$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/3F4036F4866311F19554097E96A30FBC.roa File: 3F4036F4866311F19554097E96A30FBC.roa (raw, json) Hash identifier: qxGYvx9MsYUIS30VC3H6RMBQwCsyTgqecFA032H6TAg= Subject key identifier: 0C:92:1B:36:18:95:9A:81:2A:C5:81:2A:BC:A4:CB:53:AB:88:CD:EE Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: 0139 Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/3F4036F4866311F19554097E96A30FBC.roa Signing time: Thu 23 Jul 2026 06:53:45 +0000 ROA not before: Thu 23 Jul 2026 06:53:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 50049 IP address blocks: 43.250.52.0/22 maxlen: 22 43.250.52.0/24 maxlen: 24 43.250.53.0/24 maxlen: 24 43.250.54.0/24 maxlen: 24 43.250.55.0/24 maxlen: 24 103.41.176.0/22 maxlen: 22 103.41.176.0/24 maxlen: 24 103.41.177.0/24 maxlen: 24 103.41.178.0/24 maxlen: 24 103.41.179.0/24 maxlen: 24 103.147.152.0/24 maxlen: 24 2406:4fc0::/32 maxlen: 32 2406:4fc0::/35 maxlen: 35 2406:4fc0:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Validity Not Before: Jul 23 06:53:45 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a61ba78-4f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:0d:18:81:ab:68:73:59:fe:74:a1:f9:d9: 8f:64:6d:7b:12:7a:bf:8c:68:4f:14:66:0b:6d:a7: d7:50:26:1b:af:88:c7:45:25:f5:b4:0a:48:dd:42: 07:f2:e8:1f:c9:7f:7d:85:32:50:a8:d1:d6:cd:f2: b8:ac:a3:9d:1f:14:2c:18:9e:a3:46:f0:5f:1c:2c: 7c:a7:1b:eb:b4:c3:4f:7b:7a:3e:bc:0f:2e:cf:f0: 3e:77:07:da:78:e9:1c:ec:bc:b0:7b:77:1b:ad:65: 36:a2:77:9c:53:63:49:bf:bb:f4:7a:2a:70:11:1e: c8:67:b5:02:0b:da:c1:38:f8:01:40:fd:ac:30:f8: 14:de:91:b1:d8:8a:2f:5d:53:cd:41:c1:57:6f:2a: d4:8e:08:cf:66:5f:16:fd:f1:c1:87:f8:d4:28:fc: 5b:48:1e:4f:ec:54:ed:d8:20:45:55:43:99:03:53: e0:51:86:15:21:84:14:89:07:63:f0:b7:04:4f:7c: 34:53:66:af:a1:38:b3:98:10:37:96:fa:36:3c:64: 03:22:36:7a:41:8c:04:2d:f0:af:ce:1d:be:01:84: 46:91:61:19:ea:b4:29:ca:d3:9c:3d:1d:79:e8:bf: be:ea:55:69:db:8f:8e:55:df:6d:95:b2:24:a5:1b: 0f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:92:1B:36:18:95:9A:81:2A:C5:81:2A:BC:A4:CB:53:AB:88:CD:EE X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/3F4036F4866311F19554097E96A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.250.52.0/22 103.41.176.0/22 103.147.152.0/24 IPv6: 2406:4fc0::/32 Signature Algorithm: sha256WithRSAEncryption 