$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2BB9C24A608E11F09975FE53C4F9AE02.roa File: 2BB9C24A608E11F09975FE53C4F9AE02.roa (raw, json) Hash identifier: VaY5QjBrV1+8NI1wCPddSy9O4ianb1tkbhHV1bD3lF8= Subject key identifier: C6:4F:19:30:94:F8:11:6A:D2:3A:41:2D:F2:B5:2B:63:95:5C:D6:22 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6F34 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2BB9C24A608E11F09975FE53C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:37:13 +0000 ROA not before: Fri 02 Oct 2026 15:37:12 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 63730 IP address blocks: 103.9.156.0/22 maxlen: 22 103.168.36.0/23 maxlen: 23 103.185.184.0/23 maxlen: 24 2400:69e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28468 (0x6f34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:37:12 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcfa8-3a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8b:48:d4:0f:57:de:9e:11:8e:2e:da:04:dc: a7:d9:7a:67:09:8c:a5:12:62:0d:a6:42:63:b8:18: 2e:4c:aa:16:87:cf:7e:8c:b4:79:e8:10:a5:1f:2f: 00:d6:7a:13:52:83:3f:f4:e0:ab:1b:e2:23:66:a0: 55:48:85:77:96:4a:7b:a3:c9:80:76:bc:3a:bd:3c: f3:af:db:9d:99:a5:c3:09:e8:93:93:ae:f5:1e:e6: 2a:4d:8a:66:92:d2:00:d2:75:61:bf:77:02:75:68: 77:24:e5:0c:93:93:dd:1c:33:9e:af:ad:dd:7d:f3: 55:4e:b2:12:e0:10:b9:3f:91:16:84:92:e4:4f:ad: 3f:63:81:bb:91:dd:eb:59:ce:ab:4e:b4:2f:30:35: ae:d5:c3:32:24:0c:b8:c7:0d:47:94:bb:03:fd:fd: b5:50:fb:7f:cf:5e:b9:0b:1c:04:70:f2:86:1c:76: c3:2a:43:de:2a:06:ee:d1:3c:99:07:f0:41:88:c5: 3e:17:71:f9:31:40:39:bd:64:da:23:4d:92:c0:67: 1a:91:91:6f:88:21:6a:0c:6b:16:0c:be:35:f2:60: db:53:36:7e:e7:f0:5c:c9:a0:20:34:be:58:8a:ea: 26:84:a1:a1:09:46:2f:de:be:71:ec:f3:20:ab:3c: e9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4F:19:30:94:F8:11:6A:D2:3A:41:2D:F2:B5:2B:63:95:5C:D6:22 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2BB9C24A608E11F09975FE53C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.9.156.0/22 103.168.36.0/23 103.185.184.0/23 IPv6: 2400:69e0::/48 Signature Algorithm: sha256WithRSAEncryption 38:d2:95:66:48:c5:77:98:35:a1:06:7d:94:46:38:4f:ef:ca: 92:72:9e:49:9e:26:c9:c3:9e:e2:11:a6:00:76:2e:89:32:c7: 77:5c:18:75:6b:75:69:fc:c8:c3:2f:08:d4:35:d1:4f:e2:20: 74:8c:1c:dc:8a:7e:76:21:55:54:e9:3f:51:19:7e:b7:05:1c: 77:f4:5c:58:8b:a3:d6:f1:df:83:b5:68:c3:9c:5a:56:5f:bd: 21:7e:ba:70:22:5c:e8:15:9d:23:f3:63:e9:97:c5:37:12:e7: 32:df:34:63:29:fa:4e:f2:bb:65:0f:95:86:83:1d:7a:0e:8a: 37:55:68:9b:06:11:de:f5:f0:2d:f8:d3:51:f8:d6:ce:cc:ff: b0:b2:22:ab:10:65:d0:9c:98:fd:50:fe:78:1c:a0:4c:17:c9: 49:7d:a2:5c:90:ae:8b:51:ae:db:74:74:1e:59:b6:2c:e3:63: ee:27:74:09:d2:71:43:56:d6:56:55:f1:0a:f0:18:a0:a7:09: be:d0:a6:97:07:9a:f0:7c:b5:6b:c0:06:44:b6:b3:0d:ff:fd: 57:63:d0:b7:7a:b6:7b:e4:29:8d:78:06:ba:bd:72:a3:c3:e7: 51:c9:50:c7:c0:72:c1:9b:ff:19:de:bb:85:cb:72:32:d2:e3: cc:5f:ab:23 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICbzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNzEyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2ZhOC0zYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64tI1A9X3p4Rji7aBNyn2XpnCYylEmINpkJjuBguTKoWh89+jLR56BClHy8A 1noTUoM/9OCrG+IjZqBVSIV3lkp7o8mAdrw6vTzzr9udmaXDCeiTk671HuYqTYpm ktIA0nVhv3cCdWh3JOUMk5PdHDOer63dffNVTrIS4BC5P5EWhJLkT60/Y4G7kd3r Wc6rTrQvMDWu1cMyJAy4xw1HlLsD/f21UPt/z165CxwEcPKGHHbDKkPeKgbu0TyZ B/BBiMU+F3H5MUA5vWTaI02SwGcakZFviCFqDGsWDL418mDbUzZ+5/BcyaAgNL5Y iuomhKGhCUYv3r5x7PMgqzzpJwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFMZPGTCU +BFq0jpBLfK1K2OVXNYiMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMkJCOUMyNEE2 MDhFMTFGMDk5NzVGRTUzQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQCZwmcAwQBZ6gkAwQBZ7m4MA8EAgACMAkDBwAkAGngAAAwDQYJKoZI hvcNAQELBQADggEBADjSlWZIxXeYNaEGfZRGOE/vypJynkmeJsnDnuIRpgB2Loky x3dcGHVrdWn8yMMvCNQ10U/iIHSMHNyKfnYhVVTpP1EZfrcFHHf0XFiLo9bx34O1 aMOcWlZfvSF+unAiXOgVnSPzY+mXxTcS5zLfNGMp+k7yu2UPlYaDHXoOijdVaJsG Ed718C3401H41s7M/7CyIqsQZdCcmP1Q/ngcoEwXyUl9olyQrotRrtt0dB5Ztizj Y+4ndAnScUNW1lZV8QrwGKCnCb7QppcHmvB8tWvABkS2sw3//Vdj0Ld6tnvkKY14 Brq9cqPD51HJUMfAcsGb/xneu4XLcjLS48xfqyM= -----END CERTIFICATE-----Generated at Sun Oct 25 19:54:52 2026 by rpki-client