$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/2C9C69108A9A11F1AFC3D80E4E11F970.roa File: 2C9C69108A9A11F1AFC3D80E4E11F970.roa (raw, json) Hash identifier: uSqkn8LIl8mlBYrH3ffPd4fErtRj9+veTGhqeaUcpmc= Subject key identifier: 3B:EA:E4:63:02:C9:96:FF:34:BE:A0:F2:B7:EB:47:D7:EE:03:59:09 Certificate issuer: /CN=A91F0EF9/serialNumber=7879EF4D977DC8A701033AF578AB548A40B694E1 Certificate serial: 02 Authority key identifier: 78:79:EF:4D:97:7D:C8:A7:01:03:3A:F5:78:AB:54:8A:40:B6:94:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/2C9C69108A9A11F1AFC3D80E4E11F970.roa Signing time: Tue 28 Jul 2026 15:37:01 +0000 ROA not before: Tue 28 Jul 2026 15:37:01 +0000 ROA not after: Sun 01 Jul 2029 00:00:00 +0000 asID: 33680 IP address blocks: 103.188.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.crl rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EF9, serialNumber=7879EF4D977DC8A701033AF578AB548A40B694E1 Validity Not Before: Jul 28 15:37:01 2026 GMT Not After : Jul 1 00:00:00 2029 GMT Subject: CN=6a68cc9c-6f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:51:20:02:24:2c:15:2a:36:ca:78:69:f8: fe:86:23:5f:d7:c5:87:38:63:da:cc:05:26:b7:b6: 3d:b9:0e:7f:c0:7d:94:74:cb:2a:39:4e:c5:20:8c: cc:32:17:29:ca:e9:24:9d:76:0b:2b:6b:2b:7d:06: 01:76:46:e1:2e:73:3a:78:d7:0b:14:42:71:1c:08: fa:e3:3e:f9:ee:e7:db:20:21:45:f0:61:0c:33:77: ed:aa:6f:71:d2:2a:46:12:bf:23:5d:47:ee:5f:d9: ff:45:30:09:e9:96:42:68:ce:b5:18:c5:45:d4:23: 40:61:b0:ae:54:35:25:55:0d:04:70:d7:92:d5:81: bd:a8:1a:7b:9d:29:f0:4c:77:9c:65:b3:22:62:19: 56:7d:f7:9d:c7:d9:2f:f8:ed:a5:a7:1b:6c:45:8e: 12:39:b0:f1:63:f9:fa:60:02:8a:75:2e:73:6a:66: 9c:69:b9:f9:90:7d:fe:ec:fe:83:ef:b5:e7:88:46: 55:8b:9d:51:d3:4f:d9:89:55:72:94:51:6e:93:11: fe:cb:41:26:3a:7a:4c:d4:45:5e:00:6d:69:98:0d: 8a:52:a9:71:4c:92:8e:09:d0:8c:0c:e9:63:47:81: dd:87:d3:f0:ef:fe:82:07:53:3d:93:46:86:07:45: 6d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EA:E4:63:02:C9:96:FF:34:BE:A0:F2:B7:EB:47:D7:EE:03:59:09 X509v3 Authority Key Identifier: keyid:78:79:EF:4D:97:7D:C8:A7:01:03:3A:F5:78:AB:54:8A:40:B6:94:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/2C9C69108A9A11F1AFC3D80E4E11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.188.42.0/23 Signature Algorithm: sha256WithRSAEncryption a0:26:ad:b2:92:36:1a:b7:19:1d:16:a6:c7:a1:4e:99:75:ce: