$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/70F65056CDB911F0BDBD9948C4F9AE02.roa File: 70F65056CDB911F0BDBD9948C4F9AE02.roa (raw, json) Hash identifier: wNuU/McNsjQV/yhZ8jRCImvFBfIORO5QAEDpyd/LbRs= Subject key identifier: 3B:1D:11:1F:EC:2C:9E:67:D9:85:D9:A0:9D:03:8B:1F:40:33:C9:88 Certificate issuer: /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D Certificate serial: 08E0 Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/70F65056CDB911F0BDBD9948C4F9AE02.roa Signing time: Tue 15 Sep 2026 09:09:50 +0000 ROA not before: Tue 15 Sep 2026 09:09:50 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 58800 IP address blocks: 103.245.108.0/22 maxlen: 22 103.245.108.0/24 maxlen: 24 103.245.109.0/24 maxlen: 24 103.245.110.0/24 maxlen: 24 103.245.111.0/24 maxlen: 24 150.107.52.0/22 maxlen: 22 150.107.52.0/24 maxlen: 24 150.107.53.0/24 maxlen: 24 150.107.54.0/24 maxlen: 24 150.107.55.0/24 maxlen: 24 2406:b00::/32 maxlen: 32 2406:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2272 (0x8e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D Validity Not Before: Sep 15 09:09:50 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6aa90b5e-4a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5e:e3:20:f8:3a:df:d1:15:61:9f:ff:ac:d6: 2f:f9:07:e5:81:2f:bd:a4:de:a9:d9:af:7f:be:d7: 10:a0:19:59:18:bf:8c:c9:e7:0f:91:a1:c8:9d:01: b7:a6:c2:40:7a:97:a2:fe:06:cf:4a:7b:50:d8:ce: 86:e2:d9:12:1d:a0:99:6b:3f:ac:98:43:fc:63:f7: 61:ab:7a:9b:3f:14:4d:26:c7:b2:cc:4e:26:33:6b: c1:08:61:38:e0:41:a0:1b:34:40:55:77:80:c2:00: 7c:78:c7:bb:e8:41:a1:45:13:57:f1:3f:e3:29:cf: 08:da:81:8f:2a:d7:aa:28:33:57:09:94:c7:bf:fe: f1:ca:59:48:6b:c8:8f:12:17:b4:f4:a7:91:7d:2b: f0:46:52:49:e5:7a:74:5e:5e:05:65:f0:5e:04:29: a3:30:75:f9:3d:1e:83:ea:a2:85:04:ff:1b:c3:2e: 19:52:c1:ae:d0:c0:0a:93:d3:5d:3e:6c:a5:e4:75: fb:17:de:f7:6f:27:d2:be:44:e5:ac:6a:07:a2:f9: 7e:67:e3:67:e1:87:77:c8:d3:49:a1:bd:e2:cc:12: b5:3e:4b:84:01:b3:fa:60:f2:78:2b:00:0c:57:35: ea:18:f1:81:40:31:7f:80:bc:05:0d:d7:a6:3f:78: 6b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1D:11:1F:EC:2C:9E:67:D9:85:D9:A0:9D:03:8B:1F:40:33:C9:88 X509v3 Authority Key Identifier: keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/70F65056CDB911F0BDBD9948C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.245.108.0/22 150.107.52.0/22 IPv6: 2406:b00::/32 Signature Algorithm: sha256WithRSAEncryption