$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/CE6F2E9C97BC11F18CB49434A2EE528E.roa File: CE6F2E9C97BC11F18CB49434A2EE528E.roa (raw, json) Hash identifier: Nwt+OMKG4b1+bsIf5bbnfPAQc5s5GLqlwpqO4m2VZos= Subject key identifier: 50:3E:9B:D1:7D:A4:C3:C1:A9:A7:E2:AD:90:18:F4:AF:60:EC:02:09 Certificate issuer: /CN=A91CE4A1/serialNumber=AB0648822444021EE73720A045E0A944F5D77FE3 Certificate serial: 02 Authority key identifier: AB:06:48:82:24:44:02:1E:E7:37:20:A0:45:E0:A9:44:F5:D7:7F:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/CE6F2E9C97BC11F18CB49434A2EE528E.roa Signing time: Fri 14 Aug 2026 08:47:40 +0000 ROA not before: Fri 14 Aug 2026 08:47:40 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 139029 IP address blocks: 103.138.172.0/23 maxlen: 23 103.138.172.0/24 maxlen: 24 103.138.173.0/24 maxlen: 24 2406:6fc0::/32 maxlen: 32 2406:6fc0::/48 maxlen: 48 2406:6fc0:1::/48 maxlen: 48 2406:6fc0:2::/48 maxlen: 48 2406:6fc0:3::/48 maxlen: 48 2406:6fc0:4::/48 maxlen: 48 2406:6fc0:5::/48 maxlen: 48 2406:6fc0:6::/48 maxlen: 48 2406:6fc0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1, serialNumber=AB0648822444021EE73720A045E0A944F5D77FE3 Validity Not Before: Aug 14 08:47:40 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a7ed62c-1390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:ad:77:af:b1:a3:35:b2:bc:5b:e4:fa:00: 22:18:59:13:cc:a3:1c:1c:0c:56:9a:b2:11:66:47: e7:23:71:9b:ee:b5:84:97:43:6f:0c:44:37:98:86: 79:62:f2:63:3d:fe:bd:51:d2:b7:8c:f0:65:c0:d2: 3e:8b:ae:2e:94:fc:12:7c:89:44:d6:c4:16:b2:3c: 38:ff:eb:86:ee:d8:c1:9e:57:7d:2e:94:43:f0:f8: 8a:10:97:8b:65:06:b6:a8:b0:ee:37:d6:54:86:b5: aa:9c:a4:d1:83:7f:d4:93:1f:67:a6:4d:bc:0a:dd: 8a:67:c8:b5:32:b8:23:fb:cf:ab:86:34:af:6d:6f: b6:77:1f:3e:40:57:f4:f0:14:14:6f:d8:c9:a6:fb: 9f:2a:08:c9:ba:10:6f:b8:96:a6:fe:5f:8c:25:d7: c6:80:85:db:b2:9a:cf:50:53:fb:09:05:26:88:6b: 2d:0f:65:dc:25:36:b7:27:a5:0f:87:af:bd:95:f5: 57:2c:26:5a:32:ad:8f:c3:eb:ab:69:6c:b7:91:64: d7:35:37:87:87:b8:22:07:47:26:f5:70:6c:ec:07: c4:4a:8b:b3:4e:c9:61:05:a3:69:a2:7b:e1:dc:b4: 66:17:ce:b5:af:39:c7:79:bc:1e:66:0e:6c:7c:1a: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3E:9B:D1:7D:A4:C3:C1:A9:A7:E2:AD:90:18:F4:AF:60:EC:02:09 X509v3 Authority Key Identifier: keyid:AB:06:48:82:24:44:02:1E:E7:37:20:A0:45:E0:A9:44:F5:D7:7F:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/CE6F2E9C97BC11F18CB49434A2EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.138.172.0/23 IPv6: 2406:6fc0::/32 