$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/E959541EB28511ED8893C51CC4F9AE02.roa File: E959541EB28511ED8893C51CC4F9AE02.roa (raw, json) Hash identifier: /mQOlGfVWmEy30ofXyuzY6t7pmr3Lkv7EZobHw1SsQc= Subject key identifier: 52:1B:65:E9:67:53:4D:BA:78:0E:3A:9E:0D:79:2B:42:C2:A8:9B:B2 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 07A8 Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/E959541EB28511ED8893C51CC4F9AE02.roa Signing time: Tue 28 Jul 2026 22:44:11 +0000 ROA not before: Tue 28 Jul 2026 22:44:11 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 62610 IP address blocks: 36.255.220.0/24 maxlen: 24 36.255.221.0/24 maxlen: 24 36.255.222.0/24 maxlen: 24 36.255.223.0/24 maxlen: 24 103.210.20.0/24 maxlen: 24 103.210.21.0/24 maxlen: 24 103.210.22.0/24 maxlen: 24 122.10.161.0/24 maxlen: 24 122.10.196.0/23 maxlen: 24 122.10.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 22:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Jul 28 22:44:11 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6930bb-b3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:26:3d:35:bf:8d:ed:dd:db:51:28:d7:0b: 27:5f:3a:ba:55:4f:d6:1c:77:e1:34:30:48:01:32: ba:6c:71:97:14:a1:b5:5f:61:a0:28:74:af:36:e9: fa:c9:1a:fa:ea:7b:5f:bf:23:e4:f2:d0:af:34:99: 2c:fb:ba:16:e7:c1:64:b8:dc:e7:9c:60:20:be:d1: e0:ab:69:59:54:c8:b0:c6:11:1a:b9:da:a9:f5:0c: c2:7a:85:7b:2c:37:00:a7:90:48:a3:c5:29:4e:2e: 48:9d:b1:5e:29:e4:12:4e:0b:2d:00:42:28:48:c9: 54:22:80:be:d0:26:8f:c5:b5:70:d9:d0:c6:70:c4: 53:c5:f0:0c:a5:93:97:d5:6e:15:00:37:83:ab:ec: 59:eb:5d:c2:15:2c:d0:0e:bb:9f:09:b9:30:0d:ef: 8c:d8:4f:37:96:f5:a8:c4:9a:14:6c:c3:66:70:9f: a9:81:e4:f3:ac:15:89:03:0f:00:c6:59:a3:4a:04: cf:bb:05:5e:ac:3c:6a:fd:ee:59:f2:8d:c2:d3:10: 24:35:59:5a:88:9e:ef:cb:e0:8a:57:d3:29:f7:4a: 41:0e:91:f5:0c:c4:58:c4:1f:0c:e4:0b:39:43:9d: 26:67:85:e2:eb:91:6b:b6:1a:c0:f8:cb:1f:43:bf: 64:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1B:65:E9:67:53:4D:BA:78:0E:3A:9E:0D:79:2B:42:C2:A8:9B:B2 X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/E959541EB28511ED8893C51CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.220.0/22 103.210.20.0-103.210.22.255 122.10.161.0/24 122.10.196.0/23 122.10.221.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:ee:49:4d:3e:09:01:ec:10:1c:ab:c5:fa:16:bd:49:97:ed: 64:d4:ee:3d:5a:68:cf:8c:e3:49:04:b6:b4:3f:20:c1:0d:85: 7d:b2:90:b4:ec:49:e9:62:6f:42:f2:91:fa:a0:d4:a1:86:fd: 93:eb:9d:6f:91:23:69:c1:b8:7c:1a:93:b8:2a:8e:25:d7:3a: c1:44:7f:f5:a1:6d:bb:31:af:b6:42:8a:de:73:a9:d0:9a:13: 48:ef:74:b6:9d:75:12:2c:76:90:a1:81:88:c0:ec:1e:93:03: 63:6b:0a:54:56:ff:32:77:67:20:07:a7:13:15:5a:90:5d:f3: 4d:78:37:b5:39:2b:dc:a0:bd:d7:33:5e:2d:ba:95:d9:88:22: 44:eb:3c:c6:42:9e:4e:6a:f9:2f:16:1c:bf:52:62:16:90:0c: 32:2b:d3:21:aa:ef:18:9f:2f:f3:e2:5e:56:13:87:28:d6:6b: 6b:ed:76:cc:e4:a5:6f:ac:42:1c:ae:77:04:33:76:e2:68:3f: 7f:9d:69:4d:29:e0:11:7f:96:09:fc:54:07:d7:12:f9:8f:88: b5:30:8e:1a:0f:e5:e1:96:af:40:b8:ed:61:b7:d4:c4:bd:d4: 55:44:81:5b:e5:bc:b5:28:2a:25:08:cb:65:2c:12:36:7a:2c: 28:70:99:7d -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjYwNzI4MjI0NDExWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MzBiYi1iM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnUmPTW/je3d21Eo1wsnXzq6VU/WHHfhNDBIATK6bHGXFKG1X2GgKHSvNun6 yRr66ntfvyPk8tCvNJks+7oW58FkuNznnGAgvtHgq2lZVMiwxhEaudqp9QzCeoV7 LDcAp5BIo8UpTi5InbFeKeQSTgstAEIoSMlUIoC+0CaPxbVw2dDGcMRTxfAMpZOX 1W4VADeDq+xZ613CFSzQDrufCbkwDe+M2E83lvWoxJoUbMNmcJ+pgeTzrBWJAw8A xlmjSgTPuwVerDxq/e5Z8o3C0xAkNVlaiJ7vy+CKV9Mp90pBDpH1DMRYxB8M5As5 Q50mZ4Xi65FrthrA+MsfQ79k+wIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFFIbZeln U026eA46ng15K0LCqJuyMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNTc2NDczN0E3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvRTk1OTU0MUVC Mjg1MTFFRDg4OTNDNTFDQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQCJP/cMAwDBAJn0hQDBABn0hYDBAB6CqEDBAF6CsQDBAB6Ct0wDQYJ KoZIhvcNAQELBQADggEBAB7uSU0+CQHsEByrxfoWvUmX7WTU7j1aaM+M40kEtrQ/ IMENhX2ykLTsSelib0Lykfqg1KGG/ZPrnW+RI2nBuHwak7gqjiXXOsFEf/Whbbsx r7ZCit5zqdCaE0jvdLaddRIsdpChgYjA7B6TA2NrClRW/zJ3ZyAHpxMVWpBd8014 N7U5K9ygvdczXi26ldmIIkTrPMZCnk5q+S8WHL9SYhaQDDIr0yGq7xifL/PiXlYT hyjWa2vtdszkpW+sQhyudwQzduJoP3+daU0p4BF/lgn8VAfXEvmPiLUwjhoP5eGW r0C47WG31MS91FVEgVvlvLUoKiUIy2UsEjZ6LChwmX0= -----END CERTIFICATE-----Generated at Wed Jul 29 03:34:59 2026 by rpki-client