$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/DF3136A2CFF011EAB2F1D086C4F9AE02.roa File: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (raw, json) Hash identifier: x4kWnFqqajZTHQ2ljg81sWUMtKfZzm4EBKfFyEjnDQo= Subject key identifier: C4:97:04:68:1F:B3:E9:24:DC:CF:DD:9B:8F:FB:56:07:93:08:30:DE Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 091D Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/DF3136A2CFF011EAB2F1D086C4F9AE02.roa Signing time: Tue 04 Aug 2026 20:40:37 +0000 ROA not before: Tue 04 Aug 2026 20:40:37 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 140954 IP address blocks: 103.153.185.0/24 maxlen: 24 103.157.253.0/24 maxlen: 24 2001:df4:5980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2333 (0x91d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: Aug 4 20:40:37 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a724e45-88ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:d8:71:5d:a2:47:8c:89:26:21:4a:39:76: 2c:2f:84:1b:a7:cd:06:f2:ef:8d:7e:91:e1:75:6a: e6:87:28:0d:99:75:a9:78:1d:da:62:be:84:62:4b: cf:d9:5a:8e:72:67:f0:36:51:1f:aa:44:c5:54:e2: f0:12:ad:07:e1:7b:5b:12:36:b8:83:19:c1:84:1a: 3a:e5:9c:ae:b8:b1:62:35:c1:3a:48:cb:1c:35:e2: 05:81:af:cf:fd:8e:ab:c4:c4:e1:13:e4:e3:16:95: a7:44:f6:47:4a:d4:71:39:ae:9d:f0:52:70:38:3c: 95:3a:78:3f:99:f8:3a:c8:29:4e:f1:39:9a:5b:d4: 93:8e:d8:9e:15:4c:66:06:2c:e4:75:30:06:7e:e9: 7d:e7:b9:c3:47:cc:aa:96:92:0e:27:49:a5:d2:f3: fb:23:26:ba:e3:a6:65:b9:a8:1e:4e:16:d4:8e:e2: ff:4f:c1:06:dc:c3:9e:5c:ce:75:08:c9:c1:1e:87: 70:d7:31:ee:15:a6:14:5d:ba:e0:94:c0:b8:63:87: 9a:8e:07:d6:6f:00:61:30:c6:dd:eb:ac:9b:52:4a: 68:c0:84:a9:60:9f:81:c3:6d:4f:b4:36:ab:cc:c5: 6e:30:65:ad:e1:c1:2c:c5:51:43:56:b9:62:3a:46: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:97:04:68:1F:B3:E9:24:DC:CF:DD:9B:8F:FB:56:07:93:08:30:DE X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/DF3136A2CFF011EAB2F1D086C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.185.0/24 103.157.253.0/24 IPv6: 2001:df4:5980::/48 Signature Algorithm: sha256WithRSAEncryption 04:bb:48:c7:66:93:e1:99:fc:c9:8c:80:1c:c7:37:77:65:cb: 9e:c2:4c:5d:ce:91:7d:f3:1e:a7:01:de:9d:fe:c9:0f:c7:74: b3:5a:0a:5b:61:4b:75:cf:19:b6:af:10:fa:88:a9:a7:ad:0e: 35:f2:56:6e:f9:99:54:41:77:0a:1d:92:a2:cf:18:a8:7a:52: f4:ca:47:4f:24:2a:56:11:38:76:68:9f:76:54:f1:f3:91:c0: bf:45:bb:0b:12:d7:88:ad:f6:1d:c2:0d:b4:30:a6:1b:c6:6e: 6d:43:85:3a:c9:74:53:3e:44:6f:e4:b0:6d:4d:36:6b:22:95: 2d:80:58:32:79:df:46:c6:9c:55:c6:e0:7e:fc:05:8e:79:03: f3:31:d7:17:6e:e0:18:dd:48:d4:ff:7a:3e:81:28:60:29:94: bc:7e:dc:b4:22:49:ec:39:ae:16:27:6a:4a:9c:22:0f:08:9c: d0:5b:17:16:83:32:ea:14:d0:d7:f9:56:d5:13:be:b6:b6:fc: 73:27:0c:2e:3e:72:6d:fc:db:e6:1f:58:69:80:17:19:67:f0: 42:3c:f5:34:9d:b3:05:7c:03:27:a4:c3:9a:61:31:d2:61:04: 7d:5a:86:13:24:e9:c4:af:d9:17:38:0c:98:c6:a6:93:de:d4: 80:f8:9d:9f -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjYwODA0MjA0MDM3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcyNGU0NS04OGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzLYcV2iR4yJJiFKOXYsL4Qbp80G8u+NfpHhdWrmhygNmXWpeB3aYr6EYkvP 2VqOcmfwNlEfqkTFVOLwEq0H4XtbEja4gxnBhBo65ZyuuLFiNcE6SMscNeIFga/P /Y6rxMThE+TjFpWnRPZHStRxOa6d8FJwODyVOng/mfg6yClO8TmaW9STjtieFUxm BizkdTAGful957nDR8yqlpIOJ0ml0vP7Iya646ZluageThbUjuL/T8EG3MOeXM51 CMnBHodw1zHuFaYUXbrglMC4Y4eajgfWbwBhMMbd66ybUkpowISpYJ+Bw21PtDar zMVuMGWt4cEsxVFDVrliOkbZ3wIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFMSXBGgf s+kk3M/dm4/7VgeTCDDeMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEwMjIvOUQ4RDk0NThDRkVGMTFFQUIyQ0I4ODg1QzRGOUFFMDIvREYzMTM2QTJD RkYwMTFFQUIyRjFEMDg2QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ5m5AwQAZ539MA8EAgACMAkDBwAgAQ30WYAwDQYJKoZIhvcNAQEL BQADggEBAAS7SMdmk+GZ/MmMgBzHN3dly57CTF3OkX3zHqcB3p3+yQ/HdLNaClth S3XPGbavEPqIqaetDjXyVm75mVRBdwodkqLPGKh6UvTKR08kKlYROHZon3ZU8fOR wL9FuwsS14it9h3CDbQwphvGbm1DhTrJdFM+RG/ksG1NNmsilS2AWDJ530bGnFXG 4H78BY55A/Mx1xdu4BjdSNT/ej6BKGAplLx+3LQiSew5rhYnakqcIg8InNBbFxaD MuoU0Nf5VtUTvra2/HMnDC4+cm382+YfWGmAFxln8EI89TSdswV8Ayekw5phMdJh BH1ahhMk6cSv2Rc4DJjGppPe1ID4nZ8= -----END CERTIFICATE-----Generated at Wed Aug 19 12:49:16 2026 by rpki-client