$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/FA870AFA94E011EDB701A974C4F9AE02.roa File: FA870AFA94E011EDB701A974C4F9AE02.roa (raw, json) Hash identifier: ExKqdydhojznLUa2qTmZ090PQ3IkD20WWF5a7geuqAw= Subject key identifier: 44:8A:59:2B:EA:5C:69:06:AD:34:0A:EB:C0:DB:39:B0:04:FC:13:9F Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 08FF Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/FA870AFA94E011EDB701A974C4F9AE02.roa Signing time: Thu 20 Aug 2026 20:41:22 +0000 ROA not before: Thu 20 Aug 2026 20:41:22 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 140992 IP address blocks: 103.154.160.0/24 maxlen: 24 103.154.161.0/24 maxlen: 24 2001:df4:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: Aug 20 20:41:22 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a876672-2207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:ec:54:68:0a:79:0f:cc:4d:76:cb:ca:43: 25:4d:c0:55:ab:b6:2e:ab:c0:da:9f:a1:6b:ab:33: ea:96:2c:63:85:c4:67:31:8c:87:85:06:08:ca:a9: d1:a2:3b:85:28:b3:1a:70:16:2c:3c:de:c0:ea:6f: 38:db:1d:5b:b4:4f:dd:17:89:86:bd:40:70:72:84: 45:ea:b4:a7:da:2a:2e:8b:be:a1:0e:04:b2:04:7e: 21:1d:e2:9e:7a:ae:6f:2f:60:6f:c2:38:80:10:c4: 85:de:b2:03:f7:28:c6:c3:97:3f:22:37:93:87:6d: f5:65:c6:c7:54:2b:48:4f:c1:8c:e2:1d:aa:73:08: 72:2b:f9:a1:24:b6:fa:a9:d7:c3:5f:4f:92:56:1f: 87:39:68:c2:37:34:34:1d:b8:61:f2:79:b8:6e:b7: ec:1e:85:e3:d8:50:ff:72:c1:2a:89:b9:a7:9b:0b: d9:45:e1:47:57:20:16:6f:3c:a8:ef:6a:c4:2f:14: 92:9e:88:23:39:c4:9d:3e:9d:73:66:57:4f:eb:33: cd:23:ae:6c:53:e3:a4:72:84:f9:4f:06:bc:b4:a3: 17:96:fd:9f:a3:31:2f:36:a1:84:98:74:3e:47:dd: c5:34:e8:29:e6:34:63:ba:36:57:8c:ac:1d:1b:26: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8A:59:2B:EA:5C:69:06:AD:34:0A:EB:C0:DB:39:B0:04:FC:13:9F X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/FA870AFA94E011EDB701A974C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.160.0/23 IPv6: 2001:df4:9080::/48 Signature Algorithm: sha256WithRSAEncryption 61:68:c8:8e:b9:1b:4e:e5:f0:68:d1:2a:dd:e7:9e:3c:da:52: 5f:bc:fe:60:56:a2:08:d4:6b:68:1b:3d:8d:86:9c:b7:27:7c: c7:44:06:77:df:fe:a7:0e:4f:09:b5:5b:a7:2a:c9:17:a3:8e: 98:17:a6:be:2a:4b:c2:43:d8:8d:92:05:73:02:6f:57:1b:64: 83:0c:a2:87:ca:67:10:f9:7d:c4:92:9c:cc:5f:2b:56:04:8f: 99:44:a8:ee:32:01:81:b5:d7:7b:80:7c:85:8b:e0:89:e6:60: 2a:27:43:63:09:75:59:0f:4e:68:60:a7:49:03:3e:00:93:be: 0b:b3:10:a8:3b:a3:1c:b0:f9:ef:ff:37:14:b1:1c:2b:5a:2f: 71:02:04:97:c0:ea:79:6f:52:8e:02:ef:e3:31:e4:5d:fd:70: d1:ef:4a:d1:25:b5:ce:17:a1:b0:47:b9:9d:7b:5c:f8:86:be: bf:ea:98:ac:d2:99:7f:fa:a0:cd:99:71:04:1f:b0:6a:b3:ba: a7:1f:19:75:a8:75:a6:a2:0e:9b:96:65:9b:f7:83:c3:54:8e: 05:c9:36:cf:94:e0:61:71:3d:25:49:7a:1e:4d:7b:7a:4e:18: 39:93:69:b8:49:f6:e3:a4:0a:18:45:0a:4d:d1:60:48:e9:c0: 09:24:3e:03 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjYwODIwMjA0MTIyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3NjY3Mi0yMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0nsVGgKeQ/MTXbLykMlTcBVq7Yuq8Dan6FrqzPqlixjhcRnMYyHhQYIyqnR ojuFKLMacBYsPN7A6m842x1btE/dF4mGvUBwcoRF6rSn2ioui76hDgSyBH4hHeKe eq5vL2BvwjiAEMSF3rID9yjGw5c/IjeTh231ZcbHVCtIT8GM4h2qcwhyK/mhJLb6 qdfDX0+SVh+HOWjCNzQ0Hbhh8nm4brfsHoXj2FD/csEqibmnmwvZReFHVyAWbzyo 72rELxSSnogjOcSdPp1zZldP6zPNI65sU+OkcoT5Twa8tKMXlv2fozEvNqGEmHQ+ R93FNOgp5jRjujZXjKwdGyZSjwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFESKWSvq XGkGrTQK68DbObAE/BOfMB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjFDOEMvMjNFNUQ1REVERjk5MTFFQTlGODVEOTgyQzRGOUFFMDIvRkE4NzBBRkE5 NEUwMTFFREI3MDFBOTc0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5qgMA8EAgACMAkDBwAgAQ30kIAwDQYJKoZIhvcNAQELBQADggEB AGFoyI65G07l8GjRKt3nnjzaUl+8/mBWogjUa2gbPY2GnLcnfMdEBnff/qcOTwm1 W6cqyRejjpgXpr4qS8JD2I2SBXMCb1cbZIMMoofKZxD5fcSSnMxfK1YEj5lEqO4y AYG113uAfIWL4InmYConQ2MJdVkPTmhgp0kDPgCTvguzEKg7oxyw+e//NxSxHCta L3ECBJfA6nlvUo4C7+Mx5F39cNHvStEltc4XobBHuZ17XPiGvr/qmKzSmX/6oM2Z cQQfsGqzuqcfGXWodaaiDpuWZZv3g8NUjgXJNs+U4GFxPSVJeh5Ne3pOGDmTabhJ 9uOkChhFCk3RYEjpwAkkPgM= -----END CERTIFICATE-----Generated at Tue Sep 22 02:14:51 2026 by rpki-client