ad:40:c8:39:aa:9d:7f:f1:52:4f:24:b7:55:c4:75:0d:76:d2: fa:4f:16:04:b6:27:93:57:8b:92:55:23:43:77:9b:6f:74:ff: fb:13:a7:bf:8b:62:46:94:1b:ba:fb:0a:ec:55:d1:29:c6:f0: 24:da:77:ea:c5:08:6f:29:93:8d:27:14:ff:5c:da:7b:22:6e: 50:c4:10:81:e6:7e:cd:e3:66:d0:b3:35:48:23:0a:91:ef:13: ab:a5:b7:a4:a5:e2:df:96:55:60:a6:db:38:85:31:7f:c5:4e: 0b:08:41:b3:56:45:3d:8c:2f:bd:5e:ee:43:ce:e0:df:7d:7f: c2:a5:f3:7d:c2:87:30:91:b9:d6:7c:b1:69:6e:7f:d2:be:ae: 89:a3:74:e2:f6:6f:b9:fa:98:80:86:35:99:97:b5:93:77:85: e1:39:6e:a6:a7:76:22:8c:e2:07:56:b2:4c:b6:64:00:d6:74: ce:09:e7:d1:2b:83:0c:1e:82:36:c2:87:09:51:12:7e:a2:67: ad:c8:10:d7:ac:23:98:48:32:64:f3:04:56:2f:1c:fa:21:4c: 0c:84:b0:46:a3:3e:c7:e1:a0:3e:90:7b:0b:a1:2f:34:aa:fd: 28:95:59:37:bc:c3:61:59:ee:6b:3c:7c:79:2b:70:b8:dc:49: c0:e4:1b:bd -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQxN0YxMTAvBgNVBAUTKDE3RjRGQjEyODc1NkVCQjBCQUM1OUQ0RTBGNEI3RTA4 NzI3OTc2MEQwHhcNMjYwOTE1MDkwOTUwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE5MGI1ZS00YTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA517jIPg639EVYZ//rNYv+QflgS+9pN6p2a9/vtcQoBlZGL+MyecPkaHInQG3 psJAepei/gbPSntQ2M6G4tkSHaCZaz+smEP8Y/dhq3qbPxRNJseyzE4mM2vBCGE4 4EGgGzRAVXeAwgB8eMe76EGhRRNX8T/jKc8I2oGPKteqKDNXCZTHv/7xyllIa8iP Ehe09KeRfSvwRlJJ5Xp0Xl4FZfBeBCmjMHX5PR6D6qKFBP8bwy4ZUsGu0MAKk9Nd Pmyl5HX7F973byfSvkTlrGoHovl+Z+Nn4Yd3yNNJob3izBK1PkuEAbP6YPJ4KwAM VzXqGPGBQDF/gLwFDdemP3hryQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFDsdER/s LJ5n2YXZoJ0Dix9AM8mIMB8GA1UdIwQYMBaAFBf0+xKHVuuwusWdTg9LfghyeXYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDE3Ri9BNTZENUY0MEZC NDcxMUVBQkVGNDdEM0VDNEY5QUUwMi9GX1Q3RW9kVzY3QzZ4WjFPRDB0LUNISjVk ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfVDdFb2RXNjdDNnhaMU9EMHQtQ0hKNWRnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQxN0YvQTU2RDVGNDBGQjQ3MTFFQUJFRjQ3RDNFQzRGOUFFMDIvNzBGNjUwNTZD REI5MTFGMEJEQkQ5OTQ4QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ/VsAwQClms0MA0EAgACMAcDBQAkBgsAMA0GCSqGSIb3DQEBCwUA A4IBAQCtQMg5qp1/8VJPJLdVxHUNdtL6TxYEtieTV4uSVSNDd5tvdP/7E6e/i2JG lBu6+wrsVdEpxvAk2nfqxQhvKZONJxT/XNp7Im5QxBCB5n7N42bQszVIIwqR7xOr pbekpeLfllVgpts4hTF/xU4LCEGzVkU9jC+9Xu5DzuDffX/CpfN9wocwkbnWfLFp bn/Svq6Jo3Ti9m+5+piAhjWZl7WTd4XhOW6mp3YijOIHVrJMtmQA1nTOCefRK4MM HoI2wocJURJ+ometyBDXrCOYSDJk8wRWLxz6IUwMhLBGoz7H4aA+kHsLoS80qv0o lVk3vMNhWe5rPHx5K3C43EnA5Bu9 -----END CERTIFICATE-----Generated at Thu Sep 24 12:09:20 2026 by rpki-client