ef:6b:1a:e0:0b:6f:66:9a:b3:d3:6f:9e:b6:e3:22:eb:f5:a8: a2:bf:f9:86:35:cc:ba:b0:4d:ba:4c:d8:a6:87:2f:2e:db:6e: b8:cf:90:55:b8:2b:a4:d9:b3:df:7f:6f:82:13:f8:3e:d6:f3: d3:a7:ba:1f:44:e9:e9:dd:81:95:fd:f8:a5:d8:94:93:3c:cb: 0c:18:30:86:e3:dc:53:eb:cb:ea:34:c9:94:e7:3c:9a:ef:75: e5:ef:42:5c:95:93:2d:8d:30:b1:db:93:55:40:05:c9:f2:f7: 5e:dd:2d:f0:e7:85:30:2e:24:d3:2b:62:22:fe:6c:7e:19:a7: 8e:0c:d0:51:b5:7f:12:c2:04:6d:34:62:ca:a9:d5:7b:4f:a9: ad:db:85:50:b3:4b:f1:08:6d:ad:12:7a:c8:8b:9f:49:cb:ca: 78:03:2c:e0:26:20:11:64:11:9d:40:a9:62:ab:e7:7b:d4:14: 8a:e0:fe:3c:af:c5:49:9d:de:39:88:0e:ea:62:8b:f4:fc:b9: b9:b3:ce:84:01:95:c4:19:7e:29:c0:7c:6b:a2:40:12:42:f4: 0c:88:57:6a:ab:a4:22:4e:d8:fe:0f:06:75:1c:a0:ba:84:ca: fc:e7:0e:5b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEVGOTExMC8GA1UEBRMoNzg3OUVGNEQ5NzdEQzhBNzAxMDMzQUY1NzhBQjU0OEE0 MEI2OTRFMTAeFw0yNjA3MjgxNTM3MDFaFw0yOTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNjhjYzljLTZmMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBVVEgAiQsFSo2ynhp+P6GI1/XxYc4Y9rMBSa3tj25Dn/AfZR0yyo5TsUgjMwy FynK6SSddgsrayt9BgF2RuEuczp41wsUQnEcCPrjPvnu59sgIUXwYQwzd+2qb3HS KkYSvyNdR+5f2f9FMAnplkJozrUYxUXUI0BhsK5UNSVVDQRw15LVgb2oGnudKfBM d5xlsyJiGVZ9953H2S/47aWnG2xFjhI5sPFj+fpgAop1LnNqZpxpufmQff7s/oPv teeIRlWLnVHTT9mJVXKUUW6TEf7LQSY6ekzURV4AbWmYDYpSqXFMko4J0IwM6WNH gd2H0/Dv/oIHUz2TRoYHRW1xAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUO+rkYwLJ lv80vqDyt+tH1+4DWQkwHwYDVR0jBBgwFoAUeHnvTZd9yKcBAzr1eKtUikC2lOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwRUY5L0UyOTA2QUFDOEE5 ODExRjE4MDY1RDREOTREMTFGOTcwL2VIbnZUWmQ5eUtjQkF6cjFlS3RVaWtDMmxP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUhudlRaZDl5S2NCQXpyMWVLdFVpa0MybE9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEVGOS9FMjkwNkFBQzhBOTgxMUYxODA2NUQ0RDk0RDExRjk3MC8yQzlDNjkxMDhB OUExMUYxQUZDM0Q4MEU0RTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnvCowDQYJKoZIhvcNAQELBQADggEBAKAmrbKSNhq3GR0WpsehTpl1 zu9rGuALb2aas9NvnrbjIuv1qKK/+YY1zLqwTbpM2KaHLy7bbrjPkFW4K6TZs99/ b4IT+D7W89Onuh9E6endgZX9+KXYlJM8ywwYMIbj3FPry+o0yZTnPJrvdeXvQlyV ky2NMLHbk1VABcny917dLfDnhTAuJNMrYiL+bH4Zp44M0FG1fxLCBG00Ysqp1XtP qa3bhVCzS/EIba0SesiLn0nLyngDLOAmIBFkEZ1AqWKr53vUFIrg/jyvxUmd3jmI Dupii/T8ubmzzoQBlcQZfinAfGuiQBJC9AyIV2qrpCJO2P4PBnUcoLqEyvznDls= -----END CERTIFICATE-----Generated at Wed Jul 29 10:05:52 2026 by rpki-client