$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/3A21C144E51211EBB1225278C4F9AE02.roa File: 3A21C144E51211EBB1225278C4F9AE02.roa (raw, json) Hash identifier: AsfjPiAFFmeSKGw8hoPthB94TPU/136PKCHDcZQINKo= Subject key identifier: 3E:22:BC:AB:61:77:D5:0A:A4:40:AC:95:6D:AC:FA:10:B6:01:9C:6A Certificate issuer: /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Certificate serial: 1A98 Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/3A21C144E51211EBB1225278C4F9AE02.roa Signing time: Sat 30 May 2026 16:19:46 +0000 ROA not before: Sat 30 May 2026 16:19:46 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 9249 IP address blocks: 113.11.240.0/21 maxlen: 21 113.11.240.0/24 maxlen: 24 113.11.241.0/24 maxlen: 24 113.11.242.0/24 maxlen: 24 113.11.243.0/24 maxlen: 24 113.11.244.0/24 maxlen: 24 113.11.245.0/24 maxlen: 24 113.11.246.0/23 maxlen: 24 202.80.32.0/20 maxlen: 20 202.80.32.0/23 maxlen: 24 202.80.34.0/23 maxlen: 24 202.80.36.0/23 maxlen: 24 202.80.40.0/23 maxlen: 24 202.80.42.0/23 maxlen: 24 202.80.44.0/22 maxlen: 22 202.80.44.0/24 maxlen: 24 202.80.45.0/24 maxlen: 24 202.80.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6808 (0x1a98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8525, serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Validity Not Before: May 30 16:19:46 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a1b0e22-0f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:63:1e:56:c0:72:82:d8:8e:e7:49:5a:21:c7: dd:0e:1a:5e:e0:89:6d:c2:4c:21:7f:05:ef:95:32: 8f:83:27:ca:e2:dc:6a:96:39:80:c3:89:fb:7d:bb: 84:0d:a7:54:b0:8c:77:37:3e:af:14:f2:d6:0a:1c: 8c:c0:40:95:75:e1:f3:ac:fe:f9:34:0e:fe:08:c7: 02:ca:8e:59:64:25:16:40:06:38:f7:86:b5:ef:46: 55:de:0e:dc:de:00:63:85:9d:cf:02:3a:3d:69:e0: 1b:bb:24:9a:e9:f9:34:3b:63:ee:d7:91:0e:ad:62: 95:f7:11:64:b6:59:d4:fd:74:91:14:a4:2e:ad:52: c2:e7:b4:06:4d:df:80:7c:13:25:76:e1:18:49:49: d1:78:9b:6d:57:ae:0b:4d:31:02:7f:ed:6e:eb:76: 2c:af:f3:c5:61:56:f6:e0:25:ee:ce:74:70:c3:3e: 3c:b9:55:cb:cb:9f:8a:b7:85:05:08:f8:cf:ef:24: d7:6a:b2:5b:b9:c6:c6:01:40:c6:a9:7f:e4:d1:eb: 25:e5:1e:b0:be:43:a1:7e:2c:a3:cd:d2:ba:e1:fa: 15:3d:32:68:87:1c:79:3a:11:07:cf:69:cb:77:e8: 4a:ff:ca:0d:4d:d0:17:29:17:47:4e:cc:fe:dc:15: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:22:BC:AB:61:77:D5:0A:A4:40:AC:95:6D:AC:FA:10:B6:01:9C:6A X509v3 Authority Key Identifier: keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/3A21C144E51211EBB1225278C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 113.11.240.0/21 202.80.32.0/20 