$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/BCD0F6B0A0FF11EC924D4461C4F9AE02.roa File: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (raw, json) Hash identifier: qsMeSOsY/v4xDv51AL5EHgDhAsKeYHGqgfOVvrnOS5I= Subject key identifier: DA:1A:FF:45:24:FE:A9:26:02:BC:49:F9:07:00:58:A4:83:A8:29:82 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 048B Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/BCD0F6B0A0FF11EC924D4461C4F9AE02.roa Signing time: Tue 08 Sep 2026 07:41:32 +0000 ROA not before: Tue 08 Sep 2026 07:41:31 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 141732 IP address blocks: 103.137.202.0/23 maxlen: 23 103.137.202.0/24 maxlen: 24 103.162.234.0/23 maxlen: 24 2407:1e40::/32 maxlen: 32 2407:1e40:4::/46 maxlen: 46 2407:1e40:5::/48 maxlen: 48 2407:1e40:8::/46 maxlen: 46 2407:1e40:200::/48 maxlen: 48 2407:1e40:300::/48 maxlen: 48 2407:1e40:400::/48 maxlen: 48 2407:1e40:500::/48 maxlen: 48 2407:1e40:600::/48 maxlen: 48 2407:1e40:fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1163 (0x48b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: Sep 8 07:41:31 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a9fbc2b-8c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:c6:b3:7d:00:af:8a:de:5d:c7:72:8b:a0: 67:73:fa:cd:89:4f:31:b3:3c:77:19:3a:68:79:28: 64:67:d7:bc:34:31:bf:80:66:05:66:02:a7:d6:21: 10:96:98:5f:8a:7b:ca:c3:6e:3d:1e:a6:b2:5d:a0: 9c:cb:e5:fa:ff:5b:00:24:41:f8:b0:e3:e2:2a:82: 68:32:ff:8a:af:43:b0:6c:92:32:e8:e2:ce:0b:45: 79:eb:09:f6:00:c0:e1:86:b8:f6:fa:27:24:cf:2f: 92:b3:89:95:87:42:f7:e5:53:cb:91:b8:b5:6c:8f: 86:ad:0f:eb:a4:4d:ce:c9:e0:c0:86:8a:8f:ac:07: 84:93:b0:9c:5d:10:ce:fc:c4:0a:ef:f1:9a:41:1f: cf:c4:f9:2d:bd:28:2c:be:c7:7a:ed:de:bd:ca:3f: b8:ea:9b:36:08:4f:f7:b5:69:6c:4d:6c:af:29:ad: 77:bf:ee:99:5d:d3:71:42:c7:74:4d:ef:20:43:c2: 9e:cd:81:ba:ad:9d:67:86:b6:34:6c:fa:17:3c:1a: bf:cc:72:6a:8c:fb:71:89:e1:63:0b:8c:30:20:68: 52:68:39:0b:5b:33:fa:d7:ea:28:78:7b:c6:dc:e8: c1:92:35:42:54:aa:ca:f5:09:14:f2:1d:df:7e:2d: 5d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1A:FF:45:24:FE:A9:26:02:BC:49:F9:07:00:58:A4:83:A8:29:82 X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/BCD0F6B0A0FF11EC924D4461C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.137.202.0/23 103.162.234.0/23 IPv6: 2407:1e40::/32 Signature Algorithm: sha256WithRSAEncryption 9b:58:ed:aa:79:8d:a2:b3:54:f7:5c:a9:1d:f9:da:36:f2:0a: f1:6f:78:8e:ce:c0:fa:1b:02:b1:c0:54:06:44:fb:ec:b2:41: d1:8a:c3:4d:d0:b4:a1:e6:17:d1:91:c4:d7:e9:ef:94:6c:09: a1:60:0e:62:63:2c:a7:df:3a:fb:34:35:ab:2b:12:ed:08:98: 2f:c5:42:17:7a:e2:b4:a3:eb:5c:e9:db:15:6c:db:0b:20:79: 1c:1c:9c:1a:86:75:27:c3:88:03:0f:45:71:9e:74:28:70:11: 35:b7:16:7b:b8:d6:10:8c:5a:5f:a6:12:95:6c:0f:70:00:dd: 9c:a3:22:8f:a5:53:6e:7f:11:23:69:f8:3d:e8:99:83:36:62: 00:84:cf:43:c1:e9:cc:b2:63:38:97:a8:3c:d4:43:0f:0d:26: f3:5e:24:db:26:be:26:b7:87:da:d8:cf:a0:e0:6c:4b:ab:cc: 21:9a:5e:66:51:bb:d0:b5:98:43:ae:16:b6:4b:d7:8a:96:8e: bc:95:67:ee:08:54:06:61:f4:d6:53:d1:d3:83:6f:c8:2a:1a: 19:3e:9f:83:e1:24:b5:e9:2f:08:a9:7c:da:78:ca:fa:cb:fc: 30:d7:f9:57:62:1f:67:8c:89:9f:a1:e7:9d:76:b1:6b:13:12: 22:b0:45:eb -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjYwOTA4MDc0MTMxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTlmYmMyYi04YzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEvGs30Ar4reXcdyi6Bnc/rNiU8xszx3GTpoeShkZ9e8NDG/gGYFZgKn1iEQ lphfinvKw249HqayXaCcy+X6/1sAJEH4sOPiKoJoMv+Kr0OwbJIy6OLOC0V56wn2 AMDhhrj2+ickzy+Ss4mVh0L35VPLkbi1bI+GrQ/rpE3OyeDAhoqPrAeEk7CcXRDO /MQK7/GaQR/PxPktvSgsvsd67d69yj+46ps2CE/3tWlsTWyvKa13v+6ZXdNxQsd0 Te8gQ8KezYG6rZ1nhrY0bPoXPBq/zHJqjPtxieFjC4wwIGhSaDkLWzP61+ooeHvG 3OjBkjVCVKrK9QkU8h3ffi1diwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFNoa/0Uk /qkmArxJ+QcAWKSDqCmCMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjEwQjkvRDEzQkVBQUFBMEZCMTFFQ0E1RDFERjVCQzRGOUFFMDIvQkNEMEY2QjBB MEZGMTFFQzkyNEQ0NDYxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ4nKAwQBZ6LqMA0EAgACMAcDBQAkBx5AMA0GCSqGSIb3DQEBCwUA A4IBAQCbWO2qeY2is1T3XKkd+do28grxb3iOzsD6GwKxwFQGRPvsskHRisNN0LSh 5hfRkcTX6e+UbAmhYA5iYyyn3zr7NDWrKxLtCJgvxUIXeuK0o+tc6dsVbNsLIHkc HJwahnUnw4gDD0VxnnQocBE1txZ7uNYQjFpfphKVbA9wAN2coyKPpVNufxEjafg9 6JmDNmIAhM9DwenMsmM4l6g81EMPDSbzXiTbJr4mt4fa2M+g4GxLq8whml5mUbvQ tZhDrha2S9eKlo68lWfuCFQGYfTWU9HTg2/IKhoZPp+D4SS16S8IqXzaeMr6y/ww 1/lXYh9njImfoeeddrFrExIisEXr -----END CERTIFICATE-----Generated at Mon Sep 21 11:03:13 2026 by rpki-client