$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/AFAF715E4F6111F180E0E950C4833773.roa File: AFAF715E4F6111F180E0E950C4833773.roa (raw, json) Hash identifier: GsyceID1s8Z+mukTTJfCIBEy3HjQ/O+E/I8IMk9cFiY= Subject key identifier: 17:CB:C2:AF:33:BC:57:95:95:07:E7:30:05:7C:8E:78:AB:DA:3E:7F Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Certificate serial: 0F04 Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/AFAF715E4F6111F180E0E950C4833773.roa Signing time: Mon 14 Sep 2026 18:34:51 +0000 ROA not before: Mon 14 Sep 2026 18:34:51 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 149765 IP address blocks: 103.120.200.0/24 maxlen: 24 103.120.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3844 (0xf04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Validity Not Before: Sep 14 18:34:51 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa83e4b-8e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:12:8c:17:0f:0b:10:d9:ca:4e:35:82:27: a2:f3:c1:55:ba:ce:2a:16:06:d5:e8:43:35:90:cb: 19:a9:b4:5d:eb:7f:b8:d3:46:ed:7c:15:35:38:c5: 45:9a:37:b8:10:bb:e0:2d:b7:91:29:3a:98:8c:77: 18:32:f1:21:c9:c4:fb:bb:c7:f8:8b:88:ab:aa:41: 37:24:52:42:b8:de:38:18:ae:33:ef:e4:e5:7e:5d: 62:1f:fc:d2:a2:f3:70:f4:61:44:d9:be:78:6a:55: 56:9f:40:64:c1:d7:ac:17:47:25:f5:a9:ec:32:97: ef:65:17:57:c3:29:a2:f8:21:72:f5:20:26:d9:35: 1c:19:40:54:d8:86:b0:c3:23:d7:2e:c0:56:42:87: ef:1b:e4:d5:ec:89:8f:2a:89:6b:2d:6f:b8:04:09: 23:d0:5d:38:cf:b7:49:93:1c:d3:ac:55:50:b0:4f: 4e:e7:39:66:42:50:a4:32:f9:f9:dd:d6:5f:3c:55: 86:c8:15:75:52:fd:52:8d:9b:e8:ca:17:d2:2c:d7: 96:a2:d6:48:42:2a:aa:37:ce:6b:83:d0:7b:7a:3d: 7b:05:d8:e4:34:fb:fe:13:73:0d:7a:cf:0a:8b:05: 22:e9:2c:13:07:3a:f5:48:ae:9b:51:fd:32:cc:b4: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CB:C2:AF:33:BC:57:95:95:07:E7:30:05:7C:8E:78:AB:DA:3E:7F X509v3 Authority Key Identifier: keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/AFAF715E4F6111F180E0E950C4833773.roa sbgp-ipAddrBlock: critical IPv4: 103.120.200.0/24 103.120.202.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:9d:37:09:9c:26:a7:d5:75:22:43:9e:4f:63:44:3c:64:52: ae:17:6a:b5:9b:46:e7:21:25:83:f5:12:d1:9d:33:3a:de:10: 03:90:3d:6b:9d:d3:26:8b:50:fc:ce:fb:f9:2d:be:77:6b:28: b6:7d:42:3a:4b:ee:03:a3:7a:f5:4f:f8:f5:d8:df:70:e1:17: 61:d3:67:8b:4a:ab:02:52:e6:ac:69:a5:f9:b5:6a:7c:ce:5c: d3:c4:80:78:2d:7d:70:a0:40:af:1a:0a:d4:8a:6c:73:06:94: cd:ba:bc:54:05:d4:a5:a9:57:22:23:50:2f:b9:6b:a6:da:4a: 40:c8:1a:55:3b:8a:79:ea:ed:25:57:44:8a:78:05:62:2b:8d: 94:f1:83:e9:fd:b6:93:70:07:9d:d4:f5:ab:84:dd:2f:02:6d: af:8b:6a:d2:66:5a:1a:e9:92:5a:d5:2d:3e:56:2a:2f:de:0a: b3:ee:86:7d:71:60:3e:b3:c3:b7:7e:31:21:1b:9d:4c:0d:37: f9:d8:a9:57:1a:f4:06:57:63:b2:26:78:87:9b:41:00:ee:a1: e5:3f:94:6c:b3:58:a7:ae:d2:c3:4f:72:63:d2:86:43:bd:1f: 12:fd:02:42:98:cb:65:7e:fc:f3:79:e5:f6:b1:57:8d:b1:a1: 37:8b:04:b6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw M0I3MkUyMzYwHhcNMjYwOTE0MTgzNDUxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4M2U0Yi04ZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRYSjBcPCxDZyk41giei88FVus4qFgbV6EM1kMsZqbRd63+400btfBU1OMVF mje4ELvgLbeRKTqYjHcYMvEhycT7u8f4i4irqkE3JFJCuN44GK4z7+Tlfl1iH/zS ovNw9GFE2b54alVWn0BkwdesF0cl9ansMpfvZRdXwymi+CFy9SAm2TUcGUBU2Iaw wyPXLsBWQofvG+TV7ImPKolrLW+4BAkj0F04z7dJkxzTrFVQsE9O5zlmQlCkMvn5 3dZfPFWGyBV1Uv1SjZvoyhfSLNeWotZIQiqqN85rg9B7ej17BdjkNPv+E3MNes8K iwUi6SwTBzr1SK6bUf0yzLTZdwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBfLwq8z vFeVlQfnMAV8jnir2j5/MB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTMzRDcvREM3RDg4NjRBRUIwMTFFOThEMDhFMTNDQzRGOUFFMDIvQUZBRjcxNUU0 RjYxMTFGMTgwRTBFOTUwQzQ4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ3jIAwQAZ3jKMA0GCSqGSIb3DQEBCwUAA4IBAQBunTcJnCan1XUi Q55PY0Q8ZFKuF2q1m0bnISWD9RLRnTM63hADkD1rndMmi1D8zvv5Lb53ayi2fUI6 S+4Do3r1T/j12N9w4Rdh02eLSqsCUuasaaX5tWp8zlzTxIB4LX1woECvGgrUimxz BpTNurxUBdSlqVciI1AvuWum2kpAyBpVO4p56u0lV0SKeAViK42U8YPp/baTcAed 1PWrhN0vAm2vi2rSZloa6ZJa1S0+Viov3gqz7oZ9cWA+s8O3fjEhG51MDTf52KlX GvQGV2OyJniHm0EA7qHlP5Rss1inrtLDT3Jj0oZDvR8S/QJCmMtlfvzzeeX2sVeN saE3iwS2 -----END CERTIFICATE-----Generated at Sat Sep 26 18:02:25 2026 by rpki-client