$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4AF9C7926EF811EE8230D338C4F9AE02.roa File: 4AF9C7926EF811EE8230D338C4F9AE02.roa (raw, json) Hash identifier: mShuar8ZlRTKHLfjxnfmb8rld02pIkE/2CdD/BDvnnk= Subject key identifier: 70:63:68:D7:39:3D:F3:4E:67:4E:52:EB:A2:DD:30:22:66:DE:78:20 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6E81 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4AF9C7926EF811EE8230D338C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:30:44 +0000 ROA not before: Fri 02 Oct 2026 15:30:44 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151855 IP address blocks: 103.242.100.0/24 maxlen: 24 103.242.101.0/24 maxlen: 24 2401:4220::/48 maxlen: 48 2401:4220:1::/48 maxlen: 48 2401:4220:2::/48 maxlen: 48 2401:4220:10::/48 maxlen: 48 2401:4220:11::/48 maxlen: 48 2401:4220:12::/48 maxlen: 48 2401:4220:1000::/48 maxlen: 48 2401:4220:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28289 (0x6e81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:30:44 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfce24-6920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ed:c0:a2:33:7f:d3:a3:ec:8c:61:aa:9e:4c: bb:46:0b:ea:a6:b8:4b:ea:23:09:ff:81:94:78:8c: 4d:6b:cf:0d:0c:0b:cb:8e:a2:63:85:67:09:a7:18: a5:f6:73:18:1a:8f:12:e5:45:72:b6:18:86:13:e5: 40:4d:b8:0b:7f:07:70:bb:19:4b:30:3f:b2:bb:c7: 89:30:ff:d5:8c:15:d5:a9:9d:db:75:b1:93:33:e6: 45:5d:d9:87:40:63:39:ef:38:a1:67:9c:af:54:67: 81:4a:92:88:ce:17:af:ef:eb:9e:62:a9:3d:3f:81: 3a:a1:6c:14:69:38:38:f5:44:e1:b8:17:a1:a6:ea: 80:b0:98:7b:4c:c5:f9:0c:ab:b4:fb:73:30:e6:09: 25:98:b3:85:3e:38:7c:21:85:76:04:c5:bb:f3:4c: cd:37:f6:25:b7:cd:9a:5c:e2:31:f9:b6:2e:8f:2e: bd:9a:20:39:f0:6e:47:48:0a:b4:70:09:1e:39:0a: c8:fd:dd:40:00:7a:09:42:8e:85:c7:20:b8:23:46: ae:93:9f:19:e3:87:bd:ae:f2:e6:ab:dd:50:b2:f8: c4:26:d1:bd:a6:c4:70:54:7d:80:fa:92:b5:6b:13: 48:f3:70:83:88:14:1f:e4:97:00:86:4a:c0:5d:e1: e5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:63:68:D7:39:3D:F3:4E:67:4E:52:EB:A2:DD:30:22:66:DE:78:20 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4AF9C7926EF811EE8230D338C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.242.100.0/23 IPv6: 2401:4220::-2401:4220:2:ffff:ffff:ffff:ffff:ffff 2401:4220:10::-2401:4220:12:ffff:ffff:ffff:ffff:ffff 2401:4220:1000::/47 Signature Algorithm: sha256WithRSAEncryption 1d:0a:bf:9b:78:0c:a4:8c:64:6a:a9:28:36:bc:12:38:c1:6e: 47:7d:c9:1c:30:31:7d:13:32:43:fb:16:17:83:29:6f:ab:78: ba:8e:ed:92:33:ed:29:84:2c:35:29:04:15:e8:8d:32:8c:ef: a6:4b:d4:de:f4:1f:7e:e1:eb:eb:44:72:93:ee:3d:1d:44:aa: 5d:26:ed:a7:c5:48:7c:5b:04:6d:24:7d:db:36:c5:24:90:3d: c3:3b:81:27:e4:47:bc:dd:55:50:9b:0b:63:34:0c:0c:90:d1: 32:08:dc:4c:b0:fb:9a:27:16:fa:97:cb:e0:f9:40:64:4a:71: 18:6f:70:43:48:f1:99:2d:0e:8c:c9:2b:48:c3:40:bb:f5:6f: 6b:cd:36:4d:91:c8:9e:ab:d7:32:2e:8a:f6:72:2f:e1:e9:74: 0b:c5:0d:bd:8d:8c:49:c4:06:53:9c:85:b5:26:ff:15:5e:b5: 96:e9:fc:76:c8:45:82:71:56:27:2d:f5:34:9a:b3:e8:3b:66: 8b:ca:92:fc:58:c8:8d:47:ee:c9:5f:86:f5:78:6b:53:df:50: 81:61:43:c6:b2:95:06:f0:28:58:8a:89:65:a8:ea:a3:a7:66: 94:af:cb:52:ce:fe:f0:b2:0d:4d:dc:17:57:c1:7c:de:cd:94: 5b:24:d3:fe -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICboEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzMDQ0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2UyNC02OTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4u3AojN/06PsjGGqnky7RgvqprhL6iMJ/4GUeIxNa88NDAvLjqJjhWcJpxil 9nMYGo8S5UVythiGE+VATbgLfwdwuxlLMD+yu8eJMP/VjBXVqZ3bdbGTM+ZFXdmH QGM57zihZ5yvVGeBSpKIzhev7+ueYqk9P4E6oWwUaTg49UThuBehpuqAsJh7TMX5 DKu0+3Mw5gklmLOFPjh8IYV2BMW780zNN/Ylt82aXOIx+bYujy69miA58G5HSAq0 cAkeOQrI/d1AAHoJQo6FxyC4I0auk58Z44e9rvLmq91QsvjEJtG9psRwVH2A+pK1 axNI83CDiBQf5JcAhkrAXeHlmQIDAQABo4IClzCCApMwHQYDVR0OBBYEFHBjaNc5 PfNOZ05S66LdMCJm3nggMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNEFGOUM3OTI2 RUY4MTFFRTgyMzBEMzM4QzRGOUFFMDIucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTAM BAIAATAGAwQBZ/JkMDUEAgACMC8wEAMFBSQBQiADBwAkAUIgAAIwEgMHBCQBQiAA EAMHACQBQiAAEgMHASQBQiAQADANBgkqhkiG9w0BAQsFAAOCAQEAHQq/m3gMpIxk aqkoNrwSOMFuR33JHDAxfRMyQ/sWF4Mpb6t4uo7tkjPtKYQsNSkEFeiNMozvpkvU 3vQffuHr60Ryk+49HUSqXSbtp8VIfFsEbSR92zbFJJA9wzuBJ+RHvN1VUJsLYzQM DJDRMgjcTLD7micW+pfL4PlAZEpxGG9wQ0jxmS0OjMkrSMNAu/Vva802TZHInqvX Mi6K9nIv4el0C8UNvY2MScQGU5yFtSb/FV61lun8dshFgnFWJy31NJqz6Dtmi8qS /FjIjUfuyV+G9XhrU99QgWFDxrKVBvAoWIqJZajqo6dmlK/LUs7+8LINTdwXV8F8 3s2UWyTT/g== -----END CERTIFICATE-----Generated at Sun Oct 25 06:48:45 2026 by rpki-client