$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/0A16B10E8EE011F09A1AE72BC4F9AE02.roa File: 0A16B10E8EE011F09A1AE72BC4F9AE02.roa (raw, json) Hash identifier: QMCDvMVTegIGNOUrV6jl5KHDRDpM9sT6ENk9cUJpeFM= Subject key identifier: 42:C8:07:F3:28:79:BA:0A:62:B8:00:97:76:36:0E:F7:17:98:55:32 Certificate issuer: /CN=A91D3037/serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Certificate serial: AB Authority key identifier: B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/0A16B10E8EE011F09A1AE72BC4F9AE02.roa Signing time: Wed 15 Jul 2026 09:34:34 +0000 ROA not before: Wed 15 Jul 2026 09:34:34 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 55843 IP address blocks: 49.128.8.0/22 maxlen: 22 49.128.8.0/23 maxlen: 23 49.128.8.0/24 maxlen: 24 49.128.9.0/24 maxlen: 24 49.128.10.0/23 maxlen: 23 49.128.10.0/24 maxlen: 24 49.128.11.0/24 maxlen: 24 103.13.128.0/22 maxlen: 22 103.13.128.0/23 maxlen: 23 103.13.128.0/24 maxlen: 24 103.13.129.0/24 maxlen: 24 103.13.130.0/23 maxlen: 23 103.13.130.0/24 maxlen: 24 103.13.131.0/24 maxlen: 24 103.29.108.0/22 maxlen: 22 103.29.108.0/23 maxlen: 23 103.29.108.0/24 maxlen: 24 103.29.109.0/24 maxlen: 24 103.29.110.0/23 maxlen: 23 103.29.110.0/24 maxlen: 24 103.29.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3037, serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Validity Not Before: Jul 15 09:34:34 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a57542a-7841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:46:ca:6c:f9:1c:c5:c8:3b:5d:05:dd:7f: 51:91:29:1b:66:de:2a:86:ac:47:67:19:ea:c5:b4: c9:e3:1d:55:13:c8:7c:bd:fa:31:70:c9:9e:f6:10: 6b:94:80:ac:2b:e2:dd:dc:51:1c:13:53:e7:a2:1d: b1:a0:23:d8:7d:48:24:48:d9:31:c3:32:d6:e7:50: 71:22:8f:66:a5:4b:2a:70:9a:ec:b9:03:ea:54:be: 62:63:e0:2a:63:50:a1:29:d0:66:4e:d8:59:fe:51: 0d:1d:1d:12:99:c8:56:04:37:e3:a0:a2:d0:80:12: 77:6a:54:38:63:d4:58:97:06:30:9f:ea:eb:26:58: 23:8a:9b:df:d7:bd:a9:a5:e5:f4:5f:24:e7:a3:4e: 19:8c:bd:97:13:96:76:9a:75:25:8a:32:b4:df:44: 92:95:16:7f:86:2b:79:c7:a3:2c:73:92:6a:ea:be: e8:d6:a9:7b:6e:ea:0b:23:ee:e9:38:01:47:ac:cc: 77:e2:03:39:b8:ab:b7:44:a3:c7:e5:48:84:9e:7c: 82:fc:f7:b4:10:a9:87:f4:62:49:c5:b5:37:ab:d9: 57:d1:3b:43:1c:f8:15:e7:6b:41:9a:89:05:8e:fd: 5b:3e:55:52:62:c3:95:27:d8:cb:07:8c:4c:09:59: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C8:07:F3:28:79:BA:0A:62:B8:00:97:76:36:0E:F7:17:98:55:32 X509v3 Authority Key Identifier: keyid:B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/0A16B10E8EE011F09A1AE72BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.128.8.0/22 