$ rpki-client -vvf rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/9CF5B0DA72CC11F1892D329F73A30FBC.roa File: 9CF5B0DA72CC11F1892D329F73A30FBC.roa (raw, json) Hash identifier: eAY3YSVsrWhOYnMgrblEMg4l4JfsISH9fA2P7mQ1Kgo= Subject key identifier: 70:4E:3E:32:1B:E5:23:F1:C4:C6:D9:35:E5:A8:10:57:7B:03:B3:70 Certificate issuer: /CN=A91F92B3/serialNumber=C446DD88013359135C3F06D62FFC5C2E5D818D90 Certificate serial: 02 Authority key identifier: C4:46:DD:88:01:33:59:13:5C:3F:06:D6:2F:FC:5C:2E:5D:81:8D:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEbdiAEzWRNcPwbWL_xcLl2BjZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/9CF5B0DA72CC11F1892D329F73A30FBC.roa Signing time: Sun 28 Jun 2026 08:37:36 +0000 ROA not before: Sun 28 Jun 2026 08:37:36 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 393406 IP address blocks: 103.107.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.crl rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEbdiAEzWRNcPwbWL_xcLl2BjZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F92B3, serialNumber=C446DD88013359135C3F06D62FFC5C2E5D818D90 Validity Not Before: Jun 28 08:37:36 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a40dd50-4da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:6c:ea:e9:d9:b8:33:cc:0b:6d:bf:0d:aa: d2:8c:c2:56:b7:ed:71:bd:e0:e1:f2:21:45:ef:3b: f2:02:62:26:25:a9:08:2d:1a:e4:33:f7:c2:52:ea: 05:8c:47:7a:c6:7a:0d:c6:58:c7:c3:1a:da:bb:82: 1f:3a:ec:ce:81:d1:76:7a:f2:dc:5f:31:71:1e:2f: d3:d5:c4:f6:5c:f8:a7:91:26:d1:df:2a:be:84:d7: 49:9a:7c:3c:5e:9a:81:e4:d6:3a:50:e5:7e:cd:10: 27:a5:78:28:a6:ef:e1:47:4f:c8:84:ae:d0:bb:64: 82:e0:9a:ea:fc:40:a6:32:1d:8f:aa:e6:bc:e4:7e: 38:ff:d5:c5:90:4e:7b:3d:0c:2b:db:27:e3:1e:2a: e7:de:28:f5:bc:58:ff:36:f1:f1:8e:04:91:59:76: e0:6b:44:4b:90:b2:9e:94:39:a1:55:48:57:cc:ed: 4b:44:bf:84:99:ce:48:ea:d3:cb:20:9b:4d:c9:06: 35:55:91:9a:c7:3d:f7:d4:d9:58:15:7a:46:9c:a8: 22:f4:f2:45:7f:05:ad:61:c4:a3:25:27:2d:06:81: 3c:77:c4:5f:f4:ea:c5:79:ae:20:f5:4e:3f:f0:b8: 31:e1:d1:87:31:b8:c1:13:ff:fa:ee:45:37:0e:cf: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4E:3E:32:1B:E5:23:F1:C4:C6:D9:35:E5:A8:10:57:7B:03:B3:70 X509v3 Authority Key Identifier: keyid:C4:46:DD:88:01:33:59:13:5C:3F:06:D6:2F:FC:5C:2E:5D:81:8D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEbdiAEzWRNcPwbWL_xcLl2BjZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/9CF5B0DA72CC11F1892D329F73A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.107.149.0/24 