$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa File: 9F88C3542ADF11F0B3006D40C4F9AE02.roa (raw, json) Hash identifier: MQDHdOkxyxmg3LZx3/DSsMi0liFPWTLa31HTy5xZqjw= Subject key identifier: D8:97:90:D1:53:20:2B:5A:81:9B:CA:2A:FD:09:09:DC:07:C0:BE:54 Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3 Certificate serial: 04BF Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa Signing time: Mon 05 Oct 2026 00:48:52 +0000 ROA not before: Mon 05 Oct 2026 00:48:52 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 151983 IP address blocks: 103.172.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3 Validity Not Before: Oct 5 00:48:52 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6ac2f3f4-ee0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:f0:3b:c0:df:50:2e:0d:e5:9c:ba:f6:50: 0a:02:c9:8c:a5:f1:08:c6:69:f1:9e:07:98:ca:50: 62:d6:a8:b2:c9:d4:08:57:73:3e:65:66:10:d9:f1: 82:e6:a2:c0:14:ae:11:26:75:b8:20:22:be:a9:dd: ca:7b:45:7f:3e:de:59:2e:ff:71:ec:4e:af:6d:17: 0e:20:22:27:f0:03:60:31:b8:5c:3d:7a:15:f1:f3: 0b:4b:42:07:3b:16:ee:95:75:4c:a7:98:3d:d8:b4: 9d:4d:3b:f5:d6:32:5a:7c:1f:b8:72:9b:88:27:26: 07:19:86:40:02:82:fa:d5:93:d0:d1:6c:3c:a8:63: 9f:ce:67:2d:6e:c3:39:e7:f9:ef:dd:10:a0:c8:84: 6c:23:15:a2:0b:b4:4b:3f:c8:2c:7d:23:0e:48:a7: 45:61:48:b1:d3:e3:cd:48:f8:dc:06:f0:83:62:6f: 7c:57:85:c7:62:cd:e5:f7:e5:6d:b4:14:f2:46:7e: b9:97:9b:15:1e:3d:98:9f:87:07:82:2b:e6:72:65: 39:9d:a4:05:39:07:1d:56:3a:3c:fb:27:c0:cb:55: 3e:55:38:80:d9:05:ed:eb:d7:e1:d6:48:ec:be:fe: 4a:38:82:b0:48:ab:88:e0:68:60:e4:07:1d:6b:98: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:97:90:D1:53:20:2B:5A:81:9B:CA:2A:FD:09:09:DC:07:C0:BE:54 X509v3 Authority Key Identifier: keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.167.0/24 Signature Algorithm: sha256WithRSAEncryption 67:34:41:bc:c3:35:f7:c6:82:01:b3:0b:0a:1f:5e:ed:d2:63: 46:be:58:ca:21:25:6d:fa:79:48:88:3a:5e:2d:39:3e:27:91: cc:05:34:30:29:fe:3d:2b:05:40:7c:ce:52:ee:13:5d:39:29: 52:fa:34:51:c2:fb:c7:ce:21:cd:8f:f7:00:95:20:ab:e7:ee: f7:85:16:f4:b5:9e:a7:a3:4c:37:68:b6:ce:44:52:fc:20:77: bb:a4:e9:ed:ae:64:b2:af:eb:e6:97:65:04:f0:b9:24:92:86: 2e:26:e6:81:ab:98:6e:44:24:12:54:fa:5b:7c:10:a6:8a:9e: 8c:4a:e5:ab:0c:9b:23:71:1d:ec:e9:e9:2e:15:e3:4d:30:91: 8d:16:2b:be:2b:57:a8:eb:dc:60:35:2a:c8:b3:d6:ed:e5:37: c1:36:f7:f7:7e:44:3f:83:0f:6b:23:ca:16:52:71:f7:62:6c: bd:ef:cd:ef:bd:cb:ff:c2:d3:0e:26:f8:11:b9:b0:f7:e6:4b: 56:1c:be:03:c3:7d:0b:48:93:1d:1e:90:be:d9:99:33:77:4d: b7:26:d7:46:84:da:e6:cd:36:77:2c:46:37:20:f5:df:7a:6e: 0f:6d:32:60:a4:1f:15:17:f0:da:d5:61:7a:3e:d4:25:e0:1f: 0f:20:9c:c1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NzExMTAvBgNVBAUTKDMwQzU4MkI2Nzk5MjUyQkFBQzNCMzgxQUJBNENDMzM3 QUJGOTdERTMwHhcNMjYxMDA1MDA0ODUyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyZjNmNC1lZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbTwO8DfUC4N5Zy69lAKAsmMpfEIxmnxngeYylBi1qiyydQIV3M+ZWYQ2fGC 5qLAFK4RJnW4ICK+qd3Ke0V/Pt5ZLv9x7E6vbRcOICIn8ANgMbhcPXoV8fMLS0IH OxbulXVMp5g92LSdTTv11jJafB+4cpuIJyYHGYZAAoL61ZPQ0Ww8qGOfzmctbsM5 5/nv3RCgyIRsIxWiC7RLP8gsfSMOSKdFYUix0+PNSPjcBvCDYm98V4XHYs3l9+Vt tBTyRn65l5sVHj2Yn4cHgivmcmU5naQFOQcdVjo8+yfAy1U+VTiA2QXt69fh1kjs vv5KOIKwSKuI4Ghg5Acda5il0wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNiXkNFT ICtagZvKKv0JCdwHwL5UMB8GA1UdIwQYMBaAFDDFgrZ5klK6rDs4GrpMwzer+X3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc3MS81NUYyRjBGRUIx N0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1VycXNPemdhdWt6RE42djVm ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NV0N0bm1TVXJxc096Z2F1a3pETjZ2NWZlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc3NzEvNTVGMkYwRkVCMTdEMTFFQ0I5NzM2MjQxQzRGOUFFMDIvOUY4OEMzNTQy QURGMTFGMEIzMDA2RDQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ6ynMA0GCSqGSIb3DQEBCwUAA4IBAQBnNEG8wzX3xoIBswsKH17t 0mNGvljKISVt+nlIiDpeLTk+J5HMBTQwKf49KwVAfM5S7hNdOSlS+jRRwvvHziHN j/cAlSCr5+73hRb0tZ6no0w3aLbORFL8IHe7pOntrmSyr+vml2UE8LkkkoYuJuaB q5huRCQSVPpbfBCmip6MSuWrDJsjcR3s6ekuFeNNMJGNFiu+K1eo69xgNSrIs9bt 5TfBNvf3fkQ/gw9rI8oWUnH3Ymy9783vvcv/wtMOJvgRubD35ktWHL4Dw30LSJMd HpC+2Zkzd023JtdGhNrmzTZ3LEY3IPXfem4PbTJgpB8VF/Da1WF6PtQl4B8PIJzB -----END CERTIFICATE-----Generated at Thu Oct 8 10:30:53 2026 by rpki-client