$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/2A425550ADCA11EC9AD18044C4F9AE02.roa File: 2A425550ADCA11EC9AD18044C4F9AE02.roa (raw, json) Hash identifier: mSvNwpc9THwX7aW0B64w/WzVfdv+SQvyQiQ8Ffa7/Zg= Subject key identifier: 3D:C5:6D:63:4B:98:04:CB:01:96:50:AB:07:D7:0D:0A:88:32:79:1C Certificate issuer: /CN=A91D15BF/serialNumber=F771814CF6BF0D19B6324908D07E1E40ABBEF76E Certificate serial: 0498 Authority key identifier: F7:71:81:4C:F6:BF:0D:19:B6:32:49:08:D0:7E:1E:40:AB:BE:F7:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/2A425550ADCA11EC9AD18044C4F9AE02.roa Signing time: Thu 01 Oct 2026 00:48:23 +0000 ROA not before: Thu 01 Oct 2026 00:48:23 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137976 IP address blocks: 103.119.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.crl rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D15BF, serialNumber=F771814CF6BF0D19B6324908D07E1E40ABBEF76E Validity Not Before: Oct 1 00:48:23 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6abdadd6-01f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:1f:da:cd:ee:74:38:64:5e:31:2c:18:33: 52:a4:32:b4:e4:cf:47:9b:44:06:97:fa:8d:24:6d: c7:21:1c:1d:86:a0:2c:8a:ef:db:37:be:8f:56:ad: 4a:6d:02:fa:26:35:e7:cb:4c:a0:87:98:02:17:71: 7e:d8:22:dc:8b:fd:dc:e2:b5:3d:d4:7e:22:52:53: ec:b6:18:ba:39:c4:1b:6a:94:4d:02:69:b8:76:de: 76:02:5a:78:27:d5:bc:44:c3:cf:cf:29:87:c0:e7: 21:00:65:4c:60:c8:ed:db:30:38:d2:0e:48:92:7b: f3:a7:c6:bd:54:8d:34:ce:58:a8:cf:8d:6c:f6:67: fa:e8:83:bf:11:e8:2c:09:41:23:d1:f1:f9:01:0e: 30:64:55:9e:8f:f0:48:e3:f3:40:39:2b:ca:88:3f: 8e:56:e2:b5:29:49:8b:ab:f5:fe:e9:bb:42:de:2a: f6:88:a5:8b:ae:0e:21:68:94:8b:8b:af:bd:4b:ee: 32:b2:17:9c:37:16:8e:cf:63:78:e0:ee:b6:20:00: 75:ee:16:c9:99:23:fa:57:03:a1:57:e9:b2:57:5b: e4:38:56:c2:90:08:4d:41:c8:bb:0c:20:cc:2d:50: 91:25:d5:bc:c2:d4:70:cd:82:ad:10:d0:71:86:5b: 94:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C5:6D:63:4B:98:04:CB:01:96:50:AB:07:D7:0D:0A:88:32:79:1C X509v3 Authority Key Identifier: keyid:F7:71:81:4C:F6:BF:0D:19:B6:32:49:08:D0:7E:1E:40:AB:BE:F7:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/2A425550ADCA11EC9AD18044C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.119.20.0/22 Signature Algorithm: sha256WithRSAEncryption 62:55:c0:ad:a2:08:cd:d8:11:66:a1:8b:e1:ab:e3:0f:98:fd: 