$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/21C0B7E23BD311F0B1BF6C56C4F9AE02.roa File: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (raw, json) Hash identifier: vtwMWBWJtSed875G1+wbpC+RKkrgpx2zfwNszIXKaRQ= Subject key identifier: BF:65:28:82:4E:15:49:B6:05:8C:01:AC:C3:5C:2C:A2:85:E9:EB:32 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 35D8 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/21C0B7E23BD311F0B1BF6C56C4F9AE02.roa Signing time: Tue 28 Jul 2026 15:16:53 +0000 ROA not before: Tue 28 Jul 2026 15:16:53 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 3758 IP address blocks: 111.65.100.0/24 maxlen: 24 111.65.101.0/24 maxlen: 24 111.65.102.0/23 maxlen: 23 111.65.104.0/21 maxlen: 22 111.65.112.0/20 maxlen: 20 202.78.48.0/24 maxlen: 24 202.78.49.0/24 maxlen: 24 202.78.50.0/24 maxlen: 24 202.78.51.0/24 maxlen: 24 202.78.52.0/22 maxlen: 22 202.78.55.0/24 maxlen: 24 2400:1c00:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13784 (0x35d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Jul 28 15:16:53 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a68c7e5-dcbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:90:2e:74:17:ee:51:89:6a:c7:7d:98:2f: c8:e4:48:11:74:71:be:22:88:b0:fd:da:bd:b1:35: 6a:07:87:e5:48:e5:62:ac:95:12:9d:84:c9:70:9a: 42:eb:ae:27:fe:ac:ea:d9:bd:dc:d5:0a:9d:3f:98: 6b:96:0a:98:39:97:7a:d2:c7:a5:8f:5b:3d:77:f8: af:f4:76:11:c8:74:57:99:9d:59:98:87:48:a1:85: 01:c5:6f:2d:d7:a2:3d:30:a0:ef:5b:36:3a:58:02: 3b:30:e6:fb:f3:de:81:1c:47:60:7a:ee:24:d7:60: ea:b4:c0:17:f3:15:68:c7:39:ce:75:33:9f:9f:06: b6:57:04:36:a5:d2:24:60:dd:6d:28:8a:ca:db:7e: c3:a8:f3:b5:de:84:23:89:cd:1f:ab:95:1b:69:3a: 39:28:50:50:7b:19:9c:41:90:73:90:b9:95:ed:f9: 5e:5c:c7:6b:d0:f4:74:c9:8a:b1:3d:05:60:2f:04: 68:37:a4:65:3a:c8:d1:c2:96:d6:0d:6e:66:83:ce: 35:2a:85:08:8d:72:ea:4f:8d:53:d7:e4:79:40:ed: 2d:16:60:44:9d:bd:f0:aa:b3:08:46:e0:9b:98:ac: 24:d8:fb:f5:95:57:3d:44:c5:22:c0:ab:c2:48:14: 92:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:65:28:82:4E:15:49:B6:05:8C:01:AC:C3:5C:2C:A2:85:E9:EB:32 X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/21C0B7E23BD311F0B1BF6C56C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 111.65.100.0-111.65.127.255 202.78.48.0/21 IPv6: 2400:1c00:13::/48 Signature Algorithm: sha256WithRSAEncryption ae:c5:5e:d9:5b:51:23:f2:2e:0a:5e:c2:93:f8:fb:48:c2:e0: 31:1b:aa:67:10:eb:8d:65:40:cf:d1:2f:2b:14:d8:17:94:08: 55:ad:03:7a:9c:e3:89:4d:5e:02:f3:d1:0b:41:19:31:d9:e8: c4:cd:dd:ea:05:ba:ee:dd:21:8f:07:f7:a7:32:ce:ee:e1:9b: ab:ec:f4:34:e9:25:52:20:9a:2d:43:cd:c2:41:8c:35:6b:da: ee:a4:fb:a4:31:fc:51:d7:d7:2f:66:03:56:87:6d:d0:d8:66: 14:ec:90:4e:37:51:80:ca:ba:ab:3b:bf:53:ed:a5:6f:fa:16: 52:8c:a6:c3:8d:bf:9c:75:4b:be:53:a3:d7:b7:7a:3a:df:38: d6:c4:7d:1d:02:68:d2:15:64:44:f9:01:88:6d:be:61:a5:af: 32:b2:bc:5b:19:64:a2:f5:20:bd:0d:b2:ac:d8:8c:25:06:af: 8a:0d:f6:1f:19:ec:fc:91:b8:03:e9:4d:c1:f4:c1:ab:85:b8: 02:d9:05:9b:e0:2f:f1:5f:17:b0:43:00:70:bc:a0:80:d3:7b: 6e:27:4b:c4:7c:df:d0:51:aa:9b:f8:44:d9:29:ba:0f:51:c8: ea:c2:9d:67:97:fb:95:8a:a4:bc:9d:c7:25:05:dc:ad:0a:bd: 7b:d0:fb:1d -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgICNdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjYwNzI4MTUxNjUzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4YzdlNS1kY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPWQLnQX7lGJasd9mC/I5EgRdHG+Ioiw/dq9sTVqB4flSOVirJUSnYTJcJpC 664n/qzq2b3c1QqdP5hrlgqYOZd60selj1s9d/iv9HYRyHRXmZ1ZmIdIoYUBxW8t 16I9MKDvWzY6WAI7MOb7896BHEdgeu4k12DqtMAX8xVoxznOdTOfnwa2VwQ2pdIk YN1tKIrK237DqPO13oQjic0fq5UbaTo5KFBQexmcQZBzkLmV7fleXMdr0PR0yYqx PQVgLwRoN6RlOsjRwpbWDW5mg841KoUIjXLqT41T1+R5QO0tFmBEnb3wqrMIRuCb mKwk2Pv1lVc9RMUiwKvCSBSSRwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFL9lKIJO FUm2BYwBrMNcLKKF6esyMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUE0OEYvOEM4MUE4NTYxRDhEMTFFMjg2NkM1MEVCMDhCMDJDRDIvMjFDMEI3RTIz QkQzMTFGMEIxQkY2QzU2QzRGOUFFMDIucm9hMD4GCCsGAQUFBwEHAQH/BC8wLTAa BAIAATAUMAwDBAJvQWQDBAdvQQADBAPKTjAwDwQCAAIwCQMHACQAHAAAEzANBgkq hkiG9w0BAQsFAAOCAQEArsVe2VtRI/IuCl7Ck/j7SMLgMRuqZxDrjWVAz9EvKxTY F5QIVa0DepzjiU1eAvPRC0EZMdnoxM3d6gW67t0hjwf3pzLO7uGbq+z0NOklUiCa LUPNwkGMNWva7qT7pDH8UdfXL2YDVodt0NhmFOyQTjdRgMq6qzu/U+2lb/oWUoym w42/nHVLvlOj17d6Ot841sR9HQJo0hVkRPkBiG2+YaWvMrK8WxlkovUgvQ2yrNiM JQavig32Hxns/JG4A+lNwfTBq4W4AtkFm+Av8V8XsEMAcLyggNN7bidLxHzf0FGq m/hE2Sm6D1HI6sKdZ5f7lYqkvJ3HJQXcrQq9e9D7HQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:28:39 2026 by rpki-client