$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa File: 171130AE15F011EC805A0A2FC4F9AE02.roa (raw, json) Hash identifier: 8wXuS4+JORHsa5NlR+0rKW7paq6mS+3bQqZ2PWslzSo= Subject key identifier: CE:A9:2A:1E:9D:F1:C0:AD:C5:40:CE:7E:92:E1:D4:49:32:BD:F9:18 Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 2696 Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa Signing time: Tue 18 Aug 2026 16:23:08 +0000 ROA not before: Tue 18 Aug 2026 16:23:08 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 56099 IP address blocks: 103.89.236.0/22 maxlen: 24 223.25.0.0/22 maxlen: 24 223.25.4.0/22 maxlen: 24 223.25.8.0/22 maxlen: 24 223.25.12.0/22 maxlen: 24 223.25.16.0/22 maxlen: 24 223.25.20.0/22 maxlen: 24 223.25.24.0/22 maxlen: 24 223.25.28.0/22 maxlen: 24 223.25.32.0/22 maxlen: 24 223.25.36.0/22 maxlen: 24 223.25.40.0/22 maxlen: 24 223.25.44.0/22 maxlen: 24 223.25.48.0/22 maxlen: 24 223.25.52.0/22 maxlen: 24 223.25.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9878 (0x2696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Validity Not Before: Aug 18 16:23:08 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8486ec-f414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:e5:0b:7e:9b:a3:81:8e:6d:ce:fd:90:c5: d1:b4:67:05:50:57:1f:b5:5f:cf:6e:6b:24:01:10: a9:1b:70:4e:26:ad:58:15:8b:66:28:40:5f:85:cc: 29:4f:52:1a:dc:c1:73:16:ba:51:fd:59:4c:39:1c: 1b:e6:c0:75:b7:46:70:eb:77:8d:89:9e:1f:a1:b4: 4f:b5:8d:3b:86:57:b8:af:79:7f:89:32:17:10:e8: 78:67:d0:c1:ba:cb:e2:ca:29:58:81:3e:1a:5f:59: e0:e2:fd:6b:3f:e1:c0:4f:a7:a2:01:0b:d3:ab:86: d7:4f:e3:40:c6:58:55:f7:74:00:0f:82:f1:6d:eb: c7:31:0e:49:a0:1d:8e:c7:b3:9f:ba:58:cc:93:da: ec:78:1c:d2:53:aa:09:07:f0:92:1c:da:a1:61:b9: 79:cd:82:e7:9c:2b:24:3d:c5:05:c2:15:be:ee:01: f3:88:d3:f4:14:06:13:e7:0d:e3:a0:91:c2:77:12: 1d:2b:64:b8:c8:d6:5b:b1:81:78:2f:8e:75:96:7b: c9:57:6d:a5:1f:7b:28:0c:ef:d1:66:98:f1:6d:d1: 7a:ee:e3:bc:7a:28:05:f3:65:6d:0a:9b:4d:e9:0a: e6:a4:5f:2d:ed:00:80:4d:07:f2:c6:d7:0b:b1:5b: a4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A9:2A:1E:9D:F1:C0:AD:C5:40:CE:7E:92:E1:D4:49:32:BD:F9:18 X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.89.236.0/22 223.25.0.0-223.25.59.255 Signature Algorithm: sha256WithRSAEncryption b7:31:67:8f:51:72:d6:07:0f:11:89:6b:e3:c6:e1:f5:fe:69: 5c:6c:b7:b3:27:2b:05:78:e9:b2:f1:71:d6:3d:67:27:1e:32: fc:05:3b:1f:59:98:e9:a6:61:59:26:86:44:e9:05:9a:38:a9: e2:24:ee:dd:91:ba:e6:94:16:2e:6a:c2:d6:3d:35:1d:d5:99: 9a:de:1d:8a:19:c9:98:a5:de:0d:0d:84:23:14:d9:57:57:c5: 6b:48:f9:0d:eb:c1:2e:b5:bf:52:df:1a:9f:5d:3f:04:8b:0a: 13:9b:ba:27:10:64:b5:a0:87:4f:42:83:75:01:f7:41:be:36: f5:ff:e0:64:a0:bf:ac:f1:f3:c5:d8:c1:90:a8:e6:46:4c:1b: 86:88:dd:8a:85:a2:fe:95:51:67:13:83:c7:ef:1d:06:bb:7e: 1e:ca:a5:96:e5:e5:37:2b:75:4d:0a:e3:1d:bc:bc:0e:cf:d0: 79:af:fa:f2:a8:c2:a2:6c:02:80:02:e7:a7:b5:2d:4f:0a:2f: 9d:65:62:da:6a:d8:3d:c3:f3:94:99:ff:16:36:55:06:82:55: 9f:83:bc:7b:c5:65:bb:e2:ad:9b:61:9f:70:3e:16:a5:c0:c5: 6a:68:9c:32:03:fb:5a:87:23:02:4e:55:25:e0:48:9f:0b:3a: dd:24:3e:93 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICJpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjYwODE4MTYyMzA4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg0ODZlYy1mNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmevlC36bo4GObc79kMXRtGcFUFcftV/PbmskARCpG3BOJq1YFYtmKEBfhcwp T1Ia3MFzFrpR/VlMORwb5sB1t0Zw63eNiZ4fobRPtY07hle4r3l/iTIXEOh4Z9DB usviyilYgT4aX1ng4v1rP+HAT6eiAQvTq4bXT+NAxlhV93QAD4LxbevHMQ5JoB2O x7OfuljMk9rseBzSU6oJB/CSHNqhYbl5zYLnnCskPcUFwhW+7gHziNP0FAYT5w3j oJHCdxIdK2S4yNZbsYF4L451lnvJV22lH3soDO/RZpjxbdF67uO8eigF82VtCptN 6QrmpF8t7QCATQfyxtcLsVukyQIDAQABo4ICbTCCAmkwHQYDVR0OBBYEFM6pKh6d 8cCtxUDOfpLh1EkyvfkYMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgxMTkvQTdFQzU5NkMxMzMzMTFFNUI4M0QwRjdCQzRGOUFFMDIvMTcxMTMwQUUx NUYwMTFFQzgwNUEwQTJGQzRGOUFFMDIucm9hMCwGCCsGAQUFBwEHAQH/BB0wGzAZ BAIAATATAwQCZ1nsMAsDAwDfGQMEAt8ZODANBgkqhkiG9w0BAQsFAAOCAQEAtzFn j1Fy1gcPEYlr48bh9f5pXGy3sycrBXjpsvFx1j1nJx4y/AU7H1mY6aZhWSaGROkF mjip4iTu3ZG65pQWLmrC1j01HdWZmt4dihnJmKXeDQ2EIxTZV1fFa0j5DevBLrW/ Ut8an10/BIsKE5u6JxBktaCHT0KDdQH3Qb429f/gZKC/rPHzxdjBkKjmRkwbhojd ioWi/pVRZxODx+8dBrt+HsqlluXlNyt1TQrjHby8Ds/Qea/68qjComwCgALnp7Ut TwovnWVi2mrYPcPzlJn/FjZVBoJVn4O8e8Vlu+Ktm2GfcD4WpcDFamicMgP7Wocj Ak5VJeBInws63SQ+kw== -----END CERTIFICATE-----Generated at Thu Sep 24 01:24:55 2026 by rpki-client