$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa File: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (raw, json) Hash identifier: OlddN+1Btn05jfz7izHATCAFLY0/IBXnBfKOwKNZEMU= Subject key identifier: 90:A3:C0:43:A6:D5:18:0B:7D:60:D3:5A:3F:5F:7F:86:C0:0A:E2:5A Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 011A Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa Signing time: Fri 05 Jun 2026 06:38:21 +0000 ROA not before: Fri 05 Jun 2026 06:38:21 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 103.218.96.0/24 maxlen: 24 103.218.97.0/24 maxlen: 24 103.218.98.0/24 maxlen: 24 103.218.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Jun 5 06:38:21 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a226edd-a75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:56:68:97:65:98:e1:f5:b6:05:6e:ee:83:8b: 0b:39:89:d9:9b:c3:67:91:17:49:1c:eb:33:6f:8e: 47:9b:ee:cd:64:1d:8f:b7:17:83:fe:c1:f7:65:9e: 60:5c:a7:cb:3f:ff:0f:08:c7:c9:aa:fe:79:3e:c0: 4c:c8:6d:6c:d1:8e:87:35:91:04:74:12:4b:5d:50: d7:94:9a:55:f4:3f:ad:0c:57:53:15:02:c7:a9:22: 41:d0:79:34:21:dc:a7:7d:0e:b0:fb:d0:53:a4:c8: 01:dc:fa:41:56:79:2f:07:f0:90:7f:cc:5c:6e:7f: c5:39:7b:d6:0d:6d:fb:7b:5e:d5:3c:74:49:86:00: ea:08:04:76:4b:c4:88:20:9d:19:12:8c:f0:3e:b7: 89:50:28:d7:77:00:90:f4:eb:a7:a0:40:2f:35:63: dc:91:33:de:ea:8f:e9:60:bd:b8:5e:54:e2:68:97: 28:28:d4:00:86:ec:e8:41:c6:9e:35:73:2f:f6:ff: 2c:65:4d:f8:ea:7a:36:70:e1:c5:62:4b:8b:fd:27: 1a:eb:85:d3:80:98:e7:5f:17:89:85:fa:74:1c:9c: 88:62:fb:70:25:da:db:9c:b6:6e:07:4c:b6:be:01: 66:2e:d0:d5:8c:55:e5:51:8e:dc:47:31:d1:89:b6: 02:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A3:C0:43:A6:D5:18:0B:7D:60:D3:5A:3F:5F:7F:86:C0:0A:E2:5A X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.218.96.0/22 Signature Algorithm: sha256WithRSAEncryption 04:1e:04:dc:de:7e:e8:9c:c1:3a:f0:d9:22:55:82:eb:59:0a: aa:db:20:c2:e3:27:3f:4f:40:1a:85:cb:1b:3c:10:59:f0:59: e1:17:8c:15:d6:8f:a5:ab:5b:9c:62:d5:61:58:ac:1c:29:bc: 5e:b8:e1:21:aa:3b:fe:6e:72:73:d4:93:27:ba:e2:99:4e:28: ff:eb:1c:32:ad:9c:53:16:64:7b:36:ae:02:5c:a6:c3:ac:0f: 86:43:a2:84:4f:6d:4e:2f:24:c0:93:4d:0a:8d:83:17:56:58: 6d:c8:20:a7:e8:e1:e0:37:38:af:43:75:33:f7:91:ba:f7:a7: 8b:76:3b:2f:d4:02:0c:91:bb:9a:61:c4:3b:24:8d:f6:af:40: ad:22:25:da:83:b7:e1:97:0f:20:76:ae:78:76:58:f9:4e:f5: cc:28:41:60:9c:55:8e:73:a6:9a:11:15:4e:6e:56:9f:5e:9d: 43:6a:b7:1b:4d:28:3f:a1:0c:43:53:23:ed:38:23:75:8f:6a: 63:3e:9e:d6:c6:30:e1:6f:e4:3c:10:f5:d5:60:b0:e2:b6:5f: 9a:05:c4:bf:8c:f3:24:56:3f:74:5a:49:bb:85:3d:9c:77:c2: 65:bc:e4:71:2c:2f:ff:ad:e2:e6:26:2d:32:f3:62:1b:f0:cb: a3:f9:c3:ed -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0 RDFCOUExNTEwHhcNMjYwNjA1MDYzODIxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyNmVkZC1hNzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiVZol2WY4fW2BW7ug4sLOYnZm8NnkRdJHOszb45Hm+7NZB2PtxeD/sH3ZZ5g XKfLP/8PCMfJqv55PsBMyG1s0Y6HNZEEdBJLXVDXlJpV9D+tDFdTFQLHqSJB0Hk0 IdynfQ6w+9BTpMgB3PpBVnkvB/CQf8xcbn/FOXvWDW37e17VPHRJhgDqCAR2S8SI IJ0ZEozwPreJUCjXdwCQ9OunoEAvNWPckTPe6o/pYL24XlTiaJcoKNQAhuzoQcae NXMv9v8sZU346no2cOHFYkuL/Sca64XTgJjnXxeJhfp0HJyIYvtwJdrbnLZuB0y2 vgFmLtDVjFXlUY7cRzHRibYCQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJCjwEOm 1RgLfWDTWj9ff4bACuJaMB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMyMzgvQ0Q3MTdEOUNDQkYzMTFFRkJFNUIzMzMwQzRGOUFFMDIvMzEzNUFGQ0VD QkY0MTFFRkJDQTA2QjZCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ9pgMA0GCSqGSIb3DQEBCwUAA4IBAQAEHgTc3n7onME68NkiVYLr WQqq2yDC4yc/T0AahcsbPBBZ8FnhF4wV1o+lq1ucYtVhWKwcKbxeuOEhqjv+bnJz 1JMnuuKZTij/6xwyrZxTFmR7Nq4CXKbDrA+GQ6KET21OLyTAk00KjYMXVlhtyCCn 6OHgNzivQ3Uz95G696eLdjsv1AIMkbuaYcQ7JI32r0CtIiXag7fhlw8gdq54dlj5 TvXMKEFgnFWOc6aaERVOblafXp1DarcbTSg/oQxDUyPtOCN1j2pjPp7WxjDhb+Q8 EPXVYLDitl+aBcS/jPMkVj90Wkm7hT2cd8JlvORxLC//reLmJi0y82Ib8Muj+cPt -----END CERTIFICATE-----Generated at Sat Jun 13 14:04:37 2026 by rpki-client