Signature Algorithm: sha256WithRSAEncryption 34:af:aa:ad:18:6c:75:9e:3f:01:b2:98:9a:75:3f:8d:60:bc: ad:fe:a1:a0:7b:64:54:54:da:df:56:45:a3:ae:7b:25:7e:c2: 6c:3c:6d:28:e6:ce:a8:d2:ef:b9:7e:54:02:65:a9:fc:0d:57: f2:c5:9f:31:d5:cf:e0:14:05:81:2d:93:78:bd:b9:d5:31:e8: 39:5d:2e:b8:21:31:82:e4:fa:db:a4:d0:50:fe:65:78:f0:70: 06:8a:53:09:79:54:f3:1b:2d:48:3e:a3:96:4e:dc:71:0b:bf: ae:e9:d6:a6:b4:fc:11:39:f1:36:c7:b9:ca:df:ae:62:48:73: 94:53:cd:25:76:94:c6:62:1f:30:d9:b1:f9:3d:42:3e:97:67: 6b:1f:05:65:ac:e4:84:f0:77:54:1b:cc:6b:fb:15:91:b8:23: 2f:7f:90:d1:be:b1:93:1b:65:de:24:b7:6f:e6:ad:81:e7:21: bc:9c:22:e7:7f:4f:e2:d1:2e:44:6e:2f:c6:8a:93:6e:af:05: d0:d2:f2:7a:3e:22:c4:61:b2:cd:70:55:90:66:e5:4b:cb:86: 9f:cd:a4:3a:24:df:5e:c4:a2:45:3c:70:6b:3d:f8:7b:b1:74: b1:52:d2:fb:19:dd:e3:3a:dd:ae:7f:30:80:9e:fc:b4:75:42: 3c:f4:fa:b8 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTRBMTExMC8GA1UEBRMoQUIwNjQ4ODIyNDQ0MDIxRUU3MzcyMEEwNDVFMEE5NDRG NUQ3N0ZFMzAeFw0yNjA4MTQwODQ3NDBaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhN2VkNjJjLTEzOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWt613r7GjNbK8W+T6ACIYWRPMoxwcDFaashFmR+cjcZvutYSXQ28MRDeYhnli 8mM9/r1R0reM8GXA0j6Lri6U/BJ8iUTWxBayPDj/64bu2MGeV30ulEPw+IoQl4tl BraosO431lSGtaqcpNGDf9STH2emTbwK3YpnyLUyuCP7z6uGNK9tb7Z3Hz5AV/Tw FBRv2Mmm+58qCMm6EG+4lqb+X4wl18aAhduyms9QU/sJBSaIay0PZdwlNrcnpQ+H r72V9VcsJloyrY/D66tpbLeRZNc1N4eHuCIHRyb1cGzsB8RKi7NOyWEFo2mie+Hc tGYXzrWvOcd5vB5mDmx8GjH7AgMBAAGjggJvMIICazAdBgNVHQ4EFgQUUD6b0X2k w8Gpp+KtkBj0r2DsAgkwHwYDVR0jBBgwFoAUqwZIgiREAh7nNyCgReCpRPXXf+Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNEExLzg1RkEwQ0U4ODBC NzExRUM5RkVCMkM2N0M0RjlBRTAyL3F3WklnaVJFQWg3bk55Q2dSZUNwUlBYWGYt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXdaSWdpUkVBaDduTnlDZ1JlQ3BSUFhYZi1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRBMS84NUZBMENFODgwQjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9DRTZGMkU5Qzk3 QkMxMUYxOENCNDk0MzRBMkVFNTI4RS5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAFniqwwDQQCAAIwBwMFACQGb8AwDQYJKoZIhvcNAQELBQADggEBADSv qq0YbHWePwGymJp1P41gvK3+oaB7ZFRU2t9WRaOueyV+wmw8bSjmzqjS77l+VAJl qfwNV/LFnzHVz+AUBYEtk3i9udUx6DldLrghMYLk+tuk0FD+ZXjwcAaKUwl5VPMb LUg+o5ZO3HELv67p1qa0/BE58TbHucrfrmJIc5RTzSV2lMZiHzDZsfk9Qj6XZ2sf BWWs5ITwd1QbzGv7FZG4Iy9/kNG+sZMbZd4kt2/mrYHnIbycIud/T+LRLkRuL8aK k26vBdDS8no+IsRhss1wVZBm5UvLhp/NpDok317EokU8cGs9+HuxdLFS0vsZ3eM6 3a5/MICe/LR1Qjz0+rg= -----END CERTIFICATE-----Generated at Wed Aug 19 14:25:23 2026 by rpki-client