$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/D669BA2A5B2311F18CBDBA86B5833773.roa File: D669BA2A5B2311F18CBDBA86B5833773.roa (raw, json) Hash identifier: uJJ6umJhiTsyih6RF9yfqw8B9f80UYhsvYbpzsZ+0l8= Subject key identifier: 92:37:E6:73:84:90:3B:06:31:EA:2D:C1:0E:69:B1:EC:A9:64:D9:60 Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Certificate serial: 0CD7 Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/D669BA2A5B2311F18CBDBA86B5833773.roa Signing time: Tue 28 Jul 2026 19:36:38 +0000 ROA not before: Tue 28 Jul 2026 19:36:38 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 38835 IP address blocks: 43.231.68.0/22 maxlen: 24 43.245.36.0/22 maxlen: 24 43.251.52.0/22 maxlen: 24 103.18.252.0/22 maxlen: 24 103.21.132.0/22 maxlen: 24 103.24.47.0/24 maxlen: 24 103.42.140.0/22 maxlen: 24 103.205.246.0/23 maxlen: 24 103.206.28.0/24 maxlen: 24 103.232.196.0/22 maxlen: 24 113.21.32.0/20 maxlen: 24 113.61.96.0/21 maxlen: 23 113.61.96.0/22 maxlen: 24 113.61.100.0/23 maxlen: 24 113.61.102.0/24 maxlen: 24 163.47.64.0/22 maxlen: 24 182.161.44.0/22 maxlen: 24 183.81.144.0/21 maxlen: 24 203.31.34.0/23 maxlen: 24 203.160.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Validity Not Before: Jul 28 19:36:38 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6904c6-b717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:03:02:e5:de:27:72:49:9a:42:a8:32:70: 65:56:2b:d5:a4:6e:54:66:31:f0:c6:5f:39:16:4b: 6b:dd:e1:c5:42:98:ba:4b:87:28:1e:23:b8:73:15: c4:81:cb:9b:bd:3c:2e:40:98:56:0d:f4:a9:b0:82: 45:a9:e9:75:bc:2a:23:45:47:5e:e5:f3:cc:ed:de: a0:42:12:f8:20:bd:0e:ea:45:9a:c6:bf:51:66:c2: f3:a2:66:7d:3c:39:30:50:76:e2:a1:c6:80:24:09: 1f:79:6b:c7:f4:5f:73:8c:c9:10:95:78:f4:b1:51: 24:58:44:df:a4:de:8c:38:0f:0c:1e:44:9b:92:cd: 10:2b:74:36:f9:dc:c7:e6:d6:ac:4d:4e:62:e1:b4: 84:4c:ed:d9:b4:0f:13:28:53:29:3b:33:f5:cd:ff: a0:ff:26:5d:a4:93:4b:7d:6a:a3:3d:49:3b:18:c4: 31:6d:8b:d9:84:d5:fc:5e:e7:54:90:1d:09:5b:94: 41:58:0a:8b:32:42:3e:d4:ae:a7:41:e1:23:b9:ea: b3:6e:29:a2:88:e0:aa:97:3b:8a:a5:d7:4b:a9:25: 01:97:31:22:a6:90:6e:31:f1:87:da:6f:07:43:ef: b4:58:f5:b7:5e:3a:4f:21:b3:99:91:b0:bf:98:16: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:37:E6:73:84:90:3B:06:31:EA:2D:C1:0E:69:B1:EC:A9:64:D9:60 X509v3 Authority Key Identifier: keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/D669BA2A5B2311F18CBDBA86B5833773.roa sbgp-ipAddrBlock: critical IPv4: 43.231.68.0/22 43.245.36.0/22 43.251.52.0/22 103.18.252.0/22 103.21.132.0/22 103.24.47.0/24 103.42.140.0/22 103.205.246.0/23 103.206.28.0/24 103.232.196.0/22 113.21.32.0/20 113.61.96.0/21 163.47.64.0/22 182.161.44.0/22 