$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/EE7FBFECF5DA11EAA1976953C4F9AE02.roa File: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (raw, json) Hash identifier: ExGJTiud1rXJSl9IY1FGT8jQxtLz10H7Yw1Ot/i2ids= Subject key identifier: F7:E9:76:A1:09:4E:80:28:E1:0E:CA:35:69:51:83:6E:7F:F8:8B:4B Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Certificate serial: 08D6 Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/EE7FBFECF5DA11EAA1976953C4F9AE02.roa Signing time: Mon 31 Aug 2026 20:41:06 +0000 ROA not before: Mon 31 Aug 2026 20:41:06 +0000 ROA not after: Fri 01 Jan 2027 00:00:00 +0000 asID: 136442 IP address blocks: 103.88.48.0/22 maxlen: 22 103.88.48.0/24 maxlen: 24 103.88.49.0/24 maxlen: 24 103.88.50.0/24 maxlen: 24 103.88.51.0/24 maxlen: 24 203.96.240.0/22 maxlen: 22 203.96.240.0/24 maxlen: 24 203.96.241.0/24 maxlen: 24 203.96.242.0/24 maxlen: 24 203.96.243.0/24 maxlen: 24 2400:de40::/32 maxlen: 32 2400:de40::/48 maxlen: 48 2400:de40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Validity Not Before: Aug 31 20:41:06 2026 GMT Not After : Jan 1 00:00:00 2027 GMT Subject: CN=6a95e6e2-00ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:6b:c2:19:37:62:11:71:43:62:d1:43:b9: 24:a0:92:80:bc:ac:72:29:ca:88:4d:fc:1b:9d:b6: 55:2f:bc:82:d4:2f:c3:6e:cb:98:90:33:3a:c3:b0: b9:b2:fe:f7:b2:dd:98:bb:5d:6a:25:20:b6:24:96: 77:f1:ab:96:48:36:95:3c:d4:43:f9:72:5d:a9:12: 2b:f8:29:87:7d:b1:91:38:c8:e8:74:82:65:b7:5c: 62:11:fb:79:9c:b3:9c:57:08:b7:83:9a:4d:5c:11: ba:3d:b7:b4:90:95:44:db:f8:02:f5:fe:19:9b:57: 38:7a:9c:81:e2:4d:9d:04:b8:cd:b3:4f:e5:2d:63: ba:e5:7f:69:3f:33:76:5c:4a:f1:84:9e:1c:dc:83: fb:78:5e:0c:1c:1f:68:79:0e:82:8d:25:5c:5e:99: 7b:f7:81:fb:19:76:9c:16:44:f5:d5:1a:23:1f:d1: 9b:c5:ce:e9:37:cb:e7:48:bf:90:50:0f:f1:e8:a3: 79:51:c0:9f:85:b5:5c:ad:a7:91:9c:ec:d9:7a:6f: cf:2f:ef:db:2d:95:33:17:a2:b5:98:6e:ff:a8:14: 48:ed:e4:fb:39:46:e1:2a:7a:1f:cb:c1:d9:d6:58: 44:99:35:12:f2:cb:e8:70:09:99:ad:b0:fd:e4:12: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E9:76:A1:09:4E:80:28:E1:0E:CA:35:69:51:83:6E:7F:F8:8B:4B X509v3 Authority Key Identifier: keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/EE7FBFECF5DA11EAA1976953C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.48.0/22 203.96.240.0/22 IPv6: 2400:de40::/32 Signature Algorithm: sha256WithRSAEncryption 04:51:de:ca:14:e6:ff:1c:a5:4d:9c:6f:e8:4c:18:b5:be:25: 