$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/4967CEF66AD311EF88752B40C4F9AE02.roa File: 4967CEF66AD311EF88752B40C4F9AE02.roa (raw, json) Hash identifier: B+iCwX5O9Eeq7aQImMdocBqyaYXSiw6qKnAQCRyMV5o= Subject key identifier: 3C:82:C6:B7:21:76:5C:3E:D2:EA:18:18:6C:07:A3:68:56:6B:33:EA Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 0AD3 Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/4967CEF66AD311EF88752B40C4F9AE02.roa Signing time: Sat 26 Sep 2026 19:40:17 +0000 ROA not before: Sat 26 Sep 2026 19:40:17 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 147302 IP address blocks: 103.72.0.0/24 maxlen: 24 103.72.2.0/24 maxlen: 24 103.72.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2771 (0xad3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: Sep 26 19:40:17 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab81fa1-c16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:88:44:ef:72:cc:97:b8:5e:1c:06:ee:7b: e8:5a:8a:22:a3:b9:f4:96:63:db:ef:4f:5a:9e:a7: 2a:da:78:23:9a:19:d0:33:1e:9c:a2:12:76:b2:b8: f0:eb:50:42:2f:b7:f2:e6:f6:2e:4d:ec:b5:0b:7d: 53:ec:5d:38:f7:8d:04:ea:c8:da:8c:72:78:1f:35: 4b:f8:cd:25:8d:28:df:71:e6:de:28:62:a5:4f:a4: 4d:8e:46:c6:08:66:6e:49:d8:57:7f:0b:d1:f2:ae: 7b:81:bf:f9:f7:c4:96:0f:5e:c3:5c:0b:ff:38:c0: cd:a4:b8:0e:0f:27:59:44:e4:3e:73:ef:de:ab:f1: 82:9f:38:ce:c6:5a:61:d5:bc:09:04:2d:d4:77:23: 13:3b:7d:48:29:37:f0:57:fe:a0:b1:59:87:d2:83: 02:de:f7:3b:d8:1a:a7:5e:7c:6f:3f:38:d7:ed:5e: 19:cc:0e:a3:be:04:04:21:d6:03:9d:db:8a:f6:fe: da:39:53:3a:55:db:9c:b3:f2:23:36:61:c5:c9:f9: 2c:bb:49:31:66:c1:60:97:34:a7:bc:bf:5a:d7:b4: e3:54:b0:5f:32:9d:27:3a:18:d6:11:56:aa:3e:2e: 87:55:8b:37:7d:a2:f2:b3:7c:78:da:a9:57:9b:98: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:82:C6:B7:21:76:5C:3E:D2:EA:18:18:6C:07:A3:68:56:6B:33:EA X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/4967CEF66AD311EF88752B40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.72.0.0/24 103.72.2.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:4d:0a:69:61:c9:18:c0:a5:f6:e4:98:85:b4:6a:6a:81:4c: 4f:9a:f2:7c:37:a7:e1:37:1a:de:e8:24:08:4e:6f:d9:6b:95: 2c:17:dc:78:0e:b3:23:16:75:f0:69:0e:21:90:7b:d3:62:89: 08:9a:fc:19:57:1c:10:d0:0b:eb:b9:cc:08:c6:0a:05:ed:43: 06:70:6c:1a:c2:43:6e:63:78:5d:99:18:f7:d9:6b:02:f0:6c: ce:4d:40:d3:d1:52:f6:76:a3:70:0c:14:7f:dc:f7:39:e2:af: 5d:52:f7:3e:2d:7d:8d:60:34:1b:b6:23:85:25:1e:25:39:72: 4f:9e:d2:95:93:52:64:eb:6a:e9:5a:d5:dd:d4:e5:3f:1f:4b: 58:36:fc:95:2b:fe:6a:ec:c1:85:87:1d:6d:dc:7d:62:5e:4c: f7:7d:45:ee:ee:85:70:35:24:0b:cb:5f:c3:04:b2:51:cb:9a: f0:4c:29:85:1d:37:08:3b:16:8a:04:da:4c:0f:7f:11:71:be: 69:cf:3b:50:0f:8e:23:d8:bc:ec:24:ce:2a:29:dc:00:66:7b: 43:3b:00:70:67:45:cd:d6:ff:0d:c9:14:9c:77:c0:cb:7e:04: e3:fb:70:7e:6a:59:b9:b5:6a:79:68:1d:2b:84:a2:d9:9d:86: 46:8f:2d:f6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjYwOTI2MTk0MDE3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI4MWZhMS1jMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cKIRO9yzJe4XhwG7nvoWooio7n0lmPb709anqcq2ngjmhnQMx6cohJ2srjw 61BCL7fy5vYuTey1C31T7F04940E6sjajHJ4HzVL+M0ljSjfcebeKGKlT6RNjkbG CGZuSdhXfwvR8q57gb/598SWD17DXAv/OMDNpLgODydZROQ+c+/eq/GCnzjOxlph 1bwJBC3UdyMTO31IKTfwV/6gsVmH0oMC3vc72BqnXnxvPzjX7V4ZzA6jvgQEIdYD nduK9v7aOVM6Vducs/IjNmHFyfksu0kxZsFglzSnvL9a17TjVLBfMp0nOhjWEVaq Pi6HVYs3faLys3x42qlXm5gADwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDyCxrch dlw+0uoYGGwHo2hWazPqMB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUZGMTUvQjQ3ODVCRTg4RDRDMTFFQUJCREQzQTc0QzRGOUFFMDIvNDk2N0NFRjY2 QUQzMTFFRjg4NzUyQjQwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ0gAAwQBZ0gCMA0GCSqGSIb3DQEBCwUAA4IBAQB6TQppYckYwKX2 5JiFtGpqgUxPmvJ8N6fhNxre6CQITm/Za5UsF9x4DrMjFnXwaQ4hkHvTYokImvwZ VxwQ0AvrucwIxgoF7UMGcGwawkNuY3hdmRj32WsC8GzOTUDT0VL2dqNwDBR/3Pc5 4q9dUvc+LX2NYDQbtiOFJR4lOXJPntKVk1Jk62rpWtXd1OU/H0tYNvyVK/5q7MGF hx1t3H1iXkz3fUXu7oVwNSQLy1/DBLJRy5rwTCmFHTcIOxaKBNpMD38Rcb5pzztQ D44j2LzsJM4qKdwAZntDOwBwZ0XN1v8NyRScd8DLfgTj+3B+alm5tWp5aB0rhKLZ nYZGjy32 -----END CERTIFICATE-----Generated at Wed Oct 28 16:33:51 2026 by rpki-client