$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/971B23D236EA11EE802E9246C4F9AE02.roa File: 971B23D236EA11EE802E9246C4F9AE02.roa (raw, json) Hash identifier: HBIivRlJgK5uSaMhHBQOw7VEjJKfalYdgnfZ3xk6PbY= Subject key identifier: 7D:16:63:F1:C4:49:61:F1:3D:08:47:1A:14:62:C4:6C:AA:DA:54:58 Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 0270 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/971B23D236EA11EE802E9246C4F9AE02.roa Signing time: Wed 21 Oct 2026 02:50:26 +0000 ROA not before: Wed 21 Oct 2026 02:50:26 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 141212 IP address blocks: 103.156.136.0/24 maxlen: 24 103.156.137.0/24 maxlen: 24 2001:df2:e1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 02:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Oct 21 02:50:26 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ad82872-0a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:65:18:a1:95:63:a4:33:e5:d0:e7:92:5f: d3:96:8a:f8:ed:43:5e:65:ef:41:a7:f5:23:49:d7: 62:84:8f:d4:92:34:e5:1e:3b:26:9e:4e:45:ca:e1: c7:9d:55:0b:df:0a:5b:5f:ed:84:ec:c9:94:64:37: 0e:83:f6:7b:d2:e3:e5:b8:69:86:3e:39:80:99:99: 26:0e:65:34:86:a4:54:5c:22:e3:1a:e9:72:b5:a9: 1b:33:9c:fe:18:40:ab:30:e3:a1:1f:e3:70:28:07: 42:f0:14:e5:7a:0e:cc:a2:79:e6:a5:d6:0d:e9:85: f7:0c:82:fa:cf:0e:71:d5:72:13:b5:fe:27:c5:c4: 1f:5d:c8:14:16:fc:79:d0:7f:86:61:16:28:40:a4: 7c:be:c4:22:7a:92:e1:c4:5a:d3:96:84:d1:35:4e: a8:f1:9c:9c:24:37:05:b6:b7:02:2f:c8:40:b2:70: f5:81:63:65:1f:d3:32:e0:58:6a:3e:c6:1c:a8:a6: b2:10:05:a6:94:20:48:66:2e:87:ec:1c:11:5b:75: fb:b6:15:c8:27:f9:38:6e:6e:36:9a:25:99:49:84: 8d:22:64:59:1d:e7:c8:e3:8e:84:d0:a4:d1:f7:37: a0:e0:45:7e:8b:da:af:9d:e3:ed:ab:b2:d7:c8:18: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:16:63:F1:C4:49:61:F1:3D:08:47:1A:14:62:C4:6C:AA:DA:54:58 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/971B23D236EA11EE802E9246C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.156.136.0/23 IPv6: 2001:df2:e1c0::/48 Signature Algorithm: sha256WithRSAEncryption 1a:d6:d5:b5:29:eb:51:a4:eb:fb:4f:c8:b2:18:98:f6:eb:86: c6:9c:0f:de:50:77:a9:a3:0f:a4:e9:85:cd:b9:d5:4e:b0:ae: e2:d8:5d:17:3c:82:91:bd:b6:9e:52:37:19:77:53:3f:98:da: 80:d0:f9:06:a2:61:c2:cd:76:df:41:b1:9e:53:88:99:52:1e: a5:ab:b9:79:82:a8:d7:17:fa:18:85:0a:25:0b:31:1e:b0:cf: 95:3d:1c:e0:47:cf:5f:8a:05:c3:b3:47:bc:1f:f1:b2:98:37: 27:d3:0a:22:df:af:21:46:4c:0f:aa:28:88:ae:bc:68:2d:7d: a0:e8:29:3c:80:dd:b0:30:18:24:5d:ce:ac:de:96:b4:8c:cf: 7a:e2:7a:66:86:0e:de:fd:38:8d:6b:91:0d:b4:60:4d:e9:25: ce:4a:56:54:60:63:4e:32:a9:12:52:ea:92:1a:93:8b:2a:39: 54:46:b9:cf:02:0f:8c:42:d7:53:94:f6:ec:a6:a4:d6:44:4e: 75:a1:ef:9f:66:49:d4:c4:af:fb:49:d1:84:9f:42:c0:8f:ad: b8:a5:c1:59:e7:41:cd:c8:49:a7:9f:09:cb:4d:53:f8:8c:9f: 02:db:46:35:2a:c1:95:23:98:ae:84:70:ac:ac:d4:33:24:21: cb:aa:72:54 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjYxMDIxMDI1MDI2WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQ4Mjg3Mi0wYTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunVlGKGVY6Qz5dDnkl/Tlor47UNeZe9Bp/UjSddihI/UkjTlHjsmnk5FyuHH nVUL3wpbX+2E7MmUZDcOg/Z70uPluGmGPjmAmZkmDmU0hqRUXCLjGulytakbM5z+ GECrMOOhH+NwKAdC8BTleg7MonnmpdYN6YX3DIL6zw5x1XITtf4nxcQfXcgUFvx5 0H+GYRYoQKR8vsQiepLhxFrTloTRNU6o8ZycJDcFtrcCL8hAsnD1gWNlH9My4Fhq PsYcqKayEAWmlCBIZi6H7BwRW3X7thXIJ/k4bm42miWZSYSNImRZHefI446E0KTR 9zeg4EV+i9qvnePtq7LXyBgKIwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFH0WY/HE SWHxPQhHGhRixGyq2lRYMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYxNDUvMjc4MDczQ0UzNkVBMTFFRUFFMTBBQTQ1QzRGOUFFMDIvOTcxQjIzRDIz NkVBMTFFRTgwMkU5MjQ2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5yIMA8EAgACMAkDBwAgAQ3y4cAwDQYJKoZIhvcNAQELBQADggEB ABrW1bUp61Gk6/tPyLIYmPbrhsacD95Qd6mjD6Tphc251U6wruLYXRc8gpG9tp5S Nxl3Uz+Y2oDQ+QaiYcLNdt9BsZ5TiJlSHqWruXmCqNcX+hiFCiULMR6wz5U9HOBH z1+KBcOzR7wf8bKYNyfTCiLfryFGTA+qKIiuvGgtfaDoKTyA3bAwGCRdzqzelrSM z3riemaGDt79OI1rkQ20YE3pJc5KVlRgY04yqRJS6pIak4sqOVRGuc8CD4xC11OU 9uympNZETnWh759mSdTEr/tJ0YSfQsCPrbilwVnnQc3ISaefCctNU/iMnwLbRjUq wZUjmK6EcKys1DMkIcuqclQ= -----END CERTIFICATE-----Generated at Thu Oct 29 01:50:58 2026 by rpki-client