$ rpki-client -vvvf rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/2611C806D1AA11EA82C4313FC4F9AE02.roa File: 2611C806D1AA11EA82C4313FC4F9AE02.roa (raw, json) Hash identifier: jzcmk0I0njWf5x2x7k5YyVE7s86dKJbpV1xvAioVPhI= Subject key identifier: B7:F7:89:C5:1A:D3:92:EA:F7:D0:6E:E3:AA:57:F7:E4:D7:A6:B2:9E Certificate issuer: /CN=A91177D4/serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE Certificate serial: 0920 Authority key identifier: 86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/2611C806D1AA11EA82C4313FC4F9AE02.roa Signing time: Tue 18 Aug 2026 20:40:49 +0000 ROA not before: Tue 18 Aug 2026 20:40:49 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 133938 IP address blocks: 103.153.240.0/23 maxlen: 23 103.153.240.0/24 maxlen: 24 103.153.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 20:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2336 (0x920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177D4, serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE Validity Not Before: Aug 18 20:40:49 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a84c351-7da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:5d:b2:44:08:e9:56:c6:ab:f6:f2:e9:a2: b7:04:fc:31:5b:cf:81:82:3d:dd:43:ab:70:76:9f: 36:b2:63:ea:f1:37:6f:b7:5d:15:c3:cd:d7:cd:6c: c4:d2:c6:3b:f4:5a:05:38:db:9a:25:39:5c:9e:23: b4:f6:7d:cf:e9:09:70:b6:5a:6e:ea:6d:5a:f5:ad: de:33:58:d6:47:e7:49:8c:7e:d0:ee:2d:20:69:32: af:ad:86:2b:9e:6d:ef:d6:d4:e7:cb:8c:3d:81:94: e4:21:a5:63:a0:55:04:7c:42:3e:ab:46:36:3c:1e: 69:e3:15:c0:b1:fc:6f:34:63:a3:fb:b3:b0:31:a2: f9:54:1e:8b:68:f2:1b:c6:bc:d4:76:83:6f:8f:42: 28:a9:e6:2d:e5:d8:04:08:67:77:26:4a:39:f7:f2: 0b:c8:40:9f:22:cc:bd:80:07:25:27:c8:d8:5e:8b: 8a:3f:2d:bb:da:3e:2f:36:d2:a7:fe:22:88:66:6f: f0:89:69:54:81:58:70:c8:5e:00:4a:3b:55:50:eb: 54:74:b5:55:98:fd:e5:19:3a:72:6e:b5:e6:ac:97: bf:09:5b:0c:ea:9d:b1:6a:72:56:0f:f5:9f:b1:15: 7d:9d:00:03:8c:f6:28:3d:f5:04:19:0a:50:59:75: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F7:89:C5:1A:D3:92:EA:F7:D0:6E:E3:AA:57:F7:E4:D7:A6:B2:9E X509v3 Authority Key Identifier: keyid:86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/2611C806D1AA11EA82C4313FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.240.0/23 Signature Algorithm: sha256WithRSAEncryption 33:17:92:18:ff:ce:f6:06:ae:57:93:d4:64:d5:66:30:63:3d: cb:1b:0d:eb:24:2a:1a:91:72:a0:16:26:37:c0:c7:10:df:ed: d1:b1:da:70:dc:f4:a6:cd:37:0d:38:d1:4f:2c:cc:c2:d5:f1: f6:93:77:c2:0f:56:c1:9a:b6:da:76:1d:b7:74:07:1c:9f:4d: 65:73:78:a9:65:d7:5f:ea:2b:12:f2:c0:35:cc:96:ef:6f:a4: 0f:3f:ca:97:4d:16:68:da:6e:89:52:92:91:35:29:1c:75:82: e2:aa:fd:bc:95:fb:dc:39:fc:98:1d:7c:45:f9:7b:be:11:52: d3:91:67:63:96:49:cc:d2:20:6d:02:75:89:84:6e:ca:11:a2: 9e:45:b9:10:cb:ea:10:d2:71:71:c8:b2:35:36:a6:b2:59:08: 34:af:fc:04:d6:7f:69:5d:8b:e3:22:91:fa:67:9a:bd:da:1b: 83:72:11:14:a4:9f:1b:01:5a:f6:9a:aa:e9:1e:ce:34:fc:c5: 51:53:1e:e9:47:c3:a3:35:f2:f5:bd:20:ac:43:9a:56:34:bd: bf:5f:54:e7:3a:2d:33:dd:98:46:97:33:ec:87:8d:41:81:8c: c2:da:cb:91:a5:58:01:39:52:3b:8f:32:7d:3d:7b:a2:c3:08: 45:2e:46:b4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3RDQxMTAvBgNVBAUTKDg2NTMzMjlBNTFEQkM2NzlGMUJGMTdENzkxRDgzRUM3 Njg5QkU3QUUwHhcNMjYwODE4MjA0MDQ5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg0YzM1MS03ZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGddskQI6VbGq/by6aK3BPwxW8+Bgj3dQ6twdp82smPq8Tdvt10Vw83XzWzE 0sY79FoFONuaJTlcniO09n3P6Qlwtlpu6m1a9a3eM1jWR+dJjH7Q7i0gaTKvrYYr nm3v1tTny4w9gZTkIaVjoFUEfEI+q0Y2PB5p4xXAsfxvNGOj+7OwMaL5VB6LaPIb xrzUdoNvj0IoqeYt5dgECGd3Jko59/ILyECfIsy9gAclJ8jYXouKPy272j4vNtKn /iKIZm/wiWlUgVhwyF4ASjtVUOtUdLVVmP3lGTpybrXmrJe/CVsM6p2xanJWD/Wf sRV9nQADjPYoPfUEGQpQWXXfywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLf3icUa 05Lq99Bu46pX9+TXprKeMB8GA1UdIwQYMBaAFIZTMppR28Z58b8X15HYPsdom+eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdENC8yQ0VFRkUzNEQx QTgxMUVBOEM1ODM3M0JDNEY5QUUwMi9obE15bWxIYnhubnh2eGZYa2RnLXgyaWI1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hsTXltbEhieG5ueHZ4ZlhrZGcteDJpYjU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc3RDQvMkNFRUZFMzREMUE4MTFFQThDNTgzNzNCQzRGOUFFMDIvMjYxMUM4MDZE MUFBMTFFQTgyQzQzMTNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5nwMA0GCSqGSIb3DQEBCwUAA4IBAQAzF5IY/872Bq5Xk9Rk1WYw Yz3LGw3rJCoakXKgFiY3wMcQ3+3Rsdpw3PSmzTcNONFPLMzC1fH2k3fCD1bBmrba dh23dAccn01lc3ipZddf6isS8sA1zJbvb6QPP8qXTRZo2m6JUpKRNSkcdYLiqv28 lfvcOfyYHXxF+Xu+EVLTkWdjlknM0iBtAnWJhG7KEaKeRbkQy+oQ0nFxyLI1Nqay WQg0r/wE1n9pXYvjIpH6Z5q92huDchEUpJ8bAVr2mqrpHs40/MVRUx7pR8OjNfL1 vSCsQ5pWNL2/X1TnOi0z3ZhGlzPsh41BgYzC2suRpVgBOVI7jzJ9PXuiwwhFLka0 -----END CERTIFICATE-----Generated at Tue Sep 1 02:03:19 2026 by rpki-client