$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/2D81FF3680BB11EC8FD7663DC4F9AE02.roa File: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (raw, json) Hash identifier: aN3ae4qKQ+VJA0+VnWbMVj2vgyZ6GLKwwVRq7WIBh5k= Subject key identifier: 39:50:AC:B0:21:84:68:3F:AB:AE:3C:6F:FA:07:BD:F8:FE:47:9A:C6 Certificate issuer: /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Certificate serial: 04D1 Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/2D81FF3680BB11EC8FD7663DC4F9AE02.roa Signing time: Wed 01 Jul 2026 01:25:35 +0000 ROA not before: Wed 01 Jul 2026 01:25:35 +0000 ROA not after: Fri 30 Oct 2026 00:00:00 +0000 asID: 139029 IP address blocks: 103.138.172.0/23 maxlen: 23 103.138.172.0/24 maxlen: 24 103.138.173.0/24 maxlen: 24 2406:6fc0::/32 maxlen: 32 2406:6fc0::/48 maxlen: 48 2406:6fc0:1::/48 maxlen: 48 2406:6fc0:2::/48 maxlen: 48 2406:6fc0:3::/48 maxlen: 48 2406:6fc0:4::/48 maxlen: 48 2406:6fc0:5::/48 maxlen: 48 2406:6fc0:6::/48 maxlen: 48 2406:6fc0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Validity Not Before: Jul 1 01:25:35 2026 GMT Not After : Oct 30 00:00:00 2026 GMT Subject: CN=6a446c8f-d10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:5c:fe:a1:3e:57:35:bb:53:d5:f3:cd:4c: a5:99:03:e6:7d:5b:43:c5:2a:44:89:58:92:54:c9: 65:d0:79:8c:37:51:a5:3d:e0:73:f4:19:73:96:d0: d8:6d:5b:87:f1:a2:52:af:92:aa:6c:4b:df:58:d0: 07:ca:9f:98:17:f0:c7:ca:07:63:0c:04:d5:cd:3b: c5:66:ff:89:18:4b:4a:74:42:38:9a:ac:26:20:a2: 8f:b7:08:39:b2:32:18:78:2b:1b:21:28:cb:ea:e4: c2:23:d6:03:94:64:e1:3a:80:ef:51:e5:06:85:66: 3e:1a:03:10:28:27:47:6d:2c:5f:39:68:88:48:52: 1b:cb:e8:25:16:a5:31:ea:dd:a7:73:cf:2f:ee:bc: 7b:b6:df:14:33:9b:60:73:46:63:3f:34:ad:bd:02: a5:54:75:ed:3d:bf:3c:e2:80:22:82:7c:ab:2a:6c: 77:8c:f1:a3:78:1d:aa:4e:ee:ac:6a:8c:b1:3a:18: 21:a5:45:ec:92:c9:f0:6c:1e:a8:ab:9a:72:25:f9: de:da:4c:ee:82:fe:ab:68:ab:92:eb:d7:64:89:39: 0c:23:00:08:bc:f1:5a:91:40:a0:07:9f:88:26:ac: 82:f3:fa:02:49:9c:a9:b1:ae:c2:32:16:e8:da:49: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:50:AC:B0:21:84:68:3F:AB:AE:3C:6F:FA:07:BD:F8:FE:47:9A:C6 X509v3 Authority Key Identifier: keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/2D81FF3680BB11EC8FD7663DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.172.0/23 IPv6: 2406:6fc0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:71:ee:fd:e4:18:50:ad:cc:bd:13:5d:1c:69:dc:8d:5b:ee: