw4R6jbWPktoT5982p2n5T7 064BTQj31696pNeKVvMw4uHWquoz0B5uyzvjd45XUsXuoXAMr/G/30j2FBFlklh9 n7dp8YyXFG7pwXO+wD3xo1O2t1FGiklgtSh/V/+tp+N24Z5pYW79efmYOgVeomUZ mYFLSdwJx5cKcpSaBSTPgzry96SLaA/gI5xMZJFNuvVL7uA637qYQ9leewCHHJq4 PvNnhjc75/dudkuivjtRGj/IG9FRdgBp7ZXRxlpxiPN9ccM0vCAwy6jBHxHKSXT+ /o6ZlJYtbT6oZsoejOp611ywVQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFI9yEHvx tjViir8VVPYjhoERX9qcMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVDMTIvODU5MkU0ODgwRjY2MTFFQUFGNTFDNjQ2QzRGOUFFMDIvQTg3MzkzQzhG ODZCMTFFRjg2QTczODg0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ1yYMA0EAgACMAcDBQAkA7tAMA0GCSqGSIb3DQEBCwUAA4IBAQCt ZPGx9L+BSTyJFWB7Em1LHtSvGUYPflYuQoIvEppGghxSU04du803aLbC9WGGU4WZ JiwoG03j5G1iK0vlnvRgEdGzF99xrmiQ3ui3fZc/osN8tQvs+h2wpsC8kSB7cbLU vbKQN4tMr+vTskjxgisDbBsEvPqApsVCZxCrPyDnUt/uMhu5lDp2oKIUANlle0x/ V3rhMISpPL/YTM90BXNVX1xZ3Wk9RYWewz56/SCtakDOJ7NInGi/waR8dFqDB8YF Cyvj+XHCBsnPQuqaiVJ7/y5b6tmbENNBT3sfIaAFbhT3m7qX1VHTwYRA1c8cwSx3 mL1MOEDStgaRpF1rCujh -----END CERTIFICATE-----Generated at Sat Jun 13 10:03:57 2026 by rpki-client