$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/2F5ED8E43E1711EA9A272644C4F9AE02.roa File: 2F5ED8E43E1711EA9A272644C4F9AE02.roa (raw, json) Hash identifier: gAMdjI5mIfvZtW4F3eUxK2+GKNg4B9+2Q4/MQrVn71E= Subject key identifier: 90:AE:2A:7D:2C:AA:73:A8:2D:C8:E2:DE:16:8C:BF:5E:36:29:E0:0E Certificate issuer: /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Certificate serial: 0C15 Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/2F5ED8E43E1711EA9A272644C4F9AE02.roa Signing time: Sun 02 Aug 2026 19:38:14 +0000 ROA not before: Sun 02 Aug 2026 19:38:14 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 58890 IP address blocks: 103.116.180.0/23 maxlen: 24 103.116.182.0/23 maxlen: 24 2402:fec0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3093 (0xc15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B171C, serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Validity Not Before: Aug 2 19:38:14 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6f9ca6-6ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:a5:c2:db:20:d3:14:47:b6:54:86:83:ff: 46:34:e3:28:67:23:13:a7:30:91:df:e3:d5:f3:6c: ab:05:00:de:29:11:c8:32:ad:9b:b7:f8:40:a9:62: 3a:78:03:a0:09:57:79:0c:ae:92:6d:c3:e5:c3:36: 47:78:1e:f5:08:67:28:c0:a1:8a:fe:a7:87:c8:91: b4:b7:df:5c:a6:e9:a2:f7:47:60:d1:32:b6:9b:b5: a7:98:b5:d5:58:92:cc:d0:89:6d:b4:64:aa:34:12: 20:eb:56:1d:85:ec:87:22:15:db:4a:3f:2c:08:cf: e2:a4:25:b6:64:67:aa:85:3a:11:7d:6c:45:d3:18: d0:7c:bb:79:a8:ca:74:0c:0a:18:77:5f:46:58:ab: 8d:90:67:28:5d:55:30:c6:45:a0:6a:73:9f:eb:b0: ad:ad:97:6e:7f:d0:79:2e:00:68:40:36:64:80:7e: 56:c8:ea:8e:c1:22:9f:6b:83:e5:d3:52:c4:6c:88: cd:d7:e8:7c:10:17:32:99:26:9d:51:ca:b2:a1:0d: a2:9f:99:a7:a8:cf:d4:53:cd:5e:65:b4:54:b2:e3: d3:87:2a:a7:d2:03:92:be:15:ac:39:9c:a2:64:c9: a7:a8:8c:40:96:5f:18:04:66:cb:e5:d3:d2:fa:c5: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AE:2A:7D:2C:AA:73:A8:2D:C8:E2:DE:16:8C:BF:5E:36:29:E0:0E X509v3 Authority Key Identifier: keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/2F5ED8E43E1711EA9A272644C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.116.180.0/22 IPv6: 2402:fec0::/32 Signature Algorithm: sha256WithRSAEncryption 29:b4:34:05:cd:57:07:49:ed:cd:a0:b3:77:d5:8a:34:a4:8f: 2e:ee:88:89:78:9e:d3:73:fe:4f:fc:b7:14:25:a0:89:86:93: da:6d:bc:77:60:a2:59:5a:71:d7:77:95:16:ef:9e:fd:ee:e5: 65:3b:95:11:79:26:11:75:b4:e5:00:34:79:a1:2d:f8:17:00: 77:bf:ac:48:93:f1:11:a7:d8:1b:49:44:10:12:5d:80:d1:63: b7:a8:5f:b1:3a:c2:08:03:be:e3:ba:ed:db:cb:f1:a3:23:61: a0:fb:5e:f8:1a:ef:30:e7:f8:76:8d:c7:ea:8e:df:92:40:57: e6:ca:2b:16:1e:2b:de:17:c8:c1:65:fc:c5:86:d0:26:39:55: 05:c3:fa:43:32:43:77:6b:ba:a7:8f:1a:71:5b:5b:d7:d2:a0: 50:ba:18:80:f4:26:3f:c5:4c:8d:7d:75:00:c2:d5:31:e6:67: 25:43:c2:38:2a:bc:50:17:95:79:84:ee:02:46:3b:40:3c:d2: d0:9a:fe:a5:f5:47:c5:45:bb:b9:5e:5e:fa:c4:6b:8d:52:f8: b8:ad:0a:1b:fb:5d:45:cf:47:b6:46:e1:db:f6:24:f7:a0:0c: ff:7c:75:0b:b3:ab:3e:f8:04:d1:bc:01:10:5d:39:94:c4:21: ab:04:13:2a -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE3MUMxMTAvBgNVBAUTKDNGQjZGNkQwNjY1ODM4NkMyMzdCOEQxNDBEQUQxNUIy ODM4QkI1Q0EwHhcNMjYwODAyMTkzODE0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZmOWNhNi02YWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfGlwtsg0xRHtlSGg/9GNOMoZyMTpzCR3+PV82yrBQDeKRHIMq2bt/hAqWI6 eAOgCVd5DK6SbcPlwzZHeB71CGcowKGK/qeHyJG0t99cpumi90dg0TK2m7WnmLXV WJLM0IlttGSqNBIg61YdheyHIhXbSj8sCM/ipCW2ZGeqhToRfWxF0xjQfLt5qMp0 DAoYd19GWKuNkGcoXVUwxkWganOf67CtrZduf9B5LgBoQDZkgH5WyOqOwSKfa4Pl 01LEbIjN1+h8EBcymSadUcqyoQ2in5mnqM/UU81eZbRUsuPThyqn0gOSvhWsOZyi ZMmnqIxAll8YBGbL5dPS+sUllQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJCuKn0s qnOoLcji3haMv142KeAOMB8GA1UdIwQYMBaAFD+29tBmWDhsI3uNFA2tFbKDi7XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTcxQy9FN0VGMDgzNjNF MTUxMUVBQjM3MUE1NDFDNEY5QUUwMi9QN2IyMEdaWU9Hd2plNDBVRGEwVnNvT0x0 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3YjIwR1pZT0d3amU0MFVEYTBWc29PTHRjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjE3MUMvRTdFRjA4MzYzRTE1MTFFQUIzNzFBNTQxQzRGOUFFMDIvMkY1RUQ4RTQz RTE3MTFFQTlBMjcyNjQ0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3S0MA0EAgACMAcDBQAkAv7AMA0GCSqGSIb3DQEBCwUAA4IBAQAp tDQFzVcHSe3NoLN31Yo0pI8u7oiJeJ7Tc/5P/LcUJaCJhpPabbx3YKJZWnHXd5UW 75797uVlO5UReSYRdbTlADR5oS34FwB3v6xIk/ERp9gbSUQQEl2A0WO3qF+xOsII A77juu3by/GjI2Gg+174Gu8w5/h2jcfqjt+SQFfmyisWHiveF8jBZfzFhtAmOVUF w/pDMkN3a7qnjxpxW1vX0qBQuhiA9CY/xUyNfXUAwtUx5mclQ8I4KrxQF5V5hO4C RjtAPNLQmv6l9UfFRbu5Xl76xGuNUvi4rQob+11Fz0e2RuHb9iT3oAz/fHULs6s+ +ATRvAEQXTmUxCGrBBMq -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:23 2026 by rpki-client