$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/67AAC7161D1411F1B0E2BAD80C3D8C67.roa File: 67AAC7161D1411F1B0E2BAD80C3D8C67.roa (raw, json) Hash identifier: RfZh/c3Oxj+j3RxxpaEAH33yqsib4ZdkZSMoIm68Qac= Subject key identifier: E8:A0:81:1E:94:DA:D0:DA:51:C9:E1:3C:E6:EA:48:29:EE:8A:F0:93 Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Certificate serial: 3580 Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/67AAC7161D1411F1B0E2BAD80C3D8C67.roa Signing time: Sat 04 Jul 2026 15:12:46 +0000 ROA not before: Sat 04 Jul 2026 15:12:46 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 13335 IP address blocks: 45.64.52.0/22 maxlen: 24 103.1.40.0/22 maxlen: 24 112.213.96.0/19 maxlen: 24 117.18.0.0/20 maxlen: 24 121.54.168.0/21 maxlen: 24 121.127.224.0/19 maxlen: 24 210.56.48.0/21 maxlen: 24 210.56.56.0/21 maxlen: 24 2403:ea00::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13696 (0x3580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Validity Not Before: Jul 4 15:12:46 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4922ee-2baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:70:3b:f5:11:78:4f:54:11:60:93:64:ce:fc: 1d:a9:92:a3:71:41:d1:48:a2:0f:21:7a:fe:66:ce: ca:34:d4:d2:14:4c:aa:26:c2:1c:aa:8c:0b:eb:09: a5:0f:98:62:07:57:5a:ba:97:88:59:31:ba:3d:fc: bc:99:d5:3b:5d:3a:51:1a:5e:f2:7e:0c:a7:ea:6f: 96:52:ec:c4:db:21:23:7e:9a:63:ca:07:1a:31:fb: 93:c6:aa:bc:fa:0c:94:b7:b9:97:07:b7:8a:65:c9: 6a:b8:fc:c6:c2:9b:c0:aa:0b:b4:cf:f4:b5:39:80: 36:50:d2:f9:3a:45:8a:e7:59:66:0d:48:40:ba:25: 55:dd:10:f3:23:8f:4b:66:8e:85:eb:00:5c:cc:91: 24:6f:15:e7:71:d8:d8:05:d9:61:56:58:0e:19:d5: 8c:7e:2b:65:b7:73:e9:d5:5f:6c:bd:c6:52:ee:71: 9c:78:93:78:be:b9:fb:c8:1a:7d:48:50:2b:dc:ba: bb:bc:14:f1:93:19:89:2b:80:64:f5:e5:de:81:73: 5d:d3:f8:f6:7b:7e:fa:cb:08:e6:9a:2f:2f:d9:72: a8:f8:91:dd:24:4d:83:76:6d:95:92:38:87:7f:1d: 5a:d7:85:c8:9a:7c:4d:94:d2:a6:ad:8d:39:27:dd: 4e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A0:81:1E:94:DA:D0:DA:51:C9:E1:3C:E6:EA:48:29:EE:8A:F0:93 X509v3 Authority Key Identifier: keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/67AAC7161D1411F1B0E2BAD80C3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 45.64.52.0/22 103.1.40.0/22 112.213.96.0/19 117.18.0.0/20 121.54.168.0/21 121.127.224.0/19 210.56.48.0/20 IPv6: 2403:ea00::/32 Signature Algorithm: sha256WithRSAEncryption 67:e8:ee:3c:91:bf:7f:d4:f5:86:f7:ae:f7:34:2c:fc:22:78: 39:13:84:9b:7d:9a:89:de:aa:1a:7f:17:95:4e:16:6b:b6:13: 