$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/14820EDE248611EEB600357DC4F9AE02.roa File: 14820EDE248611EEB600357DC4F9AE02.roa (raw, json) Hash identifier: 2hSw6DcNn14LWM6zxsFfMykIxr/Tkx9/0IIyTsXUQ/4= Subject key identifier: 07:48:01:02:27:29:94:02:17:D7:BF:69:40:46:B5:88:84:06:8B:76 Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Certificate serial: 2E2A Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/14820EDE248611EEB600357DC4F9AE02.roa Signing time: Tue 22 Sep 2026 16:22:29 +0000 ROA not before: Tue 22 Sep 2026 16:22:29 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136759 IP address blocks: 103.102.42.0/24 maxlen: 24 103.108.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11818 (0x2e2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Validity Not Before: Sep 22 16:22:29 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab2ab45-e6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d7:5b:10:31:a0:cc:ce:ea:2f:e3:d4:61:7f: b2:c1:c1:05:a1:46:9f:ed:d1:c3:81:d5:bf:e7:cb: dd:0d:21:3a:d1:f0:ee:2c:88:c6:81:36:5c:5b:93: 40:e4:d9:1b:87:29:7d:f4:4c:cc:81:69:d0:4a:e6: 11:e2:22:c3:53:02:eb:1d:b2:42:6e:48:82:3c:0d: c1:01:c5:81:7e:1e:0c:39:02:34:2a:58:c8:ee:8f: 0c:2f:73:57:82:f0:82:0b:04:f3:d3:e3:26:ed:0c: 36:65:05:bf:8a:4e:f4:63:90:86:c2:88:c8:40:10: af:e5:f0:c9:f5:39:61:40:64:3b:a8:99:c6:8e:ef: 46:ab:1d:2d:3b:d3:3f:50:20:36:d9:34:7e:10:ee: 56:60:e4:cd:ec:14:b7:ff:2c:ad:de:0f:bf:9d:75: 67:89:cc:3e:54:46:4c:54:42:04:7b:4c:cc:8f:21: e5:3a:ef:15:a2:66:3e:3f:75:a6:f7:78:29:86:11: 52:fa:91:b6:d5:d1:42:03:93:4a:04:f9:49:f3:a0: 92:80:15:3b:48:a1:dc:89:1d:5b:e1:91:1a:20:cc: f7:2a:8a:60:7a:34:a5:6d:86:c6:97:85:d1:2d:eb: 21:f8:4f:dc:d1:ea:ca:33:fa:82:45:1f:99:e6:f5: b7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:48:01:02:27:29:94:02:17:D7:BF:69:40:46:B5:88:84:06:8B:76 X509v3 Authority Key Identifier: keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/14820EDE248611EEB600357DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.102.42.0/24 103.108.147.0/24 Signature Algorithm: sha256WithRSAEncryption 83:18:56:2f:23:ea:a5:51:cd:6e:ed:90:2e:fa:6c:7d:0b:25: 41:61:3e:cd:29:7e:51:22:47:97:87:7e:25:cc:8c:72:af:8b: 3c:45:22:a5:7b:43:62:21:1f:d5:30:b7:83:15:f7:a5:e1:82: 03:d8:45:96:c9:cc:b5:80:3a:81:a5:27:9b:da:09:20:b3:d6: bb:b6:73:89:e7:64:73:fc:db:06:76:ea:b0:ea:95:c2:38:c0: 37:e5:9b:53:35:c0:57:7f:53:49:8a:fc:88:ac:c7:f0:79:4d: 67:4b:72:43:22:67:d6:6f:a3:e3:65:42:f6:a9:89:3a:05:29: b0:c0:58:2e:f7:29:55:5d:5c:4e:2b:72:02:9d:3d:d1:53:13: 34:11:8f:18:1e:9a:91:98:2f:8b:0e:10:0f:93:c9:d7:89:9d: df:16:e4:74:51:36:79:b2:78:df:4e:da:05:93:23:97:9a:e2: f2:cb:c4:fd:2c:0b:13:32:d2:9d:7f:ca:40:30:f8:40:59:a4: d5:8f:ba:bb:68:bb:6e:48:1a:f1:9c:ef:56:9c:cf:9f:45:bd: 12:b7:08:36:08:f5:61:59:b0:fb:ef:32:c1:00:1f:01:0c:90: 8f:94:c3:e1:ee:8f:2b:2d:85:3d:88:7a:9c:77:71:19:76:3b: da:51:04:11 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICLiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5 MTA5MEY5MjEwHhcNMjYwOTIyMTYyMjI5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIyYWI0NS1lNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiNdbEDGgzM7qL+PUYX+ywcEFoUaf7dHDgdW/58vdDSE60fDuLIjGgTZcW5NA 5Nkbhyl99EzMgWnQSuYR4iLDUwLrHbJCbkiCPA3BAcWBfh4MOQI0KljI7o8ML3NX gvCCCwTz0+Mm7Qw2ZQW/ik70Y5CGwojIQBCv5fDJ9TlhQGQ7qJnGju9Gqx0tO9M/ UCA22TR+EO5WYOTN7BS3/yyt3g+/nXVnicw+VEZMVEIEe0zMjyHlOu8VomY+P3Wm 93gphhFS+pG21dFCA5NKBPlJ86CSgBU7SKHciR1b4ZEaIMz3KopgejSlbYbGl4XR Lesh+E/c0erKM/qCRR+Z5vW3cwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAdIAQIn KZQCF9e/aUBGtYiEBot2MB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4 OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEyRDUvNUY4NjFFRTZCODlBMTFFM0I0QUM3RTc4NTkxMUVBMzIvMTQ4MjBFREUy NDg2MTFFRUI2MDAzNTdEQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ2YqAwQAZ2yTMA0GCSqGSIb3DQEBCwUAA4IBAQCDGFYvI+qlUc1u 7ZAu+mx9CyVBYT7NKX5RIkeXh34lzIxyr4s8RSKle0NiIR/VMLeDFfel4YID2EWW ycy1gDqBpSeb2gkgs9a7tnOJ52Rz/NsGduqw6pXCOMA35ZtTNcBXf1NJivyIrMfw eU1nS3JDImfWb6PjZUL2qYk6BSmwwFgu9ylVXVxOK3ICnT3RUxM0EY8YHpqRmC+L DhAPk8nXiZ3fFuR0UTZ5snjfTtoFkyOXmuLyy8T9LAsTMtKdf8pAMPhAWaTVj7q7 aLtuSBrxnO9WnM+fRb0Stwg2CPVhWbD77zLBAB8BDJCPlMPh7o8rLYU9iHqcd3EZ djvaUQQR -----END CERTIFICATE-----Generated at Tue Sep 22 19:41:17 2026 by rpki-client