$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/BED8B2621D1B11F1B6F055AB103D8C67.roa File: BED8B2621D1B11F1B6F055AB103D8C67.roa (raw, json) Hash identifier: TZiFnlQe5aFCTw3TXlx3VBuv8nDQSF0KBsx60QraJQ8= Subject key identifier: AF:A9:91:4F:67:83:F2:25:7C:2C:6B:DE:33:3E:55:3D:84:D8:68:00 Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Certificate serial: 61 Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/BED8B2621D1B11F1B6F055AB103D8C67.roa Signing time: Fri 05 Jun 2026 08:40:59 +0000 ROA not before: Fri 05 Jun 2026 08:40:59 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 13335 IP address blocks: 43.243.28.0/22 maxlen: 24 103.230.240.0/22 maxlen: 24 2401:8b80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Validity Not Before: Jun 5 08:40:59 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a228b9b-a5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d2:3c:3f:50:de:85:4e:5f:58:03:a7:42:cb: 51:25:29:c8:2a:33:a8:36:fe:ff:1b:8f:18:72:76: 9b:0f:2a:80:97:78:65:27:fa:e4:89:20:c9:90:53: 19:da:4d:54:d3:27:10:11:c5:02:94:da:14:51:97: 7a:33:e7:32:2a:32:79:81:25:47:aa:eb:ba:a6:c2: 39:ba:b5:b5:c0:81:bf:50:ba:9c:57:e0:e0:17:27: 13:50:fe:47:12:7a:76:fc:ea:d3:26:3e:51:25:ec: 16:71:f2:77:e6:d1:76:1c:f2:90:b8:48:42:0e:b0: 57:7d:6f:1e:43:ed:b7:53:d7:eb:a8:01:cd:00:dc: a7:a6:c3:73:43:8b:61:f1:c0:45:d1:98:37:00:8a: ba:6a:73:53:dd:af:c6:b9:d5:19:24:4c:82:78:99: fe:ce:3f:b1:33:cc:ad:eb:75:b6:61:ce:d2:24:48: 37:e0:bd:02:ab:00:06:de:1c:9d:ee:2d:a2:03:98: 93:a9:ee:ec:51:99:89:3e:28:e0:9a:73:bc:c4:14: 40:6e:d2:fe:56:99:6d:60:7e:db:50:1a:9f:5c:bd: 30:92:37:f1:13:a2:02:92:a7:37:81:bf:15:18:3c: b4:4e:c1:66:a6:50:4b:9d:4a:4e:b8:b8:d0:5b:a2: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A9:91:4F:67:83:F2:25:7C:2C:6B:DE:33:3E:55:3D:84:D8:68:00 X509v3 Authority Key Identifier: keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/BED8B2621D1B11F1B6F055AB103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.243.28.0/22 103.230.240.0/22 IPv6: 2401:8b80::/32 Signature Algorithm: sha256WithRSAEncryption 00:af:08:d7:69:89:e4:bd:e6:5a:22:71:0b:27:49:06:62:09: ba:92:2b:a1:3d:71:7c:21:38:b5:5d:fe:76:ec:27:7f:41:1e: 8f:85:b1:1c:b3:77:0c:90:47:72:35:9e:8d:5e:de:c4:87:3d: 91:08:4b:79:d8:2f:78:cd:f3:69:42:a4:cb:fb:2f:46:1f:3a: 9c:9d:57:66:42:a5:c0:a9:e0:af:d7:25:91:bb:68:0e:72:4d: 04:ed:38:25:88:f7:a7:9e:3a:81:3e:19:f0:18:5a:b7:46:37: 3b:93:ab:47:0e:3a:78:0b:a7:f2:00:8f:e0:48:55:d9:84:8c: bc:f0:ce:c9:a1:ab:5a:cf:20:11:1e:c6:b0:5b:3f:ec:be:88: ac:05:11:75:6a:f1:76:7f:59:6b:60:b8:73:bb:44:fb:4a:a7: 72:94:d7:c6:99:60:25:c4:10:dd:8d:eb:81:47:7d:4d:68:ad: 90:5c:ac:07:10:05:1b:b3:52:f8:6a:a9:e2:70:75:2f:9c:4f: 71:55:cc:de:db:e1:19:71:c3:18:a2:71:59:66:f2:c0:c7:2e: fe:7d:01:d1:78:bc:db:70:d9:20:18:c1:7c:da:0e:49:3d:f6: 10:95:90:63:7a:70:a0:51:a4:58:3c:f5:3c:b0:aa:3a:05:cd: d3:68:ae:53 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzI1NjExMC8GA1UEBRMoMzdDRDlCQjA4NkVGMEFGNUEzMkJEODg1NDc0Njg2ODA2 RDkwOTZGQjAeFw0yNjA2MDUwODQwNTlaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMjI4YjliLWE1ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJ0jw/UN6FTl9YA6dCy1ElKcgqM6g2/v8bjxhydpsPKoCXeGUn+uSJIMmQUxna TVTTJxARxQKU2hRRl3oz5zIqMnmBJUeq67qmwjm6tbXAgb9QupxX4OAXJxNQ/kcS enb86tMmPlEl7BZx8nfm0XYc8pC4SEIOsFd9bx5D7bdT1+uoAc0A3Kemw3NDi2Hx wEXRmDcAirpqc1Pdr8a51RkkTIJ4mf7OP7EzzK3rdbZhztIkSDfgvQKrAAbeHJ3u LaIDmJOp7uxRmYk+KOCac7zEFEBu0v5WmW1gfttQGp9cvTCSN/ETogKSpzeBvxUY PLROwWamUEudSk64uNBbon/rAgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQUr6mRT2eD 8iV8LGveMz5VPYTYaAAwHwYDVR0jBBgwFoAUN82bsIbvCvWjK9iFR0aGgG2Qlvsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjU2LzFCNTVENzM4RDk5 RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZXaks5aUZSMGFHZ0cyUWx2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjgyYnNJYnZDdldqSzlpRlIwYUdnRzJRbHZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzI1Ni8xQjU1RDczOEQ5OUYxMUYwOTdFRkJFRjk2NkQzNjQxRC9CRUQ4QjI2MjFE MUIxMUYxQjZGMDU1QUIxMDNEOEM2Ny5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAIr8xwDBAJn5vAwDQQCAAIwBwMFACQBi4AwDQYJKoZIhvcNAQELBQAD ggEBAACvCNdpieS95loicQsnSQZiCbqSK6E9cXwhOLVd/nbsJ39BHo+FsRyzdwyQ R3I1no1e3sSHPZEIS3nYL3jN82lCpMv7L0YfOpydV2ZCpcCp4K/XJZG7aA5yTQTt OCWI96eeOoE+GfAYWrdGNzuTq0cOOngLp/IAj+BIVdmEjLzwzsmhq1rPIBEexrBb P+y+iKwFEXVq8XZ/WWtguHO7RPtKp3KU18aZYCXEEN2N64FHfU1orZBcrAcQBRuz UvhqqeJwdS+cT3FVzN7b4RlxwxiicVlm8sDHLv59AdF4vNtw2SAYwXzaDkk99hCV kGN6cKBRpFg89TywqjoFzdNorlM= -----END CERTIFICATE-----Generated at Sat Jun 13 18:38:32 2026 by rpki-client