$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/02F1850E45A611EA81CD145AC4F9AE02.roa File: 02F1850E45A611EA81CD145AC4F9AE02.roa (raw, json) Hash identifier: qFbD01Y06MvGbRfCg41S8SS4YBNjOiK9a5mH5g9wwHE= Subject key identifier: 84:45:84:53:56:F7:23:7D:BE:5E:DC:7D:FA:89:97:5B:02:A7:41:CC Certificate issuer: /CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F Certificate serial: 0BF1 Authority key identifier: B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/02F1850E45A611EA81CD145AC4F9AE02.roa Signing time: Fri 14 Aug 2026 19:38:06 +0000 ROA not before: Fri 14 Aug 2026 19:38:06 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 134601 IP address blocks: 103.120.220.0/22 maxlen: 22 103.120.220.0/24 maxlen: 24 103.120.221.0/24 maxlen: 24 103.120.222.0/24 maxlen: 24 103.120.223.0/24 maxlen: 24 2404:ef40::/32 maxlen: 32 2404:ef40:220::/48 maxlen: 48 2404:ef40:221::/48 maxlen: 48 2404:ef40:222::/48 maxlen: 48 2404:ef40:223::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3057 (0xbf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE4B, serialNumber=B77283C533113A391E31D94527186ACF8399A25F Validity Not Before: Aug 14 19:38:06 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7f6e9e-35b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:53:a5:72:83:7c:f9:b8:47:62:43:1c:a1:2a: ac:3c:34:5d:52:79:06:3e:cf:4e:ca:1e:a4:45:46: 2a:46:ab:5b:51:98:58:e7:5d:b7:4d:4a:4c:3a:9a: 7a:d3:16:05:0e:e2:a0:a8:92:0d:06:41:e0:d8:82: 47:0f:a2:9f:98:ac:b2:01:12:86:70:fb:aa:04:69: 0c:a1:9f:a9:3f:2a:88:95:cb:86:77:60:cd:10:97: db:fc:47:cc:84:ae:9b:80:5f:b5:a2:d9:22:44:de: 36:20:ef:96:1c:12:77:68:03:e5:ec:5c:3f:d3:45: f2:96:27:39:87:13:8f:f5:c6:a4:6b:40:72:2f:90: dd:79:2a:01:91:fb:9f:12:09:ae:73:5d:1e:6e:1c: 74:db:57:c2:af:96:1e:4d:6b:6e:47:b3:51:5f:04: 3c:27:6c:2d:30:5d:1c:dd:d0:79:f4:ef:0d:a1:f0: ad:e6:4e:7b:22:a2:47:fa:bb:6c:3b:ac:93:ab:ce: 9c:f1:c4:1b:9c:e1:f0:0d:b1:c5:bb:81:4f:a1:dd: 62:7f:14:52:b7:d1:be:c1:8c:d7:fb:a2:78:27:2e: 71:c5:81:79:6e:de:80:44:bd:8e:7c:af:22:ae:ad: 9f:99:b9:66:d8:85:bb:3f:c3:38:51:77:03:9c:55: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:45:84:53:56:F7:23:7D:BE:5E:DC:7D:FA:89:97:5B:02:A7:41:CC X509v3 Authority Key Identifier: keyid:B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/02F1850E45A611EA81CD145AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.220.0/22 IPv6: 2404:ef40::/32 Signature Algorithm: sha256WithRSAEncryption 