$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/6DC8637AAAEE11F1832CC90C5111F970.roa File: 6DC8637AAAEE11F1832CC90C5111F970.roa (raw, json) Hash identifier: kR6+8ndsB9zjZ4uRoK+mEqxx/f3Ivyfw5NM4XbETjFs= Subject key identifier: 78:09:91:98:E1:E2:83:59:FA:ED:EE:A6:99:2A:A5:D4:4C:CE:8B:63 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 23A9 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/6DC8637AAAEE11F1832CC90C5111F970.roa Signing time: Mon 07 Sep 2026 19:00:45 +0000 ROA not before: Mon 07 Sep 2026 19:00:45 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134712 IP address blocks: 103.158.4.0/23 maxlen: 24 2405:d340::/32 maxlen: 32 2405:d340::/48 maxlen: 48 2405:d340:1::/48 maxlen: 48 2405:d340:2::/48 maxlen: 48 2405:d340:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9129 (0x23a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Sep 7 19:00:45 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a9f09dd-cdf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:06:57:6a:20:57:9a:48:b1:77:10:66:84: ae:b0:a8:01:a1:08:7b:e5:68:fe:71:02:d4:35:ce: c4:f5:49:82:de:dc:aa:dc:9c:e0:43:7c:b1:6a:45: f1:50:2e:62:12:5c:c9:63:34:5a:18:b5:fe:ef:9e: 7a:4b:75:56:d2:07:50:6e:be:b1:b4:bb:b7:2a:49: 11:a1:3b:5a:a6:eb:ec:8e:6f:07:96:0e:1b:58:54: 61:d0:6e:21:63:be:ea:11:69:22:ee:5e:02:af:fc: f1:b1:c4:d5:d1:19:84:56:14:bc:f8:87:3b:e9:a7: 9a:9a:07:5a:47:39:5b:8e:20:3d:38:a0:cf:35:d6: 6f:c1:c8:95:76:63:f5:6b:f2:d2:5a:24:11:51:41: 79:72:62:55:f0:bd:a0:6c:89:70:9d:5b:06:2f:d9: 79:eb:f6:de:37:29:8b:4e:fb:b9:79:91:3e:89:3f: c1:36:9e:e7:4f:7d:96:ba:1b:5c:87:07:c6:f1:dc: 73:e7:7b:f0:5b:32:6b:de:a5:14:6b:35:e5:e1:fa: 36:a0:82:23:f3:bd:a1:5e:dd:d0:d4:7b:64:30:27: ba:89:0b:1c:0c:eb:77:b7:db:cd:5b:69:26:a7:73: c1:5e:58:9d:5e:da:ef:7b:f8:ba:e4:91:94:c0:68: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:09:91:98:E1:E2:83:59:FA:ED:EE:A6:99:2A:A5:D4:4C:CE:8B:63 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/6DC8637AAAEE11F1832CC90C5111F970.roa sbgp-ipAddrBlock: critical IPv4: 103.158.4.0/23 IPv6: 2405:d340::/32 Signature Algorithm: sha256WithRSAEncryption 32:fd:8b:fe:8e:c9:96:69:0f:48:e1:b0:15:4f:27:4e:98:cd: 71:29:77:55:7d:08:a0:08:47:e6:35:84:d5:f0:2f:b3:25:66: 01:50:f6:d5:98:ea:ec:b0:e5:37:e5:93:dc:05:d7:6c:5b:46: d0:80:f9:2d:cd:50:71:99:67:1b:b5:a1:a6:70:62:e8:98:92: ff:d9:25:ba:aa:ea:c5:5b:2f:32:1d:6e:da:01:ac:00:79:8f: f1:10:78:37:98:43:54:70:f8:b7:7d:ea:63:a4:11:af:99:4b: 79:b1:12:66:3d:db:70:d6:b2:6b:ab:0a:49:06:a4:ca:b7:ae: 59:04:8e:96:8a:6f:f8:83:ce:cf:6e:c3:66:b9:f3:1d:a5:a9: e6:a9:49:78:5d:d9:b3:44:80:b8:ba:d8:14:ac:3f:6e:42:76: 1d:34:68:78:df:47:be:fd:b3:92:af:5b:af:02:d6:e3:1e:9b: 40:4e:71:a4:4a:09:d7:e2:81:6a:66:31:ba:37:91:7a:bc:be: 8b:e3:ac:35:82:5b:15:49:d6:31:4c:2e:86:1c:d4:2f:81:68: 20:fd:44:5f:6b:c3:82:e9:55:8f:6e:86:cc:d7:be:d4:36:5b: 76:24:b0:f6:58:c3:1f:36:b2:ca:74:57:fc:2f:20:c0:bc:22: e2:c1:cc:5c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICI6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjYwOTA3MTkwMDQ1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlmMDlkZC1jZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mwGV2ogV5pIsXcQZoSusKgBoQh75Wj+cQLUNc7E9UmC3tyq3JzgQ3yxakXx UC5iElzJYzRaGLX+7556S3VW0gdQbr6xtLu3KkkRoTtapuvsjm8Hlg4bWFRh0G4h Y77qEWki7l4Cr/zxscTV0RmEVhS8+Ic76aeamgdaRzlbjiA9OKDPNdZvwciVdmP1 a/LSWiQRUUF5cmJV8L2gbIlwnVsGL9l56/beNymLTvu5eZE+iT/BNp7nT32Wuhtc hwfG8dxz53vwWzJr3qUUazXl4fo2oIIj872hXt3Q1HtkMCe6iQscDOt3t9vNW2km p3PBXlidXtrve/i65JGUwGjSuwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHgJkZjh 4oNZ+u3uppkqpdRMzotjMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvNkRDODYzN0FB QUVFMTFGMTgzMkNDOTBDNTExMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ54EMA0EAgACMAcDBQAkBdNAMA0GCSqGSIb3DQEBCwUAA4IBAQAy /Yv+jsmWaQ9I4bAVTydOmM1xKXdVfQigCEfmNYTV8C+zJWYBUPbVmOrssOU35ZPc BddsW0bQgPktzVBxmWcbtaGmcGLomJL/2SW6qurFWy8yHW7aAawAeY/xEHg3mENU cPi3fepjpBGvmUt5sRJmPdtw1rJrqwpJBqTKt65ZBI6Wim/4g87PbsNmufMdpanm qUl4XdmzRIC4utgUrD9uQnYdNGh430e+/bOSr1uvAtbjHptATnGkSgnX4oFqZjG6 N5F6vL6L46w1glsVSdYxTC6GHNQvgWgg/URfa8OC6VWPbobM177UNlt2JLD2WMMf NrLKdFf8LyDAvCLiwcxc -----END CERTIFICATE-----Generated at Sun Sep 20 10:51:31 2026 by rpki-client