183.81.144.0/21 203.31.34.0/23 203.160.8.0/21 Signature Algorithm: sha256WithRSAEncryption 4a:97:32:32:d1:fc:c9:a2:a9:92:95:44:9e:b8:73:b1:ae:af: 93:89:e9:cc:88:de:42:36:6b:a5:fd:2f:ed:66:e9:4c:67:2d: 77:74:2a:72:ae:1b:94:b4:12:02:bb:59:8d:cf:cc:3a:82:f2: 24:ff:28:a2:30:41:03:82:19:f7:04:f7:26:70:3f:24:d2:b4: 70:f3:16:de:68:46:6e:a6:2e:fd:37:4c:81:a5:cd:7d:ac:3b: c1:ee:e0:32:85:dd:7e:ea:88:a2:04:44:00:7e:b5:8c:8b:50: b1:18:9e:0b:ce:6a:a8:95:7a:c2:88:ec:0e:a7:bc:a8:14:77: d5:10:f8:30:b6:06:6a:2b:a9:ef:10:07:c0:b1:ec:0f:d6:42: b8:de:a6:f2:af:4d:c0:40:ea:92:92:76:21:c5:67:2d:60:9c: 8a:6c:d7:d4:90:0a:c2:cb:e2:9f:02:5a:0e:e2:05:20:35:70: 28:90:71:af:cd:d1:28:1a:85:59:c5:bd:f9:03:e9:d6:a7:7c: d9:50:0c:e3:c7:ac:80:94:f5:26:ff:04:c0:9a:d2:d2:5d:88: 50:53:00:55:a8:de:13:03:4e:b5:16:7e:75:a7:9b:3d:fd:22: d6:87:56:9c:19:ab:87:3d:e3:9c:69:8a:ee:2f:7f:f6:4e:2d: 22:76:10:77 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwMDMxMTAvBgNVBAUTKDAzOEE4NkYzNjJCMjU1N0Y5NEJFNzcyRUUwQzVGRDMx ODQ1RkUyNjMwHhcNMjYwNzI4MTkzNjM4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MDRjNi1iNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFoDAuXeJ3JJmkKoMnBlVivVpG5UZjHwxl85Fktr3eHFQpi6S4coHiO4cxXE gcubvTwuQJhWDfSpsIJFqel1vCojRUde5fPM7d6gQhL4IL0O6kWaxr9RZsLzomZ9 PDkwUHbiocaAJAkfeWvH9F9zjMkQlXj0sVEkWETfpN6MOA8MHkSbks0QK3Q2+dzH 5tasTU5i4bSETO3ZtA8TKFMpOzP1zf+g/yZdpJNLfWqjPUk7GMQxbYvZhNX8XudU kB0JW5RBWAqLMkI+1K6nQeEjueqzbimiiOCqlzuKpddLqSUBlzEippBuMfGH2m8H Q++0WPW3XjpPIbOZkbC/mBb9QQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFJI35nOE kDsGMeotwQ5pseypZNlgMB8GA1UdIwQYMBaAFAOKhvNislV/lL53LuDF/TGEX+Jj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDAwMy9COEU4QUQ3MjFB RDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZYLVV2bmN1NE1YOU1ZUmY0 bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0cUc4Mkt5VlgtVXZuY3U0TVg5TVlSZjRtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQwMDMvQjhFOEFENzIxQUQ4MTFFQTgyRTc0QjJGQzRGOUFFMDIvRDY2OUJBMkE1 QjIzMTFGMThDQkRCQTg2QjU4MzM3NzMucm9hMH8GCCsGAQUFBwEHAQH/BHAwbjBs BAIAATBmAwQCK+dEAwQCK/UkAwQCK/s0AwQCZxL8AwQCZxWEAwQAZxgvAwQCZyqM AwQBZ832AwQAZ84cAwQCZ+jEAwQEcRUgAwQDcT1gAwQCoy9AAwQCtqEsAwQDt1GQ AwQByx8iAwQDy6AIMA0GCSqGSIb3DQEBCwUAA4IBAQBKlzIy0fzJoqmSlUSeuHOx rq+TienMiN5CNmul/S/tZulMZy13dCpyrhuUtBICu1mNz8w6gvIk/yiiMEEDghn3 BPcmcD8k0rRw8xbeaEZupi79N0yBpc19rDvB7uAyhd1+6oiiBEQAfrWMi1CxGJ4L zmqolXrCiOwOp7yoFHfVEPgwtgZqK6nvEAfAsewP1kK43qbyr03AQOqSknYhxWct YJyKbNfUkArCy+KfAloO4gUgNXAokHGvzdEoGoVZxb35A+nWp3zZUAzjx6yAlPUm /wTAmtLSXYhQUwBVqN4TA061Fn51p5s9/SLWh1acGauHPeOcaYruL3/2Ti0idhB3 -----END CERTIFICATE-----Generated at Wed Jul 29 09:13:03 2026 by rpki-client