$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa File: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (raw, json) Hash identifier: /pRxgXugXEPLMOPY2BI01kDzItGjjFquWwgKhyeC7eo= Subject key identifier: F9:5B:97:03:F0:6D:A3:C7:20:3C:22:A8:AB:58:F4:8B:42:10:AF:25 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 0683 Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa Signing time: Mon 06 Jul 2026 23:24:39 +0000 ROA not before: Mon 06 Jul 2026 23:24:39 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 142559 IP address blocks: 103.169.98.0/24 maxlen: 24 103.169.99.0/24 maxlen: 24 2001:df6:f580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: Jul 6 23:24:39 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4c3937-adf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:15:e4:2c:ef:58:c2:26:c6:b0:9c:1a:64: 3f:51:19:82:75:3a:cb:92:ec:84:87:37:99:95:37: cd:29:e4:5b:fb:5a:00:22:ca:70:40:77:da:0b:32: d0:b2:f7:de:5c:40:7e:0d:9b:e2:08:c4:56:76:79: 38:4d:1d:a4:c6:db:eb:3a:88:c3:1c:56:2a:9f:88: 30:e0:ce:fd:d4:ad:a3:87:ec:e4:99:30:30:a2:9a: 06:87:a0:c7:85:50:4e:85:58:01:fb:b9:5d:65:9f: 23:5c:e6:87:d0:07:89:ca:4a:39:3c:e0:21:29:6e: ce:33:cf:5b:6a:ad:d5:6c:aa:c6:e6:15:84:90:d9: 2a:b5:b6:16:4d:8f:52:60:cb:4d:44:1c:1e:03:8c: 73:c8:ce:e8:9d:84:5d:6b:75:64:1a:3b:43:3f:2d: 27:c6:38:f7:13:78:77:1f:b9:4d:a9:3a:b9:05:29: 51:dd:e8:18:b4:18:18:b1:ce:75:20:72:34:da:bd: 85:4e:01:0e:df:13:58:ed:26:48:5a:8c:27:a2:e1: a2:1e:15:d9:9a:1a:1b:32:07:4c:09:74:75:11:c1: 81:c3:e8:c4:9c:e7:3b:ce:d4:55:29:d5:56:b9:94: 8a:ae:b8:f5:8f:a2:88:52:4c:d7:98:c5:36:e1:43: ee:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5B:97:03:F0:6D:A3:C7:20:3C:22:A8:AB:58:F4:8B:42:10:AF:25 X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.169.98.0/23 IPv6: 2001:df6:f580::/48 Signature Algorithm: sha256WithRSAEncryption 64:74:12:26:ae:b6:56:a6:09:79:cb:79:bb:e3:9a:ef:53:d2: 88:18:0e:38:7c:44:28:6f:7c:72:58:0b:df:42:20:e2:74:df: 37:ea:af:09:2c:86:0b:fe:17:f9:31:55:b8:9f:95:b8:bf:3c: ec:5f:a8:17:27:13:ba:24:f2:88:7e:a5:1c:55:17:03:0b:83: b3:e4:1c:a5:7f:5c:d6:58:ce:4e:c9:50:13:67:a8:e2:4d:8f: f0:9e:51:a3:60:0a:fa:0b:de:96:ad:1c:98:82:10:a9:17:0f: ad:a9:fd:31:cb:f4:0d:60:e9:79:93:41:02:02:6d:d4:46:4a: fb:72:90:7b:b2:1a:91:39:93:b4:3f:f3:7d:61:a1:33:05:84: bd:71:b1:6f:00:f0:f7:24:a2:f5:dd:27:9d:16:c7:02:1a:a5: 18:bb:67:ec:c9:9c:a1:98:bf:4b:f2:f5:75:9b:e7:aa:35:ae: 40:36:67:70:48:1a:3e:e2:67:6e:5e:cb:e6:9b:0d:7e:f9:07: b1:9a:62:4e:37:f2:d5:d0:e4:84:4e:85:a5:81:41:67:e1:da: c4:4f:aa:d7:7a:44:be:42:99:93:76:ea:01:da:12:b8:a0:3b: 76:83:64:ad:9f:27:ba:21:41:86:e0:20:bd:2e:0f:57:1d:94: b7:2e:ce:62 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjYwNzA2MjMyNDM5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjMzkzNy1hZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLoV5CzvWMImxrCcGmQ/URmCdTrLkuyEhzeZlTfNKeRb+1oAIspwQHfaCzLQ svfeXEB+DZviCMRWdnk4TR2kxtvrOojDHFYqn4gw4M791K2jh+zkmTAwopoGh6DH hVBOhVgB+7ldZZ8jXOaH0AeJyko5POAhKW7OM89baq3VbKrG5hWEkNkqtbYWTY9S YMtNRBweA4xzyM7onYRda3VkGjtDPy0nxjj3E3h3H7lNqTq5BSlR3egYtBgYsc51 IHI02r2FTgEO3xNY7SZIWownouGiHhXZmhobMgdMCXR1EcGBw+jEnOc7ztRVKdVW uZSKrrj1j6KIUkzXmMU24UPuAQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPlblwPw baPHIDwiqKtY9ItCEK8lMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjI4QkMvMEU3RDY0RDZERjBEMTFFQkIxMTMwRDgxQzRGOUFFMDIvQjJDOENCREU1 RURBMTFFRkJGQThBMjI2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6liMA8EAgACMAkDBwAgAQ329YAwDQYJKoZIhvcNAQELBQADggEB AGR0EiautlamCXnLebvjmu9T0ogYDjh8RChvfHJYC99CIOJ03zfqrwkshgv+F/kx Vbiflbi/POxfqBcnE7ok8oh+pRxVFwMLg7PkHKV/XNZYzk7JUBNnqOJNj/CeUaNg CvoL3patHJiCEKkXD62p/THL9A1g6XmTQQICbdRGSvtykHuyGpE5k7Q/831hoTMF hL1xsW8A8PckovXdJ50WxwIapRi7Z+zJnKGYv0vy9XWb56o1rkA2Z3BIGj7iZ25e y+abDX75B7GaYk438tXQ5IROhaWBQWfh2sRPqtd6RL5CmZN26gHaErigO3aDZK2f J7ohQYbgIL0uD1cdlLcuzmI= -----END CERTIFICATE-----Generated at Fri Jul 24 01:57:50 2026 by rpki-client