Signature Algorithm: sha256WithRSAEncryption be:c1:f6:4c:48:3b:db:2d:34:79:80:ee:32:1a:20:86:a8:2e: 8d:31:64:fc:23:e9:96:bc:62:58:3e:da:22:1c:f6:04:d0:b1: 85:92:27:43:18:d4:b5:2b:61:96:f9:bc:88:d9:a5:3d:bd:25: 17:37:c4:09:5d:83:db:a4:78:85:72:11:8f:93:1e:4f:a8:4c: 4d:b1:60:43:19:4d:8c:cf:15:19:bb:ba:2d:81:7d:b2:84:44: 83:c1:20:bf:40:76:87:1a:7d:19:22:fc:84:ff:02:5c:8f:98: 16:5a:ab:52:70:86:12:d8:b8:d9:1a:9d:d5:b5:6f:8a:ca:9a: 7c:c5:c8:41:3a:2f:36:61:85:55:53:20:43:be:5a:2d:6b:38: 61:10:66:fc:c2:6a:b1:66:f9:97:d1:4b:50:bd:23:7c:19:db: b8:79:4c:92:ab:58:85:ef:a0:f6:6e:f9:f4:2d:bd:e2:be:b4: eb:b7:6d:df:10:34:83:a6:83:d3:71:62:69:4d:be:a4:68:da: 52:ce:1e:a1:0e:5c:4f:86:ca:50:53:40:f4:43:02:74:4c:93: 55:b7:59:2e:e3:55:a7:d4:27:bb:2e:cc:9a:be:e1:b2:ff:c6: 6e:df:3b:09:5d:6d:a4:8a:5f:e3:f7:27:7e:58:4d:51:66:3b: 68:86:06:1c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICGpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1MjUxMTAvBgNVBAUTKEU3MUE5RjIxNEU4MEM5QkMzQjJEMjM5RkY4QjlBQUI3 MTNGNkVEQjcwHhcNMjYwNTMwMTYxOTQ2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFiMGUyMi0wZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WMeVsBygtiO50laIcfdDhpe4IltwkwhfwXvlTKPgyfK4txqljmAw4n7fbuE DadUsIx3Nz6vFPLWChyMwECVdeHzrP75NA7+CMcCyo5ZZCUWQAY494a170ZV3g7c 3gBjhZ3PAjo9aeAbuySa6fk0O2Pu15EOrWKV9xFktlnU/XSRFKQurVLC57QGTd+A fBMlduEYSUnReJttV64LTTECf+1u63Ysr/PFYVb24CXuznRwwz48uVXLy5+Kt4UF CPjP7yTXarJbucbGAUDGqX/k0esl5R6wvkOhfiyjzdK64foVPTJohxx5OhEHz2nL d+hK/8oNTdAXKRdHTsz+3BWldQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFD4ivKth d9UKpECslW2s+hC2AZxqMB8GA1UdIwQYMBaAFOcanyFOgMm8Oy0jn/i5qrcT9u23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODUyNS81MjIxMjYxMDYx MkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXlidzdMU09mLUxtcXR4UDI3 YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4cWZJVTZBeWJ3N0xTT2YtTG1xdHhQMjdiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg1MjUvNTIyMTI2MTA2MTJGMTFFN0JEMkVEQTBCQzRGOUFFMDIvM0EyMUMxNDRF NTEyMTFFQkIxMjI1Mjc4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQDcQvwAwQEylAgMA0GCSqGSIb3DQEBCwUAA4IBAQC+wfZMSDvbLTR5 gO4yGiCGqC6NMWT8I+mWvGJYPtoiHPYE0LGFkidDGNS1K2GW+byI2aU9vSUXN8QJ XYPbpHiFchGPkx5PqExNsWBDGU2MzxUZu7otgX2yhESDwSC/QHaHGn0ZIvyE/wJc j5gWWqtScIYS2LjZGp3VtW+Kypp8xchBOi82YYVVUyBDvlotazhhEGb8wmqxZvmX 0UtQvSN8Gdu4eUySq1iF76D2bvn0Lb3ivrTrt23fEDSDpoPTcWJpTb6kaNpSzh6h DlxPhspQU0D0QwJ0TJNVt1ku41Wn1Ce7LsyavuGy/8Zu3zsJXW2kil/j9yd+WE1R ZjtohgYc -----END CERTIFICATE-----Generated at Sun Jun 14 02:36:15 2026 by rpki-client