b2:4c:71:f6:f6:2e:f3:df:ff:82:ca:a2:36:0f:2f:a8:bb:3e: 4d:3e:a9:2a:67:92:b9:b1:57:d0:c7:55:2e:ff:45:16:cf:1a: 19:6e:15:5d:d1:57:64:f9:ea:ab:f7:1b:a2:ac:be:44:46:36: d5:ce:46:73:fa:2c:87:49:8f:f4:d3:02:bc:2b:a6:fc:ad:35: 8a:f6:66:79:7b:3b:15:3b:b5:0c:f9:f7:5d:80:a8:8b:90:8d: 72:59:46:fd:09:6b:8b:ce:b6:e2:aa:c7:86:41:bd:3e:f4:cf: cb:40:af:32:7a:af:42:b4:00:00:6e:c7:65:47:5c:23:a5:21: c6:13:26:5b:dc:27:7c:93:e4:59:ef:7f:f8:88:d7:91:7b:36: ca:58:39:d1:80:f1:1e:74:a4:3a:34:0b:f9:d6:e3:b2:43:cb: 8e:2a:93:33:72:5e:21:0c:3e:4f:3c:87:0f:80:1b:2b:1e:92: a2:07:b3:b8:45:04:80:ba:d2:83:36:e9:dc:5a:86:7c:2b:45: 0c:ab:c2:51:2f:03:87:21:0a:23:37:45:15:a0:b3:51:6b:ea: a8:5b:86:7a:d9:a7:24:ee:3b:16:cd:d1:c9:dc:6f:61:be:ac: 6a:8d:07:6a -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QTExMTAvBgNVBAUTKDE1NDczRUZCM0M1QUU4QTBDNDc2NDdCN0UwRkRFNTg4 NkI2QjFGQTMwHhcNMjYwNzAxMDEyNTM1WhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0NmM4Zi1kMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyH5c/qE+VzW7U9XzzUylmQPmfVtDxSpEiViSVMll0HmMN1GlPeBz9BlzltDY bVuH8aJSr5KqbEvfWNAHyp+YF/DHygdjDATVzTvFZv+JGEtKdEI4mqwmIKKPtwg5 sjIYeCsbISjL6uTCI9YDlGThOoDvUeUGhWY+GgMQKCdHbSxfOWiISFIby+glFqUx 6t2nc88v7rx7tt8UM5tgc0ZjPzStvQKlVHXtPb884oAignyrKmx3jPGjeB2qTu6s aoyxOhghpUXsksnwbB6oq5pyJfne2kzugv6raKuS69dkiTkMIwAIvPFakUCgB5+I JqyC8/oCSZypsa7CMhbo2kn95wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDlQrLAh hGg/q648b/oHvfj+R5rGMB8GA1UdIwQYMBaAFBVHPvs8WuigxHZHt+D95Yhrax+j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRBMS84NUZBMENFODgw QjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZLREVka2UzNFAzbGlHdHJI Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYy0tenhhNktERWRrZTM0UDNsaUd0ckg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U0QTEvODVGQTBDRTg4MEI3MTFFQzlGRUIyQzY3QzRGOUFFMDIvMkQ4MUZGMzY4 MEJCMTFFQzhGRDc2NjNEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4qsMA0EAgACMAcDBQAkBm/AMA0GCSqGSIb3DQEBCwUAA4IBAQA9 ce795BhQrcy9E10cadyNW+6yTHH29i7z3/+CyqI2Dy+ouz5NPqkqZ5K5sVfQx1Uu /0UWzxoZbhVd0Vdk+eqr9xuirL5ERjbVzkZz+iyHSY/00wK8K6b8rTWK9mZ5ezsV O7UM+fddgKiLkI1yWUb9CWuLzrbiqseGQb0+9M/LQK8yeq9CtAAAbsdlR1wjpSHG EyZb3Cd8k+RZ73/4iNeRezbKWDnRgPEedKQ6NAv51uOyQ8uOKpMzcl4hDD5PPIcP gBsrHpKiB7O4RQSAutKDNuncWoZ8K0UMq8JRLwOHIQojN0UVoLNRa+qoW4Z62ack 7jsWzdHJ3G9hvqxqjQdq -----END CERTIFICATE-----Generated at Fri Jul 24 19:45:46 2026 by rpki-client