$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa File: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (raw, json) Hash identifier: JG3g9iT9w5QR/B1gPw603a4JI5sRtUQE35PEFNou9hM= Subject key identifier: B5:EE:4C:B6:9A:BA:97:8D:6F:DC:5E:6C:01:EB:D7:4E:F9:57:4B:5F Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 13AC Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa Signing time: Tue 28 Jul 2026 17:33:09 +0000 ROA not before: Tue 28 Jul 2026 17:33:09 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 131247 IP address blocks: 103.68.116.0/22 maxlen: 22 103.68.116.0/23 maxlen: 23 103.68.116.0/24 maxlen: 24 103.68.117.0/24 maxlen: 24 103.68.118.0/23 maxlen: 23 103.68.118.0/24 maxlen: 24 103.68.119.0/24 maxlen: 24 103.230.208.0/22 maxlen: 22 103.230.208.0/23 maxlen: 23 103.230.208.0/24 maxlen: 24 103.230.209.0/24 maxlen: 24 103.230.210.0/23 maxlen: 23 103.230.210.0/24 maxlen: 24 103.230.211.0/24 maxlen: 24 2403:6ec0::/32 maxlen: 32 2403:6ec0:8000::/43 maxlen: 43 2403:6ec0:8020::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5036 (0x13ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Validity Not Before: Jul 28 17:33:09 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a68e7d5-9f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fc:c6:d2:af:12:d5:45:da:00:a9:88:e8:7d: ad:d1:9e:ef:c5:b3:e8:85:b9:b4:ac:00:4e:7b:39: a5:4f:2e:fc:a3:fa:f3:25:4c:5c:7d:df:5c:bd:42: 42:d5:d8:4d:1d:c3:75:1c:ff:e4:42:79:0d:08:f6: 52:1e:d7:2f:e6:46:c4:07:9e:90:78:0b:66:b3:6d: 5c:e9:07:4e:88:b4:28:92:3d:05:df:0b:97:e1:f9: ef:43:9b:67:11:98:fb:d0:0e:b3:b4:bd:bc:21:52: ee:db:05:8c:6a:8e:a7:84:61:1f:5c:c1:d4:ce:c6: 6d:2c:fb:f8:5e:15:da:a9:cf:8a:78:e6:32:3c:ec: 70:ca:91:9e:e7:92:69:0c:25:3e:91:46:15:fc:1c: 7e:62:58:05:dc:1c:a2:fc:02:6f:d8:30:5b:35:57: 91:8a:59:5c:b8:f9:74:86:9a:75:2c:eb:bd:1c:d1: 42:99:3f:e4:7d:50:75:a1:61:c6:e5:ce:8a:a9:ad: d0:6f:a3:98:ee:7b:02:37:81:db:ac:0d:a0:fd:af: 28:fc:39:43:77:0d:c7:e4:b7:3f:ad:a9:eb:7f:a1: e2:3c:67:c3:57:e8:cc:47:4d:d2:ce:22:2c:ee:cf: 58:35:88:a2:d3:ff:4f:19:e5:98:7e:d2:c3:4a:36: 71:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EE:4C:B6:9A:BA:97:8D:6F:DC:5E:6C:01:EB:D7:4E:F9:57:4B:5F X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.116.0/22 103.230.208.0/22 IPv6: 2403:6ec0::/32 Signature Algorithm: sha256WithRSAEncryption 56:42:8a:3f:89:cb:4a:14:ac:dd:dc:5b:8c:8e:96:f6:4b:71: ba:b4:28:df:6b:ae:e9:7c:bf:e2:75:4a:85:ac:de:2f:6e:b2: 02:4f:16:d8:8e:55:cb:a1:62:33:87:a9:a6:5f:cc:43:cd:4e: ce:8b:8c:47:45:bf:50:8e:a0:d6:d1:af:84:15:b7:2f:5c:7a: 64:19:46:ae:52:8b:13:79:6c:8c:a7:9c:68:36:d0:6f:9c:5a: 7f:2e:e8:99:4d:a7:61:a2:4c:ec:e1:a7:39:cf:be:1d:0d:bc: 5e:11:ea:c7:61:4e:5d:3a:03:8c:49:29:57:ad:08:a4:6b:5d: be:b1:f2:0d:4a:86:81:fc:ca:9d:93:ed:a4:30:99:e1:ef:45: e3:a3:4f:6f:0b:20:f4:2a:3c:f8:1e:7b:c7:17:c4:49:aa:4f: 87:0e:d8:1d:df:2c:5e:64:f4:54:75:2c:10:0b:f9:0f:3e:0c: 7f:8f:40:8d:63:b6:fe:cc:3d:6a:52:d0:cf:72:03:df:de:1a: f9:18:27:09:c1:12:41:47:9e:08:3b:ee:59:7f:8d:f3:74:2d: 40:f5:a0:66:6b:54:73:f5:b5:0c:ef:51:e9:63:11:ff:a3:d2: bc:ae:b2:c1:7a:e4:a5:34:0e:3e:85:0d:63:b1:b1:50:3b:77: 39:5c:18:df -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICE6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjYwNzI4MTczMzA5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4ZTdkNS05ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfzG0q8S1UXaAKmI6H2t0Z7vxbPohbm0rABOezmlTy78o/rzJUxcfd9cvUJC 1dhNHcN1HP/kQnkNCPZSHtcv5kbEB56QeAtms21c6QdOiLQokj0F3wuX4fnvQ5tn EZj70A6ztL28IVLu2wWMao6nhGEfXMHUzsZtLPv4XhXaqc+KeOYyPOxwypGe55Jp DCU+kUYV/Bx+YlgF3Byi/AJv2DBbNVeRillcuPl0hpp1LOu9HNFCmT/kfVB1oWHG 5c6Kqa3Qb6OY7nsCN4HbrA2g/a8o/DlDdw3H5Lc/ranrf6HiPGfDV+jMR03SziIs 7s9YNYii0/9PGeWYftLDSjZxlQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFLXuTLaa upeNb9xebAHr1075V0tfMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZDRTQvMDhFRDE3ODhCRkMwMTFFOEE2QTg1NTRCQzRGOUFFMDIvQjNENEFFQjhC RkMwMTFFOEE3RjQyMDRDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ0R0AwQCZ+bQMA0EAgACMAcDBQAkA27AMA0GCSqGSIb3DQEBCwUA A4IBAQBWQoo/ictKFKzd3FuMjpb2S3G6tCjfa67pfL/idUqFrN4vbrICTxbYjlXL oWIzh6mmX8xDzU7Oi4xHRb9QjqDW0a+EFbcvXHpkGUauUosTeWyMp5xoNtBvnFp/ LuiZTadhokzs4ac5z74dDbxeEerHYU5dOgOMSSlXrQika12+sfINSoaB/Mqdk+2k MJnh70Xjo09vCyD0Kjz4HnvHF8RJqk+HDtgd3yxeZPRUdSwQC/kPPgx/j0CNY7b+ zD1qUtDPcgPf3hr5GCcJwRJBR54IO+5Zf43zdC1A9aBma1Rz9bUM71HpYxH/o9K8 rrLBeuSlNA4+hQ1jsbFQO3c5XBjf -----END CERTIFICATE-----Generated at Wed Jul 29 06:39:53 2026 by rpki-client