$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/2A71D75884B211F18866DC898FA30FBC.roa File: 2A71D75884B211F18866DC898FA30FBC.roa (raw, json) Hash identifier: 9LAzaxPLoBaW2eqQGlqzYn1GjONpsxX5ahH4vvA9HxU= Subject key identifier: D6:2C:47:1F:D9:1D:C0:83:2B:FB:41:E7:8E:5F:76:3F:99:8A:79:00 Certificate issuer: /CN=A91CCAED/serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Certificate serial: 04 Authority key identifier: 28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/2A71D75884B211F18866DC898FA30FBC.roa Signing time: Tue 21 Jul 2026 03:13:38 +0000 ROA not before: Tue 21 Jul 2026 03:13:38 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134730 IP address blocks: 103.198.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAED, serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Validity Not Before: Jul 21 03:13:38 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a5ee3e2-17a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:5a:f2:b0:6f:82:4e:20:70:43:5a:c3:46: 50:9d:87:e0:82:16:f2:ac:06:dc:4c:c7:06:ee:a4: 06:54:77:e4:0d:12:d6:7a:b8:9c:10:22:48:41:e7: ea:35:a6:8e:c0:22:47:2d:3d:a7:e9:bb:70:95:ae: f1:f4:52:21:29:06:47:fe:5f:1b:b9:24:e9:99:11: 5f:a1:c8:78:35:6d:16:36:b2:5a:a6:00:15:5d:38: 01:36:5f:91:2a:54:c9:2a:37:4f:56:93:c6:42:22: eb:77:50:22:c5:92:3e:08:94:28:22:9b:86:3f:b2: af:28:b7:2c:58:d1:85:47:28:7c:05:94:1b:b1:b2: 09:d7:76:5c:eb:6d:3f:2e:f9:d4:aa:23:de:77:db: b3:65:7e:16:6e:2c:d3:30:88:f8:5e:46:09:a1:98: ef:91:ca:92:78:9b:f4:1f:57:d8:2e:b6:4d:e5:b4: 1c:12:85:5e:d1:33:d8:a0:c4:8b:d9:50:73:01:49: 3b:5d:3c:6e:7c:1c:8c:ab:91:d9:ce:c4:b2:1e:3a: 21:dd:5f:16:c8:63:09:67:65:88:72:9d:4b:20:f8: e8:27:f8:3f:c4:24:76:b6:46:7f:f3:8a:1f:a0:da: 25:dc:6d:7b:1c:a9:91:3f:0c:bc:04:5a:f6:e1:a2: eb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2C:47:1F:D9:1D:C0:83:2B:FB:41:E7:8E:5F:76:3F:99:8A:79:00 X509v3 Authority Key Identifier: keyid:28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/2A71D75884B211F18866DC898FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.198.104.0/23 Signature Algorithm: sha256WithRSAEncryption 98:93:c4:cf:8d:4a:bc:72:c1:c0:9a:5a:57:e3:67:44:cb:55: 6a:1a:8c:35:d6:0c:e0:fc:25:ff:7c:de:d4:bd:48:24:5b:e0: 3b:c4:da:ca:07:84:fe:fd:08:25:ea:cc:0d:92:6c:3e:96:66: 36:ac:b7:a8:9c:58:c9:a0:b4:ad:4f:33:a6:1d:84:b8:b7:9c: c8:db:b2:2b:03:84:9f:a5:e2:90:62:ac:35:1c:92:20:92:df: df:6b:f9:29:48:d7:26:1d:de:5e:a0:fd:c1:75:43:8b:df:27: fe:66:88:36:a8:2f:55:6b:47:f0:b5:f9:1e:e6:fd:7b:b9:7f: 96:cf:b7:2c:22:fb:07:b0:fe:bd:82:ef:3a:1f:d4:6a:4d:b3: ce:df:54:bc:28:59:3f:63:8d:20:3c:60:be:69:8f:c2:e1:e3: 81:54:62:ed:7e:83:7f:18:b7:24:e7:89:b1:2d:6d:8c:ca:79: dc:12:7b:b9:4f:64:21:ce:0a:9f:b3:74:56:13:86:dc:36:22: 59:df:95:96:a4:03:9c:59:a6:12:2c:3b:81:f8:d0:25:60:51: 1a:42:2f:6e:dc:0b:bd:f6:ed:8d:73:67:0f:89:a6:46:50:33: 51:73:1c:e4:f7:4a:08:e2:14:94:99:20:d7:d0:e8:05:1b:23: 52:bd:3a:2e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0FFRDExMC8GA1UEBRMoMjg5NEJDRjdFMjM5NDQwMzgyNkQzQjRCNEI4MDdBNDRB N0E0MTY4MjAeFw0yNjA3MjEwMzEzMzhaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNWVlM2UyLTE3YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6BVrysG+CTiBwQ1rDRlCdh+CCFvKsBtxMxwbupAZUd+QNEtZ6uJwQIkhB5+o1 po7AIkctPafpu3CVrvH0UiEpBkf+Xxu5JOmZEV+hyHg1bRY2slqmABVdOAE2X5Eq VMkqN09Wk8ZCIut3UCLFkj4IlCgim4Y/sq8otyxY0YVHKHwFlBuxsgnXdlzrbT8u +dSqI95327NlfhZuLNMwiPheRgmhmO+RypJ4m/QfV9gutk3ltBwShV7RM9igxIvZ UHMBSTtdPG58HIyrkdnOxLIeOiHdXxbIYwlnZYhynUsg+Ogn+D/EJHa2Rn/zih+g 2iXcbXscqZE/DLwEWvbhousHAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU1ixHH9kd wIMr+0Hnjl92P5mKeQAwHwYDVR0jBBgwFoAUKJS89+I5RAOCbTtLS4B6RKekFoIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUVELzczNjRGMTBDODE1 NjExRjE4RkJCMUUzMTg0QTMwRkJDL0tKUzg5LUk1UkFPQ2JUdExTNEI2Uktla0Zv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0pTODktSTVSQU9DYlR0TFM0QjZSS2VrRm9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FFRC83MzY0RjEwQzgxNTYxMUYxOEZCQjFFMzE4NEEzMEZCQy8yQTcxRDc1ODg0 QjIxMUYxODg2NkRDODk4RkEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnxmgwDQYJKoZIhvcNAQELBQADggEBAJiTxM+NSrxywcCaWlfjZ0TL VWoajDXWDOD8Jf983tS9SCRb4DvE2soHhP79CCXqzA2SbD6WZjast6icWMmgtK1P M6YdhLi3nMjbsisDhJ+l4pBirDUckiCS399r+SlI1yYd3l6g/cF1Q4vfJ/5miDao L1VrR/C1+R7m/Xu5f5bPtywi+wew/r2C7zof1GpNs87fVLwoWT9jjSA8YL5pj8Lh 44FUYu1+g38YtyTnibEtbYzKedwSe7lPZCHOCp+zdFYThtw2IlnflZakA5xZphIs O4H40CVgURpCL27cC7327Y1zZw+JpkZQM1FzHOT3SgjiFJSZINfQ6AUbI1K9Oi4= -----END CERTIFICATE-----Generated at Fri Jul 24 09:15:18 2026 by rpki-client