$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa File: 1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa (raw, json) Hash identifier: 3WCbkWX4R0+zZGGwzz4/HRtXDPQg9rI3nSXvirpsecg= Subject key identifier: 40:64:09:02:A4:78:E7:44:36:CF:79:43:C0:AA:EE:BA:C8:F3:21:FA Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6D7B Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:22:08 +0000 ROA not before: Fri 02 Oct 2026 15:22:08 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131366 IP address blocks: 103.146.22.0/23 maxlen: 24 103.153.68.0/23 maxlen: 24 103.163.214.0/23 maxlen: 23 103.176.20.0/23 maxlen: 24 2400:ab60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 15:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28027 (0x6d7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:22:08 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcc20-3b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:5d:17:bd:79:00:9c:24:c0:bc:04:3a:f3: 87:e1:e0:bc:0b:ca:0b:f7:28:5c:bd:f4:e6:74:cb: aa:c1:4f:0b:79:7d:12:99:4f:b6:31:fb:82:d8:7d: 0d:2a:d8:c6:02:fb:e1:55:b3:88:5c:fb:c8:a2:81: 68:93:83:41:fc:c2:2d:00:f9:e4:7a:a1:de:da:db: 39:02:0e:4d:67:da:26:e9:21:09:0b:08:74:cb:c9: 64:eb:4f:db:c7:18:e8:1b:3e:da:34:84:7c:77:3c: 10:c9:ac:6d:a8:69:38:1a:94:f2:a5:76:e1:03:1d: f2:9d:89:2a:16:6d:77:52:99:f5:43:85:0e:fe:af: 31:49:84:c2:2c:b4:6b:82:14:da:2f:54:f8:af:31: 24:9a:48:7b:0e:fd:94:a6:db:04:b6:dc:d1:25:c2: a2:85:99:b4:12:1b:f3:5e:46:d2:ea:2e:39:3f:3c: 53:e4:ce:2c:21:74:b6:1e:0c:3b:25:04:01:35:e8: 99:2f:ad:e9:b8:c4:3d:b3:47:0c:f7:65:a2:99:4f: 51:77:9a:61:98:7a:9b:23:2b:fb:cc:0b:c2:a4:da: ae:c4:b4:c9:0f:05:55:a5:b6:44:1e:8b:f6:c3:92: d5:e1:a3:60:be:76:2a:86:6b:ca:8c:ff:d2:e5:be: 37:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:64:09:02:A4:78:E7:44:36:CF:79:43:C0:AA:EE:BA:C8:F3:21:FA X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.146.22.0/23 103.153.68.0/23 103.163.214.0/23 103.176.20.0/23 IPv6: 2400:ab60::/48 Signature Algorithm: sha256WithRSAEncryption 36:29:e4:66:c4:80:31:72:dc:d4:b5:2a:6f:c9:f6:71:29:e4: bd:08:06:ec:a8:0e:e9:5a:f6:67:dc:90:1d:d8:8f:75:57:3a: 2f:b2:f7:f0:a6:fa:f5:49:3e:6f:10:df:77:02:39:d3:4c:4c: 03:28:22:ef:02:af:86:9f:1d:59:66:c4:ad:4d:a5:2a:cc:cf: c9:e9:90:6f:fd:fe:f5:d9:bd:8c:21:59:48:35:9d:2d:1f:13: ba:5f:d5:55:b6:90:25:1b:e2:ed:f8:d9:c4:bf:64:6f:62:28: fa:50:69:05:24:95:b7:33:e1:d7:2b:a4:c5:58:1c:8e:87:d7: e8:ba:a1:26:f6:e8:db:21:18:27:7b:6d:65:0b:c7:c1:b3:b2: b4:f7:7f:19:a7:f3:83:ef:77:47:f0:4a:38:2b:2e:e8:d3:01: 5c:c2:32:6c:2e:66:e1:b3:83:7a:c0:9a:62:21:f5:29:04:93: e6:48:bd:21:01:50:97:5b:50:1e:33:c1:31:3b:a2:c2:26:03: b1:4b:6f:d1:46:1d:0f:0d:9f:ce:da:e6:33:48:07:b1:0d:57: 7f:4f:5f:73:bd:6a:d8:25:0d:f8:0c:54:ae:87:6c:b3:58:57: 49:b5:2e:c4:42:af:a1:c5:51:f9:85:ad:77:0d:c9:f0:12:15: f0:38:70:a5 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICbXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyMjA4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2MyMC0zYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZxdF715AJwkwLwEOvOH4eC8C8oL9yhcvfTmdMuqwU8LeX0SmU+2MfuC2H0N KtjGAvvhVbOIXPvIooFok4NB/MItAPnkeqHe2ts5Ag5NZ9om6SEJCwh0y8lk60/b xxjoGz7aNIR8dzwQyaxtqGk4GpTypXbhAx3ynYkqFm13Upn1Q4UO/q8xSYTCLLRr ghTaL1T4rzEkmkh7Dv2UptsEttzRJcKihZm0EhvzXkbS6i45PzxT5M4sIXS2Hgw7 JQQBNeiZL63puMQ9s0cM92WimU9Rd5phmHqbIyv7zAvCpNquxLTJDwVVpbZEHov2 w5LV4aNgvnYqhmvKjP/S5b43CQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFEBkCQKk eOdENs95Q8Cq7rrI8yH6MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMUZBODJGNENB NDFDMTFFQkJCRjFDQTdDQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAe BAIAATAYAwQBZ5IWAwQBZ5lEAwQBZ6PWAwQBZ7AUMA8EAgACMAkDBwAkAKtgAAAw DQYJKoZIhvcNAQELBQADggEBADYp5GbEgDFy3NS1Km/J9nEp5L0IBuyoDula9mfc kB3Yj3VXOi+y9/Cm+vVJPm8Q33cCOdNMTAMoIu8Cr4afHVlmxK1NpSrMz8npkG/9 /vXZvYwhWUg1nS0fE7pf1VW2kCUb4u342cS/ZG9iKPpQaQUklbcz4dcrpMVYHI6H 1+i6oSb26NshGCd7bWULx8GzsrT3fxmn84Pvd0fwSjgrLujTAVzCMmwuZuGzg3rA mmIh9SkEk+ZIvSEBUJdbUB4zwTE7osImA7FLb9FGHQ8Nn87a5jNIB7ENV39PX3O9 atglDfgMVK6HbLNYV0m1LsRCr6HFUfmFrXcNyfASFfA4cKU= -----END CERTIFICATE-----Generated at Sat Oct 3 13:22:34 2026 by rpki-client