$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ECC7CA2EF1AA11F0885E8853736F56BC.roa File: ECC7CA2EF1AA11F0885E8853736F56BC.roa (raw, json) Hash identifier: eCkptwR3fy6CIlHl2yidxHMQO1OkuJlmnlT+GWYigVY= Subject key identifier: 9A:B0:D8:62:28:4F:B6:A3:E9:F4:3A:7B:76:D9:D8:1C:B2:DC:AB:A4 Certificate issuer: /CN=A91E4743/serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC Certificate serial: 8B Authority key identifier: FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ECC7CA2EF1AA11F0885E8853736F56BC.roa Signing time: Wed 16 Sep 2026 20:40:31 +0000 ROA not before: Wed 16 Sep 2026 20:40:31 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 140865 IP address blocks: 103.152.154.0/23 maxlen: 24 2001:df4:1380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 20:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4743, serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC Validity Not Before: Sep 16 20:40:31 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6aaafebe-14ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:4b:7f:26:0d:4d:0c:49:70:75:86:10:d4: ce:64:06:a7:b8:85:95:4f:6a:98:49:73:e6:88:61: 36:02:74:39:83:d5:74:72:ff:a8:7b:6d:1a:46:19: 67:bb:5d:50:b0:f7:d3:47:81:aa:e3:a3:b5:de:1c: 06:7d:e7:6f:fa:d9:a3:a2:33:a3:a9:5b:27:e7:85: ce:b2:99:25:3e:36:2e:f4:d2:15:96:67:d8:ca:f6: c7:80:39:92:8b:e5:a8:fc:2f:c8:d5:78:6e:77:db: 9f:da:c8:57:36:12:84:f6:9c:f2:5a:6e:d9:52:5b: 24:64:30:8b:1a:59:a0:bc:4d:bd:f0:85:e4:d0:f5: a2:da:53:cd:f8:bf:de:2b:16:e7:08:c3:51:27:15: 6a:24:16:f9:0b:65:25:c3:6f:3f:ab:9a:ce:d2:a4: 7a:83:6c:ce:7d:f4:96:62:8f:fa:07:1c:d0:20:ca: cb:6e:c1:96:41:43:95:43:db:54:4c:84:e6:69:65: 07:c4:b0:85:bd:1e:08:5f:87:ff:bc:8c:29:34:fa: e0:ff:a3:d7:10:4b:41:a9:52:ec:9c:c3:24:5d:a8: bb:dc:b9:98:e1:82:40:c3:f5:a8:c4:d5:99:35:ab: 9d:81:9d:d0:f4:8b:1d:14:95:18:9e:9d:8c:c6:d9: 7b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B0:D8:62:28:4F:B6:A3:E9:F4:3A:7B:76:D9:D8:1C:B2:DC:AB:A4 X509v3 Authority Key Identifier: keyid:FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ECC7CA2EF1AA11F0885E8853736F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.152.154.0/23 IPv6: 2001:df4:1380::/48 Signature Algorithm: sha256WithRSAEncryption 96:b0:b0:8b:5b:17:40:6f:04:0a:17:bf:33:cc:cc:5e:a9:03: 7d:e0:10:ca:09:33:2c:cc:d2:cc:f6:63:59:91:31:a8:62:a1: 1c:4b:82:55:96:cb:22:52:e1:ff:a3:9f:f2:d4:a2:db:d2:eb: 73:6a:41:bc:d0:e1:88:a2:2a:de:ba:49:fc:e6:db:c7:9b:37: 56:23:c6:7b:34:1f:26:ab:1a:4a:1f:81:44:db:fb:da:ad:11: 55:62:a1:c1:64:fa:9f:a8:42:44:4e:5d:60:4a:a2:e9:52:3f: b9:8b:45:f1:2a:bb:e8:c2:3a:0b:98:18:56:35:4e:54:86:d5: a3:31:57:33:91:47:1e:1a:be:d0:38:6c:54:bd:6c:c9:be:e5: 54:ce:6b:63:48:36:c6:b6:8a:ad:e5:d5:54:32:00:5f:6a:41: ac:53:c0:ef:3a:d8:44:b5:3d:1c:81:03:5b:e8:91:7d:e4:86: 6c:7b:75:ea:f4:54:64:12:54:57:04:b7:99:98:39:d5:34:b1: ae:a9:88:3f:05:09:2f:c1:50:ee:5d:53:8e:b3:2c:bb:49:a5: 62:aa:4a:76:84:45:49:78:99:63:47:3b:23:42:a3:7d:09:b2: e3:19:2c:24:7b:c1:c9:62:37:7e:b2:29:3f:29:2d:cf:ea:0e: 58:67:bb:ba -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3NDMxMTAvBgNVBAUTKEZBN0VERTdCNjJCNDdCODdERDEzOTg2QThFNzJDM0ZF MzY1NkI1Q0MwHhcNMjYwOTE2MjA0MDMxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhZmViZS0xNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh7dLfyYNTQxJcHWGENTOZAanuIWVT2qYSXPmiGE2AnQ5g9V0cv+oe20aRhln u11QsPfTR4Gq46O13hwGfedv+tmjojOjqVsn54XOspklPjYu9NIVlmfYyvbHgDmS i+Wo/C/I1Xhud9uf2shXNhKE9pzyWm7ZUlskZDCLGlmgvE298IXk0PWi2lPN+L/e KxbnCMNRJxVqJBb5C2Ulw28/q5rO0qR6g2zOffSWYo/6BxzQIMrLbsGWQUOVQ9tU TITmaWUHxLCFvR4IX4f/vIwpNPrg/6PXEEtBqVLsnMMkXai73LmY4YJAw/WoxNWZ NaudgZ3Q9IsdFJUYnp2Mxtl7oQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJqw2GIo T7aj6fQ6e3bZ2Byy3KukMB8GA1UdIwQYMBaAFPp+3ntitHuH3ROYao5yw/42VrXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDc0My82NzBGODA5MkJC NkYxMUVBOTYxRkI4NEVDNEY5QUUwMi8tbjdlZTJLMGU0ZmRFNWhxam5MRF9qWld0 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1uN2VlMkswZTRmZEU1aHFqbkxEX2paV3Rjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ3NDMvNjcwRjgwOTJCQjZGMTFFQTk2MUZCODRFQzRGOUFFMDIvRUNDN0NBMkVG MUFBMTFGMDg4NUU4ODUzNzM2RjU2QkMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5iaMA8EAgACMAkDBwAgAQ30E4AwDQYJKoZIhvcNAQELBQADggEB AJawsItbF0BvBAoXvzPMzF6pA33gEMoJMyzM0sz2Y1mRMahioRxLglWWyyJS4f+j n/LUotvS63NqQbzQ4YiiKt66Sfzm28ebN1Yjxns0HyarGkofgUTb+9qtEVViocFk +p+oQkROXWBKoulSP7mLRfEqu+jCOguYGFY1TlSG1aMxVzORRx4avtA4bFS9bMm+ 5VTOa2NINsa2iq3l1VQyAF9qQaxTwO862ES1PRyBA1vokX3khmx7der0VGQSVFcE t5mYOdU0sa6piD8FCS/BUO5dU46zLLtJpWKqSnaERUl4mWNHOyNCo30JsuMZLCR7 wcliN36yKT8pLc/qDlhnu7o= -----END CERTIFICATE-----Generated at Sat Oct 10 13:16:28 2026 by rpki-client