$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/A4E0754863B411EEAADB3A7CC4F9AE02.roa File: A4E0754863B411EEAADB3A7CC4F9AE02.roa (raw, json) Hash identifier: XP+B/CbH9g2352UGWtUfcCt+zJTiFwwxF3uyBoZBino= Subject key identifier: 19:95:2E:3F:18:4C:8B:FC:C7:DA:78:27:8A:EB:39:F0:A9:89:D1:22 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 024D Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/A4E0754863B411EEAADB3A7CC4F9AE02.roa Signing time: Fri 09 Oct 2026 03:51:58 +0000 ROA not before: Fri 09 Oct 2026 03:51:58 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 151820 IP address blocks: 103.204.42.0/23 maxlen: 23 103.204.42.0/24 maxlen: 24 103.204.43.0/24 maxlen: 24 2401:ec20::/32 maxlen: 32 2401:ec20::/48 maxlen: 48 2401:ec20:1::/48 maxlen: 48 2401:ec20:2::/48 maxlen: 48 2401:ec20:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 03:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Oct 9 03:51:58 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac864de-1719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:80:a1:d5:93:fa:05:71:c5:3f:c4:a3:e8: b2:78:2f:b5:8d:c7:f3:16:4f:dc:c7:16:92:d1:d1: 3d:da:1f:31:75:b1:90:0c:f3:f5:bb:3a:80:e0:d4: 75:c8:93:3b:0c:f1:fd:9d:78:0c:90:a7:aa:4e:66: 9a:dc:1e:a5:ea:9f:b2:8a:d0:e2:e6:13:a4:61:1f: 51:12:ee:2b:bd:11:c5:1c:2c:97:fe:31:ff:29:7a: 5c:ac:f5:06:0a:10:62:28:49:42:f2:d0:86:13:c2: 12:29:b8:b6:9c:2a:2e:b9:de:b3:12:3b:04:cc:ac: b3:25:f4:42:ba:43:11:14:f5:44:df:bf:e5:a2:eb: c4:15:25:14:41:23:c0:c1:c4:85:02:73:6a:d0:d2: 1b:5a:3a:0e:67:f6:71:ec:62:ec:49:b7:d3:90:ac: 93:57:bf:4d:cf:fc:40:cf:92:08:63:3a:98:58:1a: 03:b8:44:29:58:06:f1:8c:d3:2b:f4:4a:49:47:d3: cc:c1:52:3a:01:14:2b:a8:68:62:4d:0d:e8:a6:a1: ba:67:52:70:fd:7d:ea:d6:a4:27:9e:8c:42:39:42: 93:80:a2:61:d5:c2:ba:0c:b0:60:fa:8e:34:cf:eb: 27:36:68:86:ec:42:70:9d:cf:1a:27:c8:22:11:93: 58:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:95:2E:3F:18:4C:8B:FC:C7:DA:78:27:8A:EB:39:F0:A9:89:D1:22 X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/A4E0754863B411EEAADB3A7CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.204.42.0/23 IPv6: 2401:ec20::/32 Signature Algorithm: sha256WithRSAEncryption 10:4c:88:68:60:28:0a:fa:82:3f:22:b7:cd:a2:1f:81:c1:69: 9b:a6:e0:04:02:31:b6:2f:98:9f:e1:48:4e:83:06:98:c0:a6: ff:f4:11:8e:bb:2b:7d:89:ea:b2:e4:49:56:2c:14:fd:60:fe: f0:af:16:fe:62:22:09:22:4d:b2:5f:48:fe:a8:49:b8:e1:92: 7d:4e:bd:ef:8c:f8:1a:d8:75:b7:49:e4:67:6f:a5:8d:26:16: ff:f8:40:fc:db:4a:3d:29:65:15:93:80:9e:47:44:14:72:04: 09:0a:ac:e3:ac:d4:c2:b1:4b:3e:ef:ab:7d:00:67:2a:86:74: 0e:98:5b:0a:0e:51:c8:e2:51:88:0b:37:39:60:bf:61:cd:53: 15:b8:36:f6:d7:98:cf:2c:e0:74:bc:aa:31:86:0c:00:9c:86: d4:80:1d:11:ef:ce:33:52:63:7e:7b:5b:f7:ee:b3:5c:44:38: d3:fe:04:13:19:bb:0d:21:ec:8e:8a:13:94:b9:d0:92:4e:dd: 94:a2:24:cd:cb:8d:9c:d9:f5:4f:0b:eb:5f:8b:98:77:9c:51: e9:30:9b:78:df:65:3b:65:91:cc:93:b6:b9:a3:9c:96:e1:6d: 69:4d:c9:5f:a4:8a:5a:6c:7e:af:cf:c3:8c:0b:a5:84:0b:3e: 7d:c1:ea:a0 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjYxMDA5MDM1MTU4WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM4NjRkZS0xNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv06AodWT+gVxxT/Eo+iyeC+1jcfzFk/cxxaS0dE92h8xdbGQDPP1uzqA4NR1 yJM7DPH9nXgMkKeqTmaa3B6l6p+yitDi5hOkYR9REu4rvRHFHCyX/jH/KXpcrPUG ChBiKElC8tCGE8ISKbi2nCouud6zEjsEzKyzJfRCukMRFPVE37/louvEFSUUQSPA wcSFAnNq0NIbWjoOZ/Zx7GLsSbfTkKyTV79Nz/xAz5IIYzqYWBoDuEQpWAbxjNMr 9EpJR9PMwVI6ARQrqGhiTQ3opqG6Z1Jw/X3q1qQnnoxCOUKTgKJh1cK6DLBg+o40 z+snNmiG7EJwnc8aJ8giEZNYDwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBmVLj8Y TIv8x9p4J4rrOfCpidEiMB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTIwNDIvMEFFQzFEMEM2M0I0MTFFRUI2NUQyQjdCQzRGOUFFMDIvQTRFMDc1NDg2 M0I0MTFFRUFBREIzQTdDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ8wqMA0EAgACMAcDBQAkAewgMA0GCSqGSIb3DQEBCwUAA4IBAQAQ TIhoYCgK+oI/IrfNoh+BwWmbpuAEAjG2L5if4UhOgwaYwKb/9BGOuyt9ieqy5ElW LBT9YP7wrxb+YiIJIk2yX0j+qEm44ZJ9Tr3vjPga2HW3SeRnb6WNJhb/+ED820o9 KWUVk4CeR0QUcgQJCqzjrNTCsUs+76t9AGcqhnQOmFsKDlHI4lGICzc5YL9hzVMV uDb215jPLOB0vKoxhgwAnIbUgB0R784zUmN+e1v37rNcRDjT/gQTGbsNIeyOihOU udCSTt2UoiTNy42c2fVPC+tfi5h3nFHpMJt432U7ZZHMk7a5o5yW4W1pTclfpIpa bH6vz8OMC6WECz59weqg -----END CERTIFICATE-----Generated at Sat Oct 10 00:38:52 2026 by rpki-client