$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/65F3496E910D11EF95FE5C28C4F9AE02.roa File: 65F3496E910D11EF95FE5C28C4F9AE02.roa (raw, json) Hash identifier: BGGfvsOq7RoK0GrG/EorBPAAePzcOp1fy3TkM7bq4uk= Subject key identifier: 18:AD:4B:C3:F7:4C:2A:E4:41:D6:E1:96:ED:51:68:D3:84:31:78:DE Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 0128 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/65F3496E910D11EF95FE5C28C4F9AE02.roa Signing time: Wed 29 Apr 2026 06:41:05 +0000 ROA not before: Wed 29 Apr 2026 06:41:04 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138615 IP address blocks: 103.134.172.0/22 maxlen: 22 103.134.172.0/24 maxlen: 24 103.134.173.0/24 maxlen: 24 103.134.174.0/24 maxlen: 24 103.134.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 05:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Apr 29 06:41:04 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69f1a800-fdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:1e:3c:23:58:fe:f3:c5:44:b6:b0:97:1f: af:2c:52:a9:7d:31:1c:48:64:fe:ed:fa:19:dd:40: 2c:07:13:98:b2:98:45:1c:fd:59:22:34:cd:7a:ed: 2c:c7:3f:f3:2c:1c:ac:c8:98:87:89:01:7a:23:0f: b0:b6:3f:eb:d6:c5:91:7a:85:fa:ad:6b:93:da:fd: 23:81:32:7f:5c:3c:3e:06:98:cb:2c:6c:d9:a6:a8: b3:1b:67:71:92:b3:a2:8f:fb:2d:78:e6:dd:3e:ac: 37:c4:54:41:53:88:24:39:8d:6c:c6:0f:ba:36:fa: 59:5a:2b:92:17:23:1c:1b:87:c3:1d:03:4a:53:b3: d3:ad:1a:eb:44:71:1b:53:0b:8e:2b:32:fe:be:e1: af:8f:e4:54:f6:e8:96:8e:8e:42:a4:ba:8c:0c:ab: 25:cf:7f:51:81:22:fd:5c:35:fd:77:ca:4e:f6:03: 66:38:1f:67:e3:ff:5f:b1:ee:2c:4c:1c:29:25:5c: 89:de:d5:23:28:2e:6b:ea:61:ad:82:c8:32:32:59: 66:9e:7b:f7:4a:d2:3a:e4:b3:0a:37:7a:cf:22:20: d5:ab:65:26:3d:a5:ae:9e:3a:5f:58:e9:a7:40:b5: be:80:05:a7:98:0f:9d:39:50:e9:13:22:9b:18:4b: f1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AD:4B:C3:F7:4C:2A:E4:41:D6:E1:96:ED:51:68:D3:84:31:78:DE X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/65F3496E910D11EF95FE5C28C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.172.0/22 Signature Algorithm: sha256WithRSAEncryption 07:31:62:52:5c:8e:61:7d:c8:50:b4:d6:b1:84:03:69:5a:1c: 1a:bf:a3:51:e4:ab:f0:13:91:13:67:7f:1e:ec:b2:df:89:1e: 3e:48:d7:c1:19:96:c0:52:f6:0d:9a:f3:ae:da:32:0b:69:30: 25:43:2a:e4:4e:e2:0c:96:61:57:58:f1:d6:6b:b0:db:c6:d5: 77:54:0c:dc:31:da:5e:aa:39:34:0d:eb:f9:7c:dd:65:d6:3e: dd:e7:3e:57:92:91:49:3f:2f:77:b0:cc:16:cf:3a:63:79:22: 43:de:14:64:af:37:fb:91:36:47:ff:b0:52:e4:e5:a4:4f:ce: 36:b4:27:f4:da:94:8f:dc:88:eb:2a:bd:7e:4f:11:6f:f6:79: 48:84:41:f9:0c:73:08:15:56:69:f0:5e:6a:76:3e:f4:eb:e6: b8:3a:9e:ba:a8:66:25:de:cb:b9:19:b1:4f:df:13:f5:0a:c6: 43:89:71:a0:66:3c:af:31:e2:ec:5f:95:95:f5:27:46:ff:8f: ec:94:ea:c7:8c:69:1b:8c:51:d3:d8:77:a1:d9:36:72:ed:25: cf:a5:13:ad:0a:00:75:c6:13:25:11:bd:45:17:cc:6d:37:4f: 51:62:9d:ab:6d:ac:f3:7f:7a:18:c0:73:c5:50:fe:52:ae:6e: b9:19:a9:cf -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjYwNDI5MDY0MTA0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWYxYTgwMC1mZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwggePCNY/vPFRLawlx+vLFKpfTEcSGT+7foZ3UAsBxOYsphFHP1ZIjTNeu0s xz/zLBysyJiHiQF6Iw+wtj/r1sWReoX6rWuT2v0jgTJ/XDw+BpjLLGzZpqizG2dx krOij/steObdPqw3xFRBU4gkOY1sxg+6NvpZWiuSFyMcG4fDHQNKU7PTrRrrRHEb UwuOKzL+vuGvj+RU9uiWjo5CpLqMDKslz39RgSL9XDX9d8pO9gNmOB9n4/9fse4s TBwpJVyJ3tUjKC5r6mGtgsgyMllmnnv3StI65LMKN3rPIiDVq2UmPaWunjpfWOmn QLW+gAWnmA+dOVDpEyKbGEvxyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBitS8P3 TCrkQdbhlu1RaNOEMXjeMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REREMjMvRUE3NTBCRUM5MTBDMTFFRkE1NDBGQzBGQzRGOUFFMDIvNjVGMzQ5NkU5 MTBEMTFFRjk1RkU1QzI4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4asMA0GCSqGSIb3DQEBCwUAA4IBAQAHMWJSXI5hfchQtNaxhANp Whwav6NR5KvwE5ETZ38e7LLfiR4+SNfBGZbAUvYNmvOu2jILaTAlQyrkTuIMlmFX WPHWa7DbxtV3VAzcMdpeqjk0Dev5fN1l1j7d5z5XkpFJPy93sMwWzzpjeSJD3hRk rzf7kTZH/7BS5OWkT842tCf02pSP3IjrKr1+TxFv9nlIhEH5DHMIFVZp8F5qdj70 6+a4Op66qGYl3su5GbFP3xP1CsZDiXGgZjyvMeLsX5WV9SdG/4/slOrHjGkbjFHT 2Heh2TZy7SXPpROtCgB1xhMlEb1FF8xtN09RYp2rbazzf3oYwHPFUP5Srm65GanP -----END CERTIFICATE-----Generated at Sat Jun 13 16:16:44 2026 by rpki-client