$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/DDDB9EB80D7111F1B25D59101F3D8C67.roa File: DDDB9EB80D7111F1B25D59101F3D8C67.roa (raw, json) Hash identifier: K83IKFLML+Jk6Jw49wCe5WcA13zCA410o8mlpFwO+Jw= Subject key identifier: D7:2D:E7:8D:97:BD:06:30:A5:8C:D6:AA:30:EE:1B:8B:E6:AC:46:62 Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 0557 Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/DDDB9EB80D7111F1B25D59101F3D8C67.roa Signing time: Fri 06 Nov 2026 02:23:05 +0000 ROA not before: Fri 06 Nov 2026 02:23:05 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 149440 IP address blocks: 103.179.142.0/24 maxlen: 24 103.179.143.0/24 maxlen: 24 2400:8d60:1::/48 maxlen: 48 2400:8d60:2::/48 maxlen: 48 2400:8d60:3::/48 maxlen: 48 2400:8d60:4::/48 maxlen: 48 2400:8d60:5::/48 maxlen: 48 2400:8d60:6::/48 maxlen: 48 2400:8d60:7::/48 maxlen: 48 2400:8d60:8::/48 maxlen: 48 2400:8d60:9::/48 maxlen: 48 2400:8d60:10::/48 maxlen: 48 2400:8d60:11::/48 maxlen: 48 2400:8d60:12::/48 maxlen: 48 2400:8d60:13::/48 maxlen: 48 2400:8d60:14::/48 maxlen: 48 2400:8d60:15::/48 maxlen: 48 2400:8d60:16::/48 maxlen: 48 2400:8d60:17::/48 maxlen: 48 2400:8d60:19::/48 maxlen: 48 2400:8d60:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Nov 6 02:23:05 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6aed3a09-a3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:77:7b:d4:f8:88:9d:bf:fe:5e:c4:3c:65: 4c:a0:0e:9b:f8:45:ad:0b:46:31:45:9a:ca:03:7c: da:87:65:83:4e:60:be:f3:60:5f:7c:f1:88:7c:7e: 1e:77:c0:f6:e2:d3:d1:f4:5c:14:9b:05:d2:57:77: 76:63:a9:c8:d0:86:69:54:84:90:e7:c5:f6:c3:8a: 96:55:41:34:00:14:e3:f5:8d:e8:23:da:ba:49:44: 97:6c:55:23:2f:ea:e2:f9:64:4a:7d:c2:07:af:42: ec:2b:81:c3:b1:7e:3a:80:ff:e2:5c:ec:5a:20:d7: f4:1e:55:1e:71:24:0e:eb:ab:e7:5b:19:d0:7f:c6: 47:f3:45:f7:75:40:08:2b:65:a5:82:0a:bb:73:a3: 69:b0:5d:c9:cb:59:37:b9:d3:52:93:7e:c6:91:9a: c2:ad:cb:ab:6f:70:09:8a:c3:66:26:e9:17:35:3b: 1c:3c:12:47:9c:25:60:11:02:df:d3:26:3c:37:00: 37:e9:e0:52:f5:87:93:11:dc:92:13:4f:eb:75:e0: 38:2f:8f:a5:fb:dd:ae:25:bb:cf:1d:4b:84:c0:2a: cb:f9:be:ce:ec:87:49:66:53:fb:88:dc:d2:d5:0c: 05:c8:71:3d:e8:be:1e:be:d5:2f:82:1e:72:20:c6: f0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2D:E7:8D:97:BD:06:30:A5:8C:D6:AA:30:EE:1B:8B:E6:AC:46:62 X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/DDDB9EB80D7111F1B25D59101F3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.179.142.0/23 