Signature Algorithm: sha256WithRSAEncryption 48:31:41:7f:e1:11:c6:51:6b:66:fc:09:f2:5d:e2:95:2b:98: 10:f1:aa:c1:6c:b3:77:1a:7d:c2:af:ab:c3:c3:54:62:d0:e2: e0:2e:fc:17:f8:f5:be:93:0a:54:f2:78:18:65:c8:79:40:41: 3c:9a:ca:b4:df:31:84:ef:75:43:67:d8:09:90:10:e1:19:84: a1:30:89:6b:9d:bb:7c:f4:ba:92:50:42:f3:5d:76:89:38:93: 2c:35:4b:b9:2f:3f:fc:7f:75:d0:54:d5:1b:6e:12:94:0b:59: 4b:99:d4:e3:46:ae:ef:2f:d7:c4:07:96:4e:8b:7f:d7:6a:45: b1:23:ea:5f:68:5c:c6:1a:98:47:ef:a3:99:79:a1:4c:31:71: f6:87:75:4f:a4:3f:34:4d:6c:ed:7e:a1:63:b2:3b:47:f2:1f: 46:be:a7:1f:21:f2:19:0d:1b:6e:76:b0:ca:f6:88:08:98:7d: ac:da:8a:ab:c3:dc:2d:18:28:4d:7a:d6:d9:9b:8e:c6:40:4c: 08:3b:f6:ab:50:76:ee:47:cc:59:db:47:f0:a8:a6:46:0d:12: 02:81:f9:b3:90:23:8d:e8:32:31:9c:e3:90:28:1e:36:18:fb: 24:6e:e8:05:0b:81:e4:d8:fd:00:7c:cb:29:d0:9e:92:2a:8c: f2:5d:47:95 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTJCMzExMC8GA1UEBRMoQzQ0NkREODgwMTMzNTkxMzVDM0YwNkQ2MkZGQzVDMkU1 RDgxOEQ5MDAeFw0yNjA2MjgwODM3MzZaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNDBkZDUwLTRkYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/z2zq6dm4M8wLbb8NqtKMwla37XG94OHyIUXvO/ICYiYlqQgtGuQz98JS6gWM R3rGeg3GWMfDGtq7gh867M6B0XZ68txfMXEeL9PVxPZc+KeRJtHfKr6E10mafDxe moHk1jpQ5X7NECeleCim7+FHT8iErtC7ZILgmur8QKYyHY+q5rzkfjj/1cWQTns9 DCvbJ+MeKufeKPW8WP828fGOBJFZduBrREuQsp6UOaFVSFfM7UtEv4SZzkjq08sg m03JBjVVkZrHPffU2VgVekacqCL08kV/Ba1hxKMlJy0GgTx3xF/06sV5riD1Tj/w uDHh0YcxuMET//ruRTcOz/b/AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUcE4+Mhvl I/HExtk15agQV3sDs3AwHwYDVR0jBBgwFoAUxEbdiAEzWRNcPwbWL/xcLl2BjZAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5MkIzL0YxQTQ0NDhBNzJD QjExRjE4OEQ0QkY4MDcyQTMwRkJDL3hFYmRpQUV6V1JOY1B3YldMX3hjTGwyQmpa QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEViZGlBRXpXUk5jUHdiV0xfeGNMbDJCalpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTJCMy9GMUE0NDQ4QTcyQ0IxMUYxODhENEJGODA3MkEzMEZCQy85Q0Y1QjBEQTcy Q0MxMUYxODkyRDMyOUY3M0EzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABna5UwDQYJKoZIhvcNAQELBQADggEBAEgxQX/hEcZRa2b8CfJd4pUr mBDxqsFss3cafcKvq8PDVGLQ4uAu/Bf49b6TClTyeBhlyHlAQTyayrTfMYTvdUNn 2AmQEOEZhKEwiWudu3z0upJQQvNddok4kyw1S7kvP/x/ddBU1RtuEpQLWUuZ1ONG ru8v18QHlk6Lf9dqRbEj6l9oXMYamEfvo5l5oUwxcfaHdU+kPzRNbO1+oWOyO0fy H0a+px8h8hkNG252sMr2iAiYfazaiqvD3C0YKE161tmbjsZATAg79qtQdu5HzFnb R/CopkYNEgKB+bOQI43oMjGc45AoHjYY+yRu6AULgeTY/QB8yynQnpIqjPJdR5U= -----END CERTIFICATE-----Generated at Thu Jul 23 23:58:27 2026 by rpki-client