$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa File: 3046CBE2C4E811EAB607D255C4F9AE02.roa (raw, json) Hash identifier: Pj+YSJz05e5/XvtCulJkxzG8FOEXuhs7JqRBkYESckI= Subject key identifier: 35:18:7F:65:0E:57:4A:33:64:04:FC:80:4F:65:AB:70:74:EB:FE:98 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 0964 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa Signing time: Wed 02 Sep 2026 20:40:53 +0000 ROA not before: Wed 02 Sep 2026 20:40:53 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 140905 IP address blocks: 103.153.54.0/24 maxlen: 24 2001:df4:3480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2404 (0x964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Sep 2 20:40:53 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9889d5-70d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:84:51:ab:59:58:8d:b4:68:69:1d:30:a8:1c: 9f:0b:6d:2f:26:6f:a6:1a:9a:ce:ec:06:07:76:f2: c3:98:f6:3a:3c:dd:61:37:7c:04:03:02:f7:9d:5f: 46:05:d6:5c:98:76:8a:d0:96:ce:68:d7:31:27:d6: dc:5a:99:10:08:8c:ff:d6:90:05:dc:f5:6b:f4:53: a8:7b:6e:7e:fd:1f:5c:a0:a4:37:75:61:6f:18:ee: d5:db:49:f1:48:b9:75:2a:34:39:7a:31:02:41:d0: 34:01:17:7c:3e:43:be:df:83:60:cf:57:10:d0:f9: 34:f8:d3:12:74:0e:5d:ee:f5:7b:55:e9:e7:88:00: 90:7a:e3:6f:5d:2f:4e:5b:ad:b0:27:e5:be:4d:0f: d8:9c:f7:38:9e:bd:04:2f:18:90:7b:40:e9:f0:a2: 6b:92:f4:96:13:65:0b:65:5c:7d:5c:36:2b:27:7b: 5d:98:53:54:31:35:0f:bd:6f:84:23:c6:75:88:2e: a9:5d:43:3d:bd:b3:f8:79:36:c4:6d:3b:c6:ae:21: a9:e8:e9:1a:3c:1e:56:18:d4:38:71:4a:bf:0b:63: e3:17:a6:2f:eb:96:1a:81:0a:e2:47:42:d5:ed:a7: d7:0c:4a:65:c5:e8:90:8c:e9:5f:8a:b7:f9:25:18: d8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:18:7F:65:0E:57:4A:33:64:04:FC:80:4F:65:AB:70:74:EB:FE:98 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.54.0/24 IPv6: 2001:df4:3480::/48 Signature Algorithm: sha256WithRSAEncryption a9:4a:be:f5:24:d2:5e:3a:a4:e9:fa:d3:a0:3a:b4:c4:bd:69: 39:15:5a:5b:45:89:44:6a:e6:67:6d:ea:35:97:d0:19:d3:09: 88:f5:26:03:87:db:83:a4:b2:44:2a:36:f6:9f:cb:e1:17:a1: b2:f1:86:f7:2b:73:00:b6:e7:de:09:88:cb:a3:3f:66:ca:72: 02:1c:1b:e1:8d:b0:92:4f:d4:7b:7d:eb:c5:70:de:ab:50:a8: 36:d3:05:26:18:8e:28:81:ac:08:2e:52:61:93:03:9a:76:23: 86:0f:df:ae:b0:59:38:b3:dc:81:4e:b5:3d:b0:e5:e6:4e:d3: 97:a5:f0:aa:04:45:b8:a5:e8:8d:c2:e8:67:e9:c4:9b:aa:96: 21:71:08:4d:55:8b:ce:1e:ad:1b:5f:fe:cc:c4:09:7c:6f:08: 5f:f0:3d:10:50:36:8f:48:c1:2b:fe:e2:b3:92:43:42:3f:05: 05:f8:a4:49:ad:d8:21:f8:09:5a:fc:60:2b:f1:d2:2f:6c:cc: ed:7a:8e:f2:20:c3:6e:14:ae:56:81:27:50:21:60:db:46:03: b6:6e:93:88:2b:4e:66:5d:ca:09:92:c3:be:6d:26:86:55:db: 15:1e:af:64:da:5d:f2:57:82:9b:f3:e6:76:44:43:20:67:93: 4b:38:d4:d5 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjYwOTAyMjA0MDUzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ODlkNS03MGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYRRq1lYjbRoaR0wqByfC20vJm+mGprO7AYHdvLDmPY6PN1hN3wEAwL3nV9G BdZcmHaK0JbOaNcxJ9bcWpkQCIz/1pAF3PVr9FOoe25+/R9coKQ3dWFvGO7V20nx SLl1KjQ5ejECQdA0ARd8PkO+34Ngz1cQ0Pk0+NMSdA5d7vV7VenniACQeuNvXS9O W62wJ+W+TQ/YnPc4nr0ELxiQe0Dp8KJrkvSWE2ULZVx9XDYrJ3tdmFNUMTUPvW+E I8Z1iC6pXUM9vbP4eTbEbTvGriGp6OkaPB5WGNQ4cUq/C2PjF6Yv65YagQriR0LV 7afXDEplxeiQjOlfirf5JRjYwwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDUYf2UO V0ozZAT8gE9lq3B06/6YMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkE1MjEvQzlGQUU3Q0FDNEU2MTFFQUE2NDU0RjU0QzRGOUFFMDIvMzA0NkNCRTJD NEU4MTFFQUI2MDdEMjU1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ5k2MA8EAgACMAkDBwAgAQ30NIAwDQYJKoZIhvcNAQELBQADggEB AKlKvvUk0l46pOn606A6tMS9aTkVWltFiURq5mdt6jWX0BnTCYj1JgOH24OkskQq Nvafy+EXobLxhvcrcwC2594JiMujP2bKcgIcG+GNsJJP1Ht968Vw3qtQqDbTBSYY jiiBrAguUmGTA5p2I4YP366wWTiz3IFOtT2w5eZO05el8KoERbil6I3C6GfpxJuq liFxCE1Vi84erRtf/szECXxvCF/wPRBQNo9IwSv+4rOSQ0I/BQX4pEmt2CH4CVr8 YCvx0i9szO16jvIgw24UrlaBJ1AhYNtGA7Zuk4grTmZdygmSw75tJoZV2xUer2Ta XfJXgpvz5nZEQyBnk0s41NU= -----END CERTIFICATE-----Generated at Sun Sep 20 11:01:12 2026 by rpki-client