30:1b:1c:b7:ab:80:fe:ff:58:8c:a5:52:27:8a:00:8f:3a:6e: fb:a5:67:b5:f9:59:01:d9:77:86:9c:08:d9:b3:30:af:46:16: 0f:9b:29:31:53:dd:d1:b8:70:57:88:74:81:9c:4e:90:26:6e: da:a9:88:b4:c0:f2:1b:85:26:5f:b3:3b:cf:fd:e2:57:41:23: 31:29:b9:dc:f1:34:c9:9a:43:29:08:c6:ca:b3:c3:3d:86:31: 91:f8:8e:ab:3f:20:71:f2:68:11:66:f2:7f:f7:0c:cb:5e:90: ef:da:67:0a:93:e1:af:58:0e:f5:5a:a5:69:4f:ba:a2:a9:3d: 8f:30:70:71:1b:67:ba:69:27:6d:42:34:26:02:31:d9:04:90: d8:c8:42:e7:6b:cf:ff:f2:22:e1:d5:96:00:6a:69:78:8a:b8: 5a:31:e0:eb:27:fd:59:2e:58:38:4a:4f:5e:36:e2:78:d2:c9: bb:ae:17:3d:ec:4a:2a:30:c3:e1:0a:64:c2:e2:cf:91:e2:45: 59:32:35:b9:c7:d3:58:50:1d:07:26:c9:41:39:5b:63:7a:d4: fe:5e:c9:05:67:17:5c:a7:0d:49:06:e3:82:ea:fc:36:f6:5a: bc:92:44:c6:62:2d:b8:74:e5:79:13:e6:97:5f:59:be:1e:98: a2:d1:67:e7 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGNjgxMTAvBgNVBAUTKDYyMEQzOUIzQTE4Mzc5NzNCRDEzMjY5RjJCMDZBQzlC MjczODgyMEQwHhcNMjYwNzIzMDY1MzQ1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxYmE3OC00ZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytINGIGraHNZ/nSh+dmPZG17Enq/jGhPFGYLbafXUCYbr4jHRSX1tApI3UIH 8ugfyX99hTJQqNHWzfK4rKOdHxQsGJ6jRvBfHCx8pxvrtMNPe3o+vA8uz/A+dwfa eOkc7Lywe3cbrWU2onecU2NJv7v0eipwER7IZ7UCC9rBOPgBQP2sMPgU3pGx2Iov XVPNQcFXbyrUjgjPZl8W/fHBh/jUKPxbSB5P7FTt2CBFVUOZA1PgUYYVIYQUiQdj 8LcET3w0U2avoTizmBA3lvo2PGQDIjZ6QYwELfCvzh2+AYRGkWEZ6rQpytOcPR15 6L++6lVp24+OVd9tlbIkpRsPBQIDAQABo4ICezCCAncwHQYDVR0OBBYEFAySGzYY lZqBKsWBKryky1OriM3uMB8GA1UdIwQYMBaAFGINObOhg3lzvRMmnysGrJsnOIIN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC85MkUyNTk2MkRG MjExMUVGODMzRjRGMkNDNEY5QUUwMi9ZZzA1czZHRGVYTzlFeWFmS3dhc215YzRn ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTZGNjgvOTJFMjU5NjJERjIxMTFFRjgzM0Y0RjJDQzRGOUFFMDIvM0Y0MDM2RjQ4 NjYzMTFGMTk1NTQwOTdFOTZBMzBGQkMucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK/o0AwQCZymwAwQAZ5OYMA0EAgACMAcDBQAkBk/AMA0GCSqGSIb3 DQEBCwUAA4IBAQAwGxy3q4D+/1iMpVInigCPOm77pWe1+VkB2XeGnAjZszCvRhYP mykxU93RuHBXiHSBnE6QJm7aqYi0wPIbhSZfszvP/eJXQSMxKbnc8TTJmkMpCMbK s8M9hjGR+I6rPyBx8mgRZvJ/9wzLXpDv2mcKk+GvWA71WqVpT7qiqT2PMHBxG2e6 aSdtQjQmAjHZBJDYyELna8//8iLh1ZYAaml4irhaMeDrJ/1ZLlg4Sk9eNuJ40sm7 rhc97EoqMMPhCmTC4s+R4kVZMjW5x9NYUB0HJslBOVtjetT+XskFZxdcpw1JBuOC 6vw29lq8kkTGYi24dOV5E+aXX1m+Hpii0Wfn -----END CERTIFICATE-----Generated at Fri Jul 24 03:25:40 2026 by rpki-client