$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa File: F547BE4253EA11F08B05D02EC4F9AE02.roa (raw, json) Hash identifier: YKr4LPiv+8zUeK31cb16siUqLk0ccykz6GVFETQcSkM= Subject key identifier: E9:18:FF:80:91:AB:7B:F7:94:AD:B8:23:84:63:83:70:3A:38:82:58 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 09C6 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa Signing time: Mon 03 Aug 2026 08:15:49 +0000 ROA not before: Mon 03 Aug 2026 08:15:49 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 138997 IP address blocks: 103.138.72.0/22 maxlen: 22 103.138.72.0/23 maxlen: 24 103.138.74.0/23 maxlen: 24 2404:c140::/32 maxlen: 32 2404:c140:155::/48 maxlen: 48 2404:c140:156::/48 maxlen: 48 2404:c140:157::/48 maxlen: 48 2404:c140:220::/48 maxlen: 48 2404:c140:221::/48 maxlen: 48 2404:c140:224::/48 maxlen: 48 2404:c140:225::/48 maxlen: 48 2404:c140:230::/47 maxlen: 48 2404:c140:1f00::/40 maxlen: 48 2404:c140:2000::/40 maxlen: 48 2404:c140:2100::/40 maxlen: 48 2404:c140:2200::/40 maxlen: 48 2404:c140:2300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 20:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2502 (0x9c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Aug 3 08:15:49 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a704e35-f042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:6f:85:df:f6:58:f1:ad:83:62:14:3a:65: a6:fc:67:db:4f:a3:8c:f1:0a:5d:69:97:d6:e3:77: 0e:6e:0f:49:4c:d8:cf:d9:90:de:f7:89:e4:d5:74: 6d:5c:60:e0:1b:15:2b:a6:4e:d3:95:6a:7c:b9:2b: ff:d1:99:ef:52:d4:b0:85:17:9a:3c:30:2d:c9:83: f3:bb:30:2b:7a:f1:3f:63:96:5e:8d:12:11:43:17: 90:f2:44:5c:90:97:be:eb:1f:51:ef:22:e7:49:bb: 36:4e:3d:97:99:6a:ea:f3:34:f9:64:d5:d3:5b:4a: 62:cf:5d:6a:e4:2a:1d:9f:44:de:84:c1:2f:04:bd: ff:48:e0:91:f5:d2:9d:d4:26:ad:91:e2:88:11:1c: 68:0e:ff:3d:6f:fb:58:35:8d:3c:29:be:0a:a3:39: d6:4b:83:18:57:7b:10:3e:27:50:19:ac:33:5f:a7: b4:db:0f:de:be:7a:c4:86:09:eb:6a:6d:1e:47:c0: ad:c6:9e:8d:b9:9c:77:58:8e:59:08:a3:2d:f9:d2: 66:58:bf:53:95:df:be:fa:63:97:f3:78:42:76:ea: ea:37:96:10:78:c8:c7:36:a7:99:60:87:87:8d:b1: 44:b1:be:7f:2a:5d:d0:35:71:74:c5:28:a0:13:5d: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:18:FF:80:91:AB:7B:F7:94:AD:B8:23:84:63:83:70:3A:38:82:58 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.72.0/22 IPv6: 2404:c140::/32 Signature Algorithm: sha256WithRSAEncryption 6f:19:aa:82:d5:22:e6:82:e1:d9:06:86:07:fd:00:84:eb:7d: 62:e9:d8:74:07:d2:a3:06:be:b7:71:25:3e:fe:11:b2:ee:49: 37:a3:3e:8d:e9:a2:e6:aa:63:70:69:3c:90:0d:4e:8f:b5:84: 3c:b4:4c:0b:1e:df:c3:96:fd:5e:de:2e:db:02:90:9d:38:15: 99:ab:43:65:57:ce:5a:2b:08:06:ae:7b:37:f5:74:a9:9e:6d: 38:f6:de:72:b6:b0:23:5f:6c:25:ce:52:49:5d:bf:d6:9d:3e: 16:1c:6b:99:a3:c8:9c:c9:6e:05:e9:82:1c:ec:67:23:34:15: ea:a1:f3:b5:56:f9:3c:5d:a8:e1:18:9d:0a:94:3f:a2:7d:a1: 9a:2d:bb:28:4f:34:f8:fb:97:32:65:15:f3:a2:8c:fc:33:4a: ca:b7:ed:3f:0f:20:80:51:5c:b3:32:a5:2b:54:03:34:0a:f9: 9e:25:a0:7b:3d:2f:cf:c2:c8:19:7f:d8:ec:76:43:17:0d:82: 88:b8:21:ba:4d:21:bf:14:af:6e:0a:c2:34:45:25:98:f4:e4: 6f:cf:2d:b9:0e:7b:4f:a2:fe:1c:a9:99:97:88:4e:80:23:48: 65:c0:c6:ee:2a:3d:cf:1f:0b:f5:cb:ef:af:fd:5c:81:cd:ec: bd:24:57:0c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjYwODAzMDgxNTQ5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcwNGUzNS1mMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdRvhd/2WPGtg2IUOmWm/GfbT6OM8QpdaZfW43cObg9JTNjP2ZDe94nk1XRt XGDgGxUrpk7TlWp8uSv/0ZnvUtSwhReaPDAtyYPzuzArevE/Y5ZejRIRQxeQ8kRc kJe+6x9R7yLnSbs2Tj2XmWrq8zT5ZNXTW0piz11q5Codn0TehMEvBL3/SOCR9dKd 1CatkeKIERxoDv89b/tYNY08Kb4KoznWS4MYV3sQPidQGawzX6e02w/evnrEhgnr am0eR8Ctxp6NuZx3WI5ZCKMt+dJmWL9Tld+++mOX83hCdurqN5YQeMjHNqeZYIeH jbFEsb5/Kl3QNXF0xSigE11rewIDAQABo4ICbzCCAmswHQYDVR0OBBYEFOkY/4CR q3v3lK24I4Rjg3A6OIJYMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVERkQvNTQ1MzZCM0VCQzg4MTFFQTg4RUYzRDQ5QzRGOUFFMDIvRjU0N0JFNDI1 M0VBMTFGMDhCMDVEMDJFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4pIMA0EAgACMAcDBQAkBMFAMA0GCSqGSIb3DQEBCwUAA4IBAQBv GaqC1SLmguHZBoYH/QCE631i6dh0B9KjBr63cSU+/hGy7kk3oz6N6aLmqmNwaTyQ DU6PtYQ8tEwLHt/Dlv1e3i7bApCdOBWZq0NlV85aKwgGrns39XSpnm049t5ytrAj X2wlzlJJXb/WnT4WHGuZo8icyW4F6YIc7GcjNBXqofO1Vvk8XajhGJ0KlD+ifaGa LbsoTzT4+5cyZRXzooz8M0rKt+0/DyCAUVyzMqUrVAM0CvmeJaB7PS/PwsgZf9js dkMXDYKIuCG6TSG/FK9uCsI0RSWY9ORvzy25DntPov4cqZmXiE6AI0hlwMbuKj3P Hwv1y++v/VyBzey9JFcM -----END CERTIFICATE-----Generated at Thu Sep 10 06:50:52 2026 by rpki-client