$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/3ED2E738F0C511E9AD7DCC11C4F9AE02.roa File: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (raw, json) Hash identifier: 6KI10DgP62KhCRKVFYn98frZWqu0hQ3t15QV7tzSmEY= Subject key identifier: DF:50:8B:BD:6B:B9:D3:E9:93:3A:F5:79:8E:EA:46:CD:BD:70:89:35 Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Certificate serial: 0D89 Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/3ED2E738F0C511E9AD7DCC11C4F9AE02.roa Signing time: Tue 14 Jul 2026 18:18:40 +0000 ROA not before: Tue 14 Jul 2026 18:18:40 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 139251 IP address blocks: 103.140.98.0/23 maxlen: 24 2001:df0:b980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3465 (0xd89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2659, serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Validity Not Before: Jul 14 18:18:40 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a567d80-f09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:37:5e:fa:8b:6e:14:27:f2:92:37:51:82: 78:db:7f:ef:d8:f7:09:2b:46:f0:85:54:ec:ef:3a: 93:57:4a:6a:fa:f0:59:0c:19:4f:d7:86:6a:39:d8: 71:46:d2:43:9d:52:3c:e0:d3:03:fb:1d:c4:62:c2: 1f:77:4c:36:dc:9d:43:82:b2:64:14:b0:bf:10:19: f1:9a:15:db:ac:ab:99:58:19:d1:85:61:4a:a2:fc: 29:b1:f4:e9:c3:f3:39:50:a0:60:ad:22:dc:9b:6a: 63:a2:ad:f1:51:f2:98:14:90:9e:65:07:9d:53:13: bb:fd:da:d8:27:37:aa:4c:97:c8:df:5c:a0:4b:e0: eb:e2:b7:e8:5f:2c:68:c0:10:a1:67:d9:a4:13:7e: b4:e6:f8:99:34:11:6c:4f:6e:4f:7e:24:10:84:a6: 92:6b:23:ef:9f:14:b7:6d:39:9e:c0:4a:42:8c:0a: 67:03:20:47:c5:dc:7d:af:7b:90:5c:9c:37:7d:25: 94:2d:4e:2f:71:cd:d3:d6:5c:14:62:d8:ab:19:d3: 11:90:25:ed:11:ff:8b:c2:c1:be:dd:62:b1:fa:81: d7:75:a6:ba:6d:91:56:1e:d8:7f:9a:f3:ed:77:3c: f0:22:1e:51:4c:19:9d:57:c9:be:82:ee:80:79:37: 3c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:50:8B:BD:6B:B9:D3:E9:93:3A:F5:79:8E:EA:46:CD:BD:70:89:35 X509v3 Authority Key Identifier: keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/3ED2E738F0C511E9AD7DCC11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.98.0/23 IPv6: 2001:df0:b980::/48 Signature Algorithm: sha256WithRSAEncryption 88:a6:18:d1:e4:44:72:6d:5e:61:5d:7b:7d:69:9c:1f:c9:69: 3f:7f:d4:37:ad:f4:f0:a5:2a:02:32:53:a2:c7:b0:d1:2f:2c: f6:99:ae:f0:1b:75:97:c5:12:77:1d:42:6a:56:a5:d8:36:b3: c3:69:0e:e1:ec:64:68:09:be:62:91:13:3e:06:d2:7f:c1:82: d0:57:4a:3b:e8:70:2e:40:ac:60:fd:c3:3b:f6:72:04:b3:d6: 6e:66:db:d2:d5:dc:84:62:6a:38:72:42:84:98:40:72:69:d0: 5b:91:62:b7:18:e0:0e:dd:98:54:f4:e0:b7:38:a3:4f:7c:77: 37:c6:69:c4:11:b0:7e:35:2a:3d:17:1e:ea:40:86:f9:e4:d1: b1:87:e8:78:e5:ed:71:1a:9d:4c:10:d9:b9:a7:cb:51:f3:ac: f3:1c:3f:4a:d2:98:57:82:92:3c:52:e2:00:81:65:3f:db:5e: a5:6f:1f:ff:23:8b:a1:0d:09:b9:2b:82:89:0e:77:db:2d:62: b4:21:5c:bd:1a:c0:1c:73:ee:da:31:0f:8b:fc:87:07:f4:8b: f1:92:d9:4f:db:71:e4:8e:5d:af:dd:cb:4c:aa:7f:e6:5e:84: 2f:8c:e9:59:17:e8:1e:41:2d:36:29:57:29:23:37:54:8c:6e: 16:0a:b4:e9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB OTIxMEZENzYwHhcNMjYwNzE0MTgxODQwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU2N2Q4MC1mMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUI3XvqLbhQn8pI3UYJ423/v2PcJK0bwhVTs7zqTV0pq+vBZDBlP14ZqOdhx RtJDnVI84NMD+x3EYsIfd0w23J1DgrJkFLC/EBnxmhXbrKuZWBnRhWFKovwpsfTp w/M5UKBgrSLcm2pjoq3xUfKYFJCeZQedUxO7/drYJzeqTJfI31ygS+Dr4rfoXyxo wBChZ9mkE3605viZNBFsT25PfiQQhKaSayPvnxS3bTmewEpCjApnAyBHxdx9r3uQ XJw3fSWULU4vcc3T1lwUYtirGdMRkCXtEf+LwsG+3WKx+oHXdaa6bZFWHth/mvPt dzzwIh5RTBmdV8m+gu6AeTc8ZwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFN9Qi71r udPpkzr1eY7qRs29cIk1MB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI2NTkvQzQ2OEU5QzZGMEMzMTFFOTkyNkNDRDBFQzRGOUFFMDIvM0VEMkU3MzhG MEM1MTFFOUFEN0RDQzExQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4xiMA8EAgACMAkDBwAgAQ3wuYAwDQYJKoZIhvcNAQELBQADggEB AIimGNHkRHJtXmFde31pnB/JaT9/1Det9PClKgIyU6LHsNEvLPaZrvAbdZfFEncd QmpWpdg2s8NpDuHsZGgJvmKREz4G0n/BgtBXSjvocC5ArGD9wzv2cgSz1m5m29LV 3IRiajhyQoSYQHJp0FuRYrcY4A7dmFT04Lc4o098dzfGacQRsH41Kj0XHupAhvnk 0bGH6Hjl7XEanUwQ2bmny1HzrPMcP0rSmFeCkjxS4gCBZT/bXqVvH/8ji6ENCbkr gokOd9stYrQhXL0awBxz7toxD4v8hwf0i/GS2U/bceSOXa/dy0yqf+ZehC+M6VkX 6B5BLTYpVykjN1SMbhYKtOk= -----END CERTIFICATE-----Generated at Wed Jul 29 07:49:45 2026 by rpki-client