$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9FE80B2898F711EE87DF6E1FC4F9AE02.roa File: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (raw, json) Hash identifier: pHxXivDFEbvkF+NQAZkLY9uNgdyvvnZXrHsc10zFfQ8= Subject key identifier: 95:C6:82:67:98:DA:76:EA:74:07:BC:CD:33:3C:C1:DE:AC:A4:36:90 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 01EF Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9FE80B2898F711EE87DF6E1FC4F9AE02.roa Signing time: Mon 01 Jun 2026 04:34:41 +0000 ROA not before: Mon 01 Jun 2026 04:34:41 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 140577 IP address blocks: 61.16.24.0/22 maxlen: 24 103.150.140.0/23 maxlen: 23 103.150.140.0/24 maxlen: 24 103.150.141.0/24 maxlen: 24 202.8.40.0/22 maxlen: 24 202.94.84.0/23 maxlen: 24 2001:df3:7c80::/48 maxlen: 48 2401:59a0::/32 maxlen: 32 2401:59a0::/48 maxlen: 48 2401:59a0:1::/48 maxlen: 48 2401:59a0:2::/48 maxlen: 48 2401:59a0:3::/48 maxlen: 48 2401:59a0:4::/48 maxlen: 48 2401:59a0:5::/48 maxlen: 48 2401:59a0:6::/48 maxlen: 48 2401:59a0:7::/48 maxlen: 48 2401:59a0:8::/46 maxlen: 46 2401:59a0:c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 03:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Jun 1 04:34:41 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a1d0be0-cec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5b:15:2d:a4:3a:17:cc:18:82:c9:c4:d5:a3: 9c:92:1e:54:6d:40:09:13:7a:a0:6f:d0:3b:67:0b: 3a:cc:0b:60:9c:d6:ab:bd:ce:54:41:05:f9:6c:e4: d5:4f:99:d8:d5:68:4a:a9:21:e1:ce:20:ce:94:77: b2:09:c1:d2:bc:f4:01:b8:ef:7b:8f:bb:83:55:3a: af:6c:d7:02:2a:12:e6:9d:40:3f:b4:a8:6f:5f:b3: 5f:1c:fb:cb:e3:5d:f6:05:7c:2e:c1:8a:9f:a8:c5: 7e:f1:9a:13:73:9b:98:7a:c9:5e:07:9f:c8:dd:74: 8e:42:f2:a3:40:4c:8b:d0:06:0e:6a:34:85:40:fe: 79:5b:25:aa:90:a4:b8:12:78:7c:ea:e1:a9:08:8f: db:90:14:ee:bd:e2:44:a8:4d:f1:c9:27:10:a1:4d: 9a:58:e6:c2:1e:a2:95:bf:4d:47:96:4f:c3:33:4d: e0:8d:0e:c2:a1:97:48:69:36:13:ab:45:ec:64:c3: db:bc:e9:5e:50:e4:5a:f6:01:c2:ac:65:bc:71:6a: 06:6a:3f:56:a8:7b:f0:94:cb:21:a8:d2:13:a5:1d: ca:3a:7d:fe:d3:0f:7c:0b:90:1d:e3:e5:87:df:30: 1b:49:f3:2b:a4:18:51:16:75:34:21:0b:f2:72:8c: 4c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C6:82:67:98:DA:76:EA:74:07:BC:CD:33:3C:C1:DE:AC:A4:36:90 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9FE80B2898F711EE87DF6E1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.16.24.0/22 103.150.140.0/23 202.8.40.0/22 202.94.84.0/23 IPv6: 2001:df3:7c80::/48 2401:59a0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:80:46:0a:15:aa:7c:9b:d8:d8:47:c8:14:ff:bc:59:36:ad: b9:b3:6b:23:dc:80:24:fe:cf:76:2c:62:c4:a0:90:b6:81:fb: b6:a9:b1:dd:51:66:06:b0:08:6c:dd:a9:fd:42:fd:57:70:9c: e3:86:1a:a1:19:d8:ed:fa:63:e8:92:dd:91:8c:b1:b3:49:21: 07:7b:f9:c2:55:a9:13:8f:b9:9a:f0:ae:8f:90:b3:11:2e:7b: 0a:ae:e6:e1:e4:26:18:59:1c:52:3c:7c:37:08:8c:55:16:a7: d1:fc:0a:0b:36:04:fc:bc:8c:36:20:ec:74:db:13:fa:6f:40: 66:96:49:69:a4:b6:a5:f5:90:af:60:7d:5a:90:1a:39:7e:fe: 15:c3:34:fb:b9:58:0a:0d:11:56:91:11:65:b4:54:ad:1c:c0: 2a:06:76:ac:85:dc:2c:aa:73:2c:01:06:c7:3e:f0:39:65:42: ce:b5:f0:23:26:c7:f9:4a:b0:5e:c6:3c:3f:41:bc:92:ce:03: a7:bb:31:ae:86:da:bb:44:c7:40:98:77:de:90:3c:ad:ee:4c: d2:62:99:7f:43:65:a4:8b:51:0c:54:f9:50:33:d2:c0:2e:36: e8:9b:3d:1b:1a:d9:5d:3f:eb:6a:de:56:cd:33:70:a2:c7:da: 8f:8a:a0:51 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjYwNjAxMDQzNDQxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFkMGJlMC1jZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1sVLaQ6F8wYgsnE1aOckh5UbUAJE3qgb9A7Zws6zAtgnNarvc5UQQX5bOTV T5nY1WhKqSHhziDOlHeyCcHSvPQBuO97j7uDVTqvbNcCKhLmnUA/tKhvX7NfHPvL 4132BXwuwYqfqMV+8ZoTc5uYesleB5/I3XSOQvKjQEyL0AYOajSFQP55WyWqkKS4 Enh86uGpCI/bkBTuveJEqE3xyScQoU2aWObCHqKVv01Hlk/DM03gjQ7CoZdIaTYT q0XsZMPbvOleUORa9gHCrGW8cWoGaj9WqHvwlMshqNITpR3KOn3+0w98C5Ad4+WH 3zAbSfMrpBhRFnU0IQvycoxMhwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFJXGgmeY 2nbqdAe8zTM8wd6spDaQMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE1QTIvNDY3MEVBQUM5OEY2MTFFRUJCRjFGNDE3QzRGOUFFMDIvOUZFODBCMjg5 OEY3MTFFRTg3REY2RTFGQzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODAe BAIAATAYAwQCPRAYAwQBZ5aMAwQCyggoAwQByl5UMBYEAgACMBADBwAgAQ3zfIAD BQAkAVmgMA0GCSqGSIb3DQEBCwUAA4IBAQB+gEYKFap8m9jYR8gU/7xZNq25s2sj 3IAk/s92LGLEoJC2gfu2qbHdUWYGsAhs3an9Qv1XcJzjhhqhGdjt+mPokt2RjLGz SSEHe/nCVakTj7ma8K6PkLMRLnsKrubh5CYYWRxSPHw3CIxVFqfR/AoLNgT8vIw2 IOx02xP6b0BmlklppLal9ZCvYH1akBo5fv4VwzT7uVgKDRFWkRFltFStHMAqBnas hdwsqnMsAQbHPvA5ZULOtfAjJsf5SrBexjw/QbySzgOnuzGuhtq7RMdAmHfekDyt 7kzSYpl/Q2Wki1EMVPlQM9LALjbomz0bGtldP+tq3lbNM3Cix9qPiqBR -----END CERTIFICATE-----Generated at Sat Jun 13 13:04:20 2026 by rpki-client