$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C4F9C4A03CCB11F0A0971A87C4F9AE02.roa File: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (raw, json) Hash identifier: FVQ+j69/Aeib4yBQpBYMh3Ioo2GLCobZFDyx7BhU9SY= Subject key identifier: 89:DF:71:2F:77:86:0A:D6:47:E6:FA:95:23:A7:3E:0C:D1:B5:23:B8 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 2885 Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C4F9C4A03CCB11F0A0971A87C4F9AE02.roa Signing time: Fri 24 Jul 2026 03:03:36 +0000 ROA not before: Tue 26 May 2026 16:22:20 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 17970 IP address blocks: 43.255.216.0/22 maxlen: 22 61.9.32.0/19 maxlen: 22 61.9.96.0/19 maxlen: 22 61.14.192.0/21 maxlen: 24 103.239.200.0/22 maxlen: 22 202.81.168.0/21 maxlen: 22 202.81.172.0/24 maxlen: 24 202.81.173.0/24 maxlen: 24 202.81.174.0/24 maxlen: 24 202.81.175.0/24 maxlen: 24 203.76.192.0/21 maxlen: 22 203.76.195.0/24 maxlen: 24 203.76.196.0/24 maxlen: 24 219.90.80.0/20 maxlen: 20 219.90.80.0/22 maxlen: 22 219.90.84.0/22 maxlen: 22 219.90.84.0/24 maxlen: 24 219.90.86.0/24 maxlen: 24 219.90.87.0/24 maxlen: 24 219.90.88.0/22 maxlen: 22 219.90.90.0/24 maxlen: 24 219.90.91.0/24 maxlen: 24 219.90.92.0/22 maxlen: 22 219.90.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 05:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10373 (0x2885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: May 26 16:22:20 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a62d608-1da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:8b:4b:d2:0a:8d:49:2d:c4:fe:46:d7:74:b7: 0d:ab:50:54:cb:24:ff:fd:fa:2c:7d:4c:e2:e1:1d: 2f:2e:70:41:a2:f8:c2:fe:0a:2f:cb:80:f5:1d:6e: e1:c9:5d:aa:2d:03:42:1a:e4:04:31:0b:a1:b1:48: 4d:84:92:5c:22:a9:cf:29:ec:81:02:b3:f4:b7:e8: e7:c9:1d:94:d7:4b:47:8f:72:b7:73:f4:ff:e5:6a: ed:42:c0:2e:56:d1:ad:43:61:fd:e5:23:87:86:5b: 99:77:33:a5:48:65:0f:38:c0:98:d8:08:e0:6d:60: 03:04:2d:e1:aa:31:32:87:e0:9f:1d:68:4a:b0:db: e8:83:b1:0f:21:ab:c4:a2:c3:6b:fa:09:6c:96:d4: 78:6d:75:67:1f:6b:7d:23:10:26:f6:14:c0:74:91: b0:d3:d5:d5:27:c2:86:01:83:48:25:15:83:4b:c0: 41:e7:a1:58:4f:4e:d5:87:3d:be:ab:36:4f:f6:ac: 57:c7:88:5d:d2:d9:12:01:b3:44:ec:f0:3a:d4:bb: 66:e7:7a:4f:49:3a:e4:91:bf:37:b8:51:7b:c3:de: 40:a4:ff:cf:f5:5b:99:25:56:d4:7b:47:78:e5:b9: 35:dd:ba:5d:97:19:e9:14:0f:8e:82:35:79:79:3f: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DF:71:2F:77:86:0A:D6:47:E6:FA:95:23:A7:3E:0C:D1:B5:23:B8 