5d:a1:7d:38:57:de:98:85:37:f2:44:ef:f8:c0:46:89:98:e6: db:d4:15:b6:d1:9c:01:17:4e:9b:98:ff:a5:b0:c4:c2:4f:a9: 8b:a7:28:a9:3a:bb:f7:d0:0d:6a:ef:f5:ed:3b:a8:8f:c9:92: aa:ca:d4:e3:e8:f4:ea:42:18:2c:c2:a1:94:fe:5c:d1:f7:92: e4:16:6f:64:90:ab:a5:be:1a:69:fb:c6:18:3c:4b:54:bd:06: e4:3b:a1:d3:b5:96:79:ef:83:16:5b:53:1b:ab:3e:1e:ba:d3: 5f:fc:cd:71:5b:5e:96:02:b7:63:c6:1a:f5:59:df:12:c5:6b: 77:a2:57:2f:d4:0a:d8:8d:7f:a3:da:bd:f4:39:e1:14:98:50: 4a:dc:ae:ae:73:f2:72:e9:3b:b5:85:65:98:02:3c:74:77:66: 35:63:0d:00:3b:4f:65:5b:a9:f4:1d:74:e4:a0:c1:91:ab:72: e7:00:6a:8e:81:20:22:fc:7a:bc:1d:d0:7b:52:ec:0e:61:1b: 40:a8:a3:2f:b3:85:3d:07:63:35:7a:4f:39:76:03:d9:a7:44: 14:71:ab:6d:a2:5b:83:15:ca:31:5a:11:b1:7f:e2:af:d8:ca: 9a:2a:28:06 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyQzQxMTAvBgNVBAUTKDRFQUJENkUwNUNBMEU0QTZBODE1RjlCNjQ2OTRCM0NG ODkyQUY4RjQwHhcNMjYwODMxMjA0MTA2WhcNMjcwMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1ZTZlMi0wMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6trwhk3YhFxQ2LRQ7kkoJKAvKxyKcqITfwbnbZVL7yC1C/DbsuYkDM6w7C5 sv73st2Yu11qJSC2JJZ38auWSDaVPNRD+XJdqRIr+CmHfbGROMjodIJlt1xiEft5 nLOcVwi3g5pNXBG6Pbe0kJVE2/gC9f4Zm1c4epyB4k2dBLjNs0/lLWO65X9pPzN2 XErxhJ4c3IP7eF4MHB9oeQ6CjSVcXpl794H7GXacFkT11RojH9Gbxc7pN8vnSL+Q UA/x6KN5UcCfhbVcraeRnOzZem/PL+/bLZUzF6K1mG7/qBRI7eT7OUbhKnofy8HZ 1lhEmTUS8svocAmZrbD95BIfzwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPfpdqEJ ToAo4Q7KNWlRg25/+ItLMB8GA1UdIwQYMBaAFE6r1uBcoOSmqBX5tkaUs8+JKvj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJDNC84MUYwRDU0Q0Y1 RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVLYW9GZm0yUnBTeno0a3Et UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rxdlc0RnlnNUthb0ZmbTJScFN6ejRrcS1QUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTgyQzQvODFGMEQ1NENGNUQ5MTFFQUFFRjY5RDUxQzRGOUFFMDIvRUU3RkJGRUNG NURBMTFFQUExOTc2OTUzQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ1gwAwQCy2DwMA0EAgACMAcDBQAkAN5AMA0GCSqGSIb3DQEBCwUA A4IBAQAEUd7KFOb/HKVNnG/oTBi1viVdoX04V96YhTfyRO/4wEaJmObb1BW20ZwB F06bmP+lsMTCT6mLpyipOrv30A1q7/XtO6iPyZKqytTj6PTqQhgswqGU/lzR95Lk Fm9kkKulvhpp+8YYPEtUvQbkO6HTtZZ574MWW1Mbqz4eutNf/M1xW16WArdjxhr1 Wd8SxWt3olcv1ArYjX+j2r30OeEUmFBK3K6uc/Jy6Tu1hWWYAjx0d2Y1Yw0AO09l W6n0HXTkoMGRq3LnAGqOgSAi/Hq8HdB7UuwOYRtAqKMvs4U9B2M1ek85dgPZp0QU cattoluDFcoxWhGxf+Kv2MqaKigG -----END CERTIFICATE-----Generated at Tue Sep 22 12:50:41 2026 by rpki-client