$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/FAF4A0E0FB3211EB967B1759C4F9AE02.roa File: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (raw, json) Hash identifier: qIbw8UOl0b/oFTvpxfDdXeOIgEUhSH5fcBq2Lav55t8= Subject key identifier: C9:AE:C8:1D:FC:CA:E2:74:80:F0:C4:16:27:7E:C9:25:5E:F9:7E:75 Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957 Certificate serial: 062A Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/FAF4A0E0FB3211EB967B1759C4F9AE02.roa Signing time: Tue 18 Aug 2026 23:44:20 +0000 ROA not before: Tue 18 Aug 2026 23:44:20 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 142633 IP address blocks: 103.171.138.0/23 maxlen: 23 103.171.138.0/24 maxlen: 24 103.171.139.0/24 maxlen: 24 2001:df7:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957 Validity Not Before: Aug 18 23:44:20 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a84ee54-79ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:ae:5b:5b:60:cd:84:e5:74:fc:98:8f:40: 92:6d:45:31:7d:e5:ac:44:d7:b2:74:4e:c9:cf:48: 13:9a:72:87:d1:5d:65:dd:ae:a9:69:d2:33:14:70: 57:0a:f3:d1:24:ed:ed:5e:27:4d:ca:31:21:e9:e4: f1:18:03:1e:8c:3a:13:b3:33:74:54:e7:47:e9:9b: ae:a3:b7:83:af:4e:97:32:b5:02:66:a5:1b:56:2c: 6b:eb:88:9f:07:22:2e:3d:dc:ae:0e:06:c4:e1:c9: 06:36:1d:dd:be:d9:4b:7a:af:d2:8f:4e:a8:29:6e: d8:b9:07:45:34:5b:c0:5a:42:62:21:ee:18:fd:9d: 7c:2c:a3:35:65:88:a9:3e:01:bb:9c:96:31:09:a1: 9b:07:2e:c2:03:e3:64:75:6c:20:cf:c1:01:2a:e0: 7e:36:27:c9:db:06:26:f6:ca:d3:da:c7:98:65:14: 85:a4:53:22:f7:d7:78:24:09:0a:3c:89:72:61:c4: 38:cf:31:60:16:5d:cd:e2:1f:d2:06:c8:ad:15:88: bf:0d:fa:7d:8f:a1:aa:94:bc:52:a2:36:09:42:6a: 39:e9:57:2c:a9:d7:85:ad:64:62:17:7a:f8:bc:62: 02:0d:bc:16:37:ae:78:71:62:15:1d:ad:b6:6d:c3: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AE:C8:1D:FC:CA:E2:74:80:F0:C4:16:27:7E:C9:25:5E:F9:7E:75 X509v3 Authority Key Identifier: keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/FAF4A0E0FB3211EB967B1759C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.171.138.0/23 IPv6: 2001:df7:4880::/48 Signature Algorithm: sha256WithRSAEncryption 02:81:6d:21:2b:d9:d3:45:73:02:82:64:b3:f0:bc:3e:de:df: b0:bb:7d:3b:d6:99:1a:c9:b8:6f:79:a6:9d:81:a4:5c:2f:2c: f6:59:9a:cb:ad:b9:c5:2c:3a:cc:62:c5:f2:ab:80:79:7c:5e: 2f:bb:1c:85:2e:7c:1b:93:57:6a:b4:e7:da:b5:56:1e:25:63: ca:c4:b6:dc:3a:02:eb:18:29:4a:aa:c6:a1:5d:ab:cb:86:7b: fd:b7:31:21:97:d1:ea:79:38:0b:ad:f1:9f:81:f6:88:5f:04: 77:23:aa:c2:c9:8f:f6:bf:33:e0:e0:a9:0e:b5:67:86:88:de: 6a:00:0a:a4:77:15:38:f3:7f:5d:59:cf:0f:41:0e:26:ba:18: 08:49:6b:87:ee:77:32:16:72:6c:96:ac:5f:d1:f5:1d:e8:c4: 40:58:71:a2:f6:82:b5:05:66:33:e9:f1:ba:07:d9:61:4a:5b: 34:75:55:13:16:3e:a4:18:01:04:45:5d:50:53:c5:6e:8c:3a: c8:94:2e:cc:11:44:fb:0d:2b:85:ea:28:a0:c0:9e:01:2f:41: 4a:7c:66:96:73:9c:68:91:93:68:48:12:54:90:b7:86:35:a5: e9:45:a1:41:74:54:24:14:49:8a:78:1e:87:1e:64:0d:ed:9c: dd:76:9f:5b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFOTQxMTAvBgNVBAUTKDUyMDFBODlEMzBDNDgyOTk0NTA0MThDOTU2Qjg3NzI0 OTcwNkU5NTcwHhcNMjYwODE4MjM0NDIwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg0ZWU1NC03OWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuOuW1tgzYTldPyYj0CSbUUxfeWsRNeydE7Jz0gTmnKH0V1l3a6padIzFHBX CvPRJO3tXidNyjEh6eTxGAMejDoTszN0VOdH6Zuuo7eDr06XMrUCZqUbVixr64if ByIuPdyuDgbE4ckGNh3dvtlLeq/Sj06oKW7YuQdFNFvAWkJiIe4Y/Z18LKM1ZYip PgG7nJYxCaGbBy7CA+NkdWwgz8EBKuB+NifJ2wYm9srT2seYZRSFpFMi99d4JAkK PIlyYcQ4zzFgFl3N4h/SBsitFYi/Dfp9j6GqlLxSojYJQmo56VcsqdeFrWRiF3r4 vGICDbwWN654cWIVHa22bcMaBQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMmuyB38 yuJ0gPDEFid+ySVe+X51MB8GA1UdIwQYMBaAFFIBqJ0wxIKZRQQYyVa4dySXBulX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U5NC9BMkE3MEM1QUZC MkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdwbEZCQmpKVnJoM0pKY0c2 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VnR29uVERFZ3BsRkJCakpWcmgzSkpjRzZWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdFOTQvQTJBNzBDNUFGQjJGMTFFQkE4NDA5RTU0QzRGOUFFMDIvRkFGNEEwRTBG QjMyMTFFQjk2N0IxNzU5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6uKMA8EAgACMAkDBwAgAQ33SIAwDQYJKoZIhvcNAQELBQADggEB AAKBbSEr2dNFcwKCZLPwvD7e37C7fTvWmRrJuG95pp2BpFwvLPZZmsutucUsOsxi xfKrgHl8Xi+7HIUufBuTV2q059q1Vh4lY8rEttw6AusYKUqqxqFdq8uGe/23MSGX 0ep5OAut8Z+B9ohfBHcjqsLJj/a/M+DgqQ61Z4aI3moACqR3FTjzf11Zzw9BDia6 GAhJa4fudzIWcmyWrF/R9R3oxEBYcaL2grUFZjPp8boH2WFKWzR1VRMWPqQYAQRF XVBTxW6MOsiULswRRPsNK4XqKKDAngEvQUp8ZpZznGiRk2hIElSQt4Y1pelFoUF0 VCQUSYp4HoceZA3tnN12n1s= -----END CERTIFICATE-----Generated at Wed Aug 19 13:39:52 2026 by rpki-client