3a:d1:56:db:4a:21:fb:74:69:a8:e4:da:51:e8:c5:01:bb:e1: 85:2d:17:7a:dc:af:77:4d:25:20:c5:c0:02:16:46:0c:c1:34: bf:83:f9:5a:3b:6a:49:53:f2:f6:09:17:25:8f:e8:29:66:38: db:1f:4a:3f:7a:f8:54:57:c4:bc:fa:22:58:31:2a:8c:c9:99: ec:d4:e9:c3:c9:7e:41:e4:59:98:71:dc:04:ed:b7:08:12:e1: 1a:3b:ae:fe:a9:cc:03:e8:71:34:80:ac:f8:27:09:a2:db:0e: 55:76:a4:a9:20:33:bd:37:3b:ae:7c:d3:d4:9c:63:fd:ab:13: 81:30:cb:63:b1:8d:04:bc:81:d1:3c:b3:47:70:4b:d0:78:2f: af:cd:cb:c2:70:2f:48:86:2d:b9:2d:54:3c:5b:9e:ae:3c:55: 56:ab:c0:3a:c9:f7:7b:4a:4b:58:0b:30:73:06:78:f0:e4:ef: fc:f5:a9:9d:43:c8:37:69:5f:f9:4e:6e:db:6c:59:25:2f:75: 4d:7e:4c:6a:48:fc:50:2d:6d:c5:62:11:f0:2b:7f:b1:25:f5: 4c:d1:ff:36:76:78:c6:7a:db:d4:89:97:e1:e2:c7:2f:50:36: 78:1f:32:ca:14:b3:f6:f6:6d:29:6c:09:e4:48:20:b2:a3:0f: ed:ce:fb:3f -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFNEIxMTAvBgNVBAUTKEI3NzI4M0M1MzMxMTNBMzkxRTMxRDk0NTI3MTg2QUNG ODM5OUEyNUYwHhcNMjYwODE0MTkzODA2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdmNmU5ZS0zNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21OlcoN8+bhHYkMcoSqsPDRdUnkGPs9Oyh6kRUYqRqtbUZhY5123TUpMOpp6 0xYFDuKgqJINBkHg2IJHD6KfmKyyARKGcPuqBGkMoZ+pPyqIlcuGd2DNEJfb/EfM hK6bgF+1otkiRN42IO+WHBJ3aAPl7Fw/00Xylic5hxOP9caka0ByL5DdeSoBkfuf Egmuc10ebhx021fCr5YeTWtuR7NRXwQ8J2wtMF0c3dB59O8NofCt5k57IqJH+rts O6yTq86c8cQbnOHwDbHFu4FPod1ifxRSt9G+wYzX+6J4Jy5xxYF5bt6ARL2OfK8i rq2fmblm2IW7P8M4UXcDnFWgmQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFIRFhFNW 9yN9vl7cffqJl1sCp0HMMB8GA1UdIwQYMBaAFLdyg8UzETo5HjHZRScYas+DmaJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0Qi82M0RGRjgwMjQ1 QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9qa2VNZGxGSnhocXo0T1pv bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS0R4VE1ST2prZU1kbEZKeGhxejRPWm9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUVFNEIvNjNERkY4MDI0NUE0MTFFQTk0MkUwOTU3QzRGOUFFMDIvMDJGMTg1MEU0 NUE2MTFFQTgxQ0QxNDVBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3jcMA0EAgACMAcDBQAkBO9AMA0GCSqGSIb3DQEBCwUAA4IBAQA6 0VbbSiH7dGmo5NpR6MUBu+GFLRd63K93TSUgxcACFkYMwTS/g/laO2pJU/L2CRcl j+gpZjjbH0o/evhUV8S8+iJYMSqMyZns1OnDyX5B5FmYcdwE7bcIEuEaO67+qcwD 6HE0gKz4Jwmi2w5VdqSpIDO9NzuufNPUnGP9qxOBMMtjsY0EvIHRPLNHcEvQeC+v zcvCcC9Ihi25LVQ8W56uPFVWq8A6yfd7SktYCzBzBnjw5O/89amdQ8g3aV/5Tm7b bFklL3VNfkxqSPxQLW3FYhHwK3+xJfVM0f82dnjGetvUiZfh4scvUDZ4HzLKFLP2 9m0pbAnkSCCyow/tzvs/ -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:50 2026 by rpki-client