$ rpki-client -vvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/4DF2AB2886FE11F194514C90ABEE528E.roa File: 4DF2AB2886FE11F194514C90ABEE528E.roa (raw, json) Hash identifier: jckdVaLgGySOmC+dxDdM+IECQKrysVqHPHa0XPV4yDs= Subject key identifier: EA:91:EC:DB:70:74:63:65:54:5F:7A:19:10:1F:BB:36:ED:10:A2:E4 Certificate issuer: /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Certificate serial: 26FB Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/4DF2AB2886FE11F194514C90ABEE528E.roa Signing time: Fri 24 Jul 2026 01:23:41 +0000 ROA not before: Fri 24 Jul 2026 01:23:41 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38203 IP address blocks: 103.4.116.0/22 maxlen: 24 103.234.200.0/22 maxlen: 22 103.234.200.0/24 maxlen: 24 103.234.201.0/24 maxlen: 24 103.234.202.0/24 maxlen: 24 103.234.203.0/24 maxlen: 24 103.251.120.0/22 maxlen: 24 163.47.144.0/22 maxlen: 24 202.51.176.0/20 maxlen: 24 2402:b500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 01:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9979 (0x26fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91240E6, serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Validity Not Before: Jul 24 01:23:41 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a62be9d-48fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:cc:e9:89:c0:cc:44:2c:ea:be:06:56:28: 09:51:c4:f6:a4:6f:c8:34:c9:6d:d0:ab:5b:93:dd: be:61:c9:04:b4:bf:3f:ce:2b:86:a8:6a:fb:ff:5b: 0f:55:65:a6:59:89:72:5e:a9:49:5a:d2:64:4f:48: 5f:05:d6:0c:ec:01:69:ff:21:aa:16:55:d2:17:36: 1d:1c:30:21:19:37:d5:e2:af:e7:bd:b9:4b:7c:24: 4a:7d:6b:3d:7d:47:96:04:fd:94:12:fb:4c:72:bd: f2:a1:9a:58:55:9a:d4:76:44:ba:8d:75:ac:0b:07: 46:e9:11:6d:04:7c:5f:24:73:ca:4b:16:76:4b:98: dc:76:dd:a7:30:25:f5:d8:0e:dc:03:fc:1a:7c:a4: cf:ed:21:48:15:30:d7:7d:97:f6:1f:42:0c:07:65: 4a:15:2d:99:85:4f:66:01:01:44:d5:65:37:35:56: 70:ac:f8:3d:f6:7d:74:ca:62:69:eb:56:a6:a4:80: 70:42:91:4a:95:7e:9f:6e:ce:a9:45:36:41:46:97: 12:33:fb:0b:74:cd:d7:4f:f2:33:c9:52:da:a3:8e: 4c:36:e6:be:84:62:65:63:88:70:91:91:a1:c6:a1: 8e:1d:9d:2b:67:c1:da:b1:cb:48:0b:77:f9:00:3f: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:91:EC:DB:70:74:63:65:54:5F:7A:19:10:1F:BB:36:ED:10:A2:E4 X509v3 Authority Key Identifier: keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/4DF2AB2886FE11F194514C90ABEE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.4.116.0/22 103.234.200.0/22 103.251.120.0/22 163.47.144.0/22 202.51.176.0/20 IPv6: 2402:b500::/32 Signature Algorithm: sha256WithRSAEncryption 