$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/A04E05E42CE911EC8F99F486C4F9AE02.roa File: A04E05E42CE911EC8F99F486C4F9AE02.roa (raw, json) Hash identifier: eXdG4KSBtXeVILxvbF2EYbNiV8EJAIDXweLkMjftKrc= Subject key identifier: FA:F0:FD:1E:0F:06:F7:6F:EA:F6:5C:86:A0:97:1A:D0:83:98:13:BF Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Certificate serial: 14A6 Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/A04E05E42CE911EC8F99F486C4F9AE02.roa Signing time: Fri 31 Jul 2026 17:33:06 +0000 ROA not before: Fri 31 Jul 2026 17:33:06 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 137826 IP address blocks: 103.115.23.0/24 maxlen: 24 103.139.194.0/24 maxlen: 24 2001:df5:1b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 16:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5286 (0x14a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D15, serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Validity Not Before: Jul 31 17:33:06 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a6cdc52-2628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4f:19:34:e0:74:5f:ce:fe:48:6b:94:be:89: 9d:33:ef:29:0d:3d:c6:6e:13:da:bb:ab:29:9b:04: db:53:71:de:30:fa:2f:58:c0:ed:5c:e8:42:75:02: 2c:a5:23:8c:e2:46:15:33:eb:7a:48:bb:dc:6f:48: 74:3a:a6:13:6d:c3:01:8f:54:15:94:06:22:76:c4: 9c:ed:3d:0f:83:e9:af:f2:19:71:5f:6b:5e:99:6d: fe:1d:03:0b:54:e6:94:d6:b0:ff:31:9b:cf:e9:72: 4c:d5:27:88:a4:44:0c:ff:5a:b9:b3:a8:e1:a9:73: 16:b3:3d:e8:c7:31:dd:63:90:ba:94:b0:e9:e9:37: b0:51:65:50:ff:9c:12:1c:98:b5:87:5f:35:8c:f8: 57:3b:5b:8d:62:2c:8a:a3:bb:74:22:68:db:51:9a: 9d:c5:eb:30:9a:fe:6e:5a:5c:d8:6c:88:48:6c:05: 21:ec:2f:e6:8a:4e:ce:4a:cd:5c:d8:6a:49:31:25: 96:59:0d:6d:34:d0:7f:e8:53:03:4c:e4:33:d4:c1: 62:a1:48:91:de:26:49:c9:20:2f:9a:00:e3:db:21: 7c:03:b1:22:02:75:68:44:66:97:24:d3:b6:4e:bb: 2b:49:9a:cc:4e:1c:c0:a0:7c:81:44:a8:5a:8a:1f: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F0:FD:1E:0F:06:F7:6F:EA:F6:5C:86:A0:97:1A:D0:83:98:13:BF X509v3 Authority Key Identifier: keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/A04E05E42CE911EC8F99F486C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.23.0/24 103.139.194.0/24 IPv6: 2001:df5:1b00::/48 Signature Algorithm: sha256WithRSAEncryption 1b:82:a1:87:bf:9b:cc:64:fa:9d:04:14:12:c8:ca:28:18:fa: bd:90:af:8d:f2:19:e3:03:b3:e7:be:18:c7:22:22:60:0e:a4: 04:1d:2a:3b:5a:79:55:00:70:39:d5:72:fb:aa:e0:52:0e:22: e9:94:0b:d5:76:24:aa:aa:5a:c1:17:64:af:9e:66:ad:0b:e7: 04:a3:86:e1:d6:c2:64:bf:2a:1d:0d:3e:f1:c6:f7:a9:80:73: 98:e1:56:aa:08:07:aa:99:48:09:86:0d:a6:c2:5f:8f:f3:14: 9b:61:88:0a:68:f9:28:9f:44:3e:64:77:ca:29:fe:dd:43:b4: 52:9b:f6:08:0b:23:2b:0d:08:27:5b:8c:33:c6:7a:1d:a3:5f: 8a:d6:cd:be:a8:0d:c1:97:61:5f:43:5b:42:4d:3a:d6:29:e5: d7:d1:cb:ad:37:54:2e:24:25:35:06:97:8b:0f:7d:27:86:5a: cb:59:29:56:a7:28:18:c6:6c:5c:6f:4a:de:5e:f2:6e:bb:0f: 2f:37:1f:7b:13:0a:52:96:8f:7b:b1:6e:aa:6f:8a:d3:11:92: 97:92:66:c2:47:f5:e7:bc:74:da:cc:4b:f1:72:bf:83:d0:1a: 74:fa:5a:90:17:15:f9:4d:1e:03:47:85:3a:fa:58:9c:5a:80: 24:77:0a:af -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICFKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMTUxMTAvBgNVBAUTKDkzQzRENzREMThGNTJDRUE1ODUyODBCQjMzMTJGMzEw RTEyMEMwRTkwHhcNMjYwNzMxMTczMzA2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZjZGM1Mi0yNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA408ZNOB0X87+SGuUvomdM+8pDT3GbhPau6spmwTbU3HeMPovWMDtXOhCdQIs pSOM4kYVM+t6SLvcb0h0OqYTbcMBj1QVlAYidsSc7T0Pg+mv8hlxX2temW3+HQML VOaU1rD/MZvP6XJM1SeIpEQM/1q5s6jhqXMWsz3oxzHdY5C6lLDp6TewUWVQ/5wS HJi1h181jPhXO1uNYiyKo7t0ImjbUZqdxeswmv5uWlzYbIhIbAUh7C/mik7OSs1c 2GpJMSWWWQ1tNNB/6FMDTOQz1MFioUiR3iZJySAvmgDj2yF8A7EiAnVoRGaXJNO2 TrsrSZrMThzAoHyBRKhaih+irwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFPrw/R4P Bvdv6vZchqCXGtCDmBO/MB8GA1UdIwQYMBaAFJPE100Y9SzqWFKAuzMS8xDhIMDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QxNS83QzY4NUE4Mjk1 QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxPcFlVb0M3TXhMekVPRWd3 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4VFhUUmoxTE9wWVVvQzdNeEx6RU9FZ3dPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNEMTUvN0M2ODVBODI5NUI5MTFFOEE2ODhCNjBFQzRGOUFFMDIvQTA0RTA1RTQy Q0U5MTFFQzhGOTlGNDg2QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ3MXAwQAZ4vCMA8EAgACMAkDBwAgAQ31GwAwDQYJKoZIhvcNAQEL BQADggEBABuCoYe/m8xk+p0EFBLIyigY+r2Qr43yGeMDs+e+GMciImAOpAQdKjta eVUAcDnVcvuq4FIOIumUC9V2JKqqWsEXZK+eZq0L5wSjhuHWwmS/Kh0NPvHG96mA c5jhVqoIB6qZSAmGDabCX4/zFJthiApo+SifRD5kd8op/t1DtFKb9ggLIysNCCdb jDPGeh2jX4rWzb6oDcGXYV9DW0JNOtYp5dfRy603VC4kJTUGl4sPfSeGWstZKVan KBjGbFxvSt5e8m67Dy83H3sTClKWj3uxbqpvitMRkpeSZsJH9ee8dNrMS/Fyv4PQ GnT6WpAXFflNHgNHhTr6WJxagCR3Cq8= -----END CERTIFICATE-----Generated at Thu Oct 1 16:18:39 2026 by rpki-client