$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/4A9F953EE29611EF8E06890AC4F9AE02.roa File: 4A9F953EE29611EF8E06890AC4F9AE02.roa (raw, json) Hash identifier: rWWqQWgU03MaEVJeym8Sjswrxqvq6LjV7cgLRAuddRs= Subject key identifier: EF:EB:5F:F5:80:63:82:8C:68:16:FC:BB:F2:04:51:37:68:EC:C6:0F Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Certificate serial: 0958 Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/4A9F953EE29611EF8E06890AC4F9AE02.roa Signing time: Mon 31 Aug 2026 20:40:14 +0000 ROA not before: Mon 31 Aug 2026 20:40:14 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 140999 IP address blocks: 103.153.18.0/23 maxlen: 23 103.207.29.0/24 maxlen: 24 2001:df4:2980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2392 (0x958) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Validity Not Before: Aug 31 20:40:14 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a95e6ae-8c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b7:5d:41:36:49:cb:11:93:8f:3d:aa:58:28: 9b:0a:4d:cd:7d:f8:59:83:57:29:49:0d:d3:bb:da: 16:d6:00:aa:67:4e:08:e8:38:e8:bb:a4:7c:0d:4a: e2:2c:da:fa:ef:dd:b6:10:51:fd:e8:1f:2e:bc:cf: 4c:95:b1:5a:7c:b2:48:67:48:07:ef:ad:e7:82:4a: 84:95:eb:7f:71:08:fa:2c:81:e8:31:72:68:2a:1f: 63:e1:d7:96:5d:0d:1d:f0:6d:de:85:22:b5:df:81: 96:ef:9d:ed:39:b9:c1:84:75:06:cb:17:c4:7d:07: 75:45:6e:4c:22:85:dd:4e:35:cf:7e:73:be:13:96: 42:21:15:14:8d:3d:fb:1a:00:05:71:bd:d2:c5:44: 77:37:4e:3f:d1:a4:62:5a:d9:b6:17:60:c4:49:75: 56:99:9e:b6:a9:28:b4:ea:e3:53:5f:28:a0:48:91: a0:8d:cf:53:54:b4:76:70:23:b5:f9:cb:21:17:36: 47:36:bb:b7:4f:11:29:16:3f:32:e1:bc:3e:44:f6: 4a:5d:d6:00:76:e8:b7:6c:61:b9:c2:65:30:18:ac: 03:09:80:4a:a9:d0:39:5a:b0:a9:88:16:62:5f:ea: 94:0c:73:50:27:2f:72:2e:f3:02:e4:93:13:eb:6d: 0b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EB:5F:F5:80:63:82:8C:68:16:FC:BB:F2:04:51:37:68:EC:C6:0F X509v3 Authority Key Identifier: keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/4A9F953EE29611EF8E06890AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.18.0/23 103.207.29.0/24 IPv6: 2001:df4:2980::/48 Signature Algorithm: sha256WithRSAEncryption 1d:47:8e:17:3e:84:2f:ef:df:ec:14:fc:ff:7d:92:0f:b3:bb: a6:7c:03:78:1b:85:6e:67:30:96:e7:fa:72:a1:c2:c5:6a:67: 31:a0:3f:fc:0d:a3:16:43:57:85:e0:f9:98:12:d3:62:21:43: 98:b6:3a:f3:02:f4:f2:d8:c9:e2:8c:18:98:e6:d7:ce:72:b7: 41:7a:b8:3c:a2:58:8d:71:a9:7f:f2:00:4d:c2:8d:6c:e6:4b: 54:2d:38:50:7a:ef:da:fa:e7:37:17:41:eb:d6:9e:56:fc:68: 72:74:f7:2f:f4:eb:b0:48:3f:aa:d4:bb:b7:cf:e0:28:f4:11: 4b:31:f7:0c:cd:4c:33:a6:33:1d:1f:61:02:99:8b:df:50:9e: a6:80:4f:64:70:af:87:ea:e5:a9:13:c9:6b:da:27:65:63:be: e7:ae:f0:36:20:ef:55:33:3c:82:8c:fb:83:30:55:77:57:7a: d3:a0:f7:83:e0:e9:98:9e:c2:9c:a7:f9:30:a3:53:a9:c6:c1: 6f:76:d8:2b:fe:d2:d3:47:d9:3e:99:40:e6:ae:44:2d:60:8e: 13:1c:02:52:11:29:9a:5f:c4:3e:1d:26:74:c8:2c:8a:af:e8: a1:6c:77:91:45:66:5e:8f:b0:3f:0e:f7:5e:3e:ea:19:2d:aa: c6:f8:1f:75 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIxNzYxMTAvBgNVBAUTKEMwOUQxMkM3Q0EyRUI0RDM1Q0E1MEE5MzlEM0Q5Q0JF ODE3RTM5QUQwHhcNMjYwODMxMjA0MDE0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1ZTZhZS04YzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bddQTZJyxGTjz2qWCibCk3NffhZg1cpSQ3Tu9oW1gCqZ04I6Djou6R8DUri LNr67922EFH96B8uvM9MlbFafLJIZ0gH763ngkqElet/cQj6LIHoMXJoKh9j4deW XQ0d8G3ehSK134GW753tObnBhHUGyxfEfQd1RW5MIoXdTjXPfnO+E5ZCIRUUjT37 GgAFcb3SxUR3N04/0aRiWtm2F2DESXVWmZ62qSi06uNTXyigSJGgjc9TVLR2cCO1 +cshFzZHNru3TxEpFj8y4bw+RPZKXdYAdui3bGG5wmUwGKwDCYBKqdA5WrCpiBZi X+qUDHNQJy9yLvMC5JMT620LHQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFO/rX/WA Y4KMaBb8u/IEUTdo7MYPMB8GA1UdIwQYMBaAFMCdEsfKLrTTXKUKk509nL6Bfjmt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjE3Ni84OEFCOEU5NEM2 RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXROTmNwUXFUblQyY3ZvRi1P YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dKMFN4OG91dE5OY3BRcVRuVDJjdm9GLU9hMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTIxNzYvODhBQjhFOTRDNkZGMTFFQTgyNTJFMTA5QzRGOUFFMDIvNEE5Rjk1M0VF Mjk2MTFFRjhFMDY4OTBBQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQBZ5kSAwQAZ88dMA8EAgACMAkDBwAgAQ30KYAwDQYJKoZIhvcNAQEL BQADggEBAB1Hjhc+hC/v3+wU/P99kg+zu6Z8A3gbhW5nMJbn+nKhwsVqZzGgP/wN oxZDV4Xg+ZgS02IhQ5i2OvMC9PLYyeKMGJjm185yt0F6uDyiWI1xqX/yAE3CjWzm S1QtOFB679r65zcXQevWnlb8aHJ09y/067BIP6rUu7fP4Cj0EUsx9wzNTDOmMx0f YQKZi99QnqaAT2Rwr4fq5akTyWvaJ2Vjvueu8DYg71UzPIKM+4MwVXdXetOg94Pg 6Ziewpyn+TCjU6nGwW922Cv+0tNH2T6ZQOauRC1gjhMcAlIRKZpfxD4dJnTILIqv 6KFsd5FFZl6PsD8O914+6hktqsb4H3U= -----END CERTIFICATE-----Generated at Mon Sep 28 18:00:26 2026 by rpki-client