$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/02F863F6C09211EC8950E57AC4F9AE02.roa File: 02F863F6C09211EC8950E57AC4F9AE02.roa (raw, json) Hash identifier: kaqTTfX4xcgq0jrDteDEHbQZsGepuw4xi4fZYEf2NxY= Subject key identifier: A0:E3:44:E9:FB:1E:DF:08:45:F8:F6:60:F5:04:6E:E3:EE:58:21:C9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 0903 Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/02F863F6C09211EC8950E57AC4F9AE02.roa Signing time: Fri 04 Sep 2026 20:40:34 +0000 ROA not before: Fri 04 Sep 2026 20:40:34 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 141003 IP address blocks: 103.154.188.0/23 maxlen: 23 103.154.188.0/24 maxlen: 24 103.154.189.0/24 maxlen: 24 2001:df6:f680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2307 (0x903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: Sep 4 20:40:34 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9b2cc2-edb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:6e:08:b5:2f:3c:ce:9b:12:1e:17:01:98: 17:10:49:2f:58:da:e7:40:d4:c6:0c:f9:44:ed:34: 35:f1:fc:de:bb:82:95:ea:c0:54:9f:ab:bf:b5:4c: 80:bc:67:2f:60:03:a6:91:bb:8e:9a:a4:8e:3d:fc: 54:b6:19:1f:0e:a7:af:cf:82:ae:8e:be:37:89:19: f8:71:5f:4a:f8:92:c3:e3:87:04:e2:24:c1:ae:4c: 71:30:6d:70:04:f3:91:39:19:c3:b5:03:b8:85:f6: 57:d7:4c:aa:87:cc:b5:01:fd:5b:04:b8:fb:60:80: 01:e7:13:0c:f0:6e:87:fa:fc:32:d5:24:cb:a5:0c: 2f:b3:5d:dc:8a:08:77:18:b1:18:d4:a7:f8:2c:fe: ed:c9:95:12:58:18:0f:5a:e8:56:ec:df:cd:f3:5c: b5:48:6b:c5:6e:e0:4a:ed:ff:ce:7e:8d:d6:5a:7a: b7:56:c2:e4:b0:9f:87:79:1b:cb:24:81:e0:a7:79: 3c:09:f2:48:eb:eb:08:1f:73:55:c5:e8:31:66:cb: 26:e6:d6:0b:dd:e8:23:9c:00:7e:1e:ed:5a:7c:61: 46:7a:2c:3a:e3:19:a4:19:45:08:5c:42:4a:ba:25: 67:da:57:15:f5:59:f7:e9:4e:b0:db:72:7b:d2:02: 3b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E3:44:E9:FB:1E:DF:08:45:F8:F6:60:F5:04:6E:E3:EE:58:21:C9 X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/02F863F6C09211EC8950E57AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.188.0/23 IPv6: 2001:df6:f680::/48 Signature Algorithm: sha256WithRSAEncryption b2:8b:bf:c1:c7:f5:72:9d:74:49:65:47:a0:41:f3:6e:15:b9: b3:55:e4:f6:e0:a5:76:f8:1a:4c:99:ab:57:49:9f:9d:33:44: 40:5e:63:9b:16:d5:4d:32:a1:3b:fd:3b:fa:c7:9a:32:de:58: 6e:a2:8d:0c:c0:e2:5b:3d:af:92:82:f4:17:01:31:19:1d:14: 56:01:b0:37:65:1e:7c:b3:8d:e4:22:58:2e:30:c4:68:ee:19: aa:38:e5:42:d9:bc:58:4f:7e:2b:a4:26:64:d4:a9:25:dc:b5: f9:0b:e9:41:17:22:9c:e7:6c:8e:12:d8:9f:6b:bf:67:94:43: 56:97:ff:6b:85:21:78:d9:e3:b6:54:b1:3a:7a:0f:b5:4a:11: 20:86:b5:4f:f7:1f:77:a5:de:39:6a:1d:35:7a:e1:50:2e:4b: b2:84:84:b1:42:28:e5:46:5e:82:24:0a:d7:bd:f2:05:eb:93: 6a:a5:6d:50:65:18:b3:58:53:cf:1c:e2:04:a8:2e:55:be:a5: 97:a7:4c:66:dd:38:da:0f:66:01:1f:21:0f:cb:a8:34:b9:97: 2a:ef:0e:de:5f:f9:c5:32:ff:ac:de:74:0c:b9:18:7e:a9:f0: aa:fb:55:45:67:c6:87:73:ed:8f:b4:df:5b:68:3c:b1:39:27: 11:5a:77:bb -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjYwOTA0MjA0MDM0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliMmNjMi1lZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnxuCLUvPM6bEh4XAZgXEEkvWNrnQNTGDPlE7TQ18fzeu4KV6sBUn6u/tUyA vGcvYAOmkbuOmqSOPfxUthkfDqevz4Kujr43iRn4cV9K+JLD44cE4iTBrkxxMG1w BPORORnDtQO4hfZX10yqh8y1Af1bBLj7YIAB5xMM8G6H+vwy1STLpQwvs13cigh3 GLEY1Kf4LP7tyZUSWBgPWuhW7N/N81y1SGvFbuBK7f/Ofo3WWnq3VsLksJ+HeRvL JIHgp3k8CfJI6+sIH3NVxegxZssm5tYL3egjnAB+Hu1afGFGeiw64xmkGUUIXEJK uiVn2lcV9Vn36U6w23J70gI7nwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKDjROn7 Ht8IRfj2YPUEbuPuWCHJMB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjRBQTAvMTA0MUU1RUFFMkMzMTFFQUI4MThEMTdGQzRGOUFFMDIvMDJGODYzRjZD MDkyMTFFQzg5NTBFNTdBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5q8MA8EAgACMAkDBwAgAQ329oAwDQYJKoZIhvcNAQELBQADggEB ALKLv8HH9XKddEllR6BB824VubNV5PbgpXb4GkyZq1dJn50zREBeY5sW1U0yoTv9 O/rHmjLeWG6ijQzA4ls9r5KC9BcBMRkdFFYBsDdlHnyzjeQiWC4wxGjuGao45ULZ vFhPfiukJmTUqSXctfkL6UEXIpznbI4S2J9rv2eUQ1aX/2uFIXjZ47ZUsTp6D7VK ESCGtU/3H3el3jlqHTV64VAuS7KEhLFCKOVGXoIkCte98gXrk2qlbVBlGLNYU88c 4gSoLlW+pZenTGbdONoPZgEfIQ/LqDS5lyrvDt5f+cUy/6zedAy5GH6p8Kr7VUVn xodz7Y+031toPLE5JxFad7s= -----END CERTIFICATE-----Generated at Thu Sep 24 08:53:09 2026 by rpki-client