$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/40965650EA4311EEA09F786BC4F9AE02.roa File: 40965650EA4311EEA09F786BC4F9AE02.roa (raw, json) Hash identifier: II57Pqdv/shvdKj5gmJXvDyhv7BXRpCHdPL/YMQljSs= Subject key identifier: 05:40:AB:6E:B2:F1:17:63:7D:C5:FE:E5:DE:E6:2B:36:50:E6:B1:F0 Certificate issuer: /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Certificate serial: 08D3 Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/40965650EA4311EEA09F786BC4F9AE02.roa Signing time: Wed 08 Jul 2026 21:23:05 +0000 ROA not before: Wed 08 Jul 2026 21:23:05 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 38278 IP address blocks: 45.114.28.0/22 maxlen: 22 103.115.220.0/24 maxlen: 24 103.115.221.0/24 maxlen: 24 103.115.222.0/24 maxlen: 24 103.115.223.0/24 maxlen: 24 103.248.108.0/22 maxlen: 24 103.251.0.0/22 maxlen: 24 111.221.48.0/21 maxlen: 24 202.169.24.0/21 maxlen: 24 2402:eec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2259 (0x8d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Validity Not Before: Jul 8 21:23:05 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4ebfb9-5808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:02:46:92:0a:8e:a8:a3:86:9f:72:24:c4:91: a5:5d:23:63:fa:aa:17:da:ab:b1:e1:75:e0:17:e5: a8:7c:e2:4f:a6:1c:93:c7:7c:87:70:1e:69:22:18: ac:66:1b:23:fe:ee:56:c4:ca:db:1d:d1:a5:7d:f8: 59:ce:27:d5:df:10:36:d3:b7:59:05:6a:95:4f:c9: 9b:7d:ab:4b:4d:7c:18:8a:85:34:0e:2f:ca:4e:d1: 6a:cd:aa:9d:5e:9d:bb:ca:2a:bf:bf:20:d5:cc:0d: 48:b8:78:e3:86:5d:79:6e:a2:1c:1b:30:c7:ce:4b: 94:52:c6:54:82:97:82:76:51:1b:58:2d:93:0e:be: b2:08:25:8b:9e:c3:ef:5f:35:6b:c6:68:6a:85:1f: bb:eb:fc:43:27:de:94:dd:74:d4:9b:43:d3:e7:69: fe:50:39:fc:31:15:82:64:49:a7:d6:49:aa:27:d7: ae:99:20:c8:00:24:ac:ef:61:31:c1:1c:9d:83:ee: f5:ee:73:a3:24:10:0c:42:46:c4:8e:a4:77:c7:e5: 9e:cd:5b:97:59:e4:33:58:81:26:15:5f:3b:37:59: 4b:0d:a5:42:20:02:02:78:d5:df:72:3c:8a:c5:3b: ca:31:fd:e4:6a:9f:76:53:01:88:4d:2e:0c:fd:55: d6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:40:AB:6E:B2:F1:17:63:7D:C5:FE:E5:DE:E6:2B:36:50:E6:B1:F0 X509v3 Authority Key Identifier: keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/40965650EA4311EEA09F786BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.28.0/22 103.115.220.0/22 103.248.108.0/22 103.251.0.0/22 111.221.48.0/21 202.169.24.0/21 IPv6: 2402:eec0::/32 Signature Algorithm: sha256WithRSAEncryption 40:f8:b2:ef:b6:79:e9:02:3e:16:79:2b:46:7a:92:3d:04:07: