$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/5FFA5548B5A311EEA95C5732C4F9AE02.roa File: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (raw, json) Hash identifier: awz0vyeOEa2wzssGTfI+LM2VIBRt25P6nvMYDO9Rc9w= Subject key identifier: C1:C1:AA:AB:16:79:E3:A9:73:62:C2:18:B0:7B:BA:3C:68:47:0F:E3 Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 0435 Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/5FFA5548B5A311EEA95C5732C4F9AE02.roa Signing time: Tue 19 May 2026 00:31:17 +0000 ROA not before: Tue 19 May 2026 00:31:17 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 131330 IP address blocks: 103.22.148.0/24 maxlen: 24 103.22.149.0/24 maxlen: 24 103.22.150.0/24 maxlen: 24 103.22.151.0/24 maxlen: 24 202.88.40.0/24 maxlen: 24 202.88.41.0/24 maxlen: 24 202.88.43.0/24 maxlen: 24 2400:1560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 00:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: May 19 00:31:17 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a0baf55-41b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:f2:a1:2c:5e:58:1e:8a:52:6f:c4:f8:d6: 15:8d:73:cb:03:d8:28:c9:fa:2d:d9:3b:a4:20:a0: 7b:82:77:a8:00:1e:c9:0b:82:69:c4:93:a7:56:8f: 23:d5:7b:ff:1e:60:dc:84:19:59:5b:fb:fb:c8:5d: 7b:6d:8f:bd:93:af:75:7a:26:e2:ad:2f:1e:3d:3b: cf:32:81:cf:74:b5:b8:22:37:f3:3e:9d:32:6c:87: 73:c0:8d:92:cb:84:4d:ec:bf:01:3a:85:d4:6f:ca: c4:55:c6:67:d3:8d:34:2b:f3:5b:19:90:3f:98:a8: 1e:4e:03:72:3c:62:5b:a7:04:2b:8f:ad:ff:4d:ed: 4b:62:3e:fe:68:49:46:24:2e:0b:13:66:54:e6:f9: 84:21:95:31:b3:b0:4d:21:b7:26:18:01:41:41:2e: 6d:14:f5:f1:1c:9c:cc:91:1b:2b:de:6e:92:70:5d: e2:45:cb:25:a9:8e:ba:1c:92:ab:da:92:a9:9f:72: fd:c7:0a:98:4b:d8:79:fc:46:66:c5:89:a0:dd:95: 1f:d4:fa:87:bc:a5:19:d2:1d:e3:1e:e5:fc:d4:53: 60:e6:e8:c2:35:f8:3a:e6:d9:03:4f:9c:c2:d1:08: 18:21:55:90:c4:e0:7f:34:38:4e:50:dc:50:a5:82: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C1:AA:AB:16:79:E3:A9:73:62:C2:18:B0:7B:BA:3C:68:47:0F:E3 X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/5FFA5548B5A311EEA95C5732C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.22.148.0/22 202.88.40.0/23 202.88.43.0/24 IPv6: 2400:1560::/32 Signature Algorithm: sha256WithRSAEncryption 89:eb:b9:23:c3:4f:df:82:6b:0e:c7:9b:55:c3:8a:da:a3:88: 6b:c1:33:f1:ad:18:86:f3:a1:e2:3d:50:2c:dc:7c:45:85:46: 2f:77:07:ed:f9:ab:27:5c:bc:6a:0d:23:8f:70:75:32:52:15: d2:4c:d7:e3:6b:df:0e:0d:b3:28:36:e7:a9:39:c4:d1:d3:a3: 6c:58:1f:18:39:ce:4e:d5:32:ca:e1:44:29:c5:8b:07:2b:64: 97:41:e6:6f:4b:c4:da:f8:7e:39:81:34:cc:c5:c0:7a:7c:1e: 02:7f:8e:a2:d7:32:76:d6:df:e1:e0:1f:92:37:ed:77:e4:0d: e1:94:e2:b2:0c:cf:e5:41:ee:9a:d6:4d:ed:b0:41:58:b3:9c: 30:e1:47:bc:b9:21:aa:41:9b:7a:e5:a0:29:67:5d:e4:eb:23: 13:b0:ca:22:7e:da:70:22:48:29:f3:e9:00:31:ef:45:c6:35: ae:b0:cc:fa:bd:71:1f:84:56:61:24:68:ef:34:1c:46:7f:c0: c5:36:2a:68:92:55:b7:7c:23:a5:79:7f:5f:ae:37:e0:9c:72: e6:31:b5:e3:56:37:d8:56:98:65:3d:cc:4e:a8:9a:d5:a6:d6: 2b:22:c5:5c:6f:79:68:73:14:56:03:30:07:8c:18:dd:e1:6d: b7:f3:75:f6 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjYwNTE5MDAzMTE3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTBiYWY1NS00MWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dLyoSxeWB6KUm/E+NYVjXPLA9goyfot2TukIKB7gneoAB7JC4JpxJOnVo8j 1Xv/HmDchBlZW/v7yF17bY+9k691eibirS8ePTvPMoHPdLW4IjfzPp0ybIdzwI2S y4RN7L8BOoXUb8rEVcZn0400K/NbGZA/mKgeTgNyPGJbpwQrj63/Te1LYj7+aElG JC4LE2ZU5vmEIZUxs7BNIbcmGAFBQS5tFPXxHJzMkRsr3m6ScF3iRcslqY66HJKr 2pKpn3L9xwqYS9h5/EZmxYmg3ZUf1PqHvKUZ0h3jHuX81FNg5ujCNfg65tkDT5zC 0QgYIVWQxOB/NDhOUNxQpYJaRQIDAQABo4ICezCCAncwHQYDVR0OBBYEFMHBqqsW eeOpc2LCGLB7ujxoRw/jMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkE1QkEvNDMyNkNCQzBCN0NEMTFFQ0FGNjgxMzM1QzRGOUFFMDIvNUZGQTU1NDhC NUEzMTFFRUE5NUM1NzMyQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZxaUAwQBylgoAwQAylgrMA0EAgACMAcDBQAkABVgMA0GCSqGSIb3 DQEBCwUAA4IBAQCJ67kjw0/fgmsOx5tVw4rao4hrwTPxrRiG86HiPVAs3HxFhUYv dwft+asnXLxqDSOPcHUyUhXSTNfja98ODbMoNuepOcTR06NsWB8YOc5O1TLK4UQp xYsHK2SXQeZvS8Ta+H45gTTMxcB6fB4Cf46i1zJ21t/h4B+SN+135A3hlOKyDM/l Qe6a1k3tsEFYs5ww4Ue8uSGqQZt65aApZ13k6yMTsMoiftpwIkgp8+kAMe9FxjWu sMz6vXEfhFZhJGjvNBxGf8DFNipoklW3fCOleX9frjfgnHLmMbXjVjfYVphlPcxO qJrVptYrIsVcb3locxRWAzAHjBjd4W2383X2 -----END CERTIFICATE-----Generated at Sat Jun 13 11:14:29 2026 by rpki-client