$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/DA33C49E08E211ED8B10721AC4F9AE02.roa File: DA33C49E08E211ED8B10721AC4F9AE02.roa (raw, json) Hash identifier: cEF0+KBQMMmlJMA+Tf/hNb8qZJqNbMTGbu8OWR19C64= Subject key identifier: B1:FD:68:29:E4:50:7D:21:F0:CF:29:42:D2:0F:4F:71:8B:72:43:25 Certificate issuer: /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Certificate serial: 0786 Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/DA33C49E08E211ED8B10721AC4F9AE02.roa Signing time: Fri 18 Sep 2026 21:42:57 +0000 ROA not before: Fri 18 Sep 2026 21:42:57 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 141772 IP address blocks: 103.120.176.0/24 maxlen: 24 103.120.177.0/24 maxlen: 24 103.120.178.0/24 maxlen: 24 103.120.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1926 (0x786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73FD, serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Validity Not Before: Sep 18 21:42:57 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aadb061-3530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9c:02:ec:0e:9e:2c:ee:e1:c8:83:d8:18:5f: b9:f9:aa:77:af:0d:17:a3:b9:4a:7e:45:bb:02:ad: f9:9a:d6:12:ee:a3:8d:9e:6f:8e:5e:d5:4d:2d:4f: fd:fe:55:d9:61:e7:e8:fc:53:ba:45:e5:d6:cc:2a: 32:ce:48:b3:a5:94:31:fa:e7:9d:0b:e7:0b:09:2b: fb:7d:43:63:ab:92:1d:02:14:b5:5d:6c:60:e0:42: f1:eb:1a:10:d1:2f:74:4f:cb:53:af:4e:ad:7f:d6: d2:50:2e:4c:cb:23:2a:fd:00:13:d8:a2:08:f6:f5: bf:29:20:4a:91:48:75:36:bc:76:86:72:6a:be:77: cd:d4:6f:b6:87:ca:3a:02:a9:03:9f:3f:d2:9d:bd: c9:dd:15:3b:18:f4:11:bf:a0:77:b9:65:4c:98:46: 4c:a2:0e:57:a0:41:4d:ed:d0:e2:7d:9b:08:67:18: 0d:86:e4:23:a7:12:f1:8b:66:2e:6f:66:69:d9:55: f4:0e:24:54:8e:ec:55:d1:a5:50:49:fe:9e:ab:69: 49:b3:f2:26:1f:0b:06:46:6e:81:2e:f1:f5:69:d1: 29:1a:cc:c4:04:94:cc:82:0c:1a:6c:0f:e9:08:68: 27:dc:6a:ac:e8:88:e7:c1:f0:84:f1:30:c3:a6:45: 7f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FD:68:29:E4:50:7D:21:F0:CF:29:42:D2:0F:4F:71:8B:72:43:25 X509v3 Authority Key Identifier: keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/DA33C49E08E211ED8B10721AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.176.0/22 Signature Algorithm: sha256WithRSAEncryption 71:70:b0:01:b5:da:aa:3a:ca:64:61:25:05:e2:35:33:41:9b: ce:e6:c7:c5:cf:2c:ed:06:18:7c:76:d9:90:e1:2b:96:e1:b6: df:58:12:6f:14:85:cb:ee:ff:8b:07:36:0f:ba:33:55:aa:b3: fd:f8:be:39:1f:23:b6:02:aa:b6:5c:ff:ef:80:96:ea:63:83: 2c:ee:8d:a9:18:5a:6b:c7:0b:6f:3e:b0:b1:c1:9d:6c:50:0f: 54:bf:17:0e:01:2d:ba:b8:95:a4:29:53:28:90:81:69:14:5f: 9c:9e:e8:b8:4f:db:94:54:b3:bd:1e:a4:a1:12:b2:01:1a:ca: 3d:15:f3:d1:d1:7e:2a:05:86:3b:f0:62:1a:30:3f:96:d4:6c: 11:ff:11:3a:84:2e:b0:ea:d9:b1:6e:3a:db:31:3b:c7:e6:66: c7:d4:be:2f:24:bc:aa:5c:cd:6f:14:f7:db:79:b2:85:d3:1f: 1c:9b:c5:6a:2a:dc:7d:14:52:4c:68:49:cb:33:e2:71:fb:8e: d9:25:c2:79:02:4d:b0:50:40:ee:4b:cb:59:d6:ea:be:04:1f: 62:10:8c:01:6d:52:fd:69:1b:9a:11:72:4c:27:c7:15:6b:ed: c0:f4:15:8d:71:61:71:44:ef:61:90:38:81:cf:df:05:74:84: 22:25:e4:04 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczRkQxMTAvBgNVBAUTKEIwNEJCQTFGMThDMEU3MDgzMUYzNTRGNzQ1NUVFMTVE MzIyOTQxQjMwHhcNMjYwOTE4MjE0MjU3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFkYjA2MS0zNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pwC7A6eLO7hyIPYGF+5+ap3rw0Xo7lKfkW7Aq35mtYS7qONnm+OXtVNLU/9 /lXZYefo/FO6ReXWzCoyzkizpZQx+uedC+cLCSv7fUNjq5IdAhS1XWxg4ELx6xoQ 0S90T8tTr06tf9bSUC5MyyMq/QAT2KII9vW/KSBKkUh1Nrx2hnJqvnfN1G+2h8o6 AqkDnz/Snb3J3RU7GPQRv6B3uWVMmEZMog5XoEFN7dDifZsIZxgNhuQjpxLxi2Yu b2Zp2VX0DiRUjuxV0aVQSf6eq2lJs/ImHwsGRm6BLvH1adEpGszEBJTMggwabA/p CGgn3Gqs6IjnwfCE8TDDpkV/ZQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLH9aCnk UH0h8M8pQtIPT3GLckMlMB8GA1UdIwQYMBaAFLBLuh8YwOcIMfNU90Ve4V0yKUGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNGRC9EQ0IyNUI5NjdC NDMxMUVCODM1MzM2NjZDNEY5QUUwMi9zRXU2SHhqQTV3Z3g4MVQzUlY3aFhUSXBR Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdTZIeGpBNXdneDgxVDNSVjdoWFRJcFFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDczRkQvRENCMjVCOTY3QjQzMTFFQjgzNTMzNjY2QzRGOUFFMDIvREEzM0M0OUUw OEUyMTFFRDhCMTA3MjFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3iwMA0GCSqGSIb3DQEBCwUAA4IBAQBxcLABtdqqOspkYSUF4jUz QZvO5sfFzyztBhh8dtmQ4SuW4bbfWBJvFIXL7v+LBzYPujNVqrP9+L45HyO2Aqq2 XP/vgJbqY4Ms7o2pGFprxwtvPrCxwZ1sUA9UvxcOAS26uJWkKVMokIFpFF+cnui4 T9uUVLO9HqShErIBGso9FfPR0X4qBYY78GIaMD+W1GwR/xE6hC6w6tmxbjrbMTvH 5mbH1L4vJLyqXM1vFPfbebKF0x8cm8VqKtx9FFJMaEnLM+Jx+47ZJcJ5Ak2wUEDu S8tZ1uq+BB9iEIwBbVL9aRuaEXJMJ8cVa+3A9BWNcWFxRO9hkDiBz98FdIQiJeQE -----END CERTIFICATE-----Generated at Wed Sep 23 20:24:50 2026 by rpki-client