103.13.128.0/22 103.29.108.0/22 Signature Algorithm: sha256WithRSAEncryption 67:4b:18:3a:44:a5:ab:a9:e0:af:bf:8a:9a:42:82:1b:8e:9f: af:d9:ac:b7:2c:14:85:8b:7f:1c:a1:ea:9a:b3:3a:51:af:be: be:b6:df:40:c3:4a:a1:6f:4f:6f:7c:54:d2:5c:03:72:ff:58: e2:ec:e8:93:8d:e9:20:c7:90:3a:b0:de:ff:9a:f4:08:58:b1: c2:b4:f8:6f:ee:3b:53:5a:53:81:ed:3d:d8:f3:b9:15:c3:2e: 50:0e:bc:7d:cf:e3:27:10:e0:a4:69:09:48:b3:8e:e3:80:8d: 4f:41:92:6d:66:13:b8:5b:e6:3e:9d:f2:f7:25:96:bf:b7:09: e0:bc:4f:4e:14:73:9b:e8:49:5a:45:be:63:88:92:8f:15:c1: 4c:42:b5:04:67:d2:66:23:f4:5e:0e:fa:1b:9a:42:5a:01:82: 21:60:02:b0:44:ca:75:ef:dd:bd:4a:1e:31:86:d1:9f:30:73: b3:b0:82:90:aa:d2:cd:e9:58:ce:40:aa:05:a1:06:14:88:04: 25:ae:16:95:a6:89:c6:dc:49:1b:3f:6e:80:5d:9d:8b:2e:39: 5a:be:be:98:12:cc:1a:d6:b2:0e:bd:2e:37:fb:de:c3:9f:b1: 42:33:3f:8f:91:84:7d:8e:a3:3f:6b:36:80:49:cd:a2:98:c1: ce:cd:5c:4a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwMzcxMTAvBgNVBAUTKEI2NEI4MTA0MkFCNDExNjA3RDg2MDc2RkVGQzlFNTk2 MjZCQjg4MTYwHhcNMjYwNzE1MDkzNDM0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU3NTQyYS03ODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrJGymz5HMXIO10F3X9RkSkbZt4qhqxHZxnqxbTJ4x1VE8h8vfoxcMme9hBr lICsK+Ld3FEcE1Pnoh2xoCPYfUgkSNkxwzLW51BxIo9mpUsqcJrsuQPqVL5iY+Aq Y1ChKdBmTthZ/lENHR0SmchWBDfjoKLQgBJ3alQ4Y9RYlwYwn+rrJlgjipvf172p peX0XyTno04ZjL2XE5Z2mnUlijK030SSlRZ/hit5x6Msc5Jq6r7o1ql7buoLI+7p OAFHrMx34gM5uKu3RKPH5UiEnnyC/Pe0EKmH9GJJxbU3q9lX0TtDHPgV52tBmokF jv1bPlVSYsOVJ9jLB4xMCVk+XQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFELIB/Mo eboKYrgAl3Y2DvcXmFUyMB8GA1UdIwQYMBaAFLZLgQQqtBFgfYYHb+/J5ZYmu4gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzAzNy84QjhERTI3RThF REMxMUYwOTg4MEM0NzhDNEY5QUUwMi90a3VCQkNxMEVXQjloZ2R2NzhubGxpYTdp QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrdUJCQ3EwRVdCOWhnZHY3OG5sbGlhN2lCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMwMzcvOEI4REUyN0U4RURDMTFGMDk4ODBDNDc4QzRGOUFFMDIvMEExNkIxMEU4 RUUwMTFGMDlBMUFFNzJCQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCMYAIAwQCZw2AAwQCZx1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnSxg6 RKWrqeCvv4qaQoIbjp+v2ay3LBSFi38coeqaszpRr76+tt9Aw0qhb09vfFTSXANy /1ji7OiTjekgx5A6sN7/mvQIWLHCtPhv7jtTWlOB7T3Y87kVwy5QDrx9z+MnEOCk aQlIs47jgI1PQZJtZhO4W+Y+nfL3JZa/twngvE9OFHOb6ElaRb5jiJKPFcFMQrUE Z9JmI/ReDvobmkJaAYIhYAKwRMp17929Sh4xhtGfMHOzsIKQqtLN6VjOQKoFoQYU iAQlrhaVponG3EkbP26AXZ2LLjlavr6YEswa1rIOvS43+97Dn7FCMz+PkYR9jqM/ azaASc2imMHOzVxK -----END CERTIFICATE-----Generated at Tue Jul 28 22:29:42 2026 by rpki-client