$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/88F562E83DAD11EFAA46E417C4F9AE02.roa File: 88F562E83DAD11EFAA46E417C4F9AE02.roa (raw, json) Hash identifier: nBa5NOjGWsP+UrQhj4hEzOIqsZfj8ErwDCVNlEf6p1s= Subject key identifier: CE:2F:44:52:28:44:CD:08:A5:0A:96:86:13:1E:8F:8E:88:F0:CD:4D Certificate issuer: /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43 Certificate serial: 0192 Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/88F562E83DAD11EFAA46E417C4F9AE02.roa Signing time: Wed 29 Jul 2026 07:05:34 +0000 ROA not before: Wed 29 Jul 2026 07:05:34 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 137209 IP address blocks: 103.104.232.0/22 maxlen: 22 103.104.232.0/24 maxlen: 24 2402:1dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 07:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43 Validity Not Before: Jul 29 07:05:34 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a69a63e-977a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:50:3a:1f:73:7d:88:11:47:4c:74:e1:29: 41:50:b6:f2:12:28:5a:dc:bd:fc:9e:77:e1:72:e3: 1e:22:00:f4:ee:06:83:0c:e0:9e:94:fc:63:d3:2d: 01:54:d7:a6:45:e0:74:97:96:14:90:b8:c3:ed:6a: 54:eb:1c:51:de:8a:4e:48:e8:85:02:ad:44:7f:ce: 83:dd:83:5e:5c:e8:a2:77:8c:7e:cf:fb:97:48:53: 6e:e1:24:51:ea:08:fb:13:7e:0c:44:80:34:a9:5e: 6f:8b:da:85:fc:d2:b4:c8:e9:20:93:b2:08:c7:cf: f4:27:76:2a:97:97:05:66:86:c9:8e:97:7c:6a:d9: 16:e6:94:98:92:a1:91:1d:d7:08:91:5c:8e:b2:36: 91:7a:29:01:92:41:6f:07:36:9c:16:f1:7a:ad:09: 3d:a8:77:52:4b:f6:8f:bf:1e:8a:f3:bf:0d:ec:f5: e0:a6:12:49:95:62:9d:7d:16:98:6a:c6:f3:0f:d3: 9c:01:38:f2:6b:68:bf:b5:18:02:12:14:37:83:02: ce:bc:07:ca:cd:8f:13:2a:d6:41:e0:4f:3c:fc:bd: ea:7a:c2:08:70:b4:0f:14:18:3e:d9:f0:43:20:e4: d1:51:45:f9:cd:37:7b:d5:b4:98:32:f3:f3:55:35: 00:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2F:44:52:28:44:CD:08:A5:0A:96:86:13:1E:8F:8E:88:F0:CD:4D X509v3 Authority Key Identifier: keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/88F562E83DAD11EFAA46E417C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.104.232.0/22 IPv6: 2402:1dc0::/32 Signature Algorithm: sha256WithRSAEncryption 30:fb:8f:50:db:2a:5a:51:68:a3:30:7c:9e:64:ff:2b:af:ba: 6c:e7:93:a5:e7:67:ac:13:2b:39:46:5b:cf:71:6b:1a:6f:a9: 31:6c:16:4a:9d:cb:7c:1c:3d:78:63:7f:5d:3f:fd:3a:0a:9e: 21:9f:bd:a6:08:1b:80:fc:1f:3b:89:ea:04:7b:f3:f6:9e:85: 8b:9c:65:e5:be:8a:64:9c:2e:57:6c:d5:a0:cd:dd:49:c8:43: e5:c9:fa:02:e7:2b:31:79:1f:95:9c:53:d3:94:e3:45:7b:93: b5:3e:6d:57:e0:fc:13:11:db:fe:4b:87:b5:32:98:51:bc:b7: db:e5:a5:6f:48:0a:b2:b1:f8:1f:f9:16:a6:89:a6:62:51:17: 40:38:55:4e:bc:a9:ab:5a:98:88:01:34:aa:18:b0:ba:fc:55: 73:22:0d:38:6f:47:77:72:b3:c7:18:dd:32:b1:0b:ab:74:bf: 83:c6:af:ad:87:19:16:af:85:42:99:42:bd:4c:21:9e:8c:9b: ec:db:7f:18:28:18:54:b1:5a:78:6b:33:3b:6e:b0:ba:f0:f3: 98:25:71:c7:a3:e2:33:f2:b4:a1:cd:1a:90:c3:39:ad:90:b4: 77:31:43:3f:70:43:1d:7b:4d:fa:2a:46:52:9f:b8:29:04:84: 51:87:ad:54 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE2MTgxMTAvBgNVBAUTKEE1MkJGMDI4NzcxOTE5NDk3MTJEM0RBRDI5RDRBQjdB Mjc3OUVDNDMwHhcNMjYwNzI5MDcwNTM0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5YTYzZS05NzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAdQOh9zfYgRR0x04SlBULbyEiha3L38nnfhcuMeIgD07gaDDOCelPxj0y0B VNemReB0l5YUkLjD7WpU6xxR3opOSOiFAq1Ef86D3YNeXOiid4x+z/uXSFNu4SRR 6gj7E34MRIA0qV5vi9qF/NK0yOkgk7IIx8/0J3Yql5cFZobJjpd8atkW5pSYkqGR HdcIkVyOsjaReikBkkFvBzacFvF6rQk9qHdSS/aPvx6K878N7PXgphJJlWKdfRaY asbzD9OcATjya2i/tRgCEhQ3gwLOvAfKzY8TKtZB4E88/L3qesIIcLQPFBg+2fBD IOTRUUX5zTd71bSYMvPzVTUAtQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFM4vRFIo RM0IpQqWhhMej46I8M1NMB8GA1UdIwQYMBaAFKUr8Ch3GRlJcS09rSnUq3oneexD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTYxOC81NTdFQUIzQzNB QkUxMUVGODYxOUQyMjBDNEY5QUUwMi9wU3Z3S0hjWkdVbHhMVDJ0S2RTcmVpZDU3 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdndLSGNaR1VseExUMnRLZFNyZWlkNTdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUE2MTgvNTU3RUFCM0MzQUJFMTFFRjg2MTlEMjIwQzRGOUFFMDIvODhGNTYyRTgz REFEMTFFRkFBNDZFNDE3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2joMA0EAgACMAcDBQAkAh3AMA0GCSqGSIb3DQEBCwUAA4IBAQAw +49Q2ypaUWijMHyeZP8rr7ps55Ol52esEys5RlvPcWsab6kxbBZKnct8HD14Y39d P/06Cp4hn72mCBuA/B87ieoEe/P2noWLnGXlvopknC5XbNWgzd1JyEPlyfoC5ysx eR+VnFPTlONFe5O1Pm1X4PwTEdv+S4e1MphRvLfb5aVvSAqysfgf+RamiaZiURdA OFVOvKmrWpiIATSqGLC6/FVzIg04b0d3crPHGN0ysQurdL+Dxq+thxkWr4VCmUK9 TCGejJvs238YKBhUsVp4azM7brC68POYJXHHo+Iz8rShzRqQwzmtkLR3MUM/cEMd e036KkZSn7gpBIRRh61U -----END CERTIFICATE-----Generated at Wed Jul 29 10:09:40 2026 by rpki-client