$ rpki-client -vvf rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/1FFD728CD7A611F0A479DB368AD3641D.roa File: 1FFD728CD7A611F0A479DB368AD3641D.roa (raw, json) Hash identifier: jCHNz+PGUoBjRF3PjEKVL7Q9AuMpX+3t0yL6AUjdofM= Subject key identifier: D3:BB:D1:C7:43:EF:F5:6C:67:32:BE:87:68:A8:4F:A5:F5:AD:04:92 Certificate issuer: /CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Certificate serial: 0187 Authority key identifier: 6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/1FFD728CD7A611F0A479DB368AD3641D.roa Signing time: Tue 19 May 2026 17:44:03 +0000 ROA not before: Tue 19 May 2026 17:44:03 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141347 IP address blocks: 103.157.88.0/24 maxlen: 24 103.157.89.0/24 maxlen: 24 2401:a460::/32 maxlen: 32 2401:a460::/34 maxlen: 34 2401:a460::/48 maxlen: 48 2401:a460:1::/48 maxlen: 48 2401:a460:2::/48 maxlen: 48 2401:a460:3::/48 maxlen: 48 2401:a460:4::/48 maxlen: 48 2401:a460:5::/48 maxlen: 48 2401:a460:6::/48 maxlen: 48 2401:a460:7::/48 maxlen: 48 2401:a460:8::/48 maxlen: 48 2401:a460:9::/48 maxlen: 48 2401:a460:10::/48 maxlen: 48 2401:a460:88::/48 maxlen: 48 2401:a460:89::/48 maxlen: 48 2401:a460:4000::/34 maxlen: 34 2401:a460:8000::/34 maxlen: 34 2401:a460:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 04:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C882A, serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Validity Not Before: May 19 17:44:03 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a0ca163-72f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:80:f6:b1:fb:d2:62:5d:f2:35:6f:39:e5:7d: 85:6a:ef:e9:e4:5c:7a:94:58:2b:1c:98:54:2f:38: 1d:07:07:3f:aa:7e:26:6e:2b:2d:ba:42:89:52:e5: c2:13:05:85:0e:8a:ca:c6:27:e5:26:d8:14:83:5e: 32:55:47:b6:9f:4e:b8:c4:94:87:bd:4c:b6:b0:91: 6b:d9:31:35:f5:cd:51:8f:2f:14:74:51:50:f8:ff: 8d:ec:b7:5c:5d:c0:9f:10:ee:3b:4a:55:f6:09:f3: 57:e6:43:37:0d:9e:f3:ca:02:bc:73:fc:69:a6:4a: 77:56:b3:9e:31:18:80:61:1f:18:a2:6e:5e:b5:10: 6a:36:a5:07:08:01:6f:a1:6e:66:40:6e:87:74:38: 50:59:c6:fb:11:0b:02:55:f3:9e:35:5e:ba:50:d1: 2c:e8:dd:91:6b:6e:b8:c9:a8:44:fd:23:18:bb:80: ec:e7:d7:81:d5:bf:d5:c8:96:3d:5f:a2:03:54:e4: a9:f9:d6:8c:0b:92:19:2c:c1:26:f9:a0:8b:bc:49: 68:8c:f8:e5:af:d3:4d:5b:36:29:8a:8d:5a:7d:66: b5:63:b1:8c:62:35:61:80:12:88:e2:73:82:66:6d: b6:53:56:05:5b:7a:5e:bc:6c:35:c7:5a:b3:64:9c: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BB:D1:C7:43:EF:F5:6C:67:32:BE:87:68:A8:4F:A5:F5:AD:04:92 X509v3 Authority Key Identifier: keyid:6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/1FFD728CD7A611F0A479DB368AD3641D.roa