39:aa:29:1b:d2:7f:1a:e5:ca:c3:ad:59:06:75:ae:40:fc:03: 7d:c4:c0:f6:02:59:13:51:ac:23:57:5a:25:cf:fc:62:26:7b: f9:6e:49:e6:8a:c8:d6:a4:12:b7:55:60:80:ca:5a:c4:3a:74: 8c:cb:6d:67:35:6f:1a:d2:dc:bb:f2:ee:a7:c9:fe:67:8b:7d: 43:74:a9:78:b2:6e:a3:51:15:f3:59:dd:3c:6f:b8:5e:0d:23: 5d:43:be:4c:11:91:c0:97:f2:e0:f8:a1:77:ec:ba:f9:5d:8b: 00:96:73:26:7e:bd:0b:4f:78:6b:35:bc:ab:a7:9e:73:71:b3: 6a:a1:b2:80:a9:f7:02:62:45:ad:8a:ed:80:14:20:73:dc:3c: f4:f4:3f:01:d5:c6:7d:5b:68:a1:67:0a:93:37:44:e2:f7:4a: 1b:6c:4d:23:e8:00:b3:81:f4:87:de:64:40:4f:5c:82:3f:ed: 68:55:1e:b6:f2:d5:73:dd:b7:5c:81:25:c3:d0:50:66:86:b1: d2:21:7f:ac:c7:72:ae:21:e4:ad:a0:f5:24:fd:4d:19:73:49: 57:4f:d1:4c:e4:b6:d2:f8:41:86:59:c1:c8:de:07:7e:fa:b3: 86:66:fc:7f:20:4b:63:63:c7:60:26:58:b3:7d:3e:6f:ee:39: 5c:8d:6b:57 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICJvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwRTYxMTAvBgNVBAUTKDZEQ0U1MkY5QTIyOENCRjZGMzBDRDU1RDQzMzg0RDEy Njg0ODdCNjUwHhcNMjYwNzI0MDEyMzQxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYmU5ZC00OGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhbM6YnAzEQs6r4GVigJUcT2pG/INMlt0Ktbk92+YckEtL8/ziuGqGr7/1sP VWWmWYlyXqlJWtJkT0hfBdYM7AFp/yGqFlXSFzYdHDAhGTfV4q/nvblLfCRKfWs9 fUeWBP2UEvtMcr3yoZpYVZrUdkS6jXWsCwdG6RFtBHxfJHPKSxZ2S5jcdt2nMCX1 2A7cA/wafKTP7SFIFTDXfZf2H0IMB2VKFS2ZhU9mAQFE1WU3NVZwrPg99n10ymJp 61ampIBwQpFKlX6fbs6pRTZBRpcSM/sLdM3XT/IzyVLao45MNua+hGJlY4hwkZGh xqGOHZ0rZ8HasctIC3f5AD9tbwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFOqR7Ntw dGNlVF96GRAfuzbtEKLkMB8GA1UdIwQYMBaAFG3OUvmiKMv28wzVXUM4TRJoSHtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDBFNi82NjA3NDJDOEZE MjExMUU0ODhBQjBDMzRDNEY5QUUwMi9iYzVTLWFJb3lfYnpETlZkUXpoTkVtaEll MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjNVMtYUlveV9iekROVmRRemhORW1oSWUyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQwRTYvNjYwNzQyQzhGRDIxMTFFNDg4QUIwQzM0QzRGOUFFMDIvNERGMkFCMjg4 NkZFMTFGMTk0NTE0QzkwQUJFRTUyOEUucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCZwR0AwQCZ+rIAwQCZ/t4AwQCoy+QAwQEyjOwMA0EAgACMAcDBQAk ArUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5qikb0n8a5crDrVkGda5A/AN9xMD2AlkT UawjV1olz/xiJnv5bknmisjWpBK3VWCAylrEOnSMy21nNW8a0ty78u6nyf5ni31D dKl4sm6jURXzWd08b7heDSNdQ75MEZHAl/Lg+KF37Lr5XYsAlnMmfr0LT3hrNbyr p55zcbNqobKAqfcCYkWtiu2AFCBz3Dz09D8B1cZ9W2ihZwqTN0Ti90obbE0j6ACz gfSH3mRAT1yCP+1oVR628tVz3bdcgSXD0FBmhrHSIX+sx3KuIeStoPUk/U0Zc0lX T9FM5LbS+EGGWcHI3gd++rOGZvx/IEtjY8dgJlizfT5v7jlcjWtX -----END CERTIFICATE-----Generated at Fri Jul 24 09:37:12 2026 by rpki-client