$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/4A7F092A776811EFB6FA747DC4F9AE02.roa File: 4A7F092A776811EFB6FA747DC4F9AE02.roa (raw, json) Hash identifier: 0daD0etHnbRssiJH6BixSC65d1qVyuhBrEX3CZhYnt8= Subject key identifier: 7F:C2:24:91:E4:9F:2F:AF:36:90:23:36:0D:A5:4A:32:75:A1:11:28 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 0506 Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/4A7F092A776811EFB6FA747DC4F9AE02.roa Signing time: Wed 02 Sep 2026 16:30:49 +0000 ROA not before: Wed 02 Sep 2026 16:30:49 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 132376 IP address blocks: 103.15.136.0/24 maxlen: 24 103.15.137.0/24 maxlen: 24 103.15.138.0/24 maxlen: 24 103.15.139.0/24 maxlen: 24 2001:df1:5900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1286 (0x506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Sep 2 16:30:49 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a984f39-ae96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:2b:bd:76:03:e7:80:df:2b:c4:4c:7a:e3: c2:c0:4a:74:3e:a8:dd:24:dd:c4:91:d4:7a:e1:ef: 1d:38:03:c9:04:00:3b:bb:69:49:1a:44:11:2c:a8: 69:c7:d1:9a:30:9b:da:cc:9b:fa:5b:f9:45:9d:27: 31:66:60:8d:06:40:38:07:76:09:73:6f:1f:b4:b8: f0:9f:af:e4:c8:96:b2:13:83:13:64:9a:82:f7:07: e5:14:8b:27:f1:93:03:76:82:a5:56:ca:62:67:53: 64:33:f5:d3:c5:9b:4a:0b:75:77:34:21:ef:ce:6b: 17:51:f2:40:7c:15:47:6b:3c:88:a4:15:b7:f8:8e: 3f:b3:e5:c0:07:9e:c2:3e:fc:08:b0:eb:3e:bb:72: d2:36:fe:50:09:1c:2c:e0:00:9a:70:86:2a:13:b1: 8b:e7:2b:c2:5e:ba:ac:ee:f7:c3:1b:ee:5e:1c:14: ae:06:f8:27:3c:62:46:6d:1e:44:79:5b:5c:ea:88: 02:ee:3d:c2:40:e4:d9:e7:cc:ff:93:bb:92:66:13: 01:ca:c8:36:7c:25:f1:ad:b5:13:0a:1b:55:33:5f: d0:3e:0d:34:c1:26:9d:29:de:c9:30:86:85:ce:1b: fc:05:ca:2b:df:ac:d2:36:bc:d2:fb:bb:5e:9d:dd: af:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C2:24:91:E4:9F:2F:AF:36:90:23:36:0D:A5:4A:32:75:A1:11:28 X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/4A7F092A776811EFB6FA747DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.15.136.0/22 IPv6: 2001:df1:5900::/48 Signature Algorithm: sha256WithRSAEncryption 4d:5d:c1:e3:24:4a:b1:0d:79:e9:b0:83:42:a5:b3:d3:35:70: d5:96:f4:3f:a9:78:a4:45:69:c8:d7:db:d8:cf:1f:c1:95:45: 11:48:de:2a:4f:81:18:4c:4c:33:a1:af:1c:a0:3b:19:f7:bd: e8:22:38:90:72:05:17:b3:1c:d6:1b:c9:72:b2:3c:1e:ac:2b: eb:b1:23:f4:ac:db:1a:52:ae:85:2c:23:1a:c5:44:da:17:fa: a6:78:93:bd:bd:f4:78:df:45:d1:49:a4:ae:43:5d:5f:66:6e: fb:c9:37:c7:07:d5:92:91:d2:2e:93:05:b2:a4:2b:8e:15:13: a1:e6:f0:af:df:40:aa:6d:30:57:cb:82:15:7c:5c:c3:d7:b9: 68:4d:d3:f1:b2:b6:c9:47:49:1c:c6:dc:86:0d:bb:e2:74:43: ae:86:ea:cb:48:95:d4:98:06:cb:74:26:38:17:83:b8:9b:ae: 30:3e:65:95:9d:24:a2:87:f8:b9:5b:2b:0a:bf:19:93:26:58: c4:7a:23:0f:f8:15:7a:84:5e:7f:ec:77:ab:f5:8d:0e:b9:82: f0:05:36:90:0a:d4:67:16:cf:45:71:9d:49:ee:a3:d6:1c:fe: b8:2a:7d:56:a9:41:ed:d3:87:06:b8:46:73:84:79:1b:5c:3d: 81:08:90:af -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjYwOTAyMTYzMDQ5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4NGYzOS1hZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DQrvXYD54DfK8RMeuPCwEp0PqjdJN3EkdR64e8dOAPJBAA7u2lJGkQRLKhp x9GaMJvazJv6W/lFnScxZmCNBkA4B3YJc28ftLjwn6/kyJayE4MTZJqC9wflFIsn 8ZMDdoKlVspiZ1NkM/XTxZtKC3V3NCHvzmsXUfJAfBVHazyIpBW3+I4/s+XAB57C PvwIsOs+u3LSNv5QCRws4ACacIYqE7GL5yvCXrqs7vfDG+5eHBSuBvgnPGJGbR5E eVtc6ogC7j3CQOTZ58z/k7uSZhMBysg2fCXxrbUTChtVM1/QPg00wSadKd7JMIaF zhv8Bcor36zSNrzS+7tend2vhQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFH/CJJHk ny+vNpAjNg2lSjJ1oREoMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA4RjcvNDcxNDM4MEFENTk0MTFFNzhFN0M5MTQzQzRGOUFFMDIvNEE3RjA5MkE3 NzY4MTFFRkI2RkE3NDdEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZw+IMA8EAgACMAkDBwAgAQ3xWQAwDQYJKoZIhvcNAQELBQADggEB AE1dweMkSrENeemwg0Kls9M1cNWW9D+peKRFacjX29jPH8GVRRFI3ipPgRhMTDOh rxygOxn3vegiOJByBRezHNYbyXKyPB6sK+uxI/Ss2xpSroUsIxrFRNoX+qZ4k729 9HjfRdFJpK5DXV9mbvvJN8cH1ZKR0i6TBbKkK44VE6Hm8K/fQKptMFfLghV8XMPX uWhN0/GytslHSRzG3IYNu+J0Q66G6stIldSYBst0JjgXg7ibrjA+ZZWdJKKH+Llb Kwq/GZMmWMR6Iw/4FXqEXn/sd6v1jQ65gvAFNpAK1GcWz0VxnUnuo9Yc/rgqfVap Qe3Thwa4RnOEeRtcPYEIkK8= -----END CERTIFICATE-----Generated at Fri Sep 25 00:37:58 2026 by rpki-client