$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/4214F694D4CF11F0822D643BC4F9AE02.roa File: 4214F694D4CF11F0822D643BC4F9AE02.roa (raw, json) Hash identifier: toaIt9aua90UvezwtJBkMjp9ByR6flck72bGeCuWe2c= Subject key identifier: B5:D0:A7:41:28:4E:83:BE:5E:4F:5F:88:57:4B:6C:AE:09:41:48:E0 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3698 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/4214F694D4CF11F0822D643BC4F9AE02.roa Signing time: Sun 30 Aug 2026 15:14:05 +0000 ROA not before: Sun 30 Aug 2026 15:14:05 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 139753 IP address blocks: 101.108.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13976 (0x3698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Aug 30 15:14:05 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9448bd-07db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ec:9f:5f:6f:fb:b4:46:08:bd:79:be:d0:e7: f5:5d:30:95:df:07:0b:88:2b:e8:72:24:e7:32:78: 84:d5:ff:5c:f8:c5:eb:97:ae:7a:b8:ad:87:0c:f1: 93:63:21:85:9e:77:25:41:94:4a:9b:6c:c8:3a:d7: 3e:81:33:ae:f8:a7:1d:78:7d:a2:cc:38:91:fe:84: fe:87:b0:09:5d:1f:a7:47:ac:62:9c:7f:74:45:b4: e2:5c:a3:5e:50:fd:a6:bc:38:b3:79:fa:76:b6:bd: 53:ee:41:f5:13:e2:dc:e6:58:99:91:50:d6:78:ed: ef:3b:ae:18:0d:ad:82:d2:8b:5d:29:a3:1a:d9:03: 3a:65:7f:f8:83:34:e6:0b:66:7f:72:1c:c3:b3:b9: 94:86:e3:9e:f5:a1:5c:f9:ce:d9:95:55:83:7f:6f: b4:ed:29:ef:e6:f3:56:ed:16:e7:35:ac:24:72:44: bf:04:64:c8:02:90:36:d4:24:0a:c5:5e:c7:0f:30: d6:09:d9:12:b0:fa:36:61:c8:6c:05:7b:54:bc:5b: 84:35:99:f8:36:f2:35:ce:e4:18:d6:6b:0f:4c:eb: 9b:a1:2f:e4:b4:b1:d2:2c:e0:82:74:59:19:c7:21: bb:9f:4e:84:61:ad:01:4b:2e:1f:ec:29:3c:e2:87: d0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D0:A7:41:28:4E:83:BE:5E:4F:5F:88:57:4B:6C:AE:09:41:48:E0 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/4214F694D4CF11F0822D643BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.108.157.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:9c:a8:0b:40:39:4d:63:ec:e7:4a:20:1a:0b:af:c7:d9:0e: 96:f2:be:0d:9d:18:a9:34:ad:a5:3f:04:13:c1:3c:60:fa:7c: d6:6c:2e:3d:18:e2:f6:89:e6:9d:ef:25:5b:0c:fe:6e:60:f7: 9c:15:20:92:bf:28:8b:6e:35:68:44:fb:6f:de:43:ba:f8:24: 9a:3f:b0:cf:63:48:40:ca:7a:d6:03:22:a0:f9:f4:9f:3c:bc: 54:ec:bf:06:91:2c:5d:ac:61:8f:a4:7f:1e:9d:44:1c:17:45: 58:7d:04:a1:5d:1d:6f:a1:b6:b7:7a:84:fd:09:50:ab:45:45: e6:f2:9b:b0:0f:c5:94:3f:0b:75:01:cf:49:cd:98:da:2f:a3: 57:91:66:8c:4d:38:fa:5f:df:26:a6:56:a8:3a:2a:71:50:63: 88:37:e5:f6:fd:72:71:4c:f8:a1:ea:1e:6e:bc:b4:55:1d:67: ca:49:b8:42:21:92:95:ce:77:e7:6f:55:88:d9:2a:af:16:8e: 65:5a:3c:28:35:5e:9b:d5:d0:c7:fa:63:3e:20:8e:78:4c:de: 80:af:00:fa:1a:18:0b:e2:ee:38:95:e7:1a:4d:67:70:60:93: bd:7c:69:56:b7:19:c7:f0:20:0a:1b:85:67:a5:f6:b3:5f:80: be:1f:f2:60 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjYwODMwMTUxNDA1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0NDhiZC0wN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uyfX2/7tEYIvXm+0Of1XTCV3wcLiCvociTnMniE1f9c+MXrl656uK2HDPGT YyGFnnclQZRKm2zIOtc+gTOu+KcdeH2izDiR/oT+h7AJXR+nR6xinH90RbTiXKNe UP2mvDizefp2tr1T7kH1E+Lc5liZkVDWeO3vO64YDa2C0otdKaMa2QM6ZX/4gzTm C2Z/chzDs7mUhuOe9aFc+c7ZlVWDf2+07Snv5vNW7RbnNawkckS/BGTIApA21CQK xV7HDzDWCdkSsPo2YchsBXtUvFuENZn4NvI1zuQY1msPTOuboS/ktLHSLOCCdFkZ xyG7n06EYa0BSy4f7Ck84ofQ/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLXQp0Eo ToO+Xk9fiFdLbK4JQUjgMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y0RkUvQkExMzEyNEUxRDg1MTFFMkE3Nzk5OURDMDhCMDJDRDIvNDIxNEY2OTRE NENGMTFGMDgyMkQ2NDNCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZWydMA0GCSqGSIb3DQEBCwUAA4IBAQB+nKgLQDlNY+znSiAaC6/H 2Q6W8r4NnRipNK2lPwQTwTxg+nzWbC49GOL2iead7yVbDP5uYPecFSCSvyiLbjVo RPtv3kO6+CSaP7DPY0hAynrWAyKg+fSfPLxU7L8GkSxdrGGPpH8enUQcF0VYfQSh XR1voba3eoT9CVCrRUXm8puwD8WUPwt1Ac9JzZjaL6NXkWaMTTj6X98mplaoOipx UGOIN+X2/XJxTPih6h5uvLRVHWfKSbhCIZKVznfnb1WI2SqvFo5lWjwoNV6b1dDH +mM+II54TN6ArwD6GhgL4u44lecaTWdwYJO9fGlWtxnH8CAKG4VnpfazX4C+H/Jg -----END CERTIFICATE-----Generated at Sat Sep 19 08:43:23 2026 by rpki-client