$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/67FF0960076911EF8569F157C4F9AE02.roa File: 67FF0960076911EF8569F157C4F9AE02.roa (raw, json) Hash identifier: kux5oSfatn2oOCm3na/+0puHZ/uNesRh8WO7dtAzHlU= Subject key identifier: A0:66:7E:9E:A2:FF:7B:2C:26:3F:40:91:FA:C8:EF:2B:26:47:DA:02 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 08EC Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/67FF0960076911EF8569F157C4F9AE02.roa Signing time: Fri 12 Jun 2026 21:24:08 +0000 ROA not before: Fri 12 Jun 2026 21:24:08 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 18254 IP address blocks: 103.213.244.0/23 maxlen: 23 103.213.245.0/24 maxlen: 24 103.213.246.0/23 maxlen: 23 103.213.246.0/24 maxlen: 24 103.213.247.0/24 maxlen: 24 144.48.4.0/23 maxlen: 24 144.48.6.0/23 maxlen: 23 144.48.6.0/24 maxlen: 24 144.48.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 21:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2284 (0x8ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Jun 12 21:24:08 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a2c78f8-a62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a5:2f:d5:8b:f9:2a:47:d2:87:ec:be:3c:25: 09:7d:11:43:e5:22:0b:b9:19:39:db:1d:98:c3:e7: 46:54:91:ec:5c:c3:00:33:6a:f0:3c:e9:e0:a4:7d: ab:42:8b:7a:d9:4f:08:87:88:04:41:d6:7a:ac:7b: f7:4a:37:0d:85:38:ad:d2:61:f2:15:41:f4:dd:6d: ae:c9:62:70:56:67:d6:37:5d:d4:ad:1a:a0:40:4e: 58:49:d6:fc:3c:4e:6b:e7:05:ee:1a:0b:e5:9a:e5: d5:e2:db:76:30:33:2a:aa:9f:2c:25:38:77:26:15: ab:ce:c3:cd:5b:5f:e0:f3:2a:4b:bd:1a:e2:34:87: 4c:52:18:03:23:a3:b8:c1:b5:95:53:6b:fc:b8:25: 12:50:78:b9:5e:2c:8a:17:b1:43:0b:34:93:cb:3d: fa:10:30:29:fc:ce:ca:4b:a3:76:d5:2a:72:17:8e: 00:b9:05:b2:53:1d:d6:51:4f:c9:ad:6f:95:7b:8d: e6:70:cc:04:e4:79:d5:29:44:ef:2f:15:3d:de:de: 4a:60:2d:dd:a0:7b:16:11:50:bb:a3:b0:94:48:53: 70:4f:9c:f9:d0:dd:dc:db:14:d6:cf:0a:ff:65:a8: c7:44:94:af:d8:c5:64:b7:7d:46:de:21:cb:bc:ac: df:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:66:7E:9E:A2:FF:7B:2C:26:3F:40:91:FA:C8:EF:2B:26:47:DA:02 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/67FF0960076911EF8569F157C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.213.244.0/22 144.48.4.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:ea:37:d2:14:64:07:11:02:a3:06:e8:6c:ce:58:33:0a:18: 04:14:57:1c:00:63:a3:5b:68:77:0a:48:ec:06:20:80:fd:77: ab:31:89:aa:0d:bb:68:9a:c0:13:9f:4a:e5:b9:eb:40:2c:19: cc:e0:45:82:7e:07:6f:e3:62:f8:91:ba:ca:86:2e:15:ab:89: ec:b9:3c:76:b6:d5:dc:c5:98:5a:9b:8e:21:df:20:ec:dd:e7: 6d:04:d9:04:0d:20:c5:13:60:c6:82:50:b3:c2:ac:8c:33:11: 93:05:75:51:aa:5c:8d:da:97:6c:e7:ef:15:ed:30:ce:c1:b0: 66:64:52:9d:aa:a1:88:35:3c:34:f2:a8:6a:54:32:37:c2:0b: 5d:da:d0:08:d2:8f:c3:9a:68:a3:fa:42:9e:28:a8:d8:cb:db: 21:ef:f8:42:6a:ca:03:ac:a9:f3:86:69:c4:fb:75:85:87:e5: 5b:89:94:9f:48:7f:2a:ca:3a:08:e3:11:4b:5e:3e:5c:7e:4b: b6:c7:3e:b5:f4:24:b2:32:74:ce:2e:8e:b8:60:19:c1:2a:a1: 68:73:59:c1:b5:cb:75:11:b4:ad:a1:fe:f4:77:0e:a6:1e:cd: d9:39:97:51:2e:7e:42:4f:59:c6:6e:fa:dc:55:14:36:9c:af: 03:22:5b:b4 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjYwNjEyMjEyNDA4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJjNzhmOC1hNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlaUv1Yv5KkfSh+y+PCUJfRFD5SILuRk52x2Yw+dGVJHsXMMAM2rwPOngpH2r Qot62U8Ih4gEQdZ6rHv3SjcNhTit0mHyFUH03W2uyWJwVmfWN13UrRqgQE5YSdb8 PE5r5wXuGgvlmuXV4tt2MDMqqp8sJTh3JhWrzsPNW1/g8ypLvRriNIdMUhgDI6O4 wbWVU2v8uCUSUHi5XiyKF7FDCzSTyz36EDAp/M7KS6N21SpyF44AuQWyUx3WUU/J rW+Ve43mcMwE5HnVKUTvLxU93t5KYC3doHsWEVC7o7CUSFNwT5z50N3c2xTWzwr/ ZajHRJSv2MVkt31G3iHLvKzf4wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKBmfp6i /3ssJj9AkfrI7ysmR9oCMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REExMEEvRTM0MDIwNENGMTg3MTFFQUI5NzM0QjFDQzRGOUFFMDIvNjdGRjA5NjAw NzY5MTFFRjg1NjlGMTU3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ9X0AwQCkDAEMA0GCSqGSIb3DQEBCwUAA4IBAQBt6jfSFGQHEQKj BuhszlgzChgEFFccAGOjW2h3CkjsBiCA/XerMYmqDbtomsATn0rluetALBnM4EWC fgdv42L4kbrKhi4Vq4nsuTx2ttXcxZham44h3yDs3edtBNkEDSDFE2DGglCzwqyM MxGTBXVRqlyN2pds5+8V7TDOwbBmZFKdqqGINTw08qhqVDI3wgtd2tAI0o/Dmmij +kKeKKjYy9sh7/hCasoDrKnzhmnE+3WFh+VbiZSfSH8qyjoI4xFLXj5cfku2xz61 9CSyMnTOLo64YBnBKqFoc1nBtct1EbStof70dw6mHs3ZOZdRLn5CT1nGbvrcVRQ2 nK8DIlu0 -----END CERTIFICATE-----Generated at Sat Jun 13 17:33:58 2026 by rpki-client