X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C4F9C4A03CCB11F0A0971A87C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.216.0/22 61.9.32.0/19 61.9.96.0/19 61.14.192.0/21 103.239.200.0/22 202.81.168.0/21 203.76.192.0/21 219.90.80.0/20 Signature Algorithm: sha256WithRSAEncryption 46:08:82:d9:51:e0:79:e3:8f:f2:d6:db:22:7c:e6:1b:f9:cf: dc:a1:85:ff:53:60:13:c6:e0:bd:fe:44:d3:6c:8e:e9:89:bd: 25:b6:5b:df:66:c8:69:90:6c:69:5d:09:17:81:e2:f9:e5:d7: 0b:32:fc:6e:b3:38:02:68:0e:56:48:e4:f5:45:c3:7d:b0:c0: 3c:f0:0e:53:87:7c:f4:bf:04:82:4f:5f:45:37:54:81:26:aa: c1:80:ec:5b:d4:3b:3c:6e:b8:13:93:38:af:dc:b4:1f:f8:fb: b0:2a:fa:a3:d9:49:48:74:7d:e1:fb:6b:74:6d:95:a0:e4:44: 13:30:cd:46:d5:63:9f:db:94:00:37:f8:75:26:2c:5d:07:d7: 08:52:19:68:4a:4b:61:7a:e1:89:ef:21:d5:3d:41:6b:47:97: 0c:3a:2b:72:5b:e7:0c:25:4f:f0:fa:50:8b:c4:a9:91:63:19: 8c:7c:11:f0:b5:31:0d:fe:36:31:8f:df:03:fd:e3:66:10:a9: 94:74:94:d5:84:90:09:ff:06:25:bd:6c:c2:0d:0c:36:6f:84: 2b:bc:35:21:b4:87:b8:ff:ed:24:88:13:67:58:12:c8:92:cc: e6:7c:0d:a9:4b:29:70:72:3c:62:79:1c:94:1e:af:51:9e:90: eb:19:e2:1e -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICKIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjYwNTI2MTYyMjIwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyZDYwOC0xZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+otL0gqNSS3E/kbXdLcNq1BUyyT//fosfUzi4R0vLnBBovjC/govy4D1HW7h yV2qLQNCGuQEMQuhsUhNhJJcIqnPKeyBArP0t+jnyR2U10tHj3K3c/T/5WrtQsAu VtGtQ2H95SOHhluZdzOlSGUPOMCY2AjgbWADBC3hqjEyh+CfHWhKsNvog7EPIavE osNr+glsltR4bXVnH2t9IxAm9hTAdJGw09XVJ8KGAYNIJRWDS8BB56FYT07Vhz2+ qzZP9qxXx4hd0tkSAbNE7PA61Ltm53pPSTrkkb83uFF7w95ApP/P9VuZJVbUe0d4 5bk13bpdlxnpFA+OgjV5eT+VIQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFInfcS93 hgrWR+b6lSOnPgzRtSO4MB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc1RkQvRTFFRkQ5QjZERUNFMTFFNEExNEYwMDY4QzRGOUFFMDIvQzRGOUM0QTAz Q0NCMTFGMEEwOTcxQTg3QzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQCK//YAwQFPQkgAwQFPQlgAwQDPQ7AAwQCZ+/IAwQDylGoAwQDy0zA AwQE21pQMA0GCSqGSIb3DQEBCwUAA4IBAQBGCILZUeB544/y1tsifOYb+c/coYX/ U2ATxuC9/kTTbI7pib0ltlvfZshpkGxpXQkXgeL55dcLMvxuszgCaA5WSOT1RcN9 sMA88A5Th3z0vwSCT19FN1SBJqrBgOxb1Ds8brgTkziv3LQf+PuwKvqj2UlIdH3h +2t0bZWg5EQTMM1G1WOf25QAN/h1JixdB9cIUhloSktheuGJ7yHVPUFrR5cMOity W+cMJU/w+lCLxKmRYxmMfBHwtTEN/jYxj98D/eNmEKmUdJTVhJAJ/wYlvWzCDQw2 b4QrvDUhtIe4/+0kiBNnWBLIkszmfA2pSylwcjxieRyUHq9RnpDrGeIe -----END CERTIFICATE-----Generated at Fri Jul 24 08:43:33 2026 by rpki-client