$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa File: CF072592709211EAB1D2FA0FC4F9AE02.roa (raw, json) Hash identifier: pof99iHFZVJvBPp5es+zXJPZBFEWOms9hdolCrdlEWc= Subject key identifier: 36:69:A6:18:CF:F5:52:BD:15:8C:D9:B0:11:30:DC:E6:AF:6E:A5:6B Certificate issuer: /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Certificate serial: 0AFB Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa Signing time: Tue 02 Jun 2026 20:23:14 +0000 ROA not before: Tue 02 Jun 2026 20:23:14 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 135406 IP address blocks: 103.7.188.0/23 maxlen: 24 103.81.219.0/24 maxlen: 24 103.107.16.0/24 maxlen: 24 103.120.49.0/24 maxlen: 24 103.217.106.0/24 maxlen: 24 203.55.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Validity Not Before: Jun 2 20:23:14 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a1f3bb2-69b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:e0:4c:d7:a3:44:72:db:a4:8f:00:07:a5: 69:14:0d:24:65:e1:03:4d:7f:c2:0a:5c:00:52:22: c6:7a:04:f0:f1:9a:8a:8b:60:69:e1:48:93:a9:38: 2a:ba:1f:92:4d:63:45:73:64:d4:de:40:d1:38:5d: 47:cc:f2:66:48:43:cc:bd:37:74:0f:a5:17:66:b3: ae:d3:6b:07:ec:1b:b2:88:e0:51:ac:92:45:ed:74: 1a:85:03:6f:8c:62:c0:b6:49:26:a4:71:1c:d4:34: 6e:1b:25:64:43:c8:37:dd:33:8b:8a:93:d5:b7:3c: 18:d1:35:95:06:b2:49:1e:8d:84:35:ff:35:1a:c6: a2:a2:fe:0f:24:90:fe:7f:1e:93:cb:a8:30:ef:4d: 9f:45:b3:e9:49:91:15:74:73:d0:31:91:11:01:75: 4b:de:10:3a:63:d6:eb:e2:07:51:c2:67:27:0d:05: d4:dd:f9:d0:a3:ff:2c:ff:a0:39:0c:b1:87:cb:b0: 21:f8:93:c1:f4:03:15:7c:35:92:80:3a:97:d1:3f: 1c:e0:af:33:5a:bf:cb:f1:74:fa:96:64:3d:24:b1: 49:a1:16:e4:05:d8:d3:12:82:c3:ac:0e:9b:f5:aa: 12:6a:4f:60:8a:6a:d5:84:5f:d4:00:e9:f2:f4:fc: a5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:69:A6:18:CF:F5:52:BD:15:8C:D9:B0:11:30:DC:E6:AF:6E:A5:6B X509v3 Authority Key Identifier: keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.7.188.0/23 103.81.219.0/24 103.107.16.0/24 103.120.49.0/24 103.217.106.0/24 203.55.212.0/24 Signature Algorithm: sha256WithRSAEncryption a3:5b:a9:59:f9:b7:9d:f8:7c:be:4a:ab:c3:68:0c:e7:d0:40: c6:4b:34:6a:58:25:e7:0d:60:22:3d:04:8f:5a:bf:46:58:92: 26:b5:bf:49:c1:55:c1:ee:5b:49:12:87:e0:10:50:15:de:4e: 42:c6:69:26:63:f6:0a:b2:6b:9a:32:e9:36:b7:45:2a:9e:18: 75:03:22:0d:95:30:7b:b0:7f:43:84:58:57:43:6e:f3:95:22: ba:84:ae:be:dc:75:97:49:e6:2d:86:ec:e2:92:a4:da:95:f6: 9c:52:45:e6:b6:dc:cc:91:f8:be:78:42:73:13:af:39:65:e0: 8b:3c:e5:15:f1:2a:52:c1:f6:5d:dd:f4:08:01:08:ed:0b:b5: 9d:07:89:3a:f3:d1:bc:5a:86:1a:74:b7:bc:d5:01:6c:20:3f: 9c:24:ed:f4:01:9c:58:13:4a:60:96:e2:62:d2:15:20:ae:f9: ef:ca:54:1a:d1:05:4d:ca:0b:6c:e8:1b:46:dd:b9:85:37:7b: ff:7f:c6:2b:08:ba:71:32:09:8a:b7:90:68:f3:98:a3:48:1a: 5d:8c:9e:05:53:f5:01:c5:36:4f:3e:0f:f4:67:5b:31:26:27: d3:80:6a:cf:95:13:06:5d:c2:8c:59:b4:c4:22:24:12:9f:50: 24:14:f3:0e -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCQUQxMTAvBgNVBAUTKDUzMjY4QTI3MzZBNUZGNTU0Qjk0MDcwM0YzNzRGQzM1 NzkyMjhDMzAwHhcNMjYwNjAyMjAyMzE0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFmM2JiMi02OWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+XgTNejRHLbpI8AB6VpFA0kZeEDTX/CClwAUiLGegTw8ZqKi2Bp4UiTqTgq uh+STWNFc2TU3kDROF1HzPJmSEPMvTd0D6UXZrOu02sH7BuyiOBRrJJF7XQahQNv jGLAtkkmpHEc1DRuGyVkQ8g33TOLipPVtzwY0TWVBrJJHo2ENf81Gsaiov4PJJD+ fx6Ty6gw702fRbPpSZEVdHPQMZERAXVL3hA6Y9br4gdRwmcnDQXU3fnQo/8s/6A5 DLGHy7Ah+JPB9AMVfDWSgDqX0T8c4K8zWr/L8XT6lmQ9JLFJoRbkBdjTEoLDrA6b 9aoSak9gimrVhF/UAOny9PylswIDAQABo4ICfjCCAnowHQYDVR0OBBYEFDZpphjP 9VK9FYzZsBEw3OavbqVrMB8GA1UdIwQYMBaAFFMmiic2pf9VS5QHA/N0/DV5Ioww MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0JBRC8zNjU5RTdBRTcw OTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8xVkxsQWNEODNUOE5Ya2lq REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5YUtKemFsXzFWTGxBY0Q4M1Q4TlhraWpEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENCQUQvMzY1OUU3QUU3MDkxMTFFQThBOUI0RTBEQzRGOUFFMDIvQ0YwNzI1OTI3 MDkyMTFFQUIxRDJGQTBGQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQBZwe8AwQAZ1HbAwQAZ2sQAwQAZ3gxAwQAZ9lqAwQAyzfUMA0GCSqG SIb3DQEBCwUAA4IBAQCjW6lZ+bed+Hy+SqvDaAzn0EDGSzRqWCXnDWAiPQSPWr9G WJImtb9JwVXB7ltJEofgEFAV3k5CxmkmY/YKsmuaMuk2t0Uqnhh1AyINlTB7sH9D hFhXQ27zlSK6hK6+3HWXSeYthuzikqTalfacUkXmttzMkfi+eEJzE685ZeCLPOUV 8SpSwfZd3fQIAQjtC7WdB4k689G8WoYadLe81QFsID+cJO30AZxYE0pgluJi0hUg rvnvylQa0QVNygts6BtG3bmFN3v/f8YrCLpxMgmKt5Bo85ijSBpdjJ4FU/UBxTZP Pg/0Z1sxJifTgGrPlRMGXcKMWbTEIiQSn1AkFPMO -----END CERTIFICATE-----Generated at Tue Jul 28 22:17:45 2026 by rpki-client