$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/2340D07AF2F111ED91F08A4FC4F9AE02.roa File: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (raw, json) Hash identifier: tMod+kKR1jOR1VExOog5QztxNpsdZWz75NXKTsytqSU= Subject key identifier: A6:AC:37:BB:93:76:D2:C8:E1:F4:EA:06:89:2A:CF:CC:4A:59:54:AB Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 0248 Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/2340D07AF2F111ED91F08A4FC4F9AE02.roa Signing time: Fri 05 Jun 2026 03:32:12 +0000 ROA not before: Fri 05 Jun 2026 03:32:12 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 132823 IP address blocks: 103.254.231.0/24 maxlen: 24 2001:df2:6d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: Jun 5 03:32:12 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a22433c-3499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:4a:63:89:f6:16:a0:2d:8a:11:09:7c:59: 33:40:a3:36:4b:34:17:81:2b:12:a9:37:86:0f:f8: fa:47:95:6c:01:9d:16:1a:ba:10:c7:af:47:67:d1: 7f:90:f2:28:76:40:c1:68:5d:67:d1:17:2e:85:8b: a0:3f:2b:d2:6f:05:e5:49:f6:3e:d3:38:3d:51:d7: dd:9c:25:c9:27:5f:c6:84:44:b0:da:27:17:19:6a: a2:38:08:f6:05:8c:ac:ed:4b:8c:2c:84:bc:b5:86: e4:4c:08:2d:35:93:4f:06:ec:ca:49:6c:df:2e:86: 2b:0b:09:ba:83:e4:9b:37:6d:4a:73:60:46:00:cf: fa:90:31:0e:fe:2e:25:88:46:bd:9a:f7:d6:db:eb: 8a:9c:10:87:5e:07:66:12:9d:f9:b5:6d:a8:68:81: da:05:f6:06:ba:cc:db:5b:5d:a3:f0:98:cc:24:24: 66:14:ac:40:ff:d1:5d:17:2e:34:fe:8b:fe:52:70: 66:d4:35:08:05:91:7c:dd:05:1c:d9:1a:fc:ed:97: 3f:db:d5:99:ac:d2:f3:bd:c0:92:1a:53:29:73:8f: 9a:50:17:e9:9b:f3:57:12:53:ae:85:e4:07:e7:b3: 13:e4:d5:ed:13:86:65:04:94:2b:67:ed:d4:f6:b4: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AC:37:BB:93:76:D2:C8:E1:F4:EA:06:89:2A:CF:CC:4A:59:54:AB X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/2340D07AF2F111ED91F08A4FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.254.231.0/24 IPv6: 2001:df2:6d40::/48 Signature Algorithm: sha256WithRSAEncryption 11:6f:3b:10:d9:9a:f3:ad:6a:91:50:2f:17:fa:f2:42:89:72: b3:1a:97:55:1d:e6:d5:72:8c:fb:7f:87:90:3f:2c:37:82:ab: 1c:21:95:f1:71:89:fd:d5:7b:bb:ec:64:95:88:f7:35:e8:be: 60:16:f1:82:af:e2:a1:70:10:05:7e:12:0b:1a:ce:d0:4c:22: cd:e6:fb:25:22:f7:9b:3a:b9:62:d2:3b:2d:b6:e4:b8:16:c9: 38:1b:0a:1f:73:f5:73:41:98:dd:af:e5:8a:75:9c:96:84:22: 03:7d:be:ab:f5:75:80:ee:0c:06:d0:9e:21:55:5e:58:78:e0: f5:9e:83:8f:5b:50:a2:60:76:a9:68:c7:f7:fe:2a:38:79:79: f9:89:e5:a5:0b:1d:48:14:02:47:5b:c4:ce:63:e4:4c:c9:03: c2:33:48:75:c7:82:90:0e:76:23:fc:65:db:95:fc:63:82:ab: 54:c3:76:d5:2e:a8:7f:9c:20:8d:9d:ee:fd:fa:b2:4b:f7:a5: 3f:2a:9c:d8:fa:64:f6:32:14:78:14:80:7b:64:e3:0d:64:5d: 10:d6:7a:aa:c9:07:33:ff:f5:e8:2d:b8:15:f2:a9:1f:31:90: 6d:87:af:0b:3a:42:0d:57:3f:3d:b2:12:4e:2c:67:b6:b8:ab: 7e:4d:8e:a3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjYwNjA1MDMzMjEyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyNDMzYy0zNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiRKY4n2FqAtihEJfFkzQKM2SzQXgSsSqTeGD/j6R5VsAZ0WGroQx69HZ9F/ kPIodkDBaF1n0RcuhYugPyvSbwXlSfY+0zg9UdfdnCXJJ1/GhESw2icXGWqiOAj2 BYys7UuMLIS8tYbkTAgtNZNPBuzKSWzfLoYrCwm6g+SbN21Kc2BGAM/6kDEO/i4l iEa9mvfW2+uKnBCHXgdmEp35tW2oaIHaBfYGuszbW12j8JjMJCRmFKxA/9FdFy40 /ov+UnBm1DUIBZF83QUc2Rr87Zc/29WZrNLzvcCSGlMpc4+aUBfpm/NXElOuheQH 57MT5NXtE4ZlBJQrZ+3U9rT86QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKasN7uT dtLI4fTqBokqz8xKWVSrMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzcyRTYvRTZFNkZCMzJGMkVBMTFFRDkwOTkwMDRBQzRGOUFFMDIvMjM0MEQwN0FG MkYxMTFFRDkxRjA4QTRGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ/7nMA8EAgACMAkDBwAgAQ3ybUAwDQYJKoZIhvcNAQELBQADggEB ABFvOxDZmvOtapFQLxf68kKJcrMal1Ud5tVyjPt/h5A/LDeCqxwhlfFxif3Ve7vs ZJWI9zXovmAW8YKv4qFwEAV+EgsaztBMIs3m+yUi95s6uWLSOy225LgWyTgbCh9z 9XNBmN2v5Yp1nJaEIgN9vqv1dYDuDAbQniFVXlh44PWeg49bUKJgdqlox/f+Kjh5 efmJ5aULHUgUAkdbxM5j5EzJA8IzSHXHgpAOdiP8ZduV/GOCq1TDdtUuqH+cII2d 7v36skv3pT8qnNj6ZPYyFHgUgHtk4w1kXRDWeqrJBzP/9egtuBXyqR8xkG2Hrws6 Qg1XPz2yEk4sZ7a4q35NjqM= -----END CERTIFICATE-----Generated at Sun Jun 14 05:09:22 2026 by rpki-client