$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/8BDE35DAADB511EEA223FA64C4F9AE02.roa File: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (raw, json) Hash identifier: EOPbg9QX3y+KSQTjZuqYiRYhOfIVTo3ThIwiR0D8klE= Subject key identifier: 1A:77:BE:93:DF:1C:8C:D3:0A:28:D2:4E:81:76:20:28:D8:FC:08:D8 Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Certificate serial: 01C1 Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/8BDE35DAADB511EEA223FA64C4F9AE02.roa Signing time: Sun 17 May 2026 04:35:51 +0000 ROA not before: Sun 17 May 2026 04:35:51 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 135396 IP address blocks: 103.217.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 03:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Validity Not Before: May 17 04:35:51 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a0945a6-e1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:a9:ba:50:b8:34:2a:c0:b5:ae:ba:c6:02: 34:ad:79:5c:00:e3:dd:86:b0:b1:c5:1f:fc:bc:55: 91:b3:ab:88:4e:38:f7:82:64:12:c1:49:73:32:5d: e5:4f:bf:1a:28:e9:de:2b:9e:07:66:fb:a2:11:90: be:b2:2f:4c:b8:df:15:18:4f:28:8c:d3:19:f3:d3: 82:9c:85:32:71:49:18:91:de:3d:8c:39:fa:1a:c0: e9:c3:70:5d:49:83:5e:45:ae:8d:8f:1a:17:68:ef: 21:98:72:67:d1:2f:a6:3e:4b:1b:92:39:ce:d8:13: d5:d4:97:83:42:3a:85:e7:df:92:24:8e:ab:37:5a: 81:00:4c:32:b8:66:70:e8:19:65:df:5c:6e:75:0d: 3f:cd:5c:e3:a6:a5:b9:d2:e0:df:f8:0e:25:19:be: 3d:a7:f2:f3:7f:a8:fe:00:38:4c:5b:d4:6a:55:a1: 25:59:47:99:c1:29:2f:dc:16:3a:07:62:cf:11:16: 8c:28:97:b1:94:ea:0c:60:01:84:c8:54:94:89:5b: 70:de:0d:11:ec:38:43:fa:3e:07:81:2a:31:79:05: ec:10:aa:38:38:60:44:c8:b0:61:28:89:02:d7:8f: 0d:f0:a5:83:fe:31:cc:cc:13:51:d1:7f:f9:09:71: 0f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:77:BE:93:DF:1C:8C:D3:0A:28:D2:4E:81:76:20:28:D8:FC:08:D8 X509v3 Authority Key Identifier: keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/8BDE35DAADB511EEA223FA64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.217.74.0/23 Signature Algorithm: sha256WithRSAEncryption 21:bf:78:2d:24:8d:92:fd:d4:1a:22:c9:a3:30:0e:f4:88:5b: e1:9b:40:10:6a:bf:f5:93:db:ff:08:25:df:92:d3:0c:ef:b4: 16:10:c2:db:ca:eb:bc:e9:50:ed:92:38:e1:1f:2a:98:8d:88: 90:2c:8d:04:56:4f:dd:09:aa:d1:df:f9:59:8a:8d:ca:5e:98: e8:8e:7d:a2:cd:f6:4e:85:5e:1b:a6:62:e7:a6:ce:28:bb:cf: 07:7a:a4:60:35:69:c8:3f:3a:ad:07:d5:8c:49:02:68:a1:f9: 9b:a8:72:ac:e1:64:8d:c9:15:e1:55:39:9e:bc:33:27:65:c6: eb:1a:a5:5a:c0:78:bf:da:ce:5c:91:f5:65:84:51:a5:d2:da: a9:19:84:27:35:ec:e3:f2:bd:99:a4:b4:37:e5:67:7f:0c:7b: f0:3b:27:8e:74:67:14:c2:c4:97:50:fb:05:7d:ad:10:b7:df: e3:b6:9b:13:8f:1f:aa:26:31:20:68:72:a6:03:2a:32:75:c3: f6:2d:2f:32:86:e6:35:02:55:ac:4b:d2:49:ca:66:95:1f:d0: 25:f6:36:90:7f:f5:70:08:78:cf:12:7f:49:55:9f:43:93:f0: 1e:76:ea:2d:55:83:06:28:8b:df:6d:d7:8b:00:44:da:32:10: 66:b7:96:93 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4RUMxMTAvBgNVBAUTKDBCQThCQTQwRjg5NzM0Q0MzRjNBRTNFRDY3NzRDQkQ4 NDNFMkU3NzIwHhcNMjYwNTE3MDQzNTUxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTA5NDVhNi1lMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOipulC4NCrAta66xgI0rXlcAOPdhrCxxR/8vFWRs6uITjj3gmQSwUlzMl3l T78aKOneK54HZvuiEZC+si9MuN8VGE8ojNMZ89OCnIUycUkYkd49jDn6GsDpw3Bd SYNeRa6NjxoXaO8hmHJn0S+mPksbkjnO2BPV1JeDQjqF59+SJI6rN1qBAEwyuGZw 6Bll31xudQ0/zVzjpqW50uDf+A4lGb49p/Lzf6j+ADhMW9RqVaElWUeZwSkv3BY6 B2LPERaMKJexlOoMYAGEyFSUiVtw3g0R7DhD+j4HgSoxeQXsEKo4OGBEyLBhKIkC 148N8KWD/jHMzBNR0X/5CXEPHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBp3vpPf HIzTCijSToF2ICjY/AjYMB8GA1UdIwQYMBaAFAuoukD4lzTMPzrj7Wd0y9hD4udy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjhFQy9FMDU3RTJCMEFE QjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5Nd19PdVB0WjNUTDJFUGk1 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2aTZRUGlYTk13X091UHRaM1RMMkVQaTUzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY4RUMvRTA1N0UyQjBBREI0MTFFRUJFQTdFNTYzQzRGOUFFMDIvOEJERTM1REFB REI1MTFFRUEyMjNGQTY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ9lKMA0GCSqGSIb3DQEBCwUAA4IBAQAhv3gtJI2S/dQaIsmjMA70 iFvhm0AQar/1k9v/CCXfktMM77QWEMLbyuu86VDtkjjhHyqYjYiQLI0EVk/dCarR 3/lZio3KXpjojn2izfZOhV4bpmLnps4ou88HeqRgNWnIPzqtB9WMSQJoofmbqHKs 4WSNyRXhVTmevDMnZcbrGqVawHi/2s5ckfVlhFGl0tqpGYQnNezj8r2ZpLQ35Wd/ DHvwOyeOdGcUwsSXUPsFfa0Qt9/jtpsTjx+qJjEgaHKmAyoydcP2LS8yhuY1AlWs S9JJymaVH9Al9jaQf/VwCHjPEn9JVZ9Dk/AeduotVYMGKIvfbdeLAETaMhBmt5aT -----END CERTIFICATE-----Generated at Sat Jun 13 14:21:55 2026 by rpki-client