$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/2F3F56C42BB411EF8D887F3AC4F9AE02.roa File: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (raw, json) Hash identifier: 8Ot9B/ChLtF+IW0sl26OMvW9KnEzGLcwiXeztcMGnMo= Subject key identifier: E1:BD:2F:BE:EE:D3:7D:B9:4F:85:C5:C8:20:6B:99:85:74:68:AB:53 Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Certificate serial: 0622 Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/2F3F56C42BB411EF8D887F3AC4F9AE02.roa Signing time: Tue 06 Oct 2026 23:43:58 +0000 ROA not before: Tue 06 Oct 2026 23:43:58 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 151952 IP address blocks: 103.172.142.0/23 maxlen: 23 103.172.142.0/24 maxlen: 24 103.172.143.0/24 maxlen: 24 2001:df0:6a40::/48 maxlen: 48 2001:df0:6a40::/49 maxlen: 49 2001:df0:6a40:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 22:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Validity Not Before: Oct 6 23:43:58 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac587be-e577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:83:04:60:fc:54:6f:d2:04:26:53:bd:32:8f: cb:4e:b5:1f:34:41:3d:00:4b:ba:6b:d8:b9:f1:fc: 6a:88:e1:8c:f9:2a:7b:9c:96:82:7d:78:ba:b9:20: dc:4a:5e:84:b3:d6:c4:10:0a:a3:d6:86:f5:da:4d: 92:fb:a7:e5:84:73:a8:fe:62:0c:68:17:ad:2d:ce: b7:a4:af:5c:f9:5a:29:63:13:f2:6e:fb:f9:1a:17: b2:80:60:f4:e0:36:b7:c4:2f:4e:2d:aa:3b:81:73: 5b:49:06:59:97:24:a4:f5:93:87:4f:fc:07:d7:0c: 12:e5:aa:32:95:cc:4a:58:c4:7f:1c:60:cd:70:d9: f8:d1:9c:74:27:26:46:11:f5:a7:05:14:b7:6c:eb: bd:56:25:19:d8:e6:67:e2:a5:82:17:e6:0f:d2:96: be:ac:dd:b5:b6:9e:69:b0:1e:b8:53:8e:e7:80:de: d9:18:3e:ec:c8:5d:51:0d:96:6b:66:9f:08:cd:0d: 1d:8a:52:aa:79:28:f0:0f:d1:67:95:04:b2:18:4d: 43:e7:7e:aa:ab:c6:50:82:4b:7a:85:1b:00:f4:4a: 8f:fc:5e:81:9a:86:0c:9c:1a:21:e3:21:00:dd:2f: 1a:4c:7d:db:39:8d:ba:de:5c:52:d3:74:36:96:31: e2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BD:2F:BE:EE:D3:7D:B9:4F:85:C5:C8:20:6B:99:85:74:68:AB:53 X509v3 Authority Key Identifier: keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/2F3F56C42BB411EF8D887F3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.142.0/23 IPv6: 2001:df0:6a40::/48 Signature Algorithm: sha256WithRSAEncryption 11:5d:ed:dd:6b:cb:50:b2:2b:c1:6f:0a:8c:8a:bf:11:a3:d7: 57:1b:e1:5f:ff:98:f9:3a:f5:0c:17:d5:1e:dd:37:d5:c8:c5: 63:c7:3c:4a:32:2b:ef:1d:72:45:14:95:b7:b4:32:0a:b9:47: 01:97:b3:cd:1b:d4:28:25:33:6b:94:fe:5d:a9:98:8f:b0:15: 86:86:ee:53:9c:60:16:88:56:e8:4a:64:de:ec:db:e8:e5:f4: 33:a2:58:d3:94:eb:af:9b:47:5b:98:b7:36:b9:5c:30:66:5f: 26:c8:a4:05:4e:eb:f9:5e:dc:2e:4b:76:dc:08:49:ff:21:66: 80:e4:85:ea:43:16:7e:9a:a5:21:e9:68:7c:3a:23:cf:af:2e: b2:7b:e2:4c:88:fc:ca:74:2f:10:22:ba:1f:a4:1b:01:e3:d0: 90:c0:46:c1:40:85:41:86:04:5e:d0:ca:a9:53:63:e4:a8:e5: 12:b8:3b:a3:57:9c:a6:ff:f6:49:16:af:5f:51:7a:ca:f0:a7: e0:37:16:9b:4b:f6:34:c7:d8:a5:da:83:ab:06:8a:fb:00:cb: 5b:d6:25:cc:83:31:72:61:03:44:e9:af:27:ca:aa:f1:74:04: 98:7b:1c:0b:5f:aa:0f:47:d6:ec:af:3c:f2:54:8c:f0:7e:85: 99:62:ca:18 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4 RUI0RTIyNUYwHhcNMjYxMDA2MjM0MzU4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM1ODdiZS1lNTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oMEYPxUb9IEJlO9Mo/LTrUfNEE9AEu6a9i58fxqiOGM+Sp7nJaCfXi6uSDc Sl6Es9bEEAqj1ob12k2S+6flhHOo/mIMaBetLc63pK9c+VopYxPybvv5GheygGD0 4Da3xC9OLao7gXNbSQZZlySk9ZOHT/wH1wwS5aoylcxKWMR/HGDNcNn40Zx0JyZG EfWnBRS3bOu9ViUZ2OZn4qWCF+YP0pa+rN21tp5psB64U47ngN7ZGD7syF1RDZZr Zp8IzQ0dilKqeSjwD9FnlQSyGE1D536qq8ZQgkt6hRsA9EqP/F6BmoYMnBoh4yEA 3S8aTH3bOY263lxS03Q2ljHi8wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOG9L77u 0325T4XFyCBrmYV0aKtTMB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk1NkMvRkIzMDVBNUUwQzhBMTFFQ0EzMTkxQjBDQzRGOUFFMDIvMkYzRjU2QzQy QkI0MTFFRjhEODg3RjNBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6yOMA8EAgACMAkDBwAgAQ3wakAwDQYJKoZIhvcNAQELBQADggEB ABFd7d1ry1CyK8FvCoyKvxGj11cb4V//mPk69QwX1R7dN9XIxWPHPEoyK+8dckUU lbe0Mgq5RwGXs80b1CglM2uU/l2pmI+wFYaG7lOcYBaIVuhKZN7s2+jl9DOiWNOU 66+bR1uYtza5XDBmXybIpAVO6/le3C5LdtwISf8hZoDkhepDFn6apSHpaHw6I8+v LrJ74kyI/Mp0LxAiuh+kGwHj0JDARsFAhUGGBF7QyqlTY+So5RK4O6NXnKb/9kkW r19Resrwp+A3FptL9jTH2KXag6sGivsAy1vWJcyDMXJhA0TpryfKqvF0BJh7HAtf qg9H1uyvPPJUjPB+hZliyhg= -----END CERTIFICATE-----Generated at Thu Oct 22 07:40:55 2026 by rpki-client