$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/38E45CE08C2511EDB64DB410C4F9AE02.roa File: 38E45CE08C2511EDB64DB410C4F9AE02.roa (raw, json) Hash identifier: 4jtKn5a6oeJ2ZvZ6jOhbyJ8NLFyq6vJ1Ql8J7L6gxEQ= Subject key identifier: 25:EE:DC:9A:35:E7:82:68:0E:9B:B1:AF:E6:0D:A7:E7:6C:D4:83:84 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 02D7 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/38E45CE08C2511EDB64DB410C4F9AE02.roa Signing time: Fri 31 Jul 2026 02:51:54 +0000 ROA not before: Fri 31 Jul 2026 02:51:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 131471 IP address blocks: 103.152.42.0/24 maxlen: 24 103.152.43.0/24 maxlen: 24 2001:df7:1f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Jul 31 02:51:54 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a6c0dca-0b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:9a:8a:22:16:32:95:a6:85:1d:b0:11:67: a7:a0:4f:20:e2:c0:79:7a:89:6a:06:56:51:14:6c: 0d:6c:22:05:10:65:23:58:5d:a5:3c:15:5f:cd:5a: 9a:ec:6a:89:2c:7c:aa:0c:56:52:4b:3b:a2:2b:39: 19:75:ea:0f:f1:09:30:ce:5e:25:bd:6b:0b:63:f5: 34:c5:bb:28:d6:37:b5:91:47:ca:e4:74:97:46:e2: fc:12:90:48:0e:9a:99:a9:e8:28:f1:70:2c:7a:43: e4:04:4f:7a:2d:a2:a9:db:4f:dc:ca:c2:44:6b:dd: e7:52:6f:25:2a:fb:dd:6d:6e:f0:72:fb:16:ff:2a: 15:c0:ab:fb:1f:f4:38:4a:8e:9a:94:e6:18:bf:14: 8b:c0:34:52:58:0e:85:fe:61:10:1f:b3:b2:c6:5d: 03:f9:35:bd:e3:51:cf:15:d8:2b:31:4c:de:85:27: 97:5e:a1:2d:22:35:46:86:df:d7:05:23:03:60:03: 75:35:87:68:23:85:ac:f0:ad:90:af:af:ba:f5:71: 6c:32:87:2c:c5:64:b8:57:ca:54:99:b6:7f:c7:b3: 2f:96:d6:19:b0:3a:73:b3:48:4e:49:cc:5b:b3:fd: 30:d7:3b:60:cb:68:50:e3:22:43:95:ec:b9:ca:50: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EE:DC:9A:35:E7:82:68:0E:9B:B1:AF:E6:0D:A7:E7:6C:D4:83:84 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/38E45CE08C2511EDB64DB410C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.42.0/23 IPv6: 2001:df7:1f80::/48 Signature Algorithm: sha256WithRSAEncryption bc:d3:70:89:10:e9:58:12:43:b7:13:eb:88:51:86:0a:a8:0e: 94:5c:61:4b:7c:b5:c1:3e:f5:7c:e0:9a:02:ce:f8:52:fb:34: 91:61:67:1a:22:60:73:ea:69:bf:dd:0a:59:40:7e:cf:37:70: eb:30:15:9a:1a:78:0f:6f:68:a7:b2:ab:99:82:75:c0:3e:3c: 70:77:bd:64:e6:7c:e3:9f:7d:d3:f3:ff:9f:9d:ec:28:ee:7f: 4a:68:a1:0b:e3:43:d1:93:b8:37:2b:d2:84:3e:1c:46:ba:06: ff:6b:99:55:8e:ed:6c:96:b4:c4:25:d1:3b:c5:5a:9a:65:89: f2:5b:58:71:d2:7b:dd:ed:70:d1:27:89:4b:57:fe:63:3d:17: d3:49:5d:59:72:6d:3f:1e:84:db:8e:61:99:c0:6c:b2:c6:64: 1f:a6:45:02:cd:56:aa:3f:59:42:e1:6a:57:c5:8b:e9:c2:a6: c4:73:57:be:e3:ce:89:c6:01:b5:50:f6:42:5d:27:01:be:dc: b5:be:87:62:4b:7b:be:c8:5b:a1:df:26:51:0a:be:d3:ab:15: 64:16:e7:f0:03:3b:40:f3:ec:85:2d:e3:5a:02:81:44:e5:4f: 51:3a:86:a2:85:2b:eb:d8:4c:05:59:70:89:be:fd:28:76:d4: 91:32:88:5b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjYwNzMxMDI1MTU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZjMGRjYS0wYjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwqaiiIWMpWmhR2wEWenoE8g4sB5eolqBlZRFGwNbCIFEGUjWF2lPBVfzVqa 7GqJLHyqDFZSSzuiKzkZdeoP8Qkwzl4lvWsLY/U0xbso1je1kUfK5HSXRuL8EpBI DpqZqego8XAsekPkBE96LaKp20/cysJEa93nUm8lKvvdbW7wcvsW/yoVwKv7H/Q4 So6alOYYvxSLwDRSWA6F/mEQH7Oyxl0D+TW941HPFdgrMUzehSeXXqEtIjVGht/X BSMDYAN1NYdoI4Ws8K2Qr6+69XFsMocsxWS4V8pUmbZ/x7MvltYZsDpzs0hOScxb s/0w1ztgy2hQ4yJDley5ylDYDQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCXu3Jo1 54JoDpuxr+YNp+ds1IOEMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REUyQUUvQzcwRkVBMkE4QzIwMTFFREFERDVDODA5QzRGOUFFMDIvMzhFNDVDRTA4 QzI1MTFFREI2NERCNDEwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5gqMA8EAgACMAkDBwAgAQ33H4AwDQYJKoZIhvcNAQELBQADggEB ALzTcIkQ6VgSQ7cT64hRhgqoDpRcYUt8tcE+9XzgmgLO+FL7NJFhZxoiYHPqab/d CllAfs83cOswFZoaeA9vaKeyq5mCdcA+PHB3vWTmfOOffdPz/5+d7Cjuf0pooQvj Q9GTuDcr0oQ+HEa6Bv9rmVWO7WyWtMQl0TvFWpplifJbWHHSe93tcNEniUtX/mM9 F9NJXVlybT8ehNuOYZnAbLLGZB+mRQLNVqo/WULhalfFi+nCpsRzV77jzonGAbVQ 9kJdJwG+3LW+h2JLe77IW6HfJlEKvtOrFWQW5/ADO0Dz7IUt41oCgUTlT1E6hqKF K+vYTAVZcIm+/Sh21JEyiFs= -----END CERTIFICATE-----Generated at Fri Sep 11 10:37:25 2026 by rpki-client