IPv6: 2400:8d60:1::-2400:8d60:9:ffff:ffff:ffff:ffff:ffff 2400:8d60:10::/45 2400:8d60:19::/48 2400:8d60:21::/48 Signature Algorithm: sha256WithRSAEncryption 89:6c:2c:a2:f2:a1:18:3e:91:d7:64:49:d7:01:38:e0:62:8d: 20:52:bd:fb:f4:9c:36:cd:94:0a:90:b0:fe:fe:28:2c:c6:0d: 5f:5d:5b:a8:ab:05:90:98:20:22:29:81:94:1d:c1:49:be:f9: f6:77:03:1d:a8:68:02:f3:76:83:b7:b8:59:b5:8c:df:db:f8: 33:3c:ae:43:28:b0:13:df:bb:b0:20:fb:50:75:46:4d:48:e3: 37:7f:db:22:2a:e8:3f:45:f8:d2:e4:44:ef:aa:e1:73:5d:52: 2c:9b:c5:27:ce:f9:df:69:26:9c:bd:8b:4a:fe:28:16:73:5a: e4:87:37:6c:78:1a:51:cc:32:a0:b9:92:c5:2c:c7:20:06:66: 35:e4:15:55:79:04:26:70:67:e3:cf:c6:d7:60:50:88:08:bf: 93:66:01:25:87:98:cc:0b:6b:18:a3:cd:6f:d7:f0:1b:f5:01: 2e:5e:26:fb:43:3f:5f:fe:0b:e5:9d:c1:d5:a8:41:9a:a4:cc: 57:f7:00:ed:5d:01:44:5e:24:6f:31:1c:8c:12:bc:6a:3c:9a: 9d:28:7b:63:6b:37:da:ed:0e:07:53:e7:0e:17:37:8e:ed:eb: 64:f5:6b:58:fa:a7:9f:e0:95:cb:4f:79:b5:ef:2f:cc:77:f1: 82:28:2c:af -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjYxMTA2MDIyMzA1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWVkM2EwOS1hM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCp3e9T4iJ2//l7EPGVMoA6b+EWtC0YxRZrKA3zah2WDTmC+82BffPGIfH4e d8D24tPR9FwUmwXSV3d2Y6nI0IZpVISQ58X2w4qWVUE0ABTj9Y3oI9q6SUSXbFUj L+ri+WRKfcIHr0LsK4HDsX46gP/iXOxaINf0HlUecSQO66vnWxnQf8ZH80X3dUAI K2Wlggq7c6NpsF3Jy1k3udNSk37GkZrCrcurb3AJisNmJukXNTscPBJHnCVgEQLf 0yY8NwA36eBS9YeTEdySE0/rdeA4L4+l+92uJbvPHUuEwCrL+b7O7IdJZlP7iNzS 1QwFyHE96L4evtUvgh5yIMbw1wIDAQABo4IClzCCApMwHQYDVR0OBBYEFNct542X vQYwpYzWqjDuG4vmrEZiMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRBRDQvQzQyMzE4MzA3N0I1MTFFQ0E1QkNFMDVGQzRGOUFFMDIvREREQjlFQjgw RDcxMTFGMUIyNUQ1OTEwMUYzRDhDNjcucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTAM BAIAATAGAwQBZ7OOMDUEAgACMC8wEgMHACQAjWAAAQMHASQAjWAACAMHAyQAjWAA EAMHACQAjWAAGQMHACQAjWAAITANBgkqhkiG9w0BAQsFAAOCAQEAiWwsovKhGD6R 12RJ1wE44GKNIFK9+/ScNs2UCpCw/v4oLMYNX11bqKsFkJggIimBlB3BSb759ncD HahoAvN2g7e4WbWM39v4MzyuQyiwE9+7sCD7UHVGTUjjN3/bIiroP0X40uRE76rh c11SLJvFJ87532kmnL2LSv4oFnNa5Ic3bHgaUcwyoLmSxSzHIAZmNeQVVXkEJnBn 48/G12BQiAi/k2YBJYeYzAtrGKPNb9fwG/UBLl4m+0M/X/4L5Z3B1ahBmqTMV/cA 7V0BRF4kbzEcjBK8ajyanSh7Y2s32u0OB1PnDhc3ju3rZPVrWPqnn+CVy095te8v zHfxgigsrw== -----END CERTIFICATE-----Generated at Tue Nov 10 20:58:23 2026 by rpki-client