$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/01B2AC1E064111E8A62EF586C4F9AE02.roa File: 01B2AC1E064111E8A62EF586C4F9AE02.roa (raw, json) Hash identifier: sfg45i8bTUpft2/BCIglF2LRfqPQiZusP6gRlhlo9Ck= Subject key identifier: 9F:6A:DF:33:89:C6:E5:58:AE:65:AC:A1:97:1A:11:D7:C1:DE:E5:BE Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 1769 Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/01B2AC1E064111E8A62EF586C4F9AE02.roa Signing time: Fri 26 Jun 2026 17:19:23 +0000 ROA not before: Fri 26 Jun 2026 17:19:23 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 9834 IP address blocks: 103.88.104.0/22 maxlen: 24 122.252.184.0/21 maxlen: 24 202.21.128.0/24 maxlen: 24 202.162.72.0/23 maxlen: 24 203.57.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5993 (0x1769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: Jun 26 17:19:23 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3eb49b-6a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:9e:4b:92:28:dd:46:74:e4:9e:e4:32:f6: b7:b0:65:82:0c:cc:d8:1c:ae:bb:84:75:ce:a5:1d: 0a:2e:60:e1:01:be:57:d2:db:6b:49:98:e6:b4:2c: 87:4b:8d:23:75:d5:f6:ed:86:4c:cc:7f:82:87:ef: 76:b0:ed:77:a9:9a:0b:88:a4:1a:13:02:7b:37:b5: f1:96:0c:21:08:36:7a:62:9d:fe:55:8e:03:d4:cd: cf:8d:4a:7c:90:d5:a3:f8:3d:8e:66:f7:8f:c1:34: 39:c2:02:81:62:a6:3f:bd:93:12:b3:1a:28:24:4c: f1:93:a2:81:8a:fb:7c:6a:61:9a:1d:f9:66:81:d5: ed:e8:1b:02:d5:11:3e:9b:d7:00:37:66:51:bb:a8: c4:8c:d0:8a:4d:98:4c:7d:0c:db:eb:46:13:92:12: 7b:e9:e2:5d:2f:c7:a2:d4:c1:18:df:b0:8b:9a:a8: 5e:f3:62:99:51:62:53:cb:52:20:10:59:41:a7:db: 70:b2:e3:f0:b9:6c:7a:fa:19:1d:00:e7:32:91:9a: 04:16:2e:ae:d0:8e:b5:37:5d:04:2e:f6:a5:61:0a: 97:38:76:1d:86:44:f6:1e:b7:87:cd:bf:5c:6e:48: 23:eb:52:24:08:97:63:56:0d:98:47:d8:fc:f3:71: 85:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6A:DF:33:89:C6:E5:58:AE:65:AC:A1:97:1A:11:D7:C1:DE:E5:BE X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/01B2AC1E064111E8A62EF586C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.104.0/22 122.252.184.0/21 202.21.128.0/24 202.162.72.0/23 203.57.145.0/24 Signature Algorithm: sha256WithRSAEncryption a3:4c:45:67:03:d3:ba:27:bd:2c:7f:fd:3e:f5:7c:e8:0d:bf: eb:84:52:34:3a:c7:0a:8c:7c:ef:cd:70:94:b1:c3:53:a4:6e: 27:75:1b:83:95:8e:f9:b6:66:92:e2:9c:2e:c8:df:53:fc:06: cb:5c:43:30:3c:d6:48:94:c3:40:50:97:b2:47:b2:3c:21:b6: 37:05:b9:6e:f7:9e:4a:fa:67:70:6c:8b:75:89:ff:9e:ee:5d: a8:68:46:82:da:dd:8e:00:ec:3d:52:32:5a:94:2b:bb:d2:d8: fb:48:bc:e7:b3:2a:ac:00:1d:cc:4e:8f:73:f3:3b:7c:df:f0: f5:5b:b3:0e:bb:c2:ec:59:f1:fb:19:18:f9:b4:e0:e7:1c:1b: 4c:74:1f:b8:57:8f:90:37:45:d0:b4:da:8f:e1:6e:e6:4c:d6: 33:80:e9:44:dd:06:bd:2e:20:5a:3a:e5:69:4a:a8:48:53:4b: 71:6e:d1:fb:91:c2:28:0a:de:02:fc:9c:27:30:58:bf:18:61: d4:27:d7:9e:ee:80:e0:03:8b:84:0d:92:35:bf:39:69:ca:4e: 5a:e1:6b:1e:d9:bd:8a:59:7f:7e:16:42:ec:49:26:db:77:3b: 80:96:4f:0c:5c:c9:a8:44:72:07:6b:1f:fa:0f:bf:be:fe:a0: 7b:25:29:ce -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICF2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjYwNjI2MTcxOTIzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNlYjQ5Yi02YTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK6eS5Io3UZ05J7kMva3sGWCDMzYHK67hHXOpR0KLmDhAb5X0ttrSZjmtCyH S40jddX27YZMzH+Ch+92sO13qZoLiKQaEwJ7N7XxlgwhCDZ6Yp3+VY4D1M3PjUp8 kNWj+D2OZvePwTQ5wgKBYqY/vZMSsxooJEzxk6KBivt8amGaHflmgdXt6BsC1RE+ m9cAN2ZRu6jEjNCKTZhMfQzb60YTkhJ76eJdL8ei1MEY37CLmqhe82KZUWJTy1Ig EFlBp9twsuPwuWx6+hkdAOcykZoEFi6u0I61N10ELvalYQqXOHYdhkT2HreHzb9c bkgj61IkCJdjVg2YR9j883GFaQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFJ9q3zOJ xuVYrmWsoZcaEdfB3uW+MB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTM1RUEvMTlERDQ2NzAwMEFFMTFFOEJDM0ExRjJGQzRGOUFFMDIvMDFCMkFDMUUw NjQxMTFFOEE2MkVGNTg2QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCZ1hoAwQDevy4AwQAyhWAAwQByqJIAwQAyzmRMA0GCSqGSIb3DQEB CwUAA4IBAQCjTEVnA9O6J70sf/0+9XzoDb/rhFI0OscKjHzvzXCUscNTpG4ndRuD lY75tmaS4pwuyN9T/AbLXEMwPNZIlMNAUJeyR7I8IbY3Bblu955K+mdwbIt1if+e 7l2oaEaC2t2OAOw9UjJalCu70tj7SLznsyqsAB3MTo9z8zt83/D1W7MOu8LsWfH7 GRj5tODnHBtMdB+4V4+QN0XQtNqP4W7mTNYzgOlE3Qa9LiBaOuVpSqhIU0txbtH7 kcIoCt4C/JwnMFi/GGHUJ9ee7oDgA4uEDZI1vzlpyk5a4Wse2b2KWX9+FkLsSSbb dzuAlk8MXMmoRHIHax/6D7++/qB7JSnO -----END CERTIFICATE-----Generated at Fri Jul 24 16:18:42 2026 by rpki-client