$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/1D30B9BEA7A411F192B38F0D4C11F970.roa File: 1D30B9BEA7A411F192B38F0D4C11F970.roa (raw, json) Hash identifier: S2r3R58U9HZx8Oj62ub3ESAs357F2eSsSbNvAZ9A3m8= Subject key identifier: 3B:A9:00:2D:B2:15:B7:62:52:03:1D:08:98:70:D5:58:66:97:B6:EF Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 046B Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/1D30B9BEA7A411F192B38F0D4C11F970.roa Signing time: Thu 03 Sep 2026 14:40:29 +0000 ROA not before: Thu 03 Sep 2026 14:40:29 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137995 IP address blocks: 103.131.176.0/22 maxlen: 24 2403:cec0::/32 maxlen: 32 2403:cec0::/40 maxlen: 48 2403:cec0:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1131 (0x46b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: Sep 3 14:40:29 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a9986dc-03b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:4b:49:e6:95:c7:7e:f1:b7:a5:6e:34:80: 86:b8:6a:56:d8:50:bc:ec:5f:4d:26:d7:41:aa:10: 33:60:92:3d:e9:0b:50:7a:12:b5:d2:77:19:13:07: 07:5d:aa:4d:31:c3:24:89:06:f3:2b:a3:91:b3:f8: cd:11:78:33:29:ad:06:75:40:d2:10:34:0e:5e:d6: 44:00:c9:01:09:b9:54:f2:d7:5e:ef:34:6d:91:b2: ef:7c:6d:36:93:22:66:e1:c2:75:fe:a4:b1:35:15: d5:6d:4a:28:bb:8d:1b:fd:95:88:d1:34:b1:50:27: ac:28:4f:3b:2a:34:3a:97:4d:21:6f:bd:3a:79:9a: 6a:df:9e:5d:da:35:ef:40:86:1c:f8:2b:8d:52:06: d1:c6:9a:10:3c:37:7a:89:b4:12:85:6f:b0:ac:1d: 5f:0c:61:5b:45:7e:0f:b1:3c:3d:01:26:06:01:eb: 91:bc:80:30:af:6c:56:dc:c1:25:88:01:22:0d:f6: 08:5b:54:6e:02:bd:60:b0:20:2e:42:bd:1e:f8:db: 56:4a:ef:cc:a7:62:09:33:7d:7e:07:ec:55:4c:61: 85:4d:f1:9a:73:22:20:05:0e:8a:96:5c:83:30:34: 27:48:71:1c:a7:52:38:b4:cd:29:f1:93:6f:eb:65: 2d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A9:00:2D:B2:15:B7:62:52:03:1D:08:98:70:D5:58:66:97:B6:EF X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/1D30B9BEA7A411F192B38F0D4C11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.131.176.0/22 IPv6: 2403:cec0::/32 Signature Algorithm: sha256WithRSAEncryption 17:f8:d2:67:9d:f5:91:6d:07:d0:4e:1b:20:4f:75:eb:6a:9a: 9d:c1:77:f7:7a:aa:d7:95:74:f7:19:29:4a:5d:06:58:3d:1c: b0:19:a5:70:14:48:30:04:b3:56:97:dc:d3:ac:10:60:0c:12: 37:c6:51:06:a3:cf:6f:72:2b:b3:aa:62:8e:a6:ba:57:bb:f5: 04:84:0d:39:3e:b9:20:d3:f7:43:e5:90:9e:5d:4a:74:33:50: 14:27:49:de:46:f6:a1:89:ed:22:08:0e:10:c8:4e:f0:51:e3: e5:6c:72:ac:de:70:9b:e9:de:e7:23:fc:77:b3:49:8d:27:7a: 4b:31:c0:8e:eb:97:59:6c:fe:3d:f4:28:26:b9:69:c8:4d:de: d1:e4:bb:8e:2c:e4:39:15:fd:6b:6e:ab:25:bd:42:c2:78:db: 43:b8:52:bb:e8:16:2e:41:39:b3:38:17:03:cd:fb:f7:c2:8f: 66:64:02:dd:b5:c2:76:90:ae:38:df:0b:23:bf:c8:b0:73:67: 35:85:14:53:bf:a9:68:4e:e9:65:f4:1d:67:9b:73:21:2f:a5: cc:dc:d0:e5:91:e2:31:52:e0:01:ee:8e:c7:0e:62:3b:e8:75: 5d:5b:55:be:0e:03:4e:74:af:00:57:19:4f:5e:80:00:25:bd: 75:a3:1f:00 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjYwOTAzMTQ0MDI5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5ODZkYy0wM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5tLSeaVx37xt6VuNICGuGpW2FC87F9NJtdBqhAzYJI96QtQehK10ncZEwcH XapNMcMkiQbzK6ORs/jNEXgzKa0GdUDSEDQOXtZEAMkBCblU8tde7zRtkbLvfG02 kyJm4cJ1/qSxNRXVbUoou40b/ZWI0TSxUCesKE87KjQ6l00hb706eZpq355d2jXv QIYc+CuNUgbRxpoQPDd6ibQShW+wrB1fDGFbRX4PsTw9ASYGAeuRvIAwr2xW3MEl iAEiDfYIW1RuAr1gsCAuQr0e+NtWSu/Mp2IJM31+B+xVTGGFTfGacyIgBQ6KllyD MDQnSHEcp1I4tM0p8ZNv62UtEwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDupAC2y FbdiUgMdCJhw1Vhml7bvMB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM5QUUvRjdFNEEyQUVCMkY0MTFFQzlCRUQzNzUzQzRGOUFFMDIvMUQzMEI5QkVB N0E0MTFGMTkyQjM4RjBENEMxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4OwMA0EAgACMAcDBQAkA87AMA0GCSqGSIb3DQEBCwUAA4IBAQAX +NJnnfWRbQfQThsgT3XrapqdwXf3eqrXlXT3GSlKXQZYPRywGaVwFEgwBLNWl9zT rBBgDBI3xlEGo89vciuzqmKOprpXu/UEhA05Prkg0/dD5ZCeXUp0M1AUJ0neRvah ie0iCA4QyE7wUePlbHKs3nCb6d7nI/x3s0mNJ3pLMcCO65dZbP499CgmuWnITd7R 5LuOLOQ5Ff1rbqslvULCeNtDuFK76BYuQTmzOBcDzfv3wo9mZALdtcJ2kK443wsj v8iwc2c1hRRTv6loTull9B1nm3MhL6XM3NDlkeIxUuAB7o7HDmI76HVdW1W+DgNO dK8AVxlPXoAAJb11ox8A -----END CERTIFICATE-----Generated at Mon Sep 21 12:38:32 2026 by rpki-client