$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa File: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (raw, json) Hash identifier: XNmP7Zo2Gu2ysZZkwdUo+plqL0kQKyZ4CkwaD9acTw0= Subject key identifier: 24:8E:C4:54:36:E9:01:3F:2A:01:33:08:3F:13:CB:2A:41:8A:BE:2E Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Certificate serial: 05F6 Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa Signing time: Wed 20 May 2026 23:29:32 +0000 ROA not before: Wed 20 May 2026 23:29:32 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 55482 IP address blocks: 103.153.86.0/24 maxlen: 24 103.153.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 22:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Validity Not Before: May 20 23:29:32 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a0e43dc-6d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:df:32:05:a0:0f:e7:21:1d:2a:ed:88:ac: 6a:88:a1:79:a8:84:19:28:d8:8c:b7:f4:28:07:cf: c7:31:73:22:5e:d2:52:8c:c3:10:a5:e8:b2:1a:a5: fa:d6:f8:4f:c4:8f:35:84:55:43:0d:ef:16:5f:4e: 83:d6:2e:08:32:1e:e0:ac:73:f7:32:68:53:e8:24: 2b:33:3d:ff:9c:18:10:ec:d2:a0:7f:44:b3:94:11: 9a:2b:f4:7b:dd:c4:c6:56:9e:ea:47:fa:c8:ad:43: 91:a6:4a:96:42:d7:83:21:bf:a2:9a:6d:18:67:94: 56:c4:a5:d5:a7:82:50:79:6b:ee:18:b9:7b:cd:33: 5c:fc:99:b9:b2:7a:b9:03:46:8c:07:7a:db:b5:77: c2:b9:b9:00:9f:cc:bd:92:05:86:9f:63:e5:a3:fe: 27:47:17:c2:f3:24:fb:3b:e2:29:9e:f5:fb:09:1c: 84:16:1b:d2:ce:59:92:c4:c4:2a:c5:a9:ae:f8:ff: ca:5a:1a:a9:eb:62:c7:aa:b6:52:c7:79:f0:be:1e: 50:0f:50:bc:40:fb:ab:9a:b7:01:14:83:02:78:29: b7:6a:48:8a:be:30:31:ef:a0:67:ff:0c:62:74:50: 21:6c:6d:1e:58:33:83:e6:f1:3e:6a:00:bb:cf:db: f4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8E:C4:54:36:E9:01:3F:2A:01:33:08:3F:13:CB:2A:41:8A:BE:2E X509v3 Authority Key Identifier: keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.86.0/23 Signature Algorithm: sha256WithRSAEncryption 97:19:7b:c8:91:ae:68:58:de:8d:0f:29:55:76:a7:f2:48:fc: be:b0:b5:9c:df:c6:84:af:de:6f:3f:a9:ca:6e:34:dc:5e:78: 42:93:9d:1f:2a:5b:50:c7:8b:59:10:bf:73:2d:8f:e6:cd:2d: ab:51:ff:b2:8f:df:1e:a4:b8:75:58:2f:ba:ff:53:67:51:a1: da:95:37:da:d5:c7:c5:be:7d:48:82:13:89:0a:74:2f:24:22: aa:3b:b8:91:c2:13:c1:ab:84:f7:f3:a8:14:d5:42:f1:2b:7d: 27:bd:e4:43:71:1d:cd:a4:7a:be:bf:09:82:bb:af:e4:50:f8: 79:4e:57:43:49:21:d5:b6:9a:e0:6a:5f:b2:12:0e:7e:30:64: d0:44:41:dd:89:40:3b:42:61:17:5d:2c:52:28:94:15:49:bb: 9a:1f:35:ca:a1:c8:4c:68:72:65:9b:7d:09:7f:c0:06:4c:d2: e9:6c:b4:06:10:19:84:fa:c5:04:26:4f:2d:8e:09:0c:7a:ab: 3b:dc:10:d2:b1:81:aa:47:f7:65:06:4b:3c:4e:51:cf:18:e0: 74:8b:16:bb:9e:17:1e:bd:58:aa:38:34:ba:56:2c:b5:90:8d: 7f:0a:fa:e4:9c:f2:e9:6f:85:9d:46:a0:54:30:df:a2:0a:d2: f1:a8:03:5d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MDMxMTAvBgNVBAUTKDQyQTk3OEFEODNERDVFRDI5QTRFNUREQjYxQjU2RjEz MTdBNUE1QTQwHhcNMjYwNTIwMjMyOTMyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTBlNDNkYy02ZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzTfMgWgD+chHSrtiKxqiKF5qIQZKNiMt/QoB8/HMXMiXtJSjMMQpeiyGqX6 1vhPxI81hFVDDe8WX06D1i4IMh7grHP3MmhT6CQrMz3/nBgQ7NKgf0SzlBGaK/R7 3cTGVp7qR/rIrUORpkqWQteDIb+imm0YZ5RWxKXVp4JQeWvuGLl7zTNc/Jm5snq5 A0aMB3rbtXfCubkAn8y9kgWGn2Plo/4nRxfC8yT7O+IpnvX7CRyEFhvSzlmSxMQq xamu+P/KWhqp62LHqrZSx3nwvh5QD1C8QPurmrcBFIMCeCm3akiKvjAx76Bn/wxi dFAhbG0eWDOD5vE+agC7z9v0YwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCSOxFQ2 6QE/KgEzCD8TyypBir4uMB8GA1UdIwQYMBaAFEKpeK2D3V7Smk5d22G1bxMXpaWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgwMy84MEYwMzRCRUY5 RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0S2FUbDNiWWJWdkV4ZWxw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxbDRyWVBkWHRLYVRsM2JZYlZ2RXhlbHBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ4MDMvODBGMDM0QkVGOUUxMTFFQkEzMkNFMjFCQzRGOUFFMDIvMkIxQjhDOTJG OUU1MTFFQkJCOUI1RDIyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5lWMA0GCSqGSIb3DQEBCwUAA4IBAQCXGXvIka5oWN6NDylVdqfy SPy+sLWc38aEr95vP6nKbjTcXnhCk50fKltQx4tZEL9zLY/mzS2rUf+yj98epLh1 WC+6/1NnUaHalTfa1cfFvn1IghOJCnQvJCKqO7iRwhPBq4T386gU1ULxK30nveRD cR3NpHq+vwmCu6/kUPh5TldDSSHVtprgal+yEg5+MGTQREHdiUA7QmEXXSxSKJQV SbuaHzXKochMaHJlm30Jf8AGTNLpbLQGEBmE+sUEJk8tjgkMeqs73BDSsYGqR/dl Bks8TlHPGOB0ixa7nhcevViqODS6Viy1kI1/CvrknPLpb4WdRqBUMN+iCtLxqANd -----END CERTIFICATE-----Generated at Sat Jun 13 11:20:21 2026 by rpki-client