$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6D9433B0F41211E9AAF5924EC4F9AE02.roa File: 6D9433B0F41211E9AAF5924EC4F9AE02.roa (raw, json) Hash identifier: L784r7F3HVepKqZvDuigVxNtfDfHrQk48PR55aW7pY8= Subject key identifier: B6:32:E1:1F:33:DD:3E:1E:6C:5F:20:6C:A0:52:9D:7C:A0:B4:DF:86 Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Certificate serial: 0DA7 Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6D9433B0F41211E9AAF5924EC4F9AE02.roa Signing time: Sat 26 Sep 2026 18:36:01 +0000 ROA not before: Sat 26 Sep 2026 18:36:01 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136999 IP address blocks: 103.101.196.0/22 maxlen: 22 103.101.196.0/24 maxlen: 24 103.101.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3495 (0xda7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Validity Not Before: Sep 26 18:36:01 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab81091-a210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b0:70:c3:98:2b:fa:06:f9:ec:06:85:a5:4f: 81:09:7f:84:c7:83:6c:47:6c:75:fa:03:47:e5:1f: 4c:cd:f0:0e:9b:cc:a7:d3:0c:3e:7b:2c:1b:42:65: f5:ea:42:be:e2:80:33:9f:24:a4:7f:04:a3:f6:75: b1:da:36:86:cd:86:91:d2:bd:df:68:96:06:4c:d5: 02:34:5d:35:03:b9:2d:f1:b2:14:52:97:4e:2b:c8: 31:5c:33:c8:6d:7e:32:39:a9:dd:65:ee:7f:ff:99: 14:88:49:08:47:2e:64:6a:68:ba:07:10:8e:aa:ae: 2f:ee:2a:10:8e:18:9a:55:82:6a:fe:eb:0a:7e:06: ad:53:6f:c9:ae:cc:51:c2:d0:41:11:a8:a7:21:44: 59:d8:f7:05:fa:32:b7:69:7b:8b:a5:09:e4:17:1b: 03:67:54:8a:d6:86:af:18:c7:89:6d:79:e5:be:98: 70:d7:06:ff:b2:43:c8:c6:29:30:05:19:2b:52:4a: 70:cc:96:b7:ea:5a:27:2c:45:ce:aa:77:13:49:04: 7b:ea:4d:0b:29:f8:5b:19:7f:cc:0d:9e:f3:56:5d: 1d:fc:63:b0:af:2a:ab:de:37:9b:9e:3e:63:b4:87: 0e:50:fb:44:4e:d0:be:2d:d7:db:80:2b:55:94:34: 23:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:32:E1:1F:33:DD:3E:1E:6C:5F:20:6C:A0:52:9D:7C:A0:B4:DF:86 X509v3 Authority Key Identifier: keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6D9433B0F41211E9AAF5924EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.196.0/22 Signature Algorithm: sha256WithRSAEncryption a2:f8:1f:bf:9c:f9:36:78:51:81:da:7c:12:c8:58:fd:51:35: 49:39:c1:3b:58:dc:5e:78:29:66:4a:e2:5e:9d:76:24:e6:1e: b8:7c:de:dc:d1:13:7d:56:19:e0:86:ae:18:42:fe:6b:8c:57: e2:94:40:ef:1f:9c:cf:5d:bf:f1:9a:92:5c:22:2c:84:d7:1d: aa:17:15:a0:89:38:f4:6d:1f:e9:80:7b:b6:a7:46:62:36:48: e0:f9:d7:77:9e:eb:72:71:a8:3a:cc:b8:2a:9a:55:d2:d0:7e: 32:d7:79:1f:f6:c6:72:80:cc:d4:bf:b9:84:8f:06:a3:69:4e: 6c:44:7d:33:4f:90:a6:f8:8c:bd:10:3d:13:35:4d:45:ed:70: 65:24:0e:72:3a:df:ab:fd:0f:f9:fe:77:8b:00:ff:e1:85:2b: f2:df:3e:24:aa:34:32:b0:7e:e9:5e:ea:ca:7a:bc:da:7f:4b: 3c:17:70:f1:1c:4a:7c:d6:a1:a2:96:33:01:04:66:3c:dd:ff: 3c:76:4d:05:29:03:b8:a3:2e:8a:4a:83:f3:7d:16:91:d5:5b: 69:3f:4b:57:85:6c:d8:61:c0:50:08:c4:1b:9b:b0:51:00:b4: 7c:76:37:e9:73:c4:ff:b2:d3:17:81:f6:e5:f9:95:68:52:a8: 22:e3:f6:6d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCMUExMTAvBgNVBAUTKDkxOEU3Mjg5RTI4QzFBNDkyMkEyM0NCNTY1QkQ4MjFC N0UyMEE2MTEwHhcNMjYwOTI2MTgzNjAxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI4MTA5MS1hMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbBww5gr+gb57AaFpU+BCX+Ex4NsR2x1+gNH5R9MzfAOm8yn0ww+eywbQmX1 6kK+4oAznySkfwSj9nWx2jaGzYaR0r3faJYGTNUCNF01A7kt8bIUUpdOK8gxXDPI bX4yOandZe5//5kUiEkIRy5kami6BxCOqq4v7ioQjhiaVYJq/usKfgatU2/JrsxR wtBBEainIURZ2PcF+jK3aXuLpQnkFxsDZ1SK1oavGMeJbXnlvphw1wb/skPIxikw BRkrUkpwzJa36lonLEXOqncTSQR76k0LKfhbGX/MDZ7zVl0d/GOwryqr3jebnj5j tIcOUPtETtC+LdfbgCtVlDQjuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLYy4R8z 3T4ebF8gbKBSnXygtN+GMB8GA1UdIwQYMBaAFJGOconijBpJIqI8tWW9ght+IKYR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUIxQS81MUZGQzRFNEY0 MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdra2lvankxWmIyQ0czNGdw aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tZNXlpZUtNR2traW9qeTFaYjJDRzM0Z3BoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFCMUEvNTFGRkM0RTRGNDExMTFFOUE0MzVCMDRDQzRGOUFFMDIvNkQ5NDMzQjBG NDEyMTFFOUFBRjU5MjRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2XEMA0GCSqGSIb3DQEBCwUAA4IBAQCi+B+/nPk2eFGB2nwSyFj9 UTVJOcE7WNxeeClmSuJenXYk5h64fN7c0RN9Vhnghq4YQv5rjFfilEDvH5zPXb/x mpJcIiyE1x2qFxWgiTj0bR/pgHu2p0ZiNkjg+dd3nutycag6zLgqmlXS0H4y13kf 9sZygMzUv7mEjwajaU5sRH0zT5Cm+Iy9ED0TNU1F7XBlJA5yOt+r/Q/5/neLAP/h hSvy3z4kqjQysH7pXurKerzaf0s8F3DxHEp81qGiljMBBGY83f88dk0FKQO4oy6K SoPzfRaR1VtpP0tXhWzYYcBQCMQbm7BRALR8djfpc8T/stMXgfbl+ZVoUqgi4/Zt -----END CERTIFICATE-----Generated at Tue Sep 29 06:04:11 2026 by rpki-client