$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/6AB849742C9C11EBB49A3A32C4F9AE02.roa File: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (raw, json) Hash identifier: kssKtUcq6c76XfbPKzl2VoYdB6vvl9TsMHEy+SoslcQ= Subject key identifier: 63:DC:CB:79:17:75:06:87:02:70:A3:1D:D7:AB:D0:53:43:83:67:71 Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Certificate serial: 083F Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/6AB849742C9C11EBB49A3A32C4F9AE02.roa Signing time: Sun 31 May 2026 22:26:06 +0000 ROA not before: Sun 31 May 2026 22:26:06 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 45178 IP address blocks: 103.28.132.0/22 maxlen: 24 103.112.164.0/22 maxlen: 22 103.112.164.0/24 maxlen: 24 103.112.165.0/24 maxlen: 24 103.112.166.0/24 maxlen: 24 103.112.167.0/24 maxlen: 24 111.125.152.0/21 maxlen: 21 111.125.152.0/22 maxlen: 22 111.125.152.0/23 maxlen: 23 111.125.152.0/24 maxlen: 24 111.125.153.0/24 maxlen: 24 111.125.154.0/24 maxlen: 24 111.125.155.0/24 maxlen: 24 111.125.156.0/24 maxlen: 24 111.125.157.0/24 maxlen: 24 111.125.158.0/24 maxlen: 24 111.125.159.0/24 maxlen: 24 116.206.188.0/24 maxlen: 24 116.206.189.0/24 maxlen: 24 116.206.190.0/24 maxlen: 24 203.174.27.0/24 maxlen: 24 2406:d100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 21:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Validity Not Before: May 31 22:26:06 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1cb57e-925d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:aa:6d:91:fb:cc:fd:e2:2d:3a:5a:e8:35: 3e:fd:92:6f:fd:76:7f:fe:3c:6f:0d:ca:8e:d5:32: ce:aa:fa:88:90:5e:c1:3c:77:01:d1:28:f7:5a:d1: 8a:5d:01:e2:70:58:ca:54:3c:f2:6e:8d:8b:82:4c: 82:cc:a3:35:6f:65:87:05:10:c3:94:fb:41:a9:75: 28:ce:0b:89:ca:70:93:54:96:ab:04:e4:ac:83:c3: 5d:7e:4c:0c:03:cb:44:fe:2e:0c:20:37:99:a2:b8: 16:32:15:60:29:a9:da:48:02:99:c1:80:f7:a2:02: f1:9d:a4:b4:58:11:e8:48:5a:3f:b8:a2:9d:1b:4a: f5:ae:e3:aa:1c:b7:8d:16:bb:5c:fe:45:57:dc:15: 51:44:a3:bc:15:0f:11:27:16:de:d4:3a:fc:5b:0c: a8:7c:9b:8a:08:14:42:b5:cb:7c:a5:b1:d1:b6:e1: 3d:6b:c5:2d:16:c2:85:0c:58:d4:4f:56:5a:56:fc: 64:6d:6e:e4:ab:bb:cf:4e:16:7f:87:39:13:eb:be: 0e:1c:f1:8a:63:ce:05:fd:71:ee:d4:ce:10:8e:3f: 52:33:ec:46:49:4b:32:7a:56:b1:84:0b:c5:ae:86: b7:1d:ab:d9:e8:41:60:50:35:41:d2:84:90:c0:4c: e2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DC:CB:79:17:75:06:87:02:70:A3:1D:D7:AB:D0:53:43:83:67:71 X509v3 Authority Key Identifier: keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/6AB849742C9C11EBB49A3A32C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.28.132.0/22 103.112.164.0/22 