$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/DFB4AB2C9FD911F0B75B1848C4F9AE02.roa File: DFB4AB2C9FD911F0B75B1848C4F9AE02.roa (raw, json) Hash identifier: 97u/YrRNefotVRZSa9KAABuhDSPTGXEHuGuM3h22rFQ= Subject key identifier: 7F:78:A7:5D:D2:48:40:35:A6:46:B5:45:36:94:74:AE:6F:96:A7:17 Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Certificate serial: 08BC Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/DFB4AB2C9FD911F0B75B1848C4F9AE02.roa Signing time: Mon 31 Aug 2026 20:41:19 +0000 ROA not before: Mon 31 Aug 2026 20:41:19 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 140930 IP address blocks: 103.153.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2236 (0x8bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Validity Not Before: Aug 31 20:41:19 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a95e6ef-ed38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:04:50:24:ca:dc:05:60:36:ff:74:28:b4: 0d:e0:34:c0:77:0c:7a:01:d2:f0:39:8d:3f:21:a6: c4:99:69:7a:11:a4:a3:54:c6:96:6f:74:1d:d6:0e: ab:c4:c9:8a:73:ec:c8:e3:11:e8:2a:81:f8:20:6a: 26:d2:c9:55:4c:be:3a:06:16:24:4e:65:6d:26:f3: 3c:57:a3:69:45:53:08:ee:fb:9f:1a:27:79:cf:35: e6:18:13:5f:1a:49:1c:e1:00:b3:91:32:a2:d9:dd: 71:31:a0:30:68:a9:f2:eb:85:e6:80:15:0e:94:03: 19:ca:e8:7d:5b:b0:5a:8c:4a:22:9f:ed:3f:fa:9c: f1:e2:21:e8:f3:55:d4:c1:08:a4:ff:ed:d6:e4:3c: ba:5e:08:ca:97:55:f5:a4:ae:81:03:59:ad:51:35: b9:8d:71:cd:f2:95:f3:e1:cb:ce:4c:94:b7:21:46: a9:cd:17:c3:e2:0b:d5:f2:dd:b7:4e:55:2d:9c:c9: c5:76:f9:f3:b6:f8:a9:d7:b1:8f:40:57:53:94:5c: e1:49:60:75:c6:12:e2:d8:ea:dd:45:a8:76:3d:15: b2:d7:24:a2:ba:6b:1a:22:0d:4f:a7:7b:53:a6:0d: 47:0c:e5:d0:d6:9b:ad:03:bd:8a:33:2f:5d:28:df: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:78:A7:5D:D2:48:40:35:A6:46:B5:45:36:94:74:AE:6F:96:A7:17 X509v3 Authority Key Identifier: keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/DFB4AB2C9FD911F0B75B1848C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.154.0/23 Signature Algorithm: sha256WithRSAEncryption 07:7c:ee:49:44:ba:02:68:00:87:a3:a1:65:5b:dc:66:31:ea: f0:05:67:76:2f:b8:12:09:b5:97:14:02:46:90:6a:e9:6f:77: c5:16:3f:d6:4a:4c:15:d2:3b:88:05:5f:db:85:65:ce:66:27: 52:bb:39:95:a8:eb:10:77:a1:25:da:ef:7b:e6:61:9f:34:6c: 05:1f:f9:c5:d1:17:24:4d:ab:2a:5d:af:bc:41:9c:d8:29:2e: f1:b3:99:13:5b:59:26:b8:a7:09:19:7b:1b:60:8d:14:9d:e8: 9a:67:33:b0:34:b0:90:48:b6:ab:94:d1:1b:3b:5f:4e:ba:21: 2f:c3:57:fa:0a:28:c4:cd:f9:ca:df:03:63:6f:4f:7d:8a:b0: a0:79:21:fc:c8:ed:b6:67:e2:dc:0c:5d:03:b9:1a:93:4b:2b: 07:84:1a:20:bb:ae:dc:6a:77:5b:cc:7d:e7:46:c9:dc:fa:6f: dc:da:05:df:43:4b:ae:15:07:01:a2:0c:1b:01:99:05:06:e6: 07:ad:5b:70:68:dd:5c:8c:fc:41:e4:62:fc:8e:65:50:7c:16: 85:7b:16:85:47:28:01:b9:38:24:c8:17:0e:ff:14:2e:19:ff: 98:9b:18:a9:d1:59:8f:87:c1:c5:34:db:57:63:25:e3:41:6a: 00:c1:0f:a0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2 NTM4MjM0OTIwHhcNMjYwODMxMjA0MTE5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1ZTZlZi1lZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWcEUCTK3AVgNv90KLQN4DTAdwx6AdLwOY0/IabEmWl6EaSjVMaWb3Qd1g6r xMmKc+zI4xHoKoH4IGom0slVTL46BhYkTmVtJvM8V6NpRVMI7vufGid5zzXmGBNf Gkkc4QCzkTKi2d1xMaAwaKny64XmgBUOlAMZyuh9W7BajEoin+0/+pzx4iHo81XU wQik/+3W5Dy6XgjKl1X1pK6BA1mtUTW5jXHN8pXz4cvOTJS3IUapzRfD4gvV8t23 TlUtnMnFdvnztvip17GPQFdTlFzhSWB1xhLi2OrdRah2PRWy1ySiumsaIg1Pp3tT pg1HDOXQ1putA72KMy9dKN+ipwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH94p13S SEA1pka1RTaUdK5vlqcXMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDgxMDAvQUFDNzJFMENGQ0NFMTFFQThDMTlEODdGQzRGOUFFMDIvREZCNEFCMkM5 RkQ5MTFGMEI3NUIxODQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5maMA0GCSqGSIb3DQEBCwUAA4IBAQAHfO5JRLoCaACHo6FlW9xm MerwBWd2L7gSCbWXFAJGkGrpb3fFFj/WSkwV0juIBV/bhWXOZidSuzmVqOsQd6El 2u975mGfNGwFH/nF0RckTasqXa+8QZzYKS7xs5kTW1kmuKcJGXsbYI0UneiaZzOw NLCQSLarlNEbO19OuiEvw1f6CijEzfnK3wNjb099irCgeSH8yO22Z+LcDF0DuRqT SysHhBogu67candbzH3nRsnc+m/c2gXfQ0uuFQcBogwbAZkFBuYHrVtwaN1cjPxB 5GL8jmVQfBaFexaFRygBuTgkyBcO/xQuGf+Ymxip0VmPh8HFNNtXYyXjQWoAwQ+g -----END CERTIFICATE-----Generated at Thu Oct 8 03:52:25 2026 by rpki-client