$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa File: A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa (raw, json) Hash identifier: c9S7+kwjScDv1EnjDtuUHgRxKdbpYUp5OTdjbknm8O4= Subject key identifier: 73:D9:72:D3:46:50:A8:9F:1F:73:1F:DC:7D:82:49:E3:5B:77:6A:85 Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Certificate serial: 0F54 Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa Signing time: Sat 22 Aug 2026 17:34:39 +0000 ROA not before: Sat 22 Aug 2026 17:34:39 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 139300 IP address blocks: 103.141.2.0/23 maxlen: 23 103.141.2.0/24 maxlen: 24 103.141.3.0/24 maxlen: 24 2001:df0:e280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3924 (0xf54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7773, serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Validity Not Before: Aug 22 17:34:39 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a89ddaf-dd2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:29:da:8d:5d:c7:d6:e1:96:5a:44:a9:aa: 25:cb:3a:85:c4:80:ad:90:fe:06:f1:90:09:9d:cf: 35:76:09:ec:bc:a4:4f:8a:14:07:1a:1d:6f:48:71: 65:b5:49:76:61:cc:82:0c:82:54:e7:5a:83:10:d0: f1:b4:04:d2:b7:da:d9:89:e4:d3:e4:5e:24:b9:98: 99:c1:ac:7c:7f:0c:a9:cf:62:0c:f6:d7:3e:90:09: 00:84:7d:70:2f:50:8b:55:a5:12:26:2c:49:65:c5: bc:97:cc:73:94:74:dc:bb:36:3a:4e:9b:0c:5d:aa: b8:25:9f:cb:c3:d7:ae:d2:82:a4:7c:98:d8:df:15: 7b:74:17:eb:6c:ad:4f:fc:1a:60:72:02:8a:a9:24: 04:01:97:d2:d8:10:8c:b2:8d:c9:54:a5:ae:dd:2f: be:28:8a:5d:b3:01:2f:bc:29:8f:e4:41:23:fd:24: 8c:fa:68:70:90:32:9b:f3:2e:16:ca:52:07:41:5d: 88:ae:c9:40:08:7f:c9:f4:ef:b9:e3:c1:9f:62:09: b1:7b:f8:7c:7f:fc:0c:dc:c3:b7:19:34:56:9a:83: 67:c1:26:f9:71:1f:36:46:bf:94:d0:b3:53:e4:eb: ad:63:0e:f2:04:07:78:b9:b0:a3:d3:78:14:be:6f: 71:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D9:72:D3:46:50:A8:9F:1F:73:1F:DC:7D:82:49:E3:5B:77:6A:85 X509v3 Authority Key Identifier: keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.141.2.0/23 IPv6: 2001:df0:e280::/48 Signature Algorithm: sha256WithRSAEncryption a1:31:db:2a:70:4c:1a:62:19:ce:c2:08:34:6c:17:b4:ac:e3: b4:2c:ce:e9:62:8d:16:d8:7d:cd:21:08:58:52:02:0c:67:a7: 2e:2e:7c:f1:10:6f:4d:8a:c9:54:a7:c7:c9:b9:6d:07:5c:d8: ee:38:7c:9c:8a:02:06:c3:72:35:69:f0:30:c6:6f:8a:89:3e: 78:f2:3e:e3:3b:8a:64:8b:9a:e1:b2:61:b6:60:d4:cc:63:3f: 24:b6:22:2e:ab:b9:4d:f2:27:55:6f:4d:77:73:7f:7e:02:f6: 94:c4:bb:41:34:db:a0:68:0f:44:91:8e:d7:a9:dc:42:38:5b: fd:ec:44:2c:52:63:67:e0:cb:b9:6d:5a:f2:56:1a:91:be:3f: 2d:26:96:3f:49:0f:37:f6:0e:a8:44:77:f3:65:a6:63:09:96: 5f:d7:b7:70:20:d1:a5:2a:67:07:4f:3b:68:97:3e:63:c0:83: ef:70:7d:56:ba:20:af:ba:e8:7a:7c:99:bf:3a:9c:85:b1:21: a6:f9:83:c6:41:a8:50:3f:f2:70:2a:16:1b:3a:66:42:1c:d6: 1c:99:9b:e9:bb:2a:26:03:07:66:50:6b:8d:e5:72:cc:5b:c5: 5a:4e:7d:0a:0e:11:6d:94:74:c0:eb:50:25:81:1c:b0:58:43: 81:e3:d2:63 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICD1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3NzMxMTAvBgNVBAUTKEQ5MDBEREYyNEEyNzYyMkJGOTY0Mzc1N0VEQkNBRkZB RUUzMjFDMzcwHhcNMjYwODIyMTczNDM5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg5ZGRhZi1kZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXIp2o1dx9bhllpEqaolyzqFxICtkP4G8ZAJnc81dgnsvKRPihQHGh1vSHFl tUl2YcyCDIJU51qDENDxtATSt9rZieTT5F4kuZiZwax8fwypz2IM9tc+kAkAhH1w L1CLVaUSJixJZcW8l8xzlHTcuzY6TpsMXaq4JZ/Lw9eu0oKkfJjY3xV7dBfrbK1P /BpgcgKKqSQEAZfS2BCMso3JVKWu3S++KIpdswEvvCmP5EEj/SSM+mhwkDKb8y4W ylIHQV2IrslACH/J9O+548GfYgmxe/h8f/wM3MO3GTRWmoNnwSb5cR82Rr+U0LNT 5OutYw7yBAd4ubCj03gUvm9xRQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHPZctNG UKifH3Mf3H2CSeNbd2qFMB8GA1UdIwQYMBaAFNkA3fJKJ2Ir+WQ3V+28r/ruMhw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc3My9BRDMyMjM3Q0Ey RTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllpdjVaRGRYN2J5di11NHlI RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRRGQ4a29uWWl2NVpEZFg3Ynl2LXU0eUhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzc3NzMvQUQzMjIzN0NBMkU4MTFFOUJBRTc4RDQ3QzRGOUFFMDIvQTQ3RDJFQzg0 QzFFMTFFRUJBOENEQjRCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ40CMA8EAgACMAkDBwAgAQ3w4oAwDQYJKoZIhvcNAQELBQADggEB AKEx2ypwTBpiGc7CCDRsF7Ss47QszulijRbYfc0hCFhSAgxnpy4ufPEQb02KyVSn x8m5bQdc2O44fJyKAgbDcjVp8DDGb4qJPnjyPuM7imSLmuGyYbZg1MxjPyS2Ii6r uU3yJ1VvTXdzf34C9pTEu0E026BoD0SRjtep3EI4W/3sRCxSY2fgy7ltWvJWGpG+ Py0mlj9JDzf2DqhEd/NlpmMJll/Xt3Ag0aUqZwdPO2iXPmPAg+9wfVa6IK+66Hp8 mb86nIWxIab5g8ZBqFA/8nAqFhs6ZkIc1hyZm+m7KiYDB2ZQa43lcsxbxVpOfQoO EW2UdMDrUCWBHLBYQ4Hj0mM= -----END CERTIFICATE-----Generated at Thu Sep 24 17:11:32 2026 by rpki-client