da:9e:f7:4f:48:3d:8c:7e:38:b1:37:7f:23:e7:1a:f0:12:3b: 10:d4:9b:a7:66:d3:7f:7e:f0:61:20:b3:2c:07:c9:ef:3b:64: 0b:fd:39:c2:16:28:0f:23:5d:a9:05:f1:db:b9:7e:be:f9:4a: 93:35:2b:2b:59:56:ae:c0:c7:ce:6b:2f:2d:9e:a0:ad:39:3e: d5:af:90:c2:f4:23:ed:8f:a7:bd:93:cd:e7:b3:7c:f0:99:7e: af:7e:8e:2c:41:d8:55:3e:13:7e:24:df:2d:19:60:80:2b:6e: 3b:8f:d6:1d:03:24:d1:be:2f:5f:76:cb:a5:27:6c:ea:e9:8e: 7d:5c:14:07:99:81:df:79:71:ee:e8:67:43:d1:82:50:f4:75: 1f:02:96:61:cc:f5:c2:e5:d7:54:99:b6:c4:6b:d9:29:b8:50: 6b:cb:4f:2d:1c:24:26:21:4a:7b:ee:04:9d:70:b2:b0:a1:a7: 23:f5:f8:99:95:5d:62:1c:5f:d1:45:95:eb:9c:11:71:91:f7: b6:7c:a5:af:0d:3d:53:88:5e:07:59:d9:96:9c:bd:5a:54:5d: 57:a2:ad:3a:1f:df:b1:18:58:84:2a:bf:e5:49:54:4d:35:a6: 82:9c:16:68 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICCNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGMzAxMTAvBgNVBAUTKEQzMjY3QUY5RkI5NjkwODlDM0MxMkFGRUJGRDBGREU5 QkQ4Njc1ODEwHhcNMjYwNzA4MjEyMzA1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRlYmZiOS01ODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAJGkgqOqKOGn3IkxJGlXSNj+qoX2qux4XXgF+WofOJPphyTx3yHcB5pIhis Zhsj/u5WxMrbHdGlffhZzifV3xA207dZBWqVT8mbfatLTXwYioU0Di/KTtFqzaqd Xp27yiq/vyDVzA1IuHjjhl15bqIcGzDHzkuUUsZUgpeCdlEbWC2TDr6yCCWLnsPv XzVrxmhqhR+76/xDJ96U3XTUm0PT52n+UDn8MRWCZEmn1kmqJ9eumSDIACSs72Ex wRydg+717nOjJBAMQkbEjqR3x+WezVuXWeQzWIEmFV87N1lLDaVCIAICeNXfcjyK xTvKMf3kap92UwGITS4M/VXWhQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFAVAq26y 8RdjfcX+5d7mKzZQ5rHwMB8GA1UdIwQYMBaAFNMmevn7lpCJw8Eq/r/Q/em9hnWB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0YzMC8zQjkxMkYxMkYx ODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJbkR3U3ItdjlEOTZiMkdk WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5WjYtZnVXa0luRHdTci12OUQ5NmIyR2RZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNGMzAvM0I5MTJGMTJGMTgyMTFFQUE1Mzc5NzBBQzRGOUFFMDIvNDA5NjU2NTBF QTQzMTFFRUEwOUY3ODZCQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQCLXIcAwQCZ3PcAwQCZ/hsAwQCZ/sAAwQDb90wAwQDyqkYMA0EAgAC MAcDBQAkAu7AMA0GCSqGSIb3DQEBCwUAA4IBAQBA+LLvtnnpAj4WeStGepI9BAfa nvdPSD2MfjixN38j5xrwEjsQ1JunZtN/fvBhILMsB8nvO2QL/TnCFigPI12pBfHb uX6++UqTNSsrWVauwMfOay8tnqCtOT7Vr5DC9CPtj6e9k83ns3zwmX6vfo4sQdhV PhN+JN8tGWCAK247j9YdAyTRvi9fdsulJ2zq6Y59XBQHmYHfeXHu6GdD0YJQ9HUf ApZhzPXC5ddUmbbEa9kpuFBry08tHCQmIUp77gSdcLKwoacj9fiZlV1iHF/RRZXr nBFxkfe2fKWvDT1TiF4HWdmWnL1aVF1Xoq06H9+xGFiEKr/lSVRNNaaCnBZo -----END CERTIFICATE-----Generated at Wed Jul 29 09:28:25 2026 by rpki-client