$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/C0C6DAC87F6711F181B5257061A30FBC.roa File: C0C6DAC87F6711F181B5257061A30FBC.roa (raw, json) Hash identifier: LArdPYBxgbX/0yRiPiY4+A0fZe2+AgQXn+s/Md8nMsE= Subject key identifier: DC:69:B2:B9:6C:B1:8A:00:A7:AB:29:79:A2:53:59:45:92:41:1F:F1 Certificate issuer: /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Certificate serial: 2207 Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/C0C6DAC87F6711F181B5257061A30FBC.roa Signing time: Tue 01 Sep 2026 05:09:39 +0000 ROA not before: Tue 01 Sep 2026 05:09:39 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 64072 IP address blocks: 103.25.120.0/22 maxlen: 24 2404:bc80::/32 maxlen: 34 2404:bc80:1000::/48 maxlen: 48 2404:bc80:1001::/48 maxlen: 48 2404:bc80:1100::/48 maxlen: 48 2404:bc80:1200::/48 maxlen: 48 2404:bc80:1300::/48 maxlen: 48 2404:bc80:1400::/48 maxlen: 48 2404:bc80:1500::/48 maxlen: 48 2404:bc80:1600::/48 maxlen: 48 2404:bc80:1700::/48 maxlen: 48 2404:bc80:1800::/48 maxlen: 48 2404:bc80:1900::/48 maxlen: 48 2404:bc80:1a00::/48 maxlen: 48 2404:bc80:1b00::/48 maxlen: 48 2404:bc80:9000::/46 maxlen: 48 2404:bc80:9004::/46 maxlen: 48 2404:bc80:9008::/46 maxlen: 48 2404:bc80:900c::/46 maxlen: 48 2404:bc80:9010::/46 maxlen: 48 2404:bc80:9014::/46 maxlen: 48 2404:bc80:9018::/46 maxlen: 48 2404:bc80:901c::/46 maxlen: 48 2404:bc80:9020::/46 maxlen: 48 2404:bc80:9024::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8711 (0x2207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8534, serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Validity Not Before: Sep 1 05:09:39 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a965e13-c80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:34:ed:dd:12:30:82:3c:74:83:25:47:92:87: 32:a0:27:c1:6e:04:54:e1:21:c2:f1:8b:61:2a:28: d0:7f:d5:f1:f1:d9:29:7b:51:22:54:40:6f:4d:f9: 35:39:52:81:6b:b0:4e:7f:01:40:6f:9c:26:d1:42: ef:1d:ae:b8:95:35:0f:51:ad:33:8e:1f:11:5a:28: 00:57:02:15:5c:2f:bf:cd:b3:70:40:be:ca:2c:cc: 7c:5b:b4:4b:98:d4:ac:69:f4:af:a4:3b:46:45:60: b5:95:0b:d2:d3:07:20:25:d3:fd:88:7b:c2:01:f1: 1d:c8:8e:58:46:06:34:28:09:23:63:e8:d2:10:86: f3:93:ea:1c:d6:4e:a2:a5:37:01:20:29:fd:c8:b0: 75:91:47:41:af:94:14:f9:f5:26:12:2a:dc:69:c2: c4:7b:ad:67:08:64:ef:43:74:c2:bf:2b:ba:e3:80: 32:1e:f8:c7:3a:40:de:92:47:04:30:e7:2e:f4:71: 95:b7:2a:42:38:00:be:36:62:c4:60:8f:e1:4d:1d: 35:5f:5e:5a:04:81:f0:ef:5a:8d:73:c8:9d:76:0f: 97:dd:3c:49:75:cc:e4:f8:ad:40:94:eb:8d:c3:7b: 30:b6:6c:72:30:bf:2b:4a:8e:f8:5f:88:89:1e:f2: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:69:B2:B9:6C:B1:8A:00:A7:AB:29:79:A2:53:59:45:92:41:1F:F1 X509v3 Authority Key Identifier: keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/C0C6DAC87F6711F181B5257061A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.25.120.0/22 IPv6: 2404:bc80::/32 Signature Algorithm: sha256WithRSAEncryption 6c:0e:71:0d:9c:17:75:ad:a0:a2:78:58:a0:1f:ab:bd:f2:14: 2e:aa:63:30:49:a8:93:cc:e7:8e:ef:b3:5f:0f:5f:1a:2f:13: c6:95:75:83:41:d6:e6:af:00:f6:2e:e4:74:ac:4b:30:24:86: 2c:57:82:22:bd:01:ff:c3:c8:37:59:69:0f:81:b5:96:2b:d9: c4:24:09:93:7b:12:74:a0:e6:1b:ea:97:24:97:e4:41:aa:bc: 9c:3d:b5:e9:f6:73:e4:8b:79:19:a9:a6:51:86:ec:76:47:a7: 65:02:33:af:23:16:fc:a1:06:98:40:a7:21:68:ca:c9:09:45: cc:6a:f0:03:9b:c4:76:39:6e:cb:fe:71:99:41:2e:b3:00:b2: f4:b5:0d:54:62:b3:d4:dc:63:67:60:8e:e1:86:2c:bb:12:94: 20:04:ea:b8:b7:cd:cf:3c:37:3c:db:69:a2:4e:74:a9:b2:03: 2e:c4:93:da:9d:55:35:80:0c:08:34:be:b0:5f:ea:61:80:0b: 1f:34:69:2a:b8:2f:ce:4a:bc:13:22:7a:17:ed:09:1d:02:9a: 53:a8:38:34:7f:2a:da:a3:30:63:ae:97:33:db:20:1f:94:55: bd:cf:4c:0f:e4:4f:53:26:5e:13:e5:6a:aa:44:f3:b0:91:18: ee:f3:a2:02 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICIgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1MzQxMTAvBgNVBAUTKEZFMUQ1QkY5MDJGQTkxMkQ3RTBCNUU5ODBDRjkxREJE RkQyQkI2NEYwHhcNMjYwOTAxMDUwOTM5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2NWUxMy1jODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzTt3RIwgjx0gyVHkocyoCfBbgRU4SHC8YthKijQf9Xx8dkpe1EiVEBvTfk1 OVKBa7BOfwFAb5wm0ULvHa64lTUPUa0zjh8RWigAVwIVXC+/zbNwQL7KLMx8W7RL mNSsafSvpDtGRWC1lQvS0wcgJdP9iHvCAfEdyI5YRgY0KAkjY+jSEIbzk+oc1k6i pTcBICn9yLB1kUdBr5QU+fUmEircacLEe61nCGTvQ3TCvyu644AyHvjHOkDekkcE MOcu9HGVtypCOAC+NmLEYI/hTR01X15aBIHw71qNc8iddg+X3TxJdczk+K1AlOuN w3swtmxyML8rSo74X4iJHvI2OwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNxpsrls sYoAp6speaJTWUWSQR/xMB8GA1UdIwQYMBaAFP4dW/kC+pEtfgtemAz5Hb39K7ZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODUzNC82RTZBNDYyQ0ZF REQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtTMS1DMTZZRFBrZHZmMHJ0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19oMWItUUw2a1MxLUMxNllEUGtkdmYwcnRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg1MzQvNkU2QTQ2MkNGRUREMTFFNUI0OTA1RDdDQzRGOUFFMDIvQzBDNkRBQzg3 RjY3MTFGMTgxQjUyNTcwNjFBMzBGQkMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZxl4MA0EAgACMAcDBQAkBLyAMA0GCSqGSIb3DQEBCwUAA4IBAQBs DnENnBd1raCieFigH6u98hQuqmMwSaiTzOeO77NfD18aLxPGlXWDQdbmrwD2LuR0 rEswJIYsV4IivQH/w8g3WWkPgbWWK9nEJAmTexJ0oOYb6pckl+RBqrycPbXp9nPk i3kZqaZRhux2R6dlAjOvIxb8oQaYQKchaMrJCUXMavADm8R2OW7L/nGZQS6zALL0 tQ1UYrPU3GNnYI7hhiy7EpQgBOq4t83PPDc822miTnSpsgMuxJPanVU1gAwINL6w X+phgAsfNGkquC/OSrwTInoX7QkdAppTqDg0fyraozBjrpcz2yAflFW9z0wP5E9T Jl4T5WqqRPOwkRju86IC -----END CERTIFICATE-----Generated at Wed Sep 23 18:25:52 2026 by rpki-client