35:5c:20:f9:c1:4e:7d:21:34:f8:6f:01:06:61:b0:2f:2e:02: bc:be:b5:d9:8d:45:ac:f3:d2:0f:f1:b6:5b:27:b4:9b:41:0a: e6:d2:7f:9e:cd:e2:ef:96:9e:ec:b2:ad:5f:9c:c7:9f:07:3b: bc:52:a0:65:21:b3:3f:15:2f:b8:d0:a9:89:7a:87:fe:39:c7: 4a:ee:f6:c3:7b:2a:90:b5:2a:45:e2:84:ae:df:f7:c2:c0:d3: cb:1b:6e:b7:c2:11:c7:bb:72:56:58:a1:83:48:ba:f9:ec:0a: ed:19:05:5d:4b:c6:c6:28:c1:af:be:8e:5b:de:dd:0d:06:e7: 99:1e:42:f8:aa:64:49:45:89:88:a1:b7:eb:01:24:e0:d0:1b: e5:5a:c3:45:95:c6:d1:cc:aa:08:33:92:32:00:88:2d:7d:0d: a6:a9:02:2f:b8:60:79:2a:df:f3:b6:f1:e0:fc:06:04:fc:91: 1a:e2:1c:46:04:ed:09:6a:4e:d1:6f:f6:4c:e9:62:f0:77:7e: 16:76:ef:59:83:c8:6c:f3:43:f1:c4:ec:8b:3c:de:53:75:73: de:ba:8c:27:11:4c:ff:5b:2a:1c:69:91:3d:f4:7e:57:8b:0a: 3a:2c:fc:30 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE1QkYxMTAvBgNVBAUTKEY3NzE4MTRDRjZCRjBEMTlCNjMyNDkwOEQwN0UxRTQw QUJCRUY3NkUwHhcNMjYxMDAxMDA0ODIzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkYWRkNi0wMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw98f2s3udDhkXjEsGDNSpDK05M9Hm0QGl/qNJG3HIRwdhqAsiu/bN76PVq1K bQL6JjXny0ygh5gCF3F+2CLci/3c4rU91H4iUlPsthi6OcQbapRNAmm4dt52Alp4 J9W8RMPPzymHwOchAGVMYMjt2zA40g5Iknvzp8a9VI00zlioz41s9mf66IO/Eegs CUEj0fH5AQ4wZFWej/BI4/NAOSvKiD+OVuK1KUmLq/X+6btC3ir2iKWLrg4haJSL i6+9S+4yshecNxaOz2N44O62IAB17hbJmSP6VwOhV+myV1vkOFbCkAhNQci7DCDM LVCRJdW8wtRwzYKtENBxhluUiwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD3FbWNL mATLAZZQqwfXDQqIMnkcMB8GA1UdIwQYMBaAFPdxgUz2vw0ZtjJJCNB+HkCrvvdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTVCRi8zREIwRjlDQTlG ODgxMUVDQURBMEM5MERDNEY5QUUwMi85M0dCVFBhX0RSbTJNa2tJMEg0ZVFLdS05 MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkzR0JUUGFfRFJtMk1ra0kwSDRlUUt1LTkyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE1QkYvM0RCMEY5Q0E5Rjg4MTFFQ0FEQTBDOTBEQzRGOUFFMDIvMkE0MjU1NTBB RENBMTFFQzlBRDE4MDQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3cUMA0GCSqGSIb3DQEBCwUAA4IBAQBiVcCtogjN2BFmoYvhq+MP mP01XCD5wU59ITT4bwEGYbAvLgK8vrXZjUWs89IP8bZbJ7SbQQrm0n+ezeLvlp7s sq1fnMefBzu8UqBlIbM/FS+40KmJeof+OcdK7vbDeyqQtSpF4oSu3/fCwNPLG263 whHHu3JWWKGDSLr57ArtGQVdS8bGKMGvvo5b3t0NBueZHkL4qmRJRYmIobfrASTg 0BvlWsNFlcbRzKoIM5IyAIgtfQ2mqQIvuGB5Kt/ztvHg/AYE/JEa4hxGBO0Jak7R b/ZM6WLwd34Wdu9Zg8hs80PxxOyLPN5TdXPeuownEUz/WyocaZE99H5Xiwo6LPww -----END CERTIFICATE-----Generated at Tue Oct 6 13:03:30 2026 by rpki-client