$ rpki-client -vvvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/F61F817C9B3B11EBA5C76B80C4F9AE02.roa File: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (raw, json) Hash identifier: zOty70yAmXIWntlxppQaWlD8QTQjPqogBr4hz0mKPbI= Subject key identifier: 7E:58:92:F2:B0:49:0A:54:E1:C8:83:E4:6E:9C:5D:DE:B6:55:0E:64 Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Certificate serial: 0B21 Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/F61F817C9B3B11EBA5C76B80C4F9AE02.roa Signing time: Thu 10 Sep 2026 19:39:43 +0000 ROA not before: Thu 10 Sep 2026 19:39:43 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 141768 IP address blocks: 103.142.172.0/23 maxlen: 23 103.142.172.0/24 maxlen: 24 103.142.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2849 (0xb21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Validity Not Before: Sep 10 19:39:43 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa3077f-2d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:07:0d:85:0b:c8:b3:49:f7:d5:5b:6f:61: 14:64:bd:e2:f1:4e:51:9b:8a:d1:a9:0a:00:1e:3f: 93:73:90:f2:47:11:99:82:bb:ef:7a:e7:42:7f:0d: 39:09:7d:99:d2:ae:1a:70:2e:79:89:a1:53:39:44: 3d:88:45:64:c7:e7:d6:7a:6d:84:c6:09:b0:f0:dd: 25:98:ce:03:ff:43:89:46:8f:6a:27:53:c2:40:21: 23:0d:23:fd:32:6d:fd:6c:a7:b6:22:82:33:1b:55: 5c:8e:f9:a2:4a:b9:66:ab:e7:67:b4:29:ed:23:1b: 3d:d7:43:be:6d:73:33:87:95:af:f3:5f:d4:77:45: 2b:40:1e:02:d0:43:27:07:8b:74:d3:b8:79:f0:b1: e7:d7:2b:50:60:f7:69:74:f6:52:8e:84:75:a5:24: 51:83:7f:92:0e:1f:19:92:c2:87:a0:f1:24:cf:74: 78:a9:9f:e3:8c:e9:3e:d5:5d:5c:18:47:1c:15:18: e5:b3:af:b1:5c:bb:a9:91:40:98:50:5b:6b:8a:ec: 56:76:f7:5a:a7:ee:b0:96:97:5c:c0:53:ec:14:e3: c9:a4:d9:79:97:61:78:6c:46:03:36:fb:2f:3f:50: e5:11:2e:86:f7:2b:34:cb:55:fb:43:7f:a5:d7:86: 2e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:58:92:F2:B0:49:0A:54:E1:C8:83:E4:6E:9C:5D:DE:B6:55:0E:64 X509v3 Authority Key Identifier: keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/F61F817C9B3B11EBA5C76B80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.142.172.0/23 Signature Algorithm: sha256WithRSAEncryption 27:df:b6:c8:3f:1a:c0:70:6e:66:af:4f:cc:4c:0f:1a:2e:03: 5f:be:ce:0a:94:9f:c6:fd:c9:cb:d2:a1:6a:9f:37:a9:9c:ae: 5a:dc:1e:ce:ba:9f:d4:7b:ff:a0:45:74:c1:8d:07:81:8d:a3: 7c:74:37:40:85:5e:3a:d4:99:6a:f6:76:61:2f:16:e4:5a:be: 26:66:51:59:92:22:eb:e7:ae:55:cc:e4:d2:2a:b0:ce:0b:51: e8:74:d7:3a:06:01:8e:bb:5b:26:d4:04:e4:a1:61:7c:2e:7c: 14:c0:2c:9b:d8:53:f6:d2:3c:ee:ea:bc:d4:bc:2e:35:95:52: 0d:83:50:9e:8a:c7:ab:48:c6:b2:aa:8e:2d:e7:4a:f2:31:c9: ba:c9:b4:0e:49:02:dc:52:79:3e:b2:f2:19:d8:ff:ad:84:a6: df:31:32:c4:3d:d9:d4:b9:c8:7b:40:51:cc:21:2c:c6:6a:5a: c2:0d:ed:4f:39:54:dc:86:dc:23:6b:44:b9:b0:1b:d2:00:e5: ee:65:ae:7f:51:ff:28:a1:61:c8:02:30:20:97:16:85:20:e1: 1b:f4:da:09:ee:9f:43:e8:ea:76:96:24:1a:eb:bc:85:c6:34: 2b:ed:70:dc:47:d7:c1:a3:67:5a:bb:e7:06:08:5c:e3:d5:19: 0f:ff:1a:db -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RUExMTAvBgNVBAUTKDRENTI1NDc0NkZFRjcyRUZCN0FDQzBDNTM0QUQ2MDhG NTBCQzM4MDQwHhcNMjYwOTEwMTkzOTQzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEzMDc3Zi0yZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFkHDYULyLNJ99Vbb2EUZL3i8U5Rm4rRqQoAHj+Tc5DyRxGZgrvveudCfw05 CX2Z0q4acC55iaFTOUQ9iEVkx+fWem2Exgmw8N0lmM4D/0OJRo9qJ1PCQCEjDSP9 Mm39bKe2IoIzG1VcjvmiSrlmq+dntCntIxs910O+bXMzh5Wv81/Ud0UrQB4C0EMn B4t007h58LHn1ytQYPdpdPZSjoR1pSRRg3+SDh8ZksKHoPEkz3R4qZ/jjOk+1V1c GEccFRjls6+xXLupkUCYUFtriuxWdvdap+6wlpdcwFPsFOPJpNl5l2F4bEYDNvsv P1DlES6G9ys0y1X7Q3+l14YuuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH5YkvKw SQpU4ciD5G6cXd62VQ5kMB8GA1UdIwQYMBaAFE1SVHRv73Lvt6zAxTStYI9QvDgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFQS9GNDJENENBMjcz RTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1LTNyTURGTksxZ2oxQzhP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RWSlVkR192Y3UtM3JNREZOSzFnajFDOE9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQ5RUEvRjQyRDRDQTI3M0U0MTFFQTlBRTY4MDcyQzRGOUFFMDIvRjYxRjgxN0M5 QjNCMTFFQkE1Qzc2QjgwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ46sMA0GCSqGSIb3DQEBCwUAA4IBAQAn37bIPxrAcG5mr0/MTA8a LgNfvs4KlJ/G/cnL0qFqnzepnK5a3B7Oup/Ue/+gRXTBjQeBjaN8dDdAhV461Jlq 9nZhLxbkWr4mZlFZkiLr565VzOTSKrDOC1HodNc6BgGOu1sm1ATkoWF8LnwUwCyb 2FP20jzu6rzUvC41lVINg1CeiserSMayqo4t50ryMcm6ybQOSQLcUnk+svIZ2P+t hKbfMTLEPdnUuch7QFHMISzGalrCDe1POVTchtwja0S5sBvSAOXuZa5/Uf8ooWHI AjAglxaFIOEb9NoJ7p9D6Op2liQa67yFxjQr7XDcR9fBo2dau+cGCFzj1RkP/xrb -----END CERTIFICATE-----Generated at Tue Sep 22 00:04:36 2026 by rpki-client