$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa File: A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa (raw, json) Hash identifier: CNBlKRGQG6AMZt4K1SNsAWQxw9T+WIEHof1S1C1ZbKE= Subject key identifier: 6F:A2:93:22:CA:43:9D:34:11:14:F1:34:30:64:5E:1B:FD:CE:94:E4 Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Certificate serial: 0EF7 Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:38:16 +0000 ROA not before: Fri 12 Sep 2025 17:57:15 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139300 IP address blocks: 103.141.2.0/23 maxlen: 23 103.141.2.0/24 maxlen: 24 103.141.3.0/24 maxlen: 24 2001:df0:e280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3831 (0xef7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7773, serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Validity Not Before: Sep 12 17:57:15 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a44f58-a435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:61:fb:99:4f:73:cf:df:d7:b0:d7:8d:82: cd:70:54:e1:8b:f6:3f:d3:25:4b:e5:9f:e4:23:ae: de:68:a2:38:c9:fa:13:5a:99:f5:be:36:dd:8c:2c: f1:13:15:8b:b4:60:a1:2e:f9:94:f5:16:70:53:21: c2:9b:3f:af:9d:6c:61:4a:2a:78:87:80:00:17:c6: eb:25:0c:95:14:9c:f9:7d:c6:b8:e5:77:9c:5e:7b: 99:eb:f9:87:fc:10:a4:06:00:1f:4c:1f:a0:92:15: 6f:35:9b:55:6f:e8:e5:ee:c9:bc:37:46:e8:cb:0a: 31:c4:23:66:0d:64:ac:ad:d6:c1:2e:0f:c5:25:d8: cc:04:05:6c:15:ce:bc:55:2a:91:c4:4b:3e:3d:e0: 65:a1:83:79:32:4a:a6:41:a1:9f:91:03:e3:20:18: c4:5e:ee:d0:7c:6b:f9:a3:fe:c5:fd:07:35:97:1f: b7:62:7f:c9:ed:43:13:ce:6a:e3:53:88:8e:80:86: ae:d5:34:82:ac:49:1f:3c:2c:98:8b:c5:78:58:d6: e9:03:71:9a:99:f5:ab:40:2e:f0:79:0c:a5:3f:27: 8b:50:04:9e:fb:07:7d:62:f3:86:a7:6b:34:94:3c: c5:c4:a1:16:52:1b:b1:85:95:1e:07:ac:95:14:5d: 29:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A2:93:22:CA:43:9D:34:11:14:F1:34:30:64:5E:1B:FD:CE:94:E4 X509v3 Authority Key Identifier: keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.141.2.0/23 IPv6: 2001:df0:e280::/48 Signature Algorithm: sha256WithRSAEncryption 5a:91:9a:03:76:a7:75:63:69:66:b5:aa:b4:45:f8:db:81:f7: 80:95:79:90:71:64:ca:02:37:89:27:67:df:61:e3:1a:25:0f: 4f:e4:f6:45:f2:e0:1c:d6:11:d4:c5:f3:08:c7:bb:d3:42:2a: 72:b3:b0:d1:b6:de:85:ce:10:d7:44:76:11:81:18:4e:43:fe: 56:ec:3c:28:e2:54:da:1e:59:da:63:f9:02:1e:76:d5:50:b4: e4:6b:33:4c:b9:a4:e8:d5:e9:5e:97:23:1b:2f:f1:eb:ec:99: d1:06:7a:3c:31:f7:ba:b2:d8:79:79:0a:02:5e:e0:2f:66:8a: 30:04:cb:e6:93:47:0a:a1:93:a9:be:c3:95:67:72:fa:43:d3: 6d:8e:12:db:4f:44:8d:68:8e:3d:05:be:06:d8:1c:f2:c2:11: 41:14:20:17:51:dc:4d:e1:9a:c3:2e:8d:03:06:78:3b:07:78: fd:81:dd:c3:73:ed:e1:35:36:ed:62:88:b3:e6:86:29:5a:da: d0:79:16:98:43:af:63:6a:79:92:72:cc:c0:8d:c6:97:10:e4: 50:3f:b5:76:66:d5:80:2f:b9:56:98:8c:e3:08:76:69:ef:fd: a1:6b:9d:52:3a:f7:61:eb:0b:56:18:b5:c0:4f:fa:15:b6:3d: a9:4c:89:a2 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3NzMxMTAvBgNVBAUTKEQ5MDBEREYyNEEyNzYyMkJGOTY0Mzc1N0VEQkNBRkZB RUUzMjFDMzcwHhcNMjUwOTEyMTc1NzE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGY1OC1hNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh8ph+5lPc8/f17DXjYLNcFThi/Y/0yVL5Z/kI67eaKI4yfoTWpn1vjbdjCzx ExWLtGChLvmU9RZwUyHCmz+vnWxhSip4h4AAF8brJQyVFJz5fca45XecXnuZ6/mH /BCkBgAfTB+gkhVvNZtVb+jl7sm8N0boywoxxCNmDWSsrdbBLg/FJdjMBAVsFc68 VSqRxEs+PeBloYN5MkqmQaGfkQPjIBjEXu7QfGv5o/7F/Qc1lx+3Yn/J7UMTzmrj U4iOgIau1TSCrEkfPCyYi8V4WNbpA3GamfWrQC7weQylPyeLUASe+wd9YvOGp2s0 lDzFxKEWUhuxhZUeB6yVFF0pKwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFG+ikyLK Q500ERTxNDBkXhv9zpTkMB8GA1UdIwQYMBaAFNkA3fJKJ2Ir+WQ3V+28r/ruMhw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc3My9BRDMyMjM3Q0Ey RTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllpdjVaRGRYN2J5di11NHlI RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRRGQ4a29uWWl2NVpEZFg3Ynl2LXU0eUhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzc3NzMvQUQzMjIzN0NBMkU4MTFFOUJBRTc4RDQ3QzRGOUFFMDIvQTQ3RDJFQzg0 QzFFMTFFRUJBOENEQjRCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ40CMA8EAgACMAkDBwAgAQ3w4oAwDQYJKoZIhvcNAQELBQADggEB AFqRmgN2p3VjaWa1qrRF+NuB94CVeZBxZMoCN4knZ99h4xolD0/k9kXy4BzWEdTF 8wjHu9NCKnKzsNG23oXOENdEdhGBGE5D/lbsPCjiVNoeWdpj+QIedtVQtORrM0y5 pOjV6V6XIxsv8evsmdEGejwx97qy2Hl5CgJe4C9mijAEy+aTRwqhk6m+w5VncvpD 022OEttPRI1ojj0FvgbYHPLCEUEUIBdR3E3hmsMujQMGeDsHeP2B3cNz7eE1Nu1i iLPmhila2tB5FphDr2NqeZJyzMCNxpcQ5FA/tXZm1YAvuVaYjOMIdmnv/aFrnVI6 92HrC1YYtcBP+hW2PalMiaI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:03 2026 by rpki-client