$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/2E82E686569E11F08015BC34C4F9AE02.roa File: 2E82E686569E11F08015BC34C4F9AE02.roa (raw, json) Hash identifier: XKFE0kyiSUVQS14tKQTI53/xKajjRhTjZFO9s7Phd1s= Subject key identifier: A1:5D:42:46:4F:C6:E9:5B:42:D7:DD:E8:B3:1E:AD:0A:9C:B3:CB:53 Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Certificate serial: 04E0 Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/2E82E686569E11F08015BC34C4F9AE02.roa Signing time: Wed 05 Aug 2026 08:05:19 +0000 ROA not before: Wed 05 Aug 2026 08:05:19 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 57025 IP address blocks: 103.181.1.0/24 maxlen: 24 2400:56a0:200::/40 maxlen: 40 2400:56a0:900::/40 maxlen: 40 2400:56a0:dc02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Validity Not Before: Aug 5 08:05:19 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a72eebf-83b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:af:2c:c0:84:31:05:87:fe:1c:8f:3d:96: 42:ce:35:a1:4d:67:69:a3:3a:eb:9f:9c:d1:c5:82: c3:ac:27:3a:e7:88:0d:61:71:18:dd:df:e4:ea:ac: 3f:6e:ce:c1:18:a6:ee:9a:0e:55:7b:69:83:07:93: b8:03:2f:3d:eb:91:33:5d:5f:37:ae:61:ca:72:af: c2:af:b2:55:0d:02:1b:09:6f:cf:14:22:6c:61:69: 8a:9d:09:19:52:d7:94:96:a8:54:42:4f:28:96:8f: 01:03:c1:0e:de:a0:19:60:9c:5e:fa:4c:ac:40:fb: 4d:13:fd:a1:02:4e:f8:91:dd:53:92:92:3f:31:cc: 66:89:f0:8a:9d:37:93:80:41:17:c5:7e:01:6d:ff: f5:67:1f:2c:80:26:cd:81:87:b3:9d:32:c2:99:8b: e0:be:28:3b:48:48:6d:8d:9e:e4:1a:04:ae:7c:c4: cb:fc:7f:2c:d3:80:06:99:b8:35:d0:89:43:db:93: 86:94:ee:d2:a3:46:e0:53:fb:4a:3b:75:3c:66:a7: 41:86:a5:c3:55:38:21:63:ea:06:5e:c0:f9:85:d0: 58:10:fd:64:ac:3c:64:22:ab:6c:dd:38:c6:92:98: a2:b1:7a:38:e0:6c:68:20:32:da:3f:81:d3:ab:51: ee:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5D:42:46:4F:C6:E9:5B:42:D7:DD:E8:B3:1E:AD:0A:9C:B3:CB:53 X509v3 Authority Key Identifier: keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/2E82E686569E11F08015BC34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.181.1.0/24 IPv6: 2400:56a0:200::/40 2400:56a0:900::/40 2400:56a0:dc02::/48 Signature Algorithm: sha256WithRSAEncryption ee:36:b1:95:26:5b:48:22:54:11:f2:1e:05:f0:b0:1c:99:0c: 08:ee:18:e0:81:f9:28:8a:5d:81:5c:29:30:f1:d7:cd:eb:b3: ab:24:ed:b0:30:d6:c2:aa:98:41:23:d0:23:75:64:b6:12:8b: 85:ec:e8:b6:ff:db:d2:18:2e:5f:be:0c:a4:68:29:f5:11:a1: 87:fd:5c:0e:b8:c9:56:72:97:cc:8b:79:a9:05:49:ae:b1:11: 1a:3e:4c:8f:72:84:5c:3d:70:79:c7:42:50:58:e8:76:c7:36: 8f:e2:07:90:5b:77:09:03:75:bd:b0:4e:aa:27:f9:63:5f:1f: 2a:c9:be:51:ff:78:dd:24:09:6d:37:35:10:01:d7:a1:89:ad: 2b:62:50:2f:71:0a:7d:d0:c7:46:c9:d6:7c:75:bc:b4:c3:ee: b0:29:0b:c1:e5:00:4a:4d:60:ea:69:c1:a1:68:b4:25:ee:5b: 1e:12:76:63:ce:4d:1c:70:4d:7b:2d:82:cb:eb:6e:60:ba:2a: 4b:b3:cb:aa:80:55:b4:14:fc:75:25:07:47:f8:28:b9:39:69: 1c:ab:cc:ab:5d:67:19:ad:e3:a3:35:33:8f:66:39:86:3b:a8: 60:36:10:74:47:a0:42:3b:54:49:3e:f6:b2:65:e3:e7:5e:49: 57:0f:2e:b0 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzQjQxMTAvBgNVBAUTKEFFQjgzOUNDQkZBRDVCRDk4QTdBMERBOTA1M0JDMjcy NkYyNjkwNEYwHhcNMjYwODA1MDgwNTE5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcyZWViZi04M2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+SvLMCEMQWH/hyPPZZCzjWhTWdpozrrn5zRxYLDrCc654gNYXEY3d/k6qw/ bs7BGKbumg5Ve2mDB5O4Ay8965EzXV83rmHKcq/Cr7JVDQIbCW/PFCJsYWmKnQkZ UteUlqhUQk8olo8BA8EO3qAZYJxe+kysQPtNE/2hAk74kd1TkpI/McxmifCKnTeT gEEXxX4Bbf/1Zx8sgCbNgYeznTLCmYvgvig7SEhtjZ7kGgSufMTL/H8s04AGmbg1 0IlD25OGlO7So0bgU/tKO3U8ZqdBhqXDVTghY+oGXsD5hdBYEP1krDxkIqts3TjG kpiisXo44GxoIDLaP4HTq1HuWQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFKFdQkZP xulbQtfd6LMerQqcs8tTMB8GA1UdIwQYMBaAFK64Ocy/rVvZinoNqQU7wnJvJpBP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODNCNC9FNzlFRDQ5MDgz RjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5bUtlZzJwQlR2Q2NtOG1r RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyZzV6TC10VzltS2VnMnBCVHZDY204bWtFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTgzQjQvRTc5RUQ0OTA4M0Y3MTFFQ0E0N0E2MjY1QzRGOUFFMDIvMkU4MkU2ODY1 NjlFMTFGMDgwMTVCQzM0QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAM BAIAATAGAwQAZ7UBMB8EAgACMBkDBgAkAFagAgMGACQAVqAJAwcAJABWoNwCMA0G CSqGSIb3DQEBCwUAA4IBAQDuNrGVJltIIlQR8h4F8LAcmQwI7hjggfkoil2BXCkw 8dfN67OrJO2wMNbCqphBI9AjdWS2EouF7Oi2/9vSGC5fvgykaCn1EaGH/VwOuMlW cpfMi3mpBUmusREaPkyPcoRcPXB5x0JQWOh2xzaP4geQW3cJA3W9sE6qJ/ljXx8q yb5R/3jdJAltNzUQAdehia0rYlAvcQp90MdGydZ8dby0w+6wKQvB5QBKTWDqacGh aLQl7lseEnZjzk0ccE17LYLL625guipLs8uqgFW0FPx1JQdH+Ci5OWkcq8yrXWcZ reOjNTOPZjmGO6hgNhB0R6BCO1RJPvayZePnXklXDy6w -----END CERTIFICATE-----Generated at Sat Sep 5 06:11:46 2026 by rpki-client