$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/68C5CFBE076911EF8569F157C4F9AE02.roa File: 68C5CFBE076911EF8569F157C4F9AE02.roa (raw, json) Hash identifier: CdE0wm1hQkaULrjbI4DvgCzOn/hrQ6Nkq8KmfPCKoy0= Subject key identifier: 21:B2:0D:0B:92:C8:C2:CF:43:68:5A:24:6B:2A:D8:42:2C:89:49:93 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 08F0 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/68C5CFBE076911EF8569F157C4F9AE02.roa Signing time: Fri 12 Jun 2026 21:24:16 +0000 ROA not before: Fri 12 Jun 2026 21:24:16 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 997 IP address blocks: 103.213.244.0/22 maxlen: 24 144.48.4.0/22 maxlen: 24 2401:1640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 21:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Jun 12 21:24:16 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a2c7900-d291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f3:b1:c7:dd:9b:fa:49:d1:7c:7b:40:46:e8: 2f:72:26:d7:32:c7:70:16:b4:ef:da:6d:a2:d5:a6: e8:82:0f:eb:a9:13:9a:c6:97:28:db:f3:42:6d:b6: 75:cf:01:7b:30:78:f2:d0:06:75:56:82:bd:31:64: 22:6f:de:bf:24:f2:8e:a5:f8:0e:a5:02:a0:95:f6: a0:1f:7d:70:12:e6:a3:f8:b7:06:19:55:9c:ea:03: 0e:db:79:9b:f6:fc:4f:79:dd:6a:ea:de:64:8c:80: 6b:fe:70:71:86:9a:49:de:99:0c:01:8c:d8:f6:8f: 5a:db:6d:47:21:3c:b2:f5:f0:16:e1:51:99:96:72: 0f:1f:cd:0c:38:17:9b:c2:fa:6e:2e:26:74:bc:6d: 76:40:f0:a6:91:d3:8f:49:25:ab:29:e4:ea:92:75: 36:54:36:3d:44:0a:5e:44:bf:df:86:8a:4d:b5:78: 8b:b5:c7:5d:e7:2f:dd:21:c3:b0:9e:d5:f3:3b:52: 14:19:6d:d1:46:71:0e:28:29:80:12:c4:d1:70:7b: 06:1f:56:f2:2e:df:06:13:0a:12:2b:fe:4d:05:34: 1c:20:e7:4f:92:32:27:f7:91:e2:64:19:36:36:d5: ff:0b:8c:88:a3:98:70:1c:11:1f:9e:05:c1:48:00: 2a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B2:0D:0B:92:C8:C2:CF:43:68:5A:24:6B:2A:D8:42:2C:89:49:93 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/68C5CFBE076911EF8569F157C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.213.244.0/22 144.48.4.0/22 IPv6: 2401:1640::/32 Signature Algorithm: sha256WithRSAEncryption 06:63:81:83:63:b6:b9:0e:65:0c:c0:c7:3d:17:7d:ab:e2:aa: 17:4c:45:d8:50:63:b5:8c:60:c4:72:4c:bb:52:6a:6f:8e:a2: b4:ed:09:df:47:f8:7a:18:46:f4:b6:77:e0:d6:7d:23:33:e9: ae:f4:18:61:6a:19:3d:bf:7d:5c:97:cb:aa:fe:e3:e4:52:13: f8:87:5d:b7:71:1d:51:24:c8:04:57:ed:4a:74:97:b2:e4:e0: 7f:80:85:3a:63:2f:ee:31:d0:2b:96:5b:7c:9d:06:95:26:25: f6:84:60:ee:aa:6e:6f:b3:74:24:d7:be:97:9f:23:f8:51:e2: f8:a9:7d:6f:fd:2a:e7:2a:a6:12:53:aa:e8:a5:f4:a2:4c:62: 2c:27:c6:1b:98:7b:9e:2f:44:06:b5:47:db:31:2d:46:92:fe: 08:08:23:02:54:34:7e:79:84:13:b0:41:93:80:61:d0:6d:8c: be:7c:fe:0b:99:87:23:4e:d9:2d:af:d1:9d:5f:36:03:3d:f9: e7:30:cb:9a:79:65:06:8e:8b:7e:77:7e:37:24:ed:5d:da:f6: 1c:f0:b7:61:55:cd:27:e0:63:e5:b5:6a:a3:c2:4b:49:dc:4d: 4c:86:b8:2a:59:66:26:4b:a0:4f:45:f5:d9:83:60:77:be:97: 23:b8:87:fb -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjYwNjEyMjEyNDE2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJjNzkwMC1kMjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfOxx92b+knRfHtARugvcibXMsdwFrTv2m2i1abogg/rqROaxpco2/NCbbZ1 zwF7MHjy0AZ1VoK9MWQib96/JPKOpfgOpQKglfagH31wEuaj+LcGGVWc6gMO23mb 9vxPed1q6t5kjIBr/nBxhppJ3pkMAYzY9o9a221HITyy9fAW4VGZlnIPH80MOBeb wvpuLiZ0vG12QPCmkdOPSSWrKeTqknU2VDY9RApeRL/fhopNtXiLtcdd5y/dIcOw ntXzO1IUGW3RRnEOKCmAEsTRcHsGH1byLt8GEwoSK/5NBTQcIOdPkjIn95HiZBk2 NtX/C4yIo5hwHBEfngXBSAAquwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFCGyDQuS yMLPQ2haJGsq2EIsiUmTMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REExMEEvRTM0MDIwNENGMTg3MTFFQUI5NzM0QjFDQzRGOUFFMDIvNjhDNUNGQkUw NzY5MTFFRjg1NjlGMTU3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ9X0AwQCkDAEMA0EAgACMAcDBQAkARZAMA0GCSqGSIb3DQEBCwUA A4IBAQAGY4GDY7a5DmUMwMc9F32r4qoXTEXYUGO1jGDEcky7UmpvjqK07QnfR/h6 GEb0tnfg1n0jM+mu9Bhhahk9v31cl8uq/uPkUhP4h123cR1RJMgEV+1KdJey5OB/ gIU6Yy/uMdArllt8nQaVJiX2hGDuqm5vs3Qk176XnyP4UeL4qX1v/SrnKqYSU6ro pfSiTGIsJ8YbmHueL0QGtUfbMS1Gkv4ICCMCVDR+eYQTsEGTgGHQbYy+fP4LmYcj Ttktr9GdXzYDPfnnMMuaeWUGjot+d343JO1d2vYc8LdhVc0n4GPltWqjwktJ3E1M hrgqWWYmS6BPRfXZg2B3vpcjuIf7 -----END CERTIFICATE-----Generated at Sat Jun 13 10:32:09 2026 by rpki-client