$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa File: DCE5E9CA713611E9A71D3311C4F9AE02.roa (raw, json) Hash identifier: SE+EOwsNTbbbTAQAlbz39nx1SSrCW3HGX38tkPKQFcI= Subject key identifier: 9E:64:42:1F:10:1B:AB:AA:A2:36:12:72:85:41:B4:4C:6D:5B:6B:FF Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 100D Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa Signing time: Thu 02 Jul 2026 18:18:11 +0000 ROA not before: Thu 02 Jul 2026 18:18:11 +0000 ROA not after: Sun 01 Nov 2026 00:00:00 +0000 asID: 136480 IP address blocks: 103.134.204.0/22 maxlen: 22 103.134.204.0/24 maxlen: 24 103.134.205.0/24 maxlen: 24 103.134.206.0/24 maxlen: 24 103.134.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4109 (0x100d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Jul 2 18:18:11 2026 GMT Not After : Nov 1 00:00:00 2026 GMT Subject: CN=6a46ab63-6b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:88:7b:55:a9:40:3c:75:6e:b3:52:80:0b:f1: ac:98:e0:20:a6:ed:cb:84:2a:70:de:5a:53:59:ae: b4:a8:6a:77:79:1d:42:58:e3:71:e1:d2:1d:b1:2f: 2e:3e:a9:1e:d9:cb:10:c7:df:2c:ca:53:92:47:1e: 6d:f7:c5:8f:44:0e:3f:4c:04:f1:f8:7f:b8:2f:be: b5:d9:56:29:f5:83:d4:bc:4d:02:d9:58:7a:b7:82: e3:08:94:2e:2b:9e:55:79:e5:f1:e9:2c:02:5c:f2: 17:74:56:65:f3:15:f8:66:bb:04:a1:69:3a:22:79: b0:a1:ff:53:b6:2a:c1:a8:90:46:5f:87:21:fd:6f: 27:ef:fb:a2:d8:ca:51:49:3f:a0:7b:96:23:ab:04: c6:0b:15:c8:55:d8:2a:67:8a:ad:b5:a8:ba:ee:38: 83:cb:e1:10:4a:a7:92:f2:23:82:15:57:90:3a:da: d5:0a:b9:e7:d1:80:e8:80:31:8f:91:36:3b:bd:ed: 7b:7a:94:70:62:13:29:ed:bc:ef:16:cf:96:9d:1b: c7:d3:18:19:fe:39:0e:15:ce:c9:f0:cd:f9:61:e7: dd:2b:06:5a:ad:db:fe:ec:87:27:77:bf:a3:c0:15: 6f:b8:57:64:c9:ba:46:17:c1:b6:3a:eb:5a:c9:b9: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:64:42:1F:10:1B:AB:AA:A2:36:12:72:85:41:B4:4C:6D:5B:6B:FF X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.204.0/22 Signature Algorithm: sha256WithRSAEncryption 70:bc:ab:6d:2e:e3:79:d2:6a:54:ee:1b:28:df:45:dd:7d:29: 78:8e:1f:64:be:df:55:99:ad:9a:7f:05:3c:46:1d:0c:01:1e: a8:41:7f:e0:11:78:99:b8:3e:20:27:d6:83:0b:bd:35:73:62: 51:17:17:67:2f:a2:3d:66:87:cf:79:a0:6c:3d:3f:11:52:6e: 5d:e4:a9:59:d8:f8:2b:a9:0f:58:96:68:e5:f4:37:24:c9:68: 59:6d:6d:28:54:97:fe:bf:a6:eb:e7:ac:1d:cf:59:5b:2b:e9: b3:eb:92:2c:e4:c8:db:9d:49:94:0c:e9:94:44:f6:a3:8e:76: 49:f8:85:c7:70:58:19:f4:22:d5:69:3f:22:94:31:a9:5a:73: a0:d8:39:e2:d9:c8:2a:09:33:e1:57:8b:de:1f:c3:de:4c:d8: 0d:12:7d:39:99:7b:49:11:f1:8a:89:89:15:f0:1e:77:33:a9: be:91:db:4e:0c:78:36:a8:54:ca:a1:39:a6:6c:48:f2:a6:f5: 11:14:3a:3b:4e:2f:aa:fd:f6:c3:55:8f:fa:0d:03:54:da:25: c3:0e:51:42:14:e5:f7:18:8f:f5:c9:97:98:6e:2e:d8:24:7e: c0:c9:f8:15:df:3f:24:c2:44:e9:06:25:0e:90:c0:e5:b3:39: 49:2f:ab:07 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjYwNzAyMTgxODExWhcNMjYxMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2YWI2My02YjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiYh7ValAPHVus1KAC/GsmOAgpu3LhCpw3lpTWa60qGp3eR1CWONx4dIdsS8u Pqke2csQx98sylOSRx5t98WPRA4/TATx+H+4L7612VYp9YPUvE0C2Vh6t4LjCJQu K55VeeXx6SwCXPIXdFZl8xX4ZrsEoWk6Inmwof9TtirBqJBGX4ch/W8n7/ui2MpR ST+ge5YjqwTGCxXIVdgqZ4qttai67jiDy+EQSqeS8iOCFVeQOtrVCrnn0YDogDGP kTY7ve17epRwYhMp7bzvFs+WnRvH0xgZ/jkOFc7J8M35YefdKwZardv+7Icnd7+j wBVvuFdkybpGF8G2Outaybkx/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ5kQh8Q G6uqojYScoVBtExtW2v/MB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkRBMDYvMkJGQzg5NDg3MTM2MTFFOTg2OURCRjEwQzRGOUFFMDIvRENFNUU5Q0E3 MTM2MTFFOUE3MUQzMzExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4bMMA0GCSqGSIb3DQEBCwUAA4IBAQBwvKttLuN50mpU7hso30Xd fSl4jh9kvt9Vma2afwU8Rh0MAR6oQX/gEXiZuD4gJ9aDC701c2JRFxdnL6I9ZofP eaBsPT8RUm5d5KlZ2PgrqQ9Ylmjl9DckyWhZbW0oVJf+v6br56wdz1lbK+mz65Is 5MjbnUmUDOmURPajjnZJ+IXHcFgZ9CLVaT8ilDGpWnOg2Dni2cgqCTPhV4veH8Pe TNgNEn05mXtJEfGKiYkV8B53M6m+kdtODHg2qFTKoTmmbEjypvURFDo7Ti+q/fbD VY/6DQNU2iXDDlFCFOX3GI/1yZeYbi7YJH7AyfgV3z8kwkTpBiUOkMDlszlJL6sH -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:59 2026 by rpki-client