$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa File: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (raw, json) Hash identifier: xInk+uPvf4aq3ONL1LwMHsDb2vf3A3vC4hgRAklJPAc= Subject key identifier: 0C:0F:11:0D:55:54:26:4E:C5:56:F8:3A:6B:8B:AE:00:7A:90:CE:55 Certificate issuer: /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Certificate serial: 0604 Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa Signing time: Fri 14 Aug 2026 23:43:51 +0000 ROA not before: Fri 14 Aug 2026 23:43:50 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 146957 IP address blocks: 103.172.44.0/23 maxlen: 23 103.172.44.0/24 maxlen: 24 103.172.45.0/24 maxlen: 24 2001:df7:5f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Validity Not Before: Aug 14 23:43:50 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7fa836-8790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:66:ef:c1:c6:a3:8b:fa:fc:b3:a1:94:8b: 8d:1a:ab:ba:ca:50:6f:a1:21:3d:ab:a6:db:21:2a: b3:0e:29:0f:e1:3a:bf:f5:ff:c6:28:95:e8:1d:d2: d7:51:07:e5:cc:3d:56:62:09:4d:db:ba:d7:23:e9: 9f:00:11:0e:30:d9:80:7b:2b:ef:b5:35:f6:27:8f: 06:94:e8:f1:2d:8a:38:a5:39:d4:7c:9f:69:51:ca: 8e:fd:fc:e7:19:ed:84:86:9d:8b:51:43:63:f2:b0: f3:af:77:19:af:78:91:4d:bd:64:e9:9e:3d:be:bc: f0:71:72:33:e4:50:13:58:6d:14:3f:21:ee:de:7e: 71:0c:63:3a:02:b4:e1:3d:8b:66:e6:5a:84:34:0e: f7:e0:f6:10:ff:d9:ac:87:d1:cf:ed:0b:85:5d:82: d1:49:55:7d:0b:c3:b3:fa:82:18:0f:dd:3d:af:63: 9f:ca:ca:93:4d:cb:4a:a3:4a:d3:52:fa:da:13:70: d3:30:03:ba:f5:0d:70:e0:92:f5:0d:6a:9a:64:5c: b9:46:21:37:36:5c:6f:60:0c:2b:d9:72:f7:12:c4: fe:49:8a:b6:82:a6:de:e9:f9:d3:11:6c:27:eb:d2: 54:ec:cf:69:e0:a0:1a:0e:9f:4d:d0:bb:22:9c:14: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0F:11:0D:55:54:26:4E:C5:56:F8:3A:6B:8B:AE:00:7A:90:CE:55 X509v3 Authority Key Identifier: keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.44.0/23 IPv6: 2001:df7:5f80::/48 Signature Algorithm: sha256WithRSAEncryption 21:b8:68:6a:3f:07:02:e3:8d:8b:b3:f9:e0:c1:df:9e:a6:8d: e8:5f:a6:b3:2e:41:36:12:d7:00:19:82:6c:d6:56:db:09:d8: 75:0f:aa:ad:94:c3:42:7f:9e:2a:93:ff:09:06:70:39:6a:84: 35:b4:9d:52:32:ee:51:c9:23:70:67:50:7e:e1:8b:c9:97:7d: 79:39:85:18:b0:c4:0d:f6:61:b6:c3:2f:73:e2:87:a7:cf:bd: 00:df:36:3a:2d:a0:63:ec:6b:03:8e:b3:af:58:c1:54:80:ca: 0a:b2:2f:e0:d0:d2:aa:b1:a3:af:57:ed:0c:f6:de:f7:9b:a7: 39:a9:50:38:28:2a:2c:4c:49:70:fc:8d:0c:2b:1c:69:dc:a9: 7e:63:04:a0:da:85:ed:3d:04:85:31:7d:ea:8b:92:17:77:83: 92:bb:cd:c8:06:c5:a2:e2:cd:7e:76:5f:88:e1:6f:fa:e3:c2: 0f:90:d0:83:8d:7c:ab:71:ab:84:be:93:20:7c:12:9d:39:bf: 4e:38:d0:a4:7b:f6:82:a3:2a:24:db:b1:8f:75:ac:b1:0f:5f: 98:b4:5c:ce:10:da:17:ad:03:6c:a3:14:1a:40:2f:c8:df:c1: 84:8f:9f:68:1f:06:ed:22:90:29:69:3e:36:15:e6:96:99:22: 8f:32:5c:c5 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQUMxMTAvBgNVBAUTKEQxNTJERjcyRTVENkMxQzZGRTQyQjY0MjM3N0MzQjA4 ODEyODZERTcwHhcNMjYwODE0MjM0MzUwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdmYTgzNi04NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnchm78HGo4v6/LOhlIuNGqu6ylBvoSE9q6bbISqzDikP4Tq/9f/GKJXoHdLX UQflzD1WYglN27rXI+mfABEOMNmAeyvvtTX2J48GlOjxLYo4pTnUfJ9pUcqO/fzn Ge2Ehp2LUUNj8rDzr3cZr3iRTb1k6Z49vrzwcXIz5FATWG0UPyHu3n5xDGM6ArTh PYtm5lqENA734PYQ/9msh9HP7QuFXYLRSVV9C8Oz+oIYD909r2OfysqTTctKo0rT UvraE3DTMAO69Q1w4JL1DWqaZFy5RiE3NlxvYAwr2XL3EsT+SYq2gqbe6fnTEWwn 69JU7M9p4KAaDp9N0LsinBQCcwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAwPEQ1V VCZOxVb4OmuLrgB6kM5VMB8GA1UdIwQYMBaAFNFS33Ll1sHG/kK2Qjd8OwiBKG3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZBQy8zQ0Y3OThFMDA0 OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3djYi1RclpDTjN3N0NJRW9i ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWTGZjdVhXd2NiLVFyWkNOM3c3Q0lFb2JlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBGQUMvM0NGNzk4RTAwNDk3MTFFQ0E1M0Q0QjNDQzRGOUFFMDIvNEMyRTdBM0Mw NDlCMTFFQ0FDN0U1RDBEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6wsMA8EAgACMAkDBwAgAQ33X4AwDQYJKoZIhvcNAQELBQADggEB ACG4aGo/BwLjjYuz+eDB356mjehfprMuQTYS1wAZgmzWVtsJ2HUPqq2Uw0J/niqT /wkGcDlqhDW0nVIy7lHJI3BnUH7hi8mXfXk5hRiwxA32YbbDL3Pih6fPvQDfNjot oGPsawOOs69YwVSAygqyL+DQ0qqxo69X7Qz23vebpzmpUDgoKixMSXD8jQwrHGnc qX5jBKDahe09BIUxfeqLkhd3g5K7zcgGxaLizX52X4jhb/rjwg+Q0IONfKtxq4S+ kyB8Ep05v0440KR79oKjKiTbsY91rLEPX5i0XM4Q2hetA2yjFBpAL8jfwYSPn2gf Bu0ikClpPjYV5paZIo8yXMU= -----END CERTIFICATE-----Generated at Sun Sep 20 18:08:46 2026 by rpki-client