$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/9E393ADA657011EB96AF8F49C4F9AE02.roa File: 9E393ADA657011EB96AF8F49C4F9AE02.roa (raw, json) Hash identifier: NM6SP/X7SwB4LMFI+MyFHy33EMMjmU2221yFWJZXvUo= Subject key identifier: 00:33:77:3F:8F:67:20:84:90:C4:CD:72:18:06:D0:6B:61:37:DD:44 Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Certificate serial: 08DB Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/9E393ADA657011EB96AF8F49C4F9AE02.roa Signing time: Wed 04 Nov 2026 21:38:52 +0000 ROA not before: Wed 04 Nov 2026 21:38:51 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 139648 IP address blocks: 103.156.22.0/23 maxlen: 23 103.156.22.0/24 maxlen: 24 103.156.23.0/24 maxlen: 24 2001:df4:f780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2267 (0x8db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Validity Not Before: Nov 4 21:38:51 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6aeba5eb-3527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:8b:f3:5d:0c:c5:ce:3e:ec:23:e0:30:6e: 7b:9f:13:56:2a:31:53:d2:6f:0b:40:57:c5:e4:2d: ad:5b:84:2b:55:1c:56:04:77:c1:1b:8e:d5:84:75: 10:c5:42:e9:8e:9a:7d:4a:08:cb:7c:c2:12:6a:e1: ad:53:17:36:23:2c:5d:c8:8e:80:3d:d6:13:26:b7: a1:cb:9b:72:a0:46:d1:0b:89:51:75:0b:80:ec:08: a3:cb:4e:9c:ff:cd:41:ba:bd:0d:cc:3e:99:a4:f9: f4:5e:b9:fd:42:8c:b7:1c:d1:88:e8:59:e1:b6:70: b0:95:85:d5:41:66:e7:55:82:67:57:00:96:7a:03: de:6c:8f:0b:19:e3:43:6f:2f:88:6a:a3:cd:a9:7b: 54:0c:93:44:44:17:1f:ee:7b:40:d0:ce:c7:38:e8: 8f:89:1a:5a:ac:90:45:b2:02:8d:82:09:16:e7:23: ae:08:71:b2:71:84:a0:9c:be:6e:cb:2a:40:b5:ed: 16:44:fb:79:24:8a:06:ba:0d:77:50:9d:a0:88:3b: 4e:7f:90:a1:93:61:e5:2c:e3:a5:3f:06:40:8f:b6: ef:34:8c:7e:24:30:06:3c:6e:51:39:c7:4e:48:5f: 4b:52:cd:de:ae:6d:74:2c:26:1b:50:d0:71:ce:ce: b6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:33:77:3F:8F:67:20:84:90:C4:CD:72:18:06:D0:6B:61:37:DD:44 X509v3 Authority Key Identifier: keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/9E393ADA657011EB96AF8F49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.156.22.0/23 IPv6: 2001:df4:f780::/48 Signature Algorithm: sha256WithRSAEncryption e6:b8:0c:90:d0:7a:58:12:1e:e7:29:f5:5d:d9:bd:d1:20:63: c0:3d:63:41:9e:8d:87:57:0d:71:b1:07:33:b6:f1:57:f8:48: 19:18:17:d9:bd:92:9b:da:7f:bd:87:47:55:c2:93:66:17:ba: b0:34:5a:a5:50:4f:9b:1d:27:e1:24:71:39:01:80:f5:2d:23: 4d:c6:72:f4:d5:14:05:ce:b0:a1:cc:f2:bc:24:91:90:b7:7f: c9:21:84:d2:11:06:4b:32:db:24:65:75:5a:06:dc:df:de:b6: cd:54:cb:dc:6d:03:00:c5:90:2f:4e:55:e8:e8:56:a3:0b:2b: 70:98:ad:77:96:a6:c6:3a:29:0b:77:b1:e4:02:91:10:7d:ca: d9:2f:1f:10:90:16:a3:85:0c:4f:a2:25:ad:63:ba:1e:f8:f5: fb:34:7d:6a:58:34:04:d7:0a:04:ed:f6:39:d4:52:5e:76:ba: 2e:75:d3:27:a2:82:00:0c:f8:8b:d5:43:3e:7a:e9:2f:b3:5f: 2c:62:46:ec:83:1d:74:1d:3a:01:65:35:ac:9b:b4:de:87:a9: 46:8f:a6:34:4f:47:a1:94:2f:e7:c6:20:e6:71:2f:53:44:25: d0:c5:d6:a6:5f:c1:d5:cf:06:95:4a:85:7a:77:be:41:b1:f2: 65:44:29:d6 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG QUQ1QkNCQzAwHhcNMjYxMTA0MjEzODUxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWViYTVlYi0zNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspaL810Mxc4+7CPgMG57nxNWKjFT0m8LQFfF5C2tW4QrVRxWBHfBG47VhHUQ xULpjpp9SgjLfMISauGtUxc2IyxdyI6APdYTJrehy5tyoEbRC4lRdQuA7Aijy06c /81Bur0NzD6ZpPn0Xrn9Qoy3HNGI6FnhtnCwlYXVQWbnVYJnVwCWegPebI8LGeND by+IaqPNqXtUDJNERBcf7ntA0M7HOOiPiRparJBFsgKNggkW5yOuCHGycYSgnL5u yypAte0WRPt5JIoGug13UJ2giDtOf5Chk2HlLOOlPwZAj7bvNIx+JDAGPG5ROcdO SF9LUs3erm10LCYbUNBxzs62VQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAAzdz+P ZyCEkMTNchgG0GthN91EMB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2 RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTgzOEYvQTlGNzczOTgwNkUxMTFFQjlCMzM1QzZEQzRGOUFFMDIvOUUzOTNBREE2 NTcwMTFFQjk2QUY4RjQ5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5wWMA8EAgACMAkDBwAgAQ3094AwDQYJKoZIhvcNAQELBQADggEB AOa4DJDQelgSHucp9V3ZvdEgY8A9Y0GejYdXDXGxBzO28Vf4SBkYF9m9kpvaf72H R1XCk2YXurA0WqVQT5sdJ+EkcTkBgPUtI03GcvTVFAXOsKHM8rwkkZC3f8khhNIR Bksy2yRldVoG3N/ets1Uy9xtAwDFkC9OVejoVqMLK3CYrXeWpsY6KQt3seQCkRB9 ytkvHxCQFqOFDE+iJa1juh749fs0fWpYNATXCgTt9jnUUl52ui510yeiggAM+IvV Qz566S+zXyxiRuyDHXQdOgFlNaybtN6HqUaPpjRPR6GUL+fGIOZxL1NEJdDF1qZf wdXPBpVKhXp3vkGx8mVEKdY= -----END CERTIFICATE-----Generated at Sun Nov 15 01:16:06 2026 by rpki-client