$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/F22D283A9B3B11EBA5C76B80C4F9AE02.roa File: F22D283A9B3B11EBA5C76B80C4F9AE02.roa (raw, json) Hash identifier: RR4rdf2taLYmcQbOkPT7zfr9pRXmz4C8omvX7wvgBPk= Subject key identifier: 7D:02:6D:5E:53:3C:EE:6B:AC:F7:1C:C5:E5:D4:15:28:5E:62:30:80 Certificate issuer: /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Certificate serial: 0B3A Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/F22D283A9B3B11EBA5C76B80C4F9AE02.roa Signing time: Sat 14 Nov 2026 19:37:29 +0000 ROA not before: Sat 14 Nov 2026 19:37:29 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 141768 IP address blocks: 103.144.40.0/23 maxlen: 23 103.144.40.0/24 maxlen: 24 103.144.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Validity Not Before: Nov 14 19:37:29 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6af8b878-c323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a4:e8:3f:83:d2:e4:29:25:25:40:20:7d:dc: 61:2d:c8:f0:aa:4e:4d:ec:43:9d:e5:16:00:00:92: ed:5d:86:84:2f:1c:4e:a7:01:de:e5:a7:7d:59:db: ba:53:ed:0f:a4:37:8c:d1:e2:ff:3e:5b:d0:0f:d7: e4:e9:3e:a1:a2:29:65:8d:bc:85:e1:12:3e:72:08: 81:14:a8:c1:b4:d4:68:8e:4e:e1:35:18:a6:4b:11: 60:b6:2f:30:da:6c:e8:b5:d6:b8:0a:fc:69:f4:79: 2e:aa:73:1b:90:23:19:66:1a:bb:c2:2f:1b:2d:1f: af:c5:98:25:26:97:ab:6f:10:17:e3:1f:11:ba:5d: cc:cd:1e:e9:7e:ea:c7:9e:06:b7:54:2c:01:d7:69: 02:44:6e:dc:be:89:af:9b:22:3c:08:52:e7:c6:93: 93:85:2f:1d:88:c0:fa:27:32:0e:1d:0c:d2:50:e4: df:31:3c:00:0a:40:e4:95:42:b8:fa:e4:c9:b3:4f: b9:d4:d4:78:3a:70:c7:f5:bc:7b:ff:f6:02:8d:07: e9:3c:12:1e:73:2b:73:13:0c:ed:08:33:f2:43:d7: 65:b2:f6:6c:56:11:0b:6c:e5:8c:e6:dd:75:a3:39: 5b:22:84:ab:66:59:41:e2:97:48:95:b4:28:3e:48: dc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:02:6D:5E:53:3C:EE:6B:AC:F7:1C:C5:E5:D4:15:28:5E:62:30:80 X509v3 Authority Key Identifier: keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/F22D283A9B3B11EBA5C76B80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.144.40.0/23 Signature Algorithm: sha256WithRSAEncryption 46:52:b5:6d:a0:e0:a5:5f:c5:1b:1a:2c:17:33:83:b0:2f:7c: 5e:f4:d2:a9:4f:49:c1:df:91:43:39:cb:d6:22:e5:ef:d0:3b: a0:37:1d:26:b5:a2:2d:7c:f0:33:c0:6d:bf:41:62:e2:8b:d5: 27:4d:27:f9:f4:ad:ad:d2:96:44:96:0a:e8:9f:af:9b:55:2a: 97:dd:f5:eb:0d:17:fb:09:b8:12:77:f9:0a:ea:24:ae:5d:6b: f9:02:56:93:32:58:c1:ed:8e:fb:92:d2:1a:de:b2:6a:ff:8e: f0:b0:e4:bf:49:f4:65:5d:58:4e:cb:b5:ea:25:cf:b9:8f:d0: 3c:6c:7c:5e:1d:f3:df:1d:3c:d8:c5:38:6a:88:b0:33:9f:a1: 9e:fd:1b:27:b5:6b:6b:54:a0:0e:74:13:e7:00:43:2d:40:b1: 5b:4b:36:43:ab:22:bd:79:3c:24:b1:e0:b0:81:91:94:10:fe: 87:6d:1b:b8:70:cf:da:14:62:c6:a9:7c:43:c8:45:18:ab:58: a7:40:8f:d3:c9:07:d6:b2:1d:0f:7f:fa:59:ac:75:0e:b8:99: 76:ea:2a:ec:d7:58:d5:22:04:b7:81:42:83:68:0e:5f:83:09: 55:6a:4f:a8:05:74:ff:f7:5f:7d:bb:1a:cd:d8:8d:78:e1:60: cf:e7:6a:46 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBQ0YxMTAvBgNVBAUTKEM5RUQ0Qjc2NzZFM0Y1QTVCMUY4QTZBMEREN0UyMjFC NjNFNTM0QUIwHhcNMjYxMTE0MTkzNzI5WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWY4Yjg3OC1jMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qToP4PS5CklJUAgfdxhLcjwqk5N7EOd5RYAAJLtXYaELxxOpwHe5ad9Wdu6 U+0PpDeM0eL/PlvQD9fk6T6hoilljbyF4RI+cgiBFKjBtNRojk7hNRimSxFgti8w 2mzotda4Cvxp9HkuqnMbkCMZZhq7wi8bLR+vxZglJperbxAX4x8Rul3MzR7pfurH nga3VCwB12kCRG7cvomvmyI8CFLnxpOThS8diMD6JzIOHQzSUOTfMTwACkDklUK4 +uTJs0+51NR4OnDH9bx7//YCjQfpPBIecytzEwztCDPyQ9dlsvZsVhELbOWM5t11 ozlbIoSrZllB4pdIlbQoPkjcSQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH0CbV5T PO5rrPccxeXUFSheYjCAMB8GA1UdIwQYMBaAFMntS3Z24/WlsfimoN1+Ihtj5TSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFDRi81QUM2MkIyQTcz RTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlhV3gtS2FnM1g0aUcyUGxO S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llMUxkbmJqOWFXeC1LYWczWDRpRzJQbE5Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDJBQ0YvNUFDNjJCMkE3M0UzMTFFQTlCNTk0MzZFQzRGOUFFMDIvRjIyRDI4M0E5 QjNCMTFFQkE1Qzc2QjgwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5AoMA0GCSqGSIb3DQEBCwUAA4IBAQBGUrVtoOClX8UbGiwXM4Ow L3xe9NKpT0nB35FDOcvWIuXv0DugNx0mtaItfPAzwG2/QWLii9UnTSf59K2t0pZE lgron6+bVSqX3fXrDRf7CbgSd/kK6iSuXWv5AlaTMljB7Y77ktIa3rJq/47wsOS/ SfRlXVhOy7XqJc+5j9A8bHxeHfPfHTzYxThqiLAzn6Ge/RsntWtrVKAOdBPnAEMt QLFbSzZDqyK9eTwkseCwgZGUEP6HbRu4cM/aFGLGqXxDyEUYq1inQI/TyQfWsh0P f/pZrHUOuJl26irs11jVIgS3gUKDaA5fgwlVak+oBXT/9199uxrN2I144WDP52pG -----END CERTIFICATE-----Generated at Sun Nov 15 09:48:35 2026 by rpki-client