$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/FAA525207A4411EB804B7430C4F9AE02.roa File: FAA525207A4411EB804B7430C4F9AE02.roa (raw, json) Hash identifier: 3YOlao7TbxBFLUwq9Pmsd7vhinqBlUuv3cRFNyrbWwE= Subject key identifier: 8B:72:20:6F:85:BB:05:70:E5:CD:06:E7:7A:2F:7B:64:A0:E4:17:1B Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 086B Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/FAA525207A4411EB804B7430C4F9AE02.roa Signing time: Mon 24 Aug 2026 21:40:52 +0000 ROA not before: Mon 24 Aug 2026 21:40:51 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 132825 IP address blocks: 103.153.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 21:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Aug 24 21:40:51 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8cba63-8114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:8d:3e:ff:ec:aa:05:51:66:05:74:4a:c7: 8f:c5:9b:14:c6:6c:6c:b0:aa:e8:a3:b3:10:76:3a: 4d:2f:c4:f2:67:cc:ee:16:84:b1:87:ae:23:ef:98: f7:42:54:69:3c:d1:5d:08:74:b1:66:a6:b3:b6:68: 54:30:45:0e:12:2b:41:6d:bc:b2:ee:9d:cc:2c:b3: d8:e2:dd:1d:c9:77:37:81:9f:40:39:de:9e:6b:f7: 0b:eb:a8:47:02:2e:19:99:6a:06:e7:81:b9:5c:23: 61:2f:40:19:f8:1b:59:0b:64:33:fb:14:91:02:6b: c3:ed:5c:1d:88:07:c9:b9:2d:af:d0:b5:95:37:f4: 3d:37:0f:d1:ec:f0:95:f6:e7:d4:8b:7a:e0:f3:8d: 16:de:41:55:57:8a:de:ba:65:ec:2e:05:cd:2f:44: 28:b6:68:21:2c:cd:c1:ed:ad:c4:e6:ba:d6:e3:50: b1:ac:bf:4c:02:00:33:24:ba:b7:e9:6c:87:87:07: 1f:80:8f:73:88:3c:c2:a6:2c:56:83:74:3b:11:19: f5:bc:01:de:cd:18:db:0b:d5:e8:9e:d7:8e:13:b2: 98:36:ff:f4:3f:60:a1:d3:60:97:f3:21:e0:2c:51: fd:0a:dd:ee:47:53:5b:76:77:28:d9:55:b8:eb:ef: d3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:72:20:6F:85:BB:05:70:E5:CD:06:E7:7A:2F:7B:64:A0:E4:17:1B X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/FAA525207A4411EB804B7430C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.100.0/23 Signature Algorithm: sha256WithRSAEncryption 44:a8:5a:89:2a:78:5c:9b:e6:70:b3:50:d3:d0:7f:3d:c6:2e: 08:0c:ae:cd:7f:d3:b8:65:be:f3:04:d6:4f:38:b9:9b:4a:4c: f6:45:41:c3:fb:e7:d6:7d:49:f3:6a:77:04:71:98:3b:72:a3: fe:9d:4a:1e:68:a8:2f:16:cf:97:43:45:1e:74:50:95:37:93: 2f:b0:49:40:94:73:01:28:d1:56:ae:f4:24:6e:cf:71:a5:3b: 62:81:40:85:bc:75:84:91:85:98:32:44:89:60:96:68:bc:bc: 05:f5:31:bb:c1:c4:99:93:0d:2a:a5:00:40:d9:7e:92:fc:d4: 11:71:9a:6f:e3:c1:13:4b:c6:02:9b:15:a2:14:b5:0e:05:ae: d8:0b:47:ff:7e:e3:ba:58:99:c2:dd:84:16:51:63:ea:3f:ec: 17:5a:4e:4b:31:8c:6b:1a:17:0a:4a:78:dc:34:cb:5e:fc:55: a4:1a:63:63:a7:1e:4b:19:bd:44:4f:12:7d:5c:0e:6d:3c:1e: a3:fa:fa:af:27:5e:17:c6:24:1b:26:0e:67:be:c6:d8:fa:0d: 7c:7e:c7:05:69:09:57:ef:36:ff:f7:d4:5b:88:e1:17:16:03: 35:cc:74:e0:f9:5b:7e:73:9b:a2:b9:d1:c6:00:20:08:6d:f0: ba:a8:88:19 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjYwODI0MjE0MDUxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThjYmE2My04MTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqw+NPv/sqgVRZgV0SsePxZsUxmxssKroo7MQdjpNL8TyZ8zuFoSxh64j75j3 QlRpPNFdCHSxZqaztmhUMEUOEitBbbyy7p3MLLPY4t0dyXc3gZ9AOd6ea/cL66hH Ai4ZmWoG54G5XCNhL0AZ+BtZC2Qz+xSRAmvD7VwdiAfJuS2v0LWVN/Q9Nw/R7PCV 9ufUi3rg840W3kFVV4reumXsLgXNL0QotmghLM3B7a3E5rrW41CxrL9MAgAzJLq3 6WyHhwcfgI9ziDzCpixWg3Q7ERn1vAHezRjbC9XonteOE7KYNv/0P2Ch02CX8yHg LFH9Ct3uR1Nbdnco2VW46+/TbwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFItyIG+F uwVw5c0G53ove2Sg5BcbMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI5NEQvMkM3MTYyQ0MyMzI4MTFFQjlGRjZFOTFBQzRGOUFFMDIvRkFBNTI1MjA3 QTQ0MTFFQjgwNEI3NDMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5lkMA0GCSqGSIb3DQEBCwUAA4IBAQBEqFqJKnhcm+Zws1DT0H89 xi4IDK7Nf9O4Zb7zBNZPOLmbSkz2RUHD++fWfUnzancEcZg7cqP+nUoeaKgvFs+X Q0UedFCVN5MvsElAlHMBKNFWrvQkbs9xpTtigUCFvHWEkYWYMkSJYJZovLwF9TG7 wcSZkw0qpQBA2X6S/NQRcZpv48ETS8YCmxWiFLUOBa7YC0f/fuO6WJnC3YQWUWPq P+wXWk5LMYxrGhcKSnjcNMte/FWkGmNjpx5LGb1ETxJ9XA5tPB6j+vqvJ14XxiQb Jg5nvsbY+g18fscFaQlX7zb/99RbiOEXFgM1zHTg+Vt+c5uiudHGACAIbfC6qIgZ -----END CERTIFICATE-----Generated at Thu Sep 10 09:28:11 2026 by rpki-client