$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/F63AA888900F11ED8B4CB41DC4F9AE02.roa File: F63AA888900F11ED8B4CB41DC4F9AE02.roa (raw, json) Hash identifier: UtLN9LK6PXWEEFxc1KoSs2w5t7H8ccMsoGEgQElh3YE= Subject key identifier: F5:94:5A:9A:F5:0D:8E:07:B0:C4:9C:A3:B4:48:93:FE:B5:37:CC:12 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 0583 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/F63AA888900F11ED8B4CB41DC4F9AE02.roa Signing time: Fri 05 Jun 2026 00:28:48 +0000 ROA not before: Fri 05 Jun 2026 00:28:48 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 133660 IP address blocks: 45.112.200.0/22 maxlen: 22 45.112.200.0/23 maxlen: 23 45.112.200.0/24 maxlen: 24 45.112.201.0/24 maxlen: 24 45.112.202.0/23 maxlen: 23 45.112.202.0/24 maxlen: 24 45.112.203.0/24 maxlen: 24 103.42.84.0/22 maxlen: 22 103.42.84.0/23 maxlen: 23 103.42.84.0/24 maxlen: 24 103.42.85.0/24 maxlen: 24 103.42.86.0/23 maxlen: 23 103.42.86.0/24 maxlen: 24 103.42.87.0/24 maxlen: 24 2406:640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Jun 5 00:28:48 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a221840-fc7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:58:69:2d:37:eb:c5:3c:49:af:3a:e4:db: e4:32:a4:bf:c6:a4:70:ac:04:fb:7f:0d:bb:97:c5: 9f:15:c2:19:a8:82:61:55:ef:b4:48:ef:bb:04:49: 2f:8a:7e:7a:e9:af:da:0d:93:c5:1a:73:2b:7e:17: fe:48:de:f6:cf:82:90:16:50:c1:39:26:73:e2:6c: 56:ca:73:56:04:7e:52:3d:22:22:23:2d:ab:8b:4a: 8c:0e:e9:03:55:0b:d3:28:c3:3e:e7:7d:53:9c:f2: 83:47:92:5a:6a:18:77:2a:16:3f:58:1c:4f:04:6b: 00:cb:95:f1:d4:d5:2b:2f:4c:66:d9:40:73:d2:a3: 25:56:c8:7d:2e:07:a8:91:a1:67:30:02:c2:39:d5: 43:44:3d:fc:33:11:b4:8e:8b:6f:11:4a:74:a8:92: af:d1:19:08:ec:fc:93:a5:27:67:3d:d1:23:c1:a0: ad:1e:cb:24:86:3f:a9:37:50:a8:6f:16:fd:a2:59: f8:15:9e:be:95:80:62:58:69:5d:7e:ff:4a:24:8e: c0:37:4d:97:93:ae:81:8b:87:c3:15:84:65:8c:14: df:a0:be:97:4f:79:a3:29:66:3e:fe:bc:40:e1:7b: 76:2d:9c:10:63:25:c4:a4:e8:f2:77:3f:02:32:74: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:94:5A:9A:F5:0D:8E:07:B0:C4:9C:A3:B4:48:93:FE:B5:37:CC:12 X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/F63AA888900F11ED8B4CB41DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.112.200.0/22 103.42.84.0/22 IPv6: 2406:640::/32 Signature Algorithm: sha256WithRSAEncryption 3f:44:52:10:a0:63:43:1d:b2:e4:95:01:77:85:fb:0b:2c:c1: 40:a0:b9:5d:6f:09:02:f5:8e:2d:83:46:a5:b6:eb:21:20:9f: a7:ee:e2:cd:43:68:50:38:82:94:83:f3:ca:9f:45:95:02:6e: d3:0d:b7:67:90:c5:3c:f4:0f:04:17:05:5b:1a:00:4b:75:a8: 49:43:1b:23:ec:17:ce:18:26:72:0e:f1:09:72:0a:3d:d9:c3: 00:f1:c4:4c:00:77:0b:67:ce:a6:97:9f:80:9b:fd:55:13:89: cb:d4:eb:8d:0b:fd:02:3c:84:8b:42:2a:bd:b4:19:1b:10:24: b8:81:18:8c:b5:82:6e:d3:30:c5:b6:71:a1:69:93:2f:bb:e6: 60:d5:c0:92:da:c4:8a:e4:d2:d3:13:5a:fb:eb:c4:1c:a4:95: 0c:d6:04:ae:95:75:18:a2:33:6a:ae:c7:1f:e7:0e:d1:a8:1a: d9:4c:48:e0:96:db:bb:80:51:3b:2f:67:60:b7:d7:97:bb:ca: 79:a4:b5:23:6d:8a:fa:be:0d:48:0a:13:90:56:a5:44:16:9e: 00:9b:35:08:cf:30:aa:f6:fa:a0:e3:19:54:19:29:9c:99:4c: 0b:69:85:da:a4:3e:4f:29:6e:12:69:7e:83:53:ff:93:72:68: 91:ef:5d:23 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjYwNjA1MDAyODQ4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyMTg0MC1mYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlBYaS0368U8Sa865NvkMqS/xqRwrAT7fw27l8WfFcIZqIJhVe+0SO+7BEkv in566a/aDZPFGnMrfhf+SN72z4KQFlDBOSZz4mxWynNWBH5SPSIiIy2ri0qMDukD VQvTKMM+531TnPKDR5Jaahh3KhY/WBxPBGsAy5Xx1NUrL0xm2UBz0qMlVsh9Lgeo kaFnMALCOdVDRD38MxG0jotvEUp0qJKv0RkI7PyTpSdnPdEjwaCtHsskhj+pN1Co bxb9oln4FZ6+lYBiWGldfv9KJI7AN02Xk66Bi4fDFYRljBTfoL6XT3mjKWY+/rxA 4Xt2LZwQYyXEpOjydz8CMnQm/QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPWUWpr1 DY4HsMSco7RIk/61N8wSMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk0NjcvNzcwQjRGMUE1MjZGMTFFQ0JDNTBFQjE3QzRGOUFFMDIvRjYzQUE4ODg5 MDBGMTFFRDhCNENCNDFEQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXDIAwQCZypUMA0EAgACMAcDBQAkBgZAMA0GCSqGSIb3DQEBCwUA A4IBAQA/RFIQoGNDHbLklQF3hfsLLMFAoLldbwkC9Y4tg0altushIJ+n7uLNQ2hQ OIKUg/PKn0WVAm7TDbdnkMU89A8EFwVbGgBLdahJQxsj7BfOGCZyDvEJcgo92cMA 8cRMAHcLZ86ml5+Am/1VE4nL1OuNC/0CPISLQiq9tBkbECS4gRiMtYJu0zDFtnGh aZMvu+Zg1cCS2sSK5NLTE1r768QcpJUM1gSulXUYojNqrscf5w7RqBrZTEjgltu7 gFE7L2dgt9eXu8p5pLUjbYr6vg1IChOQVqVEFp4AmzUIzzCq9vqg4xlUGSmcmUwL aYXapD5PKW4SaX6DU/+TcmiR710j -----END CERTIFICATE-----Generated at Wed Jun 17 11:53:35 2026 by rpki-client