$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa File: BD22841E9E4911E9A136D25AC4F9AE02.roa (raw, json) Hash identifier: /lp2Z8VQhDI00l+o4slVgOYMfv7oLB/2J79jG65CBNY= Subject key identifier: 9C:FD:18:DD:4E:0D:47:D4:A8:90:C9:E4:A1:23:88:71:31:E3:42:77 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0F2C Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa Signing time: Mon 06 Jul 2026 18:02:54 +0000 ROA not before: Mon 06 Jul 2026 18:02:54 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 58947 IP address blocks: 103.26.138.0/23 maxlen: 23 103.26.138.0/24 maxlen: 24 103.26.139.0/24 maxlen: 24 103.132.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3884 (0xf2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: Jul 6 18:02:54 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4bedce-188b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:61:bd:48:56:92:08:96:c0:0c:61:6a:27: 47:46:f3:21:64:b2:53:e3:5b:19:8a:d8:84:73:72: 7a:1d:ce:57:1d:69:e2:59:c5:88:93:47:00:17:0f: 61:d6:7a:e6:cd:66:16:c1:ec:f8:76:ba:a7:d7:f8: 73:a4:cd:aa:2f:5e:b0:14:49:62:9f:aa:cb:60:15: ee:86:c8:08:30:a5:d4:a6:f2:c0:75:8a:5f:bc:b2: 7a:70:99:94:9d:8a:74:58:a3:0f:a5:3f:37:35:8a: 0d:0f:ab:ac:4e:55:0e:63:e7:8f:15:bb:bf:2e:35: 0a:9c:b6:83:73:74:ef:78:5e:47:90:57:cb:95:70: fd:83:7c:cf:bf:e1:77:c5:62:1d:ba:cc:da:ef:24: 38:d6:85:fa:9c:dc:48:bc:bf:2d:4d:77:ac:1a:1a: 12:dc:f7:62:40:4a:d0:75:4d:f1:db:64:d7:ad:f3: 92:58:50:7b:51:fd:10:f9:fd:76:68:12:08:0c:89: 98:57:42:6a:27:91:3f:6b:22:3a:b7:28:ed:70:35: 04:df:ab:34:fd:67:ae:06:a1:0d:73:4d:e4:22:ee: 12:59:67:44:5d:10:9d:a7:50:ce:3e:01:e7:94:f1: 4f:7f:4e:9a:30:6a:3b:3f:6f:73:4d:ea:7e:3a:23: 23:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FD:18:DD:4E:0D:47:D4:A8:90:C9:E4:A1:23:88:71:31:E3:42:77 X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.26.138.0/23 103.132.153.0/24 Signature Algorithm: sha256WithRSAEncryption 34:ba:9d:e9:18:ed:4d:44:48:e5:26:28:59:f0:54:6c:32:7c: 39:c7:07:40:2e:72:03:97:f9:c5:87:09:14:ed:34:c9:53:5f: b4:48:b4:2e:f0:0f:a6:cb:3f:d7:3e:ef:82:89:e2:b2:7b:3f: 38:49:8a:a0:5b:76:84:fb:91:6f:ba:3c:a0:e9:d7:fd:e0:8d: 23:62:7a:18:73:d4:1d:58:b5:a7:1b:b6:6e:5b:98:ee:c4:7a: be:60:16:53:5c:7e:6d:59:c4:74:d3:72:34:51:2b:5a:71:61: 99:f8:5d:ad:56:9b:84:d2:3f:72:b2:8a:b9:d6:18:a1:ef:f0: 89:8f:ab:9f:be:8f:c1:41:1f:9f:bf:48:b1:0e:92:f9:0b:19: b5:d3:3a:07:94:a7:0f:18:84:40:b1:da:2e:dc:a9:e6:36:5b: 2e:56:69:fc:41:d1:d4:3d:83:d5:d1:69:cf:e6:a1:06:0c:40: b9:c2:c9:de:76:19:34:d8:1f:80:a9:78:2c:f9:a3:ba:57:dc: 22:84:2a:8e:9f:18:7c:e1:1d:bd:e8:58:33:11:95:7b:fd:13: 9d:d2:34:1a:40:5e:31:f1:b3:b4:2d:ae:e2:dd:27:79:ec:c3: 5d:ab:e4:46:c8:64:1b:df:af:76:61:3c:5b:06:44:82:01:1e: 8b:ee:9b:29 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjYwNzA2MTgwMjU0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZWRjZS0xODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6BhvUhWkgiWwAxhaidHRvMhZLJT41sZitiEc3J6Hc5XHWniWcWIk0cAFw9h 1nrmzWYWwez4drqn1/hzpM2qL16wFElin6rLYBXuhsgIMKXUpvLAdYpfvLJ6cJmU nYp0WKMPpT83NYoND6usTlUOY+ePFbu/LjUKnLaDc3TveF5HkFfLlXD9g3zPv+F3 xWIdusza7yQ41oX6nNxIvL8tTXesGhoS3PdiQErQdU3x22TXrfOSWFB7Uf0Q+f12 aBIIDImYV0JqJ5E/ayI6tyjtcDUE36s0/WeuBqENc03kIu4SWWdEXRCdp1DOPgHn lPFPf06aMGo7P29zTep+OiMjEwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJz9GN1O DUfUqJDJ5KEjiHEx40J3MB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExNDkvMjRCQjI0Q0U5RTQ5MTFFOTlGOEJDQzU5QzRGOUFFMDIvQkQyMjg0MUU5 RTQ5MTFFOUExMzZEMjVBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZxqKAwQAZ4SZMA0GCSqGSIb3DQEBCwUAA4IBAQA0up3pGO1NREjl JihZ8FRsMnw5xwdALnIDl/nFhwkU7TTJU1+0SLQu8A+myz/XPu+CieKyez84SYqg W3aE+5Fvujyg6df94I0jYnoYc9QdWLWnG7ZuW5juxHq+YBZTXH5tWcR003I0USta cWGZ+F2tVpuE0j9ysoq51hih7/CJj6ufvo/BQR+fv0ixDpL5Cxm10zoHlKcPGIRA sdou3KnmNlsuVmn8QdHUPYPV0WnP5qEGDEC5wsnedhk02B+AqXgs+aO6V9wihCqO nxh84R296FgzEZV7/ROd0jQaQF4x8bO0La7i3Sd57MNdq+RGyGQb3692YTxbBkSC AR6L7psp -----END CERTIFICATE-----Generated at Fri Jul 24 04:58:39 2026 by rpki-client