sbgp-ipAddrBlock: critical IPv4: 103.157.88.0/23 IPv6: 2401:a460::/32 Signature Algorithm: sha256WithRSAEncryption 2a:40:75:64:a3:47:44:95:4e:87:ea:cf:7f:c8:e8:20:6e:c7: 86:3b:e2:38:40:b5:7a:04:37:69:14:31:2b:20:b9:b4:7f:70: 98:9a:2f:92:d2:a6:39:33:23:39:2c:af:6d:3d:dd:63:81:b3: ca:7b:60:a8:6a:e8:a7:71:31:e0:96:b0:04:83:7d:41:e8:d6: 11:47:54:ae:74:d7:c6:06:3d:92:35:09:a2:0c:ed:39:45:c2: a2:e0:ec:73:de:0f:fe:60:45:cd:b1:d9:53:c8:2c:fd:c1:57: 9f:df:bb:9e:46:b8:82:fa:6f:f6:79:ef:bb:6a:bf:26:db:cd: 68:1f:85:89:46:ce:d4:cc:8b:b6:be:2c:49:f7:da:09:6d:f8: eb:0e:54:03:29:1e:72:f3:83:82:22:a4:8f:e2:3b:88:75:46: ea:e2:ac:01:b4:67:2d:b2:89:7d:39:1b:e6:81:5c:ab:6e:35: 63:9a:20:21:90:8e:26:9f:6d:36:42:06:ef:26:70:5d:82:5f: ab:b4:7f:e6:08:ac:14:f5:2c:c5:69:69:46:ed:08:41:a1:6e: 4d:a6:d0:10:53:fc:7c:17:df:e1:76:9e:6d:40:bf:24:a0:6d: 33:a0:92:1e:2b:94:04:18:f2:c1:7d:d5:47:b3:17:3c:1a:bc: 64:39:26:d3 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg4MkExMTAvBgNVBAUTKDZGQTYyQkUwQUQ3OUExQjRDMzg2OUJBMTk5MEYyMTRE RjZCM0NFMjcwHhcNMjYwNTE5MTc0NDAzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTBjYTE2My03MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YD2sfvSYl3yNW855X2Fau/p5Fx6lFgrHJhULzgdBwc/qn4mbistukKJUuXC EwWFDorKxiflJtgUg14yVUe2n064xJSHvUy2sJFr2TE19c1Rjy8UdFFQ+P+N7Ldc XcCfEO47SlX2CfNX5kM3DZ7zygK8c/xppkp3VrOeMRiAYR8Yom5etRBqNqUHCAFv oW5mQG6HdDhQWcb7EQsCVfOeNV66UNEs6N2Ra264yahE/SMYu4Ds59eB1b/VyJY9 X6IDVOSp+daMC5IZLMEm+aCLvElojPjlr9NNWzYpio1afWa1Y7GMYjVhgBKI4nOC Zm22U1YFW3pevGw1x1qzZJzJlwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNO70cdD 7/VsZzK+h2ioT6X1rQSSMB8GA1UdIwQYMBaAFG+mK+CteaG0w4aboZkPIU32s84n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODgyQS9COUMwQzk3QTIx QTIxMUVGQjkwNjlBNkFDNEY5QUUwMi9iNllyNEsxNW9iVERocHVobVE4aFRmYXp6 aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I2WXI0SzE1b2JURGhwdWhtUThoVGZhenppYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzg4MkEvQjlDMEM5N0EyMUEyMTFFRkI5MDY5QTZBQzRGOUFFMDIvMUZGRDcyOENE N0E2MTFGMEE0NzlEQjM2OEFEMzY0MUQucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ51YMA0EAgACMAcDBQAkAaRgMA0GCSqGSIb3DQEBCwUAA4IBAQAq QHVko0dElU6H6s9/yOggbseGO+I4QLV6BDdpFDErILm0f3CYmi+S0qY5MyM5LK9t Pd1jgbPKe2CoauincTHglrAEg31B6NYRR1SudNfGBj2SNQmiDO05RcKi4Oxz3g/+ YEXNsdlTyCz9wVef37ueRriC+m/2ee+7ar8m281oH4WJRs7UzIu2vixJ99oJbfjr DlQDKR5y84OCIqSP4juIdUbq4qwBtGctsol9ORvmgVyrbjVjmiAhkI4mn202Qgbv JnBdgl+rtH/mCKwU9SzFaWlG7QhBoW5NptAQU/x8F9/hdp5tQL8koG0zoJIeK5QE GPLBfdVHsxc8GrxkOSbT -----END CERTIFICATE-----Generated at Sat Jun 13 16:09:03 2026 by rpki-client