$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/AFD61B9C36A311F08A82A258C4F9AE02.roa File: AFD61B9C36A311F08A82A258C4F9AE02.roa (raw, json) Hash identifier: d6zMH6FslhCioO9BUQgF2N2RzyG3M8j7DpL3pPa6Rys= Subject key identifier: 01:8D:4A:9E:B6:B6:AD:08:E3:91:7E:65:D0:2C:B0:4E:6B:E2:2B:FB Certificate issuer: /CN=A91CB3FE/serialNumber=AFF8777218753585C388E9B81C39066BD38DB592 Certificate serial: DD Authority key identifier: AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/AFD61B9C36A311F08A82A258C4F9AE02.roa Signing time: Thu 09 Jul 2026 09:34:37 +0000 ROA not before: Thu 09 Jul 2026 09:34:37 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 137965 IP address blocks: 103.118.120.0/24 maxlen: 24 2001:df5:cb00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3FE, serialNumber=AFF8777218753585C388E9B81C39066BD38DB592 Validity Not Before: Jul 9 09:34:37 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4f6b2d-081f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ba:1d:d6:b2:a2:1a:39:10:2d:be:46:7f:09: 50:1c:7b:9a:61:c3:e3:53:d8:bb:f9:0f:25:75:47: 29:ac:f4:46:ea:57:9c:3f:3b:aa:79:bc:aa:37:be: 7b:3f:7a:17:53:ed:1a:d5:28:48:1e:54:83:1f:f7: 9b:19:0c:52:86:72:15:43:08:13:94:72:b3:2b:1a: 4b:3f:97:1f:41:4a:f8:8e:fe:66:d8:93:b5:20:0a: c9:cc:ff:f9:1d:77:97:18:aa:c7:9b:8b:49:63:ff: e1:ec:d1:94:f2:2b:93:44:2c:55:c8:ef:6d:52:5c: 55:11:04:8d:d6:c7:68:2f:9e:14:20:24:17:19:dc: 77:58:8e:3f:c6:94:79:73:29:c3:47:f2:91:96:d7: 58:5b:3b:56:a7:12:a6:5f:4b:f7:ab:f0:f7:07:2b: 50:9f:06:8e:99:3a:e3:d0:db:9f:52:c5:fb:89:6c: d7:07:e3:25:32:38:e9:66:22:c5:35:df:e2:1d:1f: 40:0b:bb:9e:86:c1:6e:5c:a8:30:d7:96:d0:f0:e9: ad:8d:0a:60:d1:51:f6:0f:fa:d1:38:4a:29:cd:45: b1:79:0d:87:86:a7:13:e4:35:15:3f:78:9d:ed:01: 93:b7:d0:40:1e:b0:09:a1:94:5b:d1:10:de:47:80: bd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8D:4A:9E:B6:B6:AD:08:E3:91:7E:65:D0:2C:B0:4E:6B:E2:2B:FB X509v3 Authority Key Identifier: keyid:AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/AFD61B9C36A311F08A82A258C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.118.120.0/24 IPv6: 2001:df5:cb00::/48 Signature Algorithm: sha256WithRSAEncryption b9:0b:14:45:70:5e:23:4a:90:62:1e:30:22:1f:c7:61:c6:e2: bd:f1:f9:61:24:5d:7d:02:1b:84:77:b5:1b:4e:7e:bc:84:ac: 7b:aa:e7:6b:c9:5b:01:6a:78:4a:86:02:71:bf:0f:07:52:b5: ef:4a:39:e8:ff:22:ec:f9:0a:e2:7b:c7:bd:95:3c:cc:b2:ae: 23:19:c3:41:f0:43:b7:82:75:0f:0e:85:52:12:b8:00:e3:82: e6:67:31:11:f5:f8:d6:38:1b:88:cb:98:8d:49:5b:26:1f:9b: 32:d3:03:37:2a:1b:01:e9:5a:e4:0f:1a:d0:7a:9e:d1:48:98: 2c:23:98:fe:36:d1:fc:ef:3e:5a:56:da:60:e1:78:09:21:d3: 66:0c:79:3b:57:cb:f5:12:56:b2:63:fc:42:a0:92:15:8a:4c: 09:a9:3e:85:41:a0:13:b8:42:e8:a7:76:16:4e:57:78:0b:52: 0b:c8:6b:d6:44:98:b9:78:d6:55:8e:78:52:b7:ca:5a:7c:98: 60:c0:25:7c:99:d4:98:e3:a0:3b:17:52:67:0b:a9:1a:7d:a7: b3:3c:aa:81:e7:0f:f5:c1:0d:69:60:51:9f:d3:74:8a:64:ff: d9:49:51:a2:80:9d:80:bc:3d:fe:0a:e9:f6:65:33:fe:f5:7c: 26:8a:df:00 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzRkUxMTAvBgNVBAUTKEFGRjg3NzcyMTg3NTM1ODVDMzg4RTlCODFDMzkwNjZC RDM4REI1OTIwHhcNMjYwNzA5MDkzNDM3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmNmIyZC0wODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbod1rKiGjkQLb5GfwlQHHuaYcPjU9i7+Q8ldUcprPRG6lecPzuqebyqN757 P3oXU+0a1ShIHlSDH/ebGQxShnIVQwgTlHKzKxpLP5cfQUr4jv5m2JO1IArJzP/5 HXeXGKrHm4tJY//h7NGU8iuTRCxVyO9tUlxVEQSN1sdoL54UICQXGdx3WI4/xpR5 cynDR/KRltdYWztWpxKmX0v3q/D3BytQnwaOmTrj0NufUsX7iWzXB+MlMjjpZiLF Nd/iHR9AC7uehsFuXKgw15bQ8OmtjQpg0VH2D/rROEopzUWxeQ2HhqcT5DUVP3id 7QGTt9BAHrAJoZRb0RDeR4C9HwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAGNSp62 tq0I45F+ZdAssE5r4iv7MB8GA1UdIwQYMBaAFK/4d3IYdTWFw4jpuBw5BmvTjbWS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNGRS8yQTU2ODc4MjM2 QTIxMUYwODk3QjRCM0NDNEY5QUUwMi9yX2gzY2hoMU5ZWERpT200SERrR2E5T050 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaDNjaGgxTllYRGlPbTRIRGtHYTlPTnRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0IzRkUvMkE1Njg3ODIzNkEyMTFGMDg5N0I0QjNDQzRGOUFFMDIvQUZENjFCOUMz NkEzMTFGMDhBODJBMjU4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ3Z4MA8EAgACMAkDBwAgAQ31ywAwDQYJKoZIhvcNAQELBQADggEB ALkLFEVwXiNKkGIeMCIfx2HG4r3x+WEkXX0CG4R3tRtOfryErHuq52vJWwFqeEqG AnG/DwdSte9KOej/Iuz5CuJ7x72VPMyyriMZw0HwQ7eCdQ8OhVISuADjguZnMRH1 +NY4G4jLmI1JWyYfmzLTAzcqGwHpWuQPGtB6ntFImCwjmP420fzvPlpW2mDheAkh 02YMeTtXy/USVrJj/EKgkhWKTAmpPoVBoBO4QuindhZOV3gLUgvIa9ZEmLl41lWO eFK3ylp8mGDAJXyZ1JjjoDsXUmcLqRp9p7M8qoHnD/XBDWlgUZ/TdIpk/9lJUaKA nYC8Pf4K6fZlM/71fCaK3wA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:21:34 2026 by rpki-client