$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/A355C1A8B6D511F089793D6DC4F9AE02.roa File: A355C1A8B6D511F089793D6DC4F9AE02.roa (raw, json) Hash identifier: SwqN5BzpIlLjEtJuRg3b2c5KCHmTQAMZjOor1EV7XG0= Subject key identifier: 61:CA:6C:DF:50:A5:04:E0:81:54:EB:68:D5:81:D3:40:65:4C:72:E6 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 0235 Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/A355C1A8B6D511F089793D6DC4F9AE02.roa Signing time: Thu 06 Aug 2026 12:12:08 +0000 ROA not before: Thu 06 Aug 2026 12:12:08 +0000 ROA not after: Tue 31 Oct 2028 00:00:00 +0000 asID: 134783 IP address blocks: 103.250.0.0/22 maxlen: 24 202.6.120.0/22 maxlen: 24 202.58.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Aug 6 12:12:08 2026 GMT Not After : Oct 31 00:00:00 2028 GMT Subject: CN=6a747a18-94f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:2c:13:91:f7:58:de:fc:48:04:f9:72:9e: aa:58:43:b3:bf:df:ac:5c:60:1e:8c:62:3c:33:7a: 50:fb:88:73:03:24:57:cd:69:3f:f6:27:e2:0b:c9: 5c:9c:08:7a:18:f7:1e:bd:e1:8e:57:e0:63:58:bd: b4:0a:52:15:58:55:bb:4a:78:d7:84:f9:f8:b3:f0: e5:84:25:37:5d:bb:71:51:d1:bd:11:66:da:a8:cd: 42:40:8d:81:e9:e7:56:9c:9f:49:6a:65:94:49:0f: 8c:bf:b5:44:76:0c:62:bf:c8:dc:3d:e7:a2:d1:a6: 84:e9:94:f3:67:11:e2:ac:3f:29:67:fc:e0:db:fd: 0a:55:15:c3:d3:47:84:7f:62:64:45:dd:26:da:4c: 39:b5:d1:66:0f:09:56:40:78:f7:1f:20:02:dc:59: 3d:cb:b3:9c:46:5e:bb:d1:dd:4d:42:71:25:e4:21: 17:d5:d4:07:fa:77:4d:05:cf:ed:8b:67:7c:aa:9f: 98:5d:7c:b4:bd:a3:bd:dd:c4:d5:3b:fd:87:27:fd: b2:58:bf:f2:c3:88:9f:4f:ec:d0:f0:b5:b0:db:18: c2:a8:df:f7:94:e8:0f:e0:15:97:8e:d9:3e:47:65: 4c:93:97:8e:00:5a:8e:77:e6:bc:55:3c:84:85:b2: a6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CA:6C:DF:50:A5:04:E0:81:54:EB:68:D5:81:D3:40:65:4C:72:E6 X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/A355C1A8B6D511F089793D6DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.250.0.0/22 202.6.120.0/22 202.58.248.0/22 Signature Algorithm: sha256WithRSAEncryption 65:c2:ed:12:08:dc:a7:c8:fc:f1:6e:3a:d3:5d:8c:4c:90:4a: 41:c3:46:3d:e1:ce:05:f0:8d:91:81:eb:45:3b:aa:11:57:5b: 28:39:cd:d9:6f:b9:3f:a4:33:5f:8f:1a:67:62:fe:1a:95:32: 01:64:32:d3:4e:e3:38:c0:d8:d0:71:5e:65:42:e3:55:b9:c6: ca:43:cd:6a:01:02:ab:c9:96:6e:97:4f:55:1a:0c:5c:0d:77: 24:60:af:c3:02:ec:9b:79:d9:5e:6b:c5:68:0b:01:5a:6c:57: 89:51:76:eb:e3:e3:02:09:72:e5:56:72:75:5a:2f:96:3c:4f: 38:4e:6d:3b:b1:9d:bf:e5:91:80:f9:cb:82:5d:2a:43:4b:7c: 0f:13:1c:8c:14:3e:c0:ef:1d:fb:7c:16:97:c4:15:34:5e:91: f7:36:99:32:05:68:4f:ac:10:95:5b:c8:fd:b2:8b:ee:96:9d: 09:40:63:9f:b5:9b:d6:b9:57:d5:90:4d:14:9f:43:8e:79:96: 54:96:df:f5:02:6c:cd:bc:4c:8a:c4:3e:90:c0:ca:e2:f1:d7: 10:97:b1:41:6a:70:2d:22:7f:f5:39:f5:8c:97:7e:06:80:56: 3f:8d:77:6c:67:a6:f8:f6:fd:1f:81:6f:34:30:68:2d:1c:c3: 2e:46:7a:ea -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjYwODA2MTIxMjA4WhcNMjgxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0N2ExOC05NGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzAsE5H3WN78SAT5cp6qWEOzv9+sXGAejGI8M3pQ+4hzAyRXzWk/9ifiC8lc nAh6GPceveGOV+BjWL20ClIVWFW7SnjXhPn4s/DlhCU3XbtxUdG9EWbaqM1CQI2B 6edWnJ9JamWUSQ+Mv7VEdgxiv8jcPeei0aaE6ZTzZxHirD8pZ/zg2/0KVRXD00eE f2JkRd0m2kw5tdFmDwlWQHj3HyAC3Fk9y7OcRl670d1NQnEl5CEX1dQH+ndNBc/t i2d8qp+YXXy0vaO93cTVO/2HJ/2yWL/yw4ifT+zQ8LWw2xjCqN/3lOgP4BWXjtk+ R2VMk5eOAFqOd+a8VTyEhbKmeQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGHKbN9Q pQTggVTraNWB00BlTHLmMB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhBNDkvNDdEMDQ0NjQ0N0I3MTFFRThBMEE5QzQzQzRGOUFFMDIvQTM1NUMxQThC NkQ1MTFGMDg5NzkzRDZEQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ/oAAwQCygZ4AwQCyjr4MA0GCSqGSIb3DQEBCwUAA4IBAQBlwu0S CNynyPzxbjrTXYxMkEpBw0Y94c4F8I2RgetFO6oRV1soOc3Zb7k/pDNfjxpnYv4a lTIBZDLTTuM4wNjQcV5lQuNVucbKQ81qAQKryZZul09VGgxcDXckYK/DAuybedle a8VoCwFabFeJUXbr4+MCCXLlVnJ1Wi+WPE84Tm07sZ2/5ZGA+cuCXSpDS3wPExyM FD7A7x37fBaXxBU0XpH3NpkyBWhPrBCVW8j9sovulp0JQGOftZvWuVfVkE0Un0OO eZZUlt/1AmzNvEyKxD6QwMri8dcQl7FBanAtIn/1OfWMl34GgFY/jXdsZ6b49v0f gW80MGgtHMMuRnrq -----END CERTIFICATE-----Generated at Sat Sep 26 04:59:52 2026 by rpki-client