$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/9DF7DA5C557C11E7B34BCE81C4F9AE02.roa File: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (raw, json) Hash identifier: aa78yEwla8gioa81Qat/hfsABb5YPFtp7OCbzreLAxQ= Subject key identifier: 60:4B:F9:57:31:45:15:C6:7F:D8:83:4E:1E:85:80:25:FA:44:5C:10 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1B31 Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/9DF7DA5C557C11E7B34BCE81C4F9AE02.roa Signing time: Thu 08 Oct 2026 16:29:20 +0000 ROA not before: Thu 08 Oct 2026 16:29:20 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134433 IP address blocks: 103.241.84.0/24 maxlen: 24 103.241.85.0/24 maxlen: 24 103.241.86.0/24 maxlen: 24 103.241.87.0/24 maxlen: 24 2407:d500::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6961 (0x1b31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Oct 8 16:29:20 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac7c4e0-14dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:99:27:e8:42:98:33:94:20:47:a6:81:b0:24: 48:00:cf:a9:fe:dd:10:a7:04:de:92:d8:fe:a2:e5: 29:4f:9c:a4:ce:b5:d2:7e:6f:03:d6:cf:b7:bd:9e: 14:0b:a4:cd:81:8b:f7:b9:db:14:6c:f1:fe:9e:e4: be:8e:34:63:8e:e4:14:6c:b1:85:a6:3a:cd:7d:72: f5:1a:e8:74:34:e7:cf:61:20:41:b8:ba:8e:c7:2f: 53:11:5e:b1:31:1e:10:b4:5f:d8:99:bf:9e:a3:4f: e0:90:58:08:99:da:50:b9:f9:01:2e:74:9c:dc:3f: 6c:f1:f4:e2:6a:0e:4d:28:8e:7a:18:dc:e6:64:e0: 30:a3:1e:08:8a:1d:84:48:5f:2b:09:83:fd:18:59: 28:ae:ef:f8:cc:46:df:d1:c8:a2:22:5c:2f:e7:59: bc:31:87:35:fd:f7:7c:ad:c2:8f:b5:b8:d4:0a:06: 91:de:c9:d6:27:73:49:f7:ec:96:cf:df:c3:3f:68: 55:de:5b:d8:85:96:a5:ff:1e:43:b9:41:6f:be:fe: 11:21:d6:5d:4e:55:56:01:0d:cf:73:25:be:37:8a: a6:ab:3f:8d:12:30:1b:de:80:98:3b:53:f8:e4:ac: bb:bb:29:28:31:5f:80:cf:03:70:df:e7:04:c3:39: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4B:F9:57:31:45:15:C6:7F:D8:83:4E:1E:85:80:25:FA:44:5C:10 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/9DF7DA5C557C11E7B34BCE81C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.241.84.0/22 IPv6: 2407:d500::/32 Signature Algorithm: sha256WithRSAEncryption 38:ea:33:ac:bb:87:cc:2b:36:41:7c:85:2e:fb:a4:7c:85:5f: c0:7a:b1:36:18:ab:05:60:1c:38:b8:da:23:3e:6c:1a:49:63: 8e:e3:92:ad:5d:1b:e3:90:d2:8c:1f:9d:17:66:0e:49:3e:60: 3c:7f:0a:f1:08:74:b7:24:e5:b4:ea:4f:8f:b0:0b:1e:13:1d: f2:dc:0e:6d:29:3c:e4:37:b7:32:3e:bf:63:d2:a7:b2:04:7f: f4:a0:0b:85:56:a1:34:56:98:0e:88:bb:71:67:b3:03:52:0d: 0c:70:d6:3f:97:3d:a9:ee:1b:88:9a:a3:70:42:85:d4:a4:3d: 9c:c2:d3:6d:3f:c1:1f:c0:5d:11:69:bf:c5:47:e1:33:f9:17: 72:9e:47:bf:05:ef:a8:c8:ba:17:84:e4:64:4f:c3:f7:67:83: 38:47:41:a5:a6:5e:db:b0:02:c9:19:ac:35:42:4f:ef:3a:b1: 54:bd:b4:e9:70:9c:fe:06:6e:93:42:a7:48:f5:cf:0a:06:3d: af:7d:84:19:74:b8:e4:cf:e0:2b:c6:13:94:36:6f:9a:b8:0e: e5:06:9a:d6:66:74:b7:ff:8f:b6:25:fa:c8:f0:b4:fd:9b:d9: b8:57:53:e8:92:9f:2f:41:7c:cf:a4:ad:a4:58:5f:d8:e7:af: ce:19:4f:22 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjYxMDA4MTYyOTIwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM3YzRlMC0xNGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJkn6EKYM5QgR6aBsCRIAM+p/t0QpwTektj+ouUpT5ykzrXSfm8D1s+3vZ4U C6TNgYv3udsUbPH+nuS+jjRjjuQUbLGFpjrNfXL1Guh0NOfPYSBBuLqOxy9TEV6x MR4QtF/Ymb+eo0/gkFgImdpQufkBLnSc3D9s8fTiag5NKI56GNzmZOAwox4Iih2E SF8rCYP9GFkoru/4zEbf0ciiIlwv51m8MYc1/fd8rcKPtbjUCgaR3snWJ3NJ9+yW z9/DP2hV3lvYhZal/x5DuUFvvv4RIdZdTlVWAQ3PcyW+N4qmqz+NEjAb3oCYO1P4 5Ky7uykoMV+AzwNw3+cEwzlRCQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGBL+Vcx RRXGf9iDTh6FgCX6RFwQMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvMkY4Qjg1NTI1NDg1MTFFN0IxRDg0NzEzQzRGOUFFMDIvOURGN0RBNUM1 NTdDMTFFN0IzNEJDRTgxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ/FUMA0EAgACMAcDBQAkB9UAMA0GCSqGSIb3DQEBCwUAA4IBAQA4 6jOsu4fMKzZBfIUu+6R8hV/AerE2GKsFYBw4uNojPmwaSWOO45KtXRvjkNKMH50X Zg5JPmA8fwrxCHS3JOW06k+PsAseEx3y3A5tKTzkN7cyPr9j0qeyBH/0oAuFVqE0 VpgOiLtxZ7MDUg0McNY/lz2p7huImqNwQoXUpD2cwtNtP8EfwF0Rab/FR+Ez+Rdy nke/Be+oyLoXhORkT8P3Z4M4R0Glpl7bsALJGaw1Qk/vOrFUvbTpcJz+Bm6TQqdI 9c8KBj2vfYQZdLjkz+ArxhOUNm+auA7lBprWZnS3/4+2JfrI8LT9m9m4V1Pokp8v QXzPpK2kWF/Y56/OGU8i -----END CERTIFICATE-----Generated at Sun Nov 15 10:55:17 2026 by rpki-client