111.125.152.0/21 116.206.188.0-116.206.190.255 203.174.27.0/24 IPv6: 2406:d100::/32 Signature Algorithm: sha256WithRSAEncryption 54:1c:d2:fd:4d:6e:8d:85:c5:2a:e3:d9:25:b4:1b:93:1e:f5: 93:8b:aa:d8:9d:fd:75:29:57:ec:f7:7b:41:bf:39:47:c6:7b: fe:7f:86:d5:9f:f3:ee:86:a3:4a:ab:c7:a5:21:3e:8b:01:59: 18:48:a4:52:c2:e6:4a:bb:a9:b9:2c:09:d3:d3:68:94:2c:95: a2:e7:1d:be:e7:05:7b:2f:81:57:77:d5:ba:12:05:45:92:c5: f7:42:4d:d4:21:95:f7:22:57:10:ff:89:10:9b:ab:5d:fa:36: cd:8d:12:f2:fa:5f:f2:c8:00:63:44:46:cc:85:0a:0c:35:95: 4c:db:67:14:2a:b5:85:31:5d:c0:fa:65:67:0b:7d:d6:cd:92: 4d:dc:7c:9c:cc:7c:74:2c:30:de:d8:4c:9c:e1:ac:f5:0c:5d: 8b:14:87:4a:54:44:0f:4e:62:90:31:ed:2c:f1:48:4d:63:7e: f4:7f:d1:46:fd:e6:1f:61:21:fc:0e:13:98:a0:79:fb:b7:b8: ce:28:07:03:5c:a0:51:57:fd:fc:8a:b9:a1:43:ca:5b:d0:b7: 0a:2a:46:78:95:62:86:30:8e:62:8a:81:ac:5c:81:9a:96:3b: ec:b2:aa:19:ac:90:60:64:17:ea:44:f9:0c:e0:f2:58:b9:95: b4:10:69:da -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGODcxMTAvBgNVBAUTKDdBNTQ3NDEyM0M1NDg4MTdFMjVGMzQ4NENDMjZCNjBC MDY0MUJENjkwHhcNMjYwNTMxMjIyNjA2WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjYjU3ZS05MjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH6qbZH7zP3iLTpa6DU+/ZJv/XZ//jxvDcqO1TLOqvqIkF7BPHcB0Sj3WtGK XQHicFjKVDzybo2LgkyCzKM1b2WHBRDDlPtBqXUozguJynCTVJarBOSsg8NdfkwM A8tE/i4MIDeZorgWMhVgKanaSAKZwYD3ogLxnaS0WBHoSFo/uKKdG0r1ruOqHLeN Frtc/kVX3BVRRKO8FQ8RJxbe1Dr8WwyofJuKCBRCtct8pbHRtuE9a8UtFsKFDFjU T1ZaVvxkbW7kq7vPThZ/hzkT674OHPGKY84F/XHu1M4Qjj9SM+xGSUsyelaxhAvF roa3HavZ6EFgUDVB0oSQwEzigQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFGPcy3kX dQaHAnCjHder0FNDg2dxMB8GA1UdIwQYMBaAFHpUdBI8VIgX4l80hMwmtgsGQb1p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9CMUNENzFGMDI2 ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlCZmlYelNFekNhMkN3WkJ2 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsUjBFanhVaUJmaVh6U0V6Q2EyQ3daQnZXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZGODcvQjFDRDcxRjAyNjg4MTFFQkJFN0M2ODJCQzRGOUFFMDIvNkFCODQ5NzQy QzlDMTFFQkI0OUEzQTMyQzRGOUFFMDIucm9hME4GCCsGAQUFBwEHAQH/BD8wPTAs BAIAATAmAwQCZxyEAwQCZ3CkAwQDb32YMAwDBAJ0zrwDBAB0zr4DBADLrhswDQQC AAIwBwMFACQG0QAwDQYJKoZIhvcNAQELBQADggEBAFQc0v1Nbo2FxSrj2SW0G5Me 9ZOLqtid/XUpV+z3e0G/OUfGe/5/htWf8+6Go0qrx6UhPosBWRhIpFLC5kq7qbks CdPTaJQslaLnHb7nBXsvgVd31boSBUWSxfdCTdQhlfciVxD/iRCbq136Ns2NEvL6 X/LIAGNERsyFCgw1lUzbZxQqtYUxXcD6ZWcLfdbNkk3cfJzMfHQsMN7YTJzhrPUM XYsUh0pURA9OYpAx7SzxSE1jfvR/0Ub95h9hIfwOE5igefu3uM4oBwNcoFFX/fyK uaFDylvQtwoqRniVYoYwjmKKgaxcgZqWO+yyqhmskGBkF+pE+Qzg8li5lbQQado= -----END CERTIFICATE-----Generated at Sun Jun 14 04:16:05 2026 by rpki-client