4e:43:2c:a4:87:53:b8:17:91:10:6b:cc:a9:40:fe:0b:ad:48: 1c:27:99:85:71:df:fb:a1:84:40:6f:1e:68:30:f8:f5:66:31: fb:c2:85:bf:f6:6a:01:a4:b5:38:55:fc:88:46:13:8e:99:a8: 4e:bc:13:d6:39:9b:99:1a:86:3b:59:f0:4c:cc:05:af:16:e8: 7e:d9:46:6d:03:e1:25:80:3e:77:de:6d:7c:e9:84:58:bc:fd: 91:f5:aa:e0:51:22:c4:d6:ec:0b:9f:29:d1:52:2d:f6:0d:c9: 91:ba:9d:45:4e:39:c1:ed:63:6f:4f:1e:f9:cd:ff:22:fe:18: 65:5d:ea:fe:ae:40:19:35:6a:6c:4f:f4:a6:04:10:e9:6e:60: 2c:26:00:14:36:f4:7f:12:b0:e5:8f:71:37:d7:bd:f6:7e:81: 38:27:f4:3d:75:70:bd:33:61:d3:d1:08:59:f9:97:7e:5c:71: 9f:63:5b:91:f7:f6:63:20:c4:73:46:d7:1d:9f:ca:e4:b5:cd: 2c:b7:cc:81:16:0a:d2:36:c0:34:85:ab:ca:4b:86:e9:02:e1: b5:09:6b:a8 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICNYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk3RTgxMTAvBgNVBAUTKEM5QzI4Rjk5MEI2Mjc0MTJDOTdDMkRDRUM3QzkwNkU2 MUFEMzI1QUMwHhcNMjYwNzA0MTUxMjQ2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5MjJlZS0yYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXA79RF4T1QRYJNkzvwdqZKjcUHRSKIPIXr+Zs7KNNTSFEyqJsIcqowL6wml D5hiB1daupeIWTG6Pfy8mdU7XTpRGl7yfgyn6m+WUuzE2yEjfppjygcaMfuTxqq8 +gyUt7mXB7eKZclquPzGwpvAqgu0z/S1OYA2UNL5OkWK51lmDUhAuiVV3RDzI49L Zo6F6wBczJEkbxXncdjYBdlhVlgOGdWMfitlt3Pp1V9svcZS7nGceJN4vrn7yBp9 SFAr3Lq7vBTxkxmJK4Bk9eXegXNd0/j2e376ywjmmi8v2XKo+JHdJE2Ddm2VkjiH fx1a14XImnxNlNKmrY05J91O3wIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFOiggR6U 2tDaUcnhPObqSCnuivCTMB8GA1UdIwQYMBaAFMnCj5kLYnQSyXwtzsfJBuYa0yWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdFOC83QTBGRTdGQTFE OTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRCTEpmQzNPeDhrRzVoclRK YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljS1BtUXRpZEJMSmZDM094OGtHNWhyVEphdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTk3RTgvN0EwRkU3RkExRDkyMTFFMkI1QkM3NEY1MDhCMDJDRDIvNjdBQUM3MTYx RDE0MTFGMUIwRTJCQUQ4MEMzRDhDNjcucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCLUA0AwQCZwEoAwQFcNVgAwQEdRIAAwQDeTaoAwQFeX/gAwQE0jgw MA0EAgACMAcDBQAkA+oAMA0GCSqGSIb3DQEBCwUAA4IBAQBn6O48kb9/1PWG9673 NCz8Ing5E4SbfZqJ3qoafxeVThZrthNOQyykh1O4F5EQa8ypQP4LrUgcJ5mFcd/7 oYRAbx5oMPj1ZjH7woW/9moBpLU4VfyIRhOOmahOvBPWOZuZGoY7WfBMzAWvFuh+ 2UZtA+ElgD533m186YRYvP2R9argUSLE1uwLnynRUi32DcmRup1FTjnB7WNvTx75 zf8i/hhlXer+rkAZNWpsT/SmBBDpbmAsJgAUNvR/ErDlj3E31732foE4J/Q9dXC9 M2HT0QhZ+Zd+XHGfY1uR9/ZjIMRzRtcdn8rktc0st8yBFgrSNsA0havKS4bpAuG1 CWuo -----END CERTIFICATE-----Generated at Fri Jul 24 01:32:59 2026 by rpki-client