$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/891E633CB7F111EFA500D67CC4F9AE02.roa File: 891E633CB7F111EFA500D67CC4F9AE02.roa (raw, json) Hash identifier: 74jq6ZEh6iqV+58fBJr/9zAa1XDAf9e6FWi0Lze9+iQ= Subject key identifier: F2:07:AE:A0:35:80:2E:1B:64:2A:18:B6:AA:AC:95:8D:CD:DE:C2:FF Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 0295 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/891E633CB7F111EFA500D67CC4F9AE02.roa Signing time: Sat 23 May 2026 02:32:58 +0000 ROA not before: Sat 23 May 2026 02:32:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151048 IP address blocks: 103.121.6.0/24 maxlen: 24 103.121.7.0/24 maxlen: 24 2001:df6:aa40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: May 23 02:32:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a1111da-9f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:8e:18:99:86:22:34:78:c0:09:54:0c:11: 09:a1:f5:b2:b5:bc:1f:ce:32:d3:bb:57:22:0b:21: 88:2b:0c:17:93:95:a2:d2:88:d0:1e:b5:ad:eb:bb: a9:de:10:1b:c4:1b:19:82:e2:e4:e0:2c:fd:4e:3b: e0:da:37:87:c3:15:91:2b:a8:ec:60:fb:f5:87:8c: 92:50:59:7b:96:2f:e1:09:b2:cf:63:5c:d1:74:f8: 3c:71:81:de:22:26:8f:e4:91:b6:82:63:26:19:42: c1:7b:d7:ca:cb:c3:1d:3c:4c:16:72:0b:e4:8f:92: 81:1d:89:46:39:8a:16:61:c1:ff:fb:e0:e3:63:ff: b9:4b:c3:15:38:bf:f8:ff:fd:9e:63:9b:8f:ed:67: 7d:46:3f:d0:5d:cd:f5:94:b1:96:0f:0e:0e:9f:d1: 7c:d3:6f:48:27:8f:b3:1e:fa:bf:79:18:f3:ac:92: a8:b3:64:03:4a:12:f6:04:48:73:f9:ce:fb:fb:6d: da:ea:06:f2:88:0b:a5:49:71:38:ac:6b:39:21:69: ab:36:c9:86:c0:9e:61:54:b6:d2:00:d8:b7:79:b1: b9:b0:67:15:50:5d:98:2d:c7:3e:68:47:c4:37:09: 60:71:fb:87:db:a3:85:0b:a4:df:c7:96:a2:ab:bc: f5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:07:AE:A0:35:80:2E:1B:64:2A:18:B6:AA:AC:95:8D:CD:DE:C2:FF X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/891E633CB7F111EFA500D67CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.6.0/23 IPv6: 2001:df6:aa40::/48 Signature Algorithm: sha256WithRSAEncryption 89:51:e1:98:ac:aa:f2:74:a5:61:91:22:e8:f7:96:84:d7:24: e7:7e:36:48:40:88:cd:e7:ba:a2:6b:6a:f4:c6:ad:5a:73:6f: 5a:1b:7c:ec:c3:96:40:9c:9d:d6:61:1f:b1:83:74:45:b4:44: 64:42:51:34:9d:2d:e4:4f:44:75:7d:d7:3d:6d:d7:12:1d:77: 40:bc:0c:6a:18:86:34:ed:99:de:5d:b8:74:41:b5:0c:75:b8: bb:8e:e2:05:a7:2a:b7:0c:ff:19:26:de:dd:c5:98:d0:09:ac: 83:c4:25:1b:51:16:cd:37:84:db:86:d5:58:81:d8:b9:de:cd: 53:bb:b9:90:d7:ab:cb:28:e6:74:30:70:84:1b:65:65:1d:4c: 37:31:7c:e9:7e:05:d0:b7:82:ff:63:3e:ec:00:29:e1:95:23: d1:92:76:1c:44:53:a2:3c:97:33:e5:7e:b3:79:79:5e:74:39: dc:7b:d9:f0:22:ae:55:94:a3:f3:ef:17:f6:53:5f:b1:35:ea: 43:93:53:4f:bb:b2:32:15:5e:82:2a:54:93:3d:c8:cd:1d:91: e3:0e:25:b3:ca:08:80:fe:75:1a:e3:c9:3b:97:c1:be:a8:e1: f3:0f:3f:5c:75:b9:ec:39:02:9c:c2:8a:da:57:d8:f4:b0:50: e4:14:61:b2 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjYwNTIzMDIzMjU4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTExMTFkYS05ZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+6OGJmGIjR4wAlUDBEJofWytbwfzjLTu1ciCyGIKwwXk5Wi0ojQHrWt67up 3hAbxBsZguLk4Cz9Tjvg2jeHwxWRK6jsYPv1h4ySUFl7li/hCbLPY1zRdPg8cYHe IiaP5JG2gmMmGULBe9fKy8MdPEwWcgvkj5KBHYlGOYoWYcH/++DjY/+5S8MVOL/4 //2eY5uP7Wd9Rj/QXc31lLGWDw4On9F8029IJ4+zHvq/eRjzrJKos2QDShL2BEhz +c77+23a6gbyiAulSXE4rGs5IWmrNsmGwJ5hVLbSANi3ebG5sGcVUF2YLcc+aEfE NwlgcfuH26OFC6Tfx5aiq7z13QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPIHrqA1 gC4bZCoYtqqslY3N3sL/MB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUZBRkYvRDA2MTFGMDRDQzQ0MTFFRDlBNzFFMTBDQzRGOUFFMDIvODkxRTYzM0NC N0YxMTFFRkE1MDBENjdDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ3kGMA8EAgACMAkDBwAgAQ32qkAwDQYJKoZIhvcNAQELBQADggEB AIlR4ZisqvJ0pWGRIuj3loTXJOd+NkhAiM3nuqJravTGrVpzb1obfOzDlkCcndZh H7GDdEW0RGRCUTSdLeRPRHV91z1t1xIdd0C8DGoYhjTtmd5duHRBtQx1uLuO4gWn KrcM/xkm3t3FmNAJrIPEJRtRFs03hNuG1ViB2LnezVO7uZDXq8so5nQwcIQbZWUd TDcxfOl+BdC3gv9jPuwAKeGVI9GSdhxEU6I8lzPlfrN5eV50Odx72fAirlWUo/Pv F/ZTX7E16kOTU0+7sjIVXoIqVJM9yM0dkeMOJbPKCID+dRrjyTuXwb6o4fMPP1x1 uew5ApzCitpX2PSwUOQUYbI= -----END CERTIFICATE-----Generated at Sat Jun 13 11:22:36 2026 by rpki-client