$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3B8DEBA06FD511F0BF33C829C4F9AE02.roa File: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (raw, json) Hash identifier: Et35taMHrzzZx//1uz1X2k2usz0PCpjA6ZgM0w/qGlc= Subject key identifier: 98:D8:E9:D9:9E:50:28:35:D0:98:57:E0:75:A3:56:16:4E:AC:A2:7E Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 0236 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3B8DEBA06FD511F0BF33C829C4F9AE02.roa Signing time: Thu 09 Jul 2026 06:31:52 +0000 ROA not before: Thu 09 Jul 2026 06:31:52 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 22616 IP address blocks: 167.103.148.0/24 maxlen: 24 167.103.149.0/24 maxlen: 24 167.103.150.0/24 maxlen: 24 167.103.151.0/24 maxlen: 24 167.103.152.0/24 maxlen: 24 167.103.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Jul 9 06:31:52 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4f4058-9d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:21:ee:79:d1:ec:e8:65:a9:c1:75:44:24: 89:3e:61:04:37:dd:d5:51:b8:13:03:93:ab:4c:8a: f3:eb:51:bf:b5:2a:fb:23:98:4f:a0:fc:63:c0:92: 77:13:c8:bc:11:f7:72:25:14:66:00:3d:7a:6f:08: 92:fb:6b:18:0d:21:48:a2:c0:98:2e:a6:82:e1:1c: 83:e0:8f:0b:f7:14:42:85:90:91:f2:8c:56:2e:ff: c3:07:fc:86:ad:fe:96:92:f2:5e:04:d0:c9:50:99: 2e:b7:4f:9c:18:7d:cc:d3:d8:db:43:c5:fe:1e:3b: d8:45:f9:76:9d:69:59:39:c8:91:d0:d8:e3:84:ba: 71:5e:c0:39:d5:8a:fe:42:e3:80:50:5d:3c:fb:15: e2:da:cf:c7:24:5e:11:70:ed:e6:22:e1:e5:4f:f5: a9:0f:d4:86:41:32:a2:f6:dd:d7:69:b3:fb:87:e8: 0e:be:ca:b2:8f:5b:a6:87:95:74:d3:19:20:19:58: 49:fa:38:06:b3:54:e0:ba:fa:b0:a5:50:6a:4f:bc: da:34:f6:38:d4:c7:64:bc:f1:4d:5a:1f:c2:3a:e3: 0b:9b:1b:9a:21:18:5e:46:c9:f6:c0:c7:a4:1b:25: 77:bd:31:16:15:fe:c6:1c:3d:f0:6b:fe:1a:5f:7c: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D8:E9:D9:9E:50:28:35:D0:98:57:E0:75:A3:56:16:4E:AC:A2:7E X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3B8DEBA06FD511F0BF33C829C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 167.103.148.0-167.103.153.255 Signature Algorithm: sha256WithRSAEncryption 5f:4f:57:5b:43:16:04:43:e6:4c:02:28:60:b9:04:9b:a9:42: 7c:df:1b:f6:86:93:51:f1:c5:06:1c:25:d7:13:52:ae:dc:58: d4:31:ba:66:37:63:aa:36:5d:ad:3c:b1:c8:4c:7a:7b:eb:d5: 43:ea:3c:2e:31:58:ac:89:e9:66:cf:07:49:a0:93:8f:9e:e1: 2e:e6:e6:80:f3:dc:5f:b7:09:63:5d:d3:20:06:9b:bc:d9:52: c5:1d:4e:17:b0:34:28:bf:5e:fe:7d:ab:94:39:0c:27:0c:01: c9:99:5b:f7:3a:98:f0:74:59:e7:10:83:56:70:2f:67:ce:cf: 73:d0:2e:23:f9:55:eb:fd:44:ca:18:1c:60:5f:b9:70:c6:5f: 3c:00:fb:15:ae:26:ac:a3:de:2e:5d:70:ea:7f:f4:dc:8d:18: e9:46:b7:56:79:a5:a1:7f:a8:48:2d:6d:a5:de:a8:26:c4:74: 2e:6a:d8:5b:7a:e7:cf:dc:84:03:6c:79:32:ce:88:87:48:86: 8d:be:33:d6:8a:7f:7f:e6:a3:ed:22:a0:17:5e:38:fd:9a:7c: 35:1e:58:c3:92:9d:2a:8d:9d:cc:10:45:65:8d:4c:28:f9:6f: 6c:22:78:b0:47:07:9c:7c:de:fd:5b:1b:72:43:49:45:34:4d: fb:b0:19:65 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjYwNzA5MDYzMTUyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmNDA1OC05ZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGkh7nnR7OhlqcF1RCSJPmEEN93VUbgTA5OrTIrz61G/tSr7I5hPoPxjwJJ3 E8i8EfdyJRRmAD16bwiS+2sYDSFIosCYLqaC4RyD4I8L9xRChZCR8oxWLv/DB/yG rf6WkvJeBNDJUJkut0+cGH3M09jbQ8X+HjvYRfl2nWlZOciR0NjjhLpxXsA51Yr+ QuOAUF08+xXi2s/HJF4RcO3mIuHlT/WpD9SGQTKi9t3XabP7h+gOvsqyj1umh5V0 0xkgGVhJ+jgGs1TguvqwpVBqT7zaNPY41MdkvPFNWh/COuMLmxuaIRheRsn2wMek GyV3vTEWFf7GHD3wa/4aX3xUOwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFJjY6dme UCg10JhX4HWjVhZOrKJ+MB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcxNjkvNjIzM0REM0VFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvM0I4REVCQTA2 RkQ1MTFGMEJGMzNDODI5QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAKnZ5QDBAGnZ5gwDQYJKoZIhvcNAQELBQADggEBAF9PV1tDFgRD 5kwCKGC5BJupQnzfG/aGk1HxxQYcJdcTUq7cWNQxumY3Y6o2Xa08schMenvr1UPq PC4xWKyJ6WbPB0mgk4+e4S7m5oDz3F+3CWNd0yAGm7zZUsUdThewNCi/Xv59q5Q5 DCcMAcmZW/c6mPB0WecQg1ZwL2fOz3PQLiP5Vev9RMoYHGBfuXDGXzwA+xWuJqyj 3i5dcOp/9NyNGOlGt1Z5paF/qEgtbaXeqCbEdC5q2Ft658/chANseTLOiIdIho2+ M9aKf3/mo+0ioBdeOP2afDUeWMOSnSqNncwQRWWNTCj5b2wieLBHB5x83v1bG3JD SUU0TfuwGWU= -----END CERTIFICATE-----Generated at Fri Jul 24 05:10:25 2026 by rpki-client