$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/84AC17989B0811EDB5FDAF75C4F9AE02.roa File: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (raw, json) Hash identifier: EtWPVe46Z6YD/Gko0Vzg+XYe7+MF4xJzoOYHJ+2jqX8= Subject key identifier: 1B:AA:89:E8:16:96:C6:4C:71:C5:6D:81:38:E0:54:42:3F:63:C1:62 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0C58 Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/84AC17989B0811EDB5FDAF75C4F9AE02.roa Signing time: Fri 04 Sep 2026 19:38:14 +0000 ROA not before: Fri 04 Sep 2026 19:38:14 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136978 IP address blocks: 103.101.48.0/24 maxlen: 24 103.101.49.0/24 maxlen: 24 2401:ca40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Sep 4 19:38:14 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9b1e26-4d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:70:60:b3:91:4a:0b:97:1c:16:ba:00:5f: 0c:01:9e:7f:16:b2:fa:1a:3b:e5:96:bb:90:77:71: de:a5:2f:54:66:4d:b7:c3:6a:59:06:4c:90:78:2a: 3b:48:81:77:95:9b:cd:f2:c3:68:cb:d3:be:2e:a6: 6c:c3:07:1f:4f:75:f3:1d:55:6e:45:92:28:03:12: d3:f1:a4:05:0e:fd:69:5c:5a:34:07:53:a6:18:cb: 89:07:0f:10:d3:91:0e:66:f8:4d:67:33:eb:f5:c4: 48:7d:fa:cc:9a:4a:36:b5:ed:83:38:43:3b:62:b9: 04:65:cd:d0:09:08:42:df:51:e6:3e:3c:30:0c:05: c9:80:ef:30:e3:b1:9a:0c:94:4d:fb:8c:61:21:1a: 86:0e:ca:09:cf:fc:e9:31:c6:19:d3:37:07:79:d8: d4:7a:72:83:e4:0d:a2:90:ca:f5:e7:67:1e:f4:f9: 99:b4:b4:dc:63:b4:89:f3:f9:f4:0f:58:3b:79:31: 38:67:1d:97:3f:89:e0:2f:34:e2:da:c6:f1:7b:9f: 98:c5:20:f3:cd:85:e5:73:8c:c5:3b:a9:e7:29:7f: 72:bc:f2:d4:0e:74:49:e7:e6:f0:2d:4b:e3:be:e3: 30:4f:23:14:d7:fc:1f:40:e3:20:68:db:c7:aa:84: 4d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AA:89:E8:16:96:C6:4C:71:C5:6D:81:38:E0:54:42:3F:63:C1:62 X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/84AC17989B0811EDB5FDAF75C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.48.0/23 IPv6: 2401:ca40::/32 Signature Algorithm: sha256WithRSAEncryption 27:04:f7:fd:c1:4d:38:ce:1b:e1:a2:b8:ee:70:70:45:a2:f6: dc:3d:1f:91:a1:68:7e:55:18:26:f1:be:09:72:c7:ce:ed:6b: ad:3d:77:a6:6b:68:13:de:ba:11:01:b7:75:ca:63:21:68:3d: c4:03:b4:07:b5:3b:11:50:bd:d4:4b:07:3a:e6:37:27:ee:be: d9:d8:19:e9:fc:7e:b0:67:00:3d:25:e5:5c:70:e1:03:b9:20: ab:d1:77:88:6c:c7:6a:e8:2f:c1:ce:df:03:e7:94:25:3c:12: 8f:9a:20:c0:a4:b8:73:1a:28:a6:03:86:77:ba:8f:41:c6:8b: 01:9c:25:45:37:48:5c:e2:ce:6e:58:b6:19:43:84:d6:9a:d2: 2e:d2:3e:3a:92:9e:6f:08:0c:c9:6c:ee:80:e5:a8:0a:c7:a2: c7:21:8a:41:a2:82:31:75:d5:d8:28:bc:0b:b4:84:46:7b:95: 18:bc:c4:9a:d7:6e:02:48:d3:82:ef:f4:e4:90:d3:f0:52:48: 9d:8c:a2:03:26:5e:74:83:77:73:3d:76:d2:91:1a:95:a2:41: 0e:b1:8d:d7:4a:3c:ff:25:03:bc:11:8c:4b:86:78:ee:5d:9b: 5e:57:71:41:de:f0:22:a4:e3:9b:8e:20:6d:8a:ce:60:20:9b: ee:54:d4:3f -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjYwOTA0MTkzODE0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliMWUyNi00ZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumlwYLORSguXHBa6AF8MAZ5/FrL6GjvllruQd3HepS9UZk23w2pZBkyQeCo7 SIF3lZvN8sNoy9O+LqZswwcfT3XzHVVuRZIoAxLT8aQFDv1pXFo0B1OmGMuJBw8Q 05EOZvhNZzPr9cRIffrMmko2te2DOEM7YrkEZc3QCQhC31HmPjwwDAXJgO8w47Ga DJRN+4xhIRqGDsoJz/zpMcYZ0zcHedjUenKD5A2ikMr152ce9PmZtLTcY7SJ8/n0 D1g7eTE4Zx2XP4ngLzTi2sbxe5+YxSDzzYXlc4zFO6nnKX9yvPLUDnRJ5+bwLUvj vuMwTyMU1/wfQOMgaNvHqoRNCwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBuqiegW lsZMccVtgTjgVEI/Y8FiMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU2RjAvN0Q2N0U0RDQzODRDMTFFQUJFQTJEQjcxQzRGOUFFMDIvODRBQzE3OTg5 QjA4MTFFREI1RkRBRjc1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ2UwMA0EAgACMAcDBQAkAcpAMA0GCSqGSIb3DQEBCwUAA4IBAQAn BPf9wU04zhvhorjucHBFovbcPR+RoWh+VRgm8b4JcsfO7WutPXema2gT3roRAbd1 ymMhaD3EA7QHtTsRUL3USwc65jcn7r7Z2Bnp/H6wZwA9JeVccOEDuSCr0XeIbMdq 6C/Bzt8D55QlPBKPmiDApLhzGiimA4Z3uo9BxosBnCVFN0hc4s5uWLYZQ4TWmtIu 0j46kp5vCAzJbO6A5agKx6LHIYpBooIxddXYKLwLtIRGe5UYvMSa124CSNOC7/Tk kNPwUkidjKIDJl50g3dzPXbSkRqVokEOsY3XSjz/JQO8EYxLhnjuXZteV3FB3vAi pOObjiBtis5gIJvuVNQ/ -----END CERTIFICATE-----Generated at Mon Sep 21 18:51:57 2026 by rpki-client