$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa File: DCE5E9CA713611E9A71D3311C4F9AE02.roa (raw, json) Hash identifier: 57VTxgHZ8n6mpawRs1fn2dpMQwic5Hv+YXj/diODEgQ= Subject key identifier: 2B:09:0A:F5:C1:D3:28:CD:CA:41:69:82:EE:4A:20:2C:4E:B1:28:AB Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 103F Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa Signing time: Fri 02 Oct 2026 18:34:15 +0000 ROA not before: Fri 02 Oct 2026 18:34:15 +0000 ROA not after: Mon 01 Feb 2027 00:00:00 +0000 asID: 136480 IP address blocks: 103.134.204.0/22 maxlen: 22 103.134.204.0/24 maxlen: 24 103.134.205.0/24 maxlen: 24 103.134.206.0/24 maxlen: 24 103.134.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4159 (0x103f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Oct 2 18:34:15 2026 GMT Not After : Feb 1 00:00:00 2027 GMT Subject: CN=6abff927-8719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:8d:ec:af:8b:04:b4:59:73:d9:f2:01:be: 37:f9:7e:f3:e7:45:6b:12:51:95:bf:3b:85:2c:e4: 29:eb:8b:24:f4:a9:09:20:b6:a8:0d:8d:22:84:2d: 34:0b:00:e6:ee:60:4c:a5:19:c6:68:18:f8:32:32: cd:76:5b:31:7a:bd:fa:a2:fa:29:55:87:3b:4f:ad: a7:73:5a:e2:da:3b:41:d6:04:e4:fe:cc:64:e5:a5: 06:70:e9:ea:be:99:ae:76:25:76:b2:4f:58:df:e8: 58:87:bf:81:34:77:72:bd:8d:a0:89:c9:04:42:f0: 4b:f9:2a:9d:00:7f:85:b4:99:2b:9a:b3:78:b9:17: 75:b2:ef:ee:34:c1:36:d7:29:7c:6d:1d:a6:03:fd: ca:fa:c9:5c:b2:c8:6f:9e:07:f0:75:c7:cf:7c:d6: 5b:df:2e:39:52:a0:d7:7d:13:7a:02:cf:34:ba:98: 7c:94:4b:11:37:6a:4f:42:1e:7e:2b:4e:11:54:3e: 03:95:d9:40:49:1b:1b:85:e1:c1:4d:41:92:74:47: 32:49:4b:3f:59:02:5d:95:30:3c:c8:c3:fb:e7:eb: 24:97:a1:27:a7:e7:6f:18:83:f8:b6:d9:63:47:e1: 11:de:d0:a7:c6:91:95:37:05:55:06:4c:e8:45:8f: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:09:0A:F5:C1:D3:28:CD:CA:41:69:82:EE:4A:20:2C:4E:B1:28:AB X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.204.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:0f:7e:17:c4:1d:c8:de:42:1d:4d:22:41:a7:63:e9:d7:0c: 34:7b:38:16:20:44:be:c9:38:5f:19:05:4f:a9:d5:18:50:6a: 5b:35:f6:94:7a:37:0a:79:a4:c1:5b:27:13:c9:62:73:e1:0b: 6f:9e:d3:5f:e1:2a:3a:24:6e:56:c4:73:c0:e8:ef:9c:e0:56: 37:29:72:d6:ab:a5:03:6f:21:0f:8f:80:10:d6:11:2c:dd:10: 97:a2:89:bb:4f:a6:95:be:c3:16:5a:7a:b2:71:6b:8c:7b:8c: aa:be:7e:bd:09:f0:7e:a8:1e:23:f6:6b:9b:be:a3:84:86:2b: a2:43:13:b1:b5:be:44:00:6e:a2:a8:b5:21:da:fe:06:30:c5: 2f:bf:e2:28:a4:20:43:ae:44:2a:c6:6e:25:5f:97:57:b9:9d: b4:ae:f3:6b:88:4c:16:26:eb:3c:66:ae:19:96:72:ac:79:69: f1:bf:8d:e8:66:87:0e:b0:71:4d:88:1b:f4:e0:2b:5f:b8:9a: d1:ee:55:30:9a:a4:4c:ba:1b:a2:ed:8d:65:cc:6c:8a:27:e8: bb:44:50:2b:c5:f9:ee:76:4c:6a:7a:43:73:76:7c:3f:b7:03: 0b:5e:01:e8:83:62:72:0e:37:14:8f:94:04:49:9f:5a:09:e5: c5:0e:ac:56 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICED8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjYxMDAyMTgzNDE1WhcNMjcwMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmZjkyNy04NzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFuN7K+LBLRZc9nyAb43+X7z50VrElGVvzuFLOQp64sk9KkJILaoDY0ihC00 CwDm7mBMpRnGaBj4MjLNdlsxer36ovopVYc7T62nc1ri2jtB1gTk/sxk5aUGcOnq vpmudiV2sk9Y3+hYh7+BNHdyvY2gickEQvBL+SqdAH+FtJkrmrN4uRd1su/uNME2 1yl8bR2mA/3K+slcsshvngfwdcfPfNZb3y45UqDXfRN6As80uph8lEsRN2pPQh5+ K04RVD4DldlASRsbheHBTUGSdEcySUs/WQJdlTA8yMP75+skl6Enp+dvGIP4ttlj R+ER3tCnxpGVNwVVBkzoRY/5TwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCsJCvXB 0yjNykFpgu5KICxOsSirMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkRBMDYvMkJGQzg5NDg3MTM2MTFFOTg2OURCRjEwQzRGOUFFMDIvRENFNUU5Q0E3 MTM2MTFFOUE3MUQzMzExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4bMMA0GCSqGSIb3DQEBCwUAA4IBAQBfD34XxB3I3kIdTSJBp2Pp 1ww0ezgWIES+yThfGQVPqdUYUGpbNfaUejcKeaTBWycTyWJz4QtvntNf4So6JG5W xHPA6O+c4FY3KXLWq6UDbyEPj4AQ1hEs3RCXoom7T6aVvsMWWnqycWuMe4yqvn69 CfB+qB4j9mubvqOEhiuiQxOxtb5EAG6iqLUh2v4GMMUvv+IopCBDrkQqxm4lX5dX uZ20rvNriEwWJus8Zq4ZlnKseWnxv43oZocOsHFNiBv04CtfuJrR7lUwmqRMuhui 7Y1lzGyKJ+i7RFArxfnudkxqekNzdnw/twMLXgHog2JyDjcUj5QESZ9aCeXFDqxW -----END CERTIFICATE-----Generated at Wed Oct 7 13:05:01 2026 by rpki-client