$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/2157C3E011C211EA93417583C4F9AE02.roa File: 2157C3E011C211EA93417583C4F9AE02.roa (raw, json) Hash identifier: +1OqTpdYQThGOs42BYoaAj2a2Cg6wC/jJbBuEZgzjdU= Subject key identifier: 1D:F3:EE:F6:45:01:23:C9:95:7D:EF:84:E8:07:85:7C:87:CD:27:8F Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0CD6 Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/2157C3E011C211EA93417583C4F9AE02.roa Signing time: Sun 28 Jun 2026 19:22:17 +0000 ROA not before: Sun 28 Jun 2026 19:22:17 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 139197 IP address blocks: 103.139.164.0/23 maxlen: 23 103.139.164.0/24 maxlen: 24 103.139.165.0/24 maxlen: 24 2001:df0:8580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3286 (0xcd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Jun 28 19:22:17 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a417469-fa4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:67:1f:88:c4:b2:ca:6b:7a:64:25:34:e6:60: 8f:f0:05:95:a2:71:fd:39:13:e3:2c:90:99:a6:ba: 62:c9:ba:7f:1b:b0:d9:81:f4:d3:a8:10:3f:49:1b: e1:3b:6d:1f:1f:2b:4e:84:80:a5:87:1b:d5:66:4c: e9:42:70:53:3f:f8:99:d7:60:21:5c:0f:84:21:f1: 28:96:9a:78:f3:f9:53:cb:84:c1:73:f4:f3:1c:c3: 6b:16:68:74:d9:20:cd:37:8c:75:4b:90:c5:39:80: 03:5b:f2:f1:c1:4c:bf:aa:c3:95:1b:20:9b:4f:82: 64:a4:25:7a:90:e8:78:e4:34:df:85:b0:ab:f0:f4: 06:d0:93:5d:35:72:05:2d:5f:70:83:5f:e5:a1:e6: a5:0e:b4:2e:23:15:01:b6:56:8f:19:05:13:17:63: 79:69:e6:8c:fa:62:c4:fc:52:06:b9:9d:ba:99:56: bf:47:0d:6a:97:8e:95:6a:2c:e9:91:43:89:60:9b: 3c:b3:3b:37:02:3a:0b:20:cc:0a:e5:e6:7b:dd:93: b8:3c:c1:12:08:de:5f:04:e3:8f:84:90:2d:14:f0: 47:fe:4f:ef:cc:dc:dc:72:05:d4:3f:bc:54:a0:ac: a7:75:25:4d:d3:b2:cc:39:d9:d0:d4:bd:b1:e6:df: 94:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F3:EE:F6:45:01:23:C9:95:7D:EF:84:E8:07:85:7C:87:CD:27:8F X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/2157C3E011C211EA93417583C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.164.0/23 IPv6: 2001:df0:8580::/48 Signature Algorithm: sha256WithRSAEncryption 1c:0a:0e:53:16:3c:cb:75:ab:79:95:1f:f6:95:03:de:bc:12: 89:4e:06:d4:3e:64:a7:d0:a3:59:6f:84:47:c8:7c:da:b9:23: 8b:50:23:ed:10:37:ed:e9:f5:bb:0b:ee:06:2d:0f:93:cf:07: e9:53:4b:eb:db:1f:d6:f5:66:e3:bd:43:4e:d6:0d:26:14:e4: 9a:98:3e:dd:3d:a2:9a:e4:02:b5:25:f9:27:be:eb:b0:8f:68: 0a:8c:08:94:b1:6b:6a:31:3a:20:cf:3d:04:c3:77:08:28:9b: ba:01:be:4f:86:46:25:ae:be:e6:b0:38:c3:c6:2e:d6:57:d5: 1c:b0:06:9f:2b:ea:48:85:a6:f9:a4:84:b5:c8:e8:cb:a8:d8: 49:9a:71:6f:85:bf:2d:17:af:99:d0:e2:af:42:a6:46:fa:c9: 98:e7:b5:32:5e:e9:a6:7f:70:61:ad:22:3a:62:cc:b1:97:31: 4a:d3:e7:8d:a7:77:22:0e:6c:e3:54:6a:13:8d:9c:7f:5e:94: f2:a6:d9:e8:41:68:3a:e7:bd:83:00:97:89:94:db:47:ee:9c: f8:30:28:d4:f5:dc:45:16:fb:52:6d:b4:26:0f:2f:63:67:7c: cf:be:96:91:c5:dc:23:b1:e9:56:3d:b0:ce:5b:2c:be:39:6e: d1:c0:31:82 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjYwNjI4MTkyMjE3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQxNzQ2OS1mYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmcfiMSyymt6ZCU05mCP8AWVonH9ORPjLJCZprpiybp/G7DZgfTTqBA/SRvh O20fHytOhIClhxvVZkzpQnBTP/iZ12AhXA+EIfEolpp48/lTy4TBc/TzHMNrFmh0 2SDNN4x1S5DFOYADW/LxwUy/qsOVGyCbT4JkpCV6kOh45DTfhbCr8PQG0JNdNXIF LV9wg1/loealDrQuIxUBtlaPGQUTF2N5aeaM+mLE/FIGuZ26mVa/Rw1ql46Vaizp kUOJYJs8szs3AjoLIMwK5eZ73ZO4PMESCN5fBOOPhJAtFPBH/k/vzNzccgXUP7xU oKyndSVN07LMOdnQ1L2x5t+UFQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFB3z7vZF ASPJlX3vhOgHhXyHzSePMB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2RTcvNzg2MEY4QkExMUMxMTFFQTg1OEVFNjgyQzRGOUFFMDIvMjE1N0MzRTAx MUMyMTFFQTkzNDE3NTgzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4ukMA8EAgACMAkDBwAgAQ3whYAwDQYJKoZIhvcNAQELBQADggEB ABwKDlMWPMt1q3mVH/aVA968EolOBtQ+ZKfQo1lvhEfIfNq5I4tQI+0QN+3p9bsL 7gYtD5PPB+lTS+vbH9b1ZuO9Q07WDSYU5JqYPt09oprkArUl+Se+67CPaAqMCJSx a2oxOiDPPQTDdwgom7oBvk+GRiWuvuawOMPGLtZX1RywBp8r6kiFpvmkhLXI6Muo 2EmacW+Fvy0Xr5nQ4q9Cpkb6yZjntTJe6aZ/cGGtIjpizLGXMUrT542ndyIObONU ahONnH9elPKm2ehBaDrnvYMAl4mU20funPgwKNT13EUW+1JttCYPL2NnfM++lpHF 3COx6VY9sM5bLL45btHAMYI= -----END CERTIFICATE-----Generated at Wed Jul 29 03:55:31 2026 by rpki-client