$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/16EA264C3FC611E9A0E68A30C4F9AE02.roa File: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (raw, json) Hash identifier: fd0G1Zn2iUvsWfsjyzVAL9KEbxpQOhqZpnlGAiKgfII= Subject key identifier: 59:C7:EA:BE:1B:BA:3B:A0:F5:E7:99:EB:FB:BE:3B:4E:8B:6A:91:7C Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 1121 Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/16EA264C3FC611E9A0E68A30C4F9AE02.roa Signing time: Wed 22 Jul 2026 18:17:47 +0000 ROA not before: Wed 22 Jul 2026 18:17:47 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 45259 IP address blocks: 103.139.109.0/24 maxlen: 24 202.59.230.0/24 maxlen: 24 202.90.36.0/24 maxlen: 24 2001:df1:ba00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4385 (0x1121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Validity Not Before: Jul 22 18:17:47 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a61094b-7c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:39:8d:e5:27:01:8f:70:5d:25:24:e6:75: 71:88:12:25:a5:67:94:f6:96:0a:9e:74:7f:4a:9c: e4:73:50:6b:db:ac:7f:6c:cc:99:fc:49:ff:8c:bd: ed:ae:be:de:91:4f:0d:c3:75:4a:ac:fb:40:12:3b: ab:f2:88:cb:3c:2a:53:38:79:d5:1e:2e:33:12:c9: 00:ad:77:9f:fd:6d:91:3d:23:7f:c2:71:00:be:c3: e9:36:10:9f:ca:fc:1b:5f:5f:28:4e:7a:38:16:f7: 1f:af:3a:2e:d0:05:54:2c:54:e6:26:13:42:86:00: 59:32:b2:5e:00:a7:4f:fe:fe:6a:c4:67:cb:55:9c: 2e:3d:50:23:6f:fd:33:6f:ac:ac:3a:0d:e4:c9:df: 65:49:81:bf:89:0d:7e:4e:25:91:c4:b7:51:c7:03: 15:ba:d7:30:f3:fe:08:c3:ee:89:e3:c5:9c:40:c4: e9:3d:88:d3:3c:1b:f3:57:5a:1f:3f:af:7d:af:fb: 37:0f:bb:d2:e8:58:4b:7c:c0:34:7e:a8:81:67:30: 05:c3:7e:26:16:d2:33:16:6b:05:d4:b0:54:c1:39: d5:6c:bc:79:18:c7:e1:45:ef:03:6f:f0:bd:5b:7d: 4e:f4:6d:5d:04:73:35:e8:02:9d:76:a5:91:ee:29: c8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C7:EA:BE:1B:BA:3B:A0:F5:E7:99:EB:FB:BE:3B:4E:8B:6A:91:7C X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/16EA264C3FC611E9A0E68A30C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.109.0/24 202.59.230.0/24 202.90.36.0/24 IPv6: 2001:df1:ba00::/48 Signature Algorithm: sha256WithRSAEncryption 04:e9:89:ee:1d:ac:c9:95:3b:8d:21:fa:ab:8f:f8:ca:cd:90: 7d:62:72:fa:1a:1e:ea:59:a8:bf:39:a5:40:58:a9:2e:9a:81: 12:78:8e:79:c1:72:4f:98:c6:6b:6f:29:8d:d6:e7:61:b3:1f: 53:31:ae:b9:4a:8e:18:06:96:0a:0c:bc:f2:78:2a:ca:c9:b7: b6:eb:37:fc:6d:27:cc:b7:f6:24:32:b9:d1:54:69:cf:5c:79: 3e:b8:f6:b1:b7:62:03:08:62:a8:aa:d6:0b:d2:f7:09:3b:35: 76:db:b8:28:15:29:ea:c9:20:61:1f:99:00:b1:a9:60:f4:02: 9e:45:9e:9e:75:b3:7f:24:40:f6:55:00:a2:f3:66:47:97:07: 98:c1:18:15:86:d3:5a:8f:12:0c:f4:ec:7b:70:eb:ce:8f:e4: 94:d0:1b:05:22:e7:6a:24:2d:64:6c:9c:fe:bc:a2:04:7e:c6: 70:e2:6d:d8:71:b2:39:70:6f:4b:85:c7:28:55:31:02:54:81: 66:76:7c:eb:08:ab:eb:51:63:a5:52:97:29:77:0d:04:30:0d: 19:40:96:12:e7:b3:17:9e:91:c3:34:5b:c0:f0:ef:0c:6d:04: 0d:ea:25:95:b3:bc:cd:23:b6:e9:13:44:67:08:fd:59:2d:ac: f1:c8:f7:fe -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICESEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjYwNzIyMTgxNzQ3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxMDk0Yi03YzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QA5jeUnAY9wXSUk5nVxiBIlpWeU9pYKnnR/Spzkc1Br26x/bMyZ/En/jL3t rr7ekU8Nw3VKrPtAEjur8ojLPCpTOHnVHi4zEskArXef/W2RPSN/wnEAvsPpNhCf yvwbX18oTno4Fvcfrzou0AVULFTmJhNChgBZMrJeAKdP/v5qxGfLVZwuPVAjb/0z b6ysOg3kyd9lSYG/iQ1+TiWRxLdRxwMVutcw8/4Iw+6J48WcQMTpPYjTPBvzV1of P699r/s3D7vS6FhLfMA0fqiBZzAFw34mFtIzFmsF1LBUwTnVbLx5GMfhRe8Db/C9 W31O9G1dBHM16AKddqWR7inImwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFFnH6r4b ujug9eeZ6/u+O06LapF8MB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk3MjEvOEFFQzJBQzQzRkM0MTFFOTkyQTNFNjJEQzRGOUFFMDIvMTZFQTI2NEMz RkM2MTFFOUEwRTY4QTMwQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQAZ4ttAwQAyjvmAwQAylokMA8EAgACMAkDBwAgAQ3xugAwDQYJKoZI hvcNAQELBQADggEBAATpie4drMmVO40h+quP+MrNkH1icvoaHupZqL85pUBYqS6a gRJ4jnnBck+YxmtvKY3W52GzH1MxrrlKjhgGlgoMvPJ4KsrJt7brN/xtJ8y39iQy udFUac9ceT649rG3YgMIYqiq1gvS9wk7NXbbuCgVKerJIGEfmQCxqWD0Ap5Fnp51 s38kQPZVAKLzZkeXB5jBGBWG01qPEgz07Htw686P5JTQGwUi52okLWRsnP68ogR+ xnDibdhxsjlwb0uFxyhVMQJUgWZ2fOsIq+tRY6VSlyl3DQQwDRlAlhLnsxeekcM0 W8Dw7wxtBA3qJZWzvM0jtukTRGcI/VktrPHI9/4= -----END CERTIFICATE-----Generated at Tue Jul 28 21:35:49 2026 by rpki-client