$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3D937A30EBB211EEA93D9B14C4F9AE02.roa File: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (raw, json) Hash identifier: EoV7X+CPLPt1PwJmt/C6xwl6Rd3EK1Ujxhgn/dIQJh4= Subject key identifier: 19:6C:C1:AE:08:D1:D5:13:63:A7:4E:9F:8F:F2:5D:64:7A:FB:45:47 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 0234 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3D937A30EBB211EEA93D9B14C4F9AE02.roa Signing time: Thu 09 Jul 2026 06:31:48 +0000 ROA not before: Thu 09 Jul 2026 06:31:48 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 14618 IP address blocks: 167.103.90.0/24 maxlen: 24 167.103.91.0/24 maxlen: 24 167.103.92.0/24 maxlen: 24 167.103.93.0/24 maxlen: 24 167.103.94.0/24 maxlen: 24 167.103.95.0/24 maxlen: 24 167.103.170.0/24 maxlen: 24 167.103.237.0/24 maxlen: 24 167.103.238.0/24 maxlen: 24 167.103.239.0/24 maxlen: 24 167.103.240.0/24 maxlen: 24 167.103.241.0/24 maxlen: 24 167.103.242.0/24 maxlen: 24 167.103.243.0/24 maxlen: 24 167.103.244.0/24 maxlen: 24 167.103.245.0/24 maxlen: 24 167.103.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Jul 9 06:31:48 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4f4054-970f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e1:cf:71:12:88:e5:17:b3:0c:c2:53:f7:be: 12:65:7b:6d:48:75:33:5a:31:a3:eb:79:1d:fa:1b: 1d:a5:04:70:ff:ba:bb:c0:a6:db:06:ee:c3:5f:17: 17:92:4d:29:8d:51:ed:71:b4:d4:8a:83:45:a3:d1: 4c:21:ed:69:99:47:a2:4b:97:8a:91:53:bd:2b:fd: c1:47:01:0d:d3:96:9f:c9:33:83:38:8a:84:3c:2d: 03:9e:0e:12:13:c9:2e:15:19:2c:bb:dd:f7:25:b9: ce:55:35:c6:0a:89:28:03:d7:ff:b4:03:47:d1:93: ab:04:f1:a6:36:8c:85:13:b4:fd:a3:49:09:27:5d: 1f:55:ec:8c:3c:1a:b6:5b:a8:68:8c:c8:cf:41:ae: 3a:95:b1:57:1f:98:7a:dd:d5:86:9c:90:32:7a:78: b5:93:63:9e:15:15:75:41:5c:92:2f:ea:80:09:b9: 90:f4:73:c9:cd:a3:70:44:89:ef:b4:8e:0b:92:b8: 21:e8:e2:b7:5a:20:69:89:f8:38:32:1e:0f:b9:68: a5:37:19:13:3f:3e:01:26:e6:62:e9:ff:4f:87:9e: 5d:a3:af:2d:11:38:8c:ff:3d:74:24:b3:44:be:43: dd:71:ef:bc:6d:45:20:aa:27:6f:40:c4:e7:b9:ec: e1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6C:C1:AE:08:D1:D5:13:63:A7:4E:9F:8F:F2:5D:64:7A:FB:45:47 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3D937A30EBB211EEA93D9B14C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 167.103.90.0-167.103.95.255 167.103.170.0/24 167.103.237.0-167.103.246.255 Signature Algorithm: sha256WithRSAEncryption 20:fb:f5:b4:b1:d6:18:0c:5b:df:cf:d7:1a:42:1e:30:e7:29: 9a:46:6a:8b:f9:a0:9f:8b:f9:b8:91:82:16:22:9d:49:00:2e: c1:87:08:2d:35:27:08:14:db:69:fc:80:85:74:e5:e6:a1:d6: 9d:69:f7:05:b3:f7:cd:6c:2a:25:e8:f1:9a:26:41:df:cc:23: 2f:4b:6e:10:6c:29:a1:d9:75:dc:f4:c9:fa:a5:d8:74:e2:6d: 8d:26:7e:c4:f9:e4:94:2e:e2:cb:5b:d8:31:35:9e:5e:7d:7a: 37:6d:18:00:e8:be:45:f7:5a:39:1e:5b:92:5b:46:5b:6f:c5: e0:da:35:03:0b:67:5c:77:88:63:a9:ce:50:2c:68:19:6e:ac: ff:35:e5:77:2b:5c:74:6e:a5:35:f5:a6:0b:10:4e:3f:d1:ca: 20:1b:4e:f4:e6:32:0c:b3:fe:fb:57:ff:98:99:1d:56:bc:9d: a9:63:be:63:ae:20:22:8e:c7:7e:b9:8f:67:28:d3:db:30:4d: d9:40:a6:10:38:37:0b:a6:5a:b9:60:0b:9d:28:33:08:c8:8d: a6:a1:e4:7b:88:93:1c:a1:3d:79:f2:78:07:8b:01:9d:98:a3: 6e:92:ba:85:d4:4e:07:fc:bc:98:b3:6d:6e:52:31:81:a6:23: be:3b:a4:43 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjYwNzA5MDYzMTQ4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmNDA1NC05NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+HPcRKI5RezDMJT974SZXttSHUzWjGj63kd+hsdpQRw/7q7wKbbBu7DXxcX kk0pjVHtcbTUioNFo9FMIe1pmUeiS5eKkVO9K/3BRwEN05afyTODOIqEPC0Dng4S E8kuFRksu933JbnOVTXGCokoA9f/tANH0ZOrBPGmNoyFE7T9o0kJJ10fVeyMPBq2 W6hojMjPQa46lbFXH5h63dWGnJAyeni1k2OeFRV1QVySL+qACbmQ9HPJzaNwRInv tI4Lkrgh6OK3WiBpifg4Mh4PuWilNxkTPz4BJuZi6f9Ph55do68tETiM/z10JLNE vkPdce+8bUUgqidvQMTnuezhOQIDAQABo4ICfDCCAngwHQYDVR0OBBYEFBlswa4I 0dUTY6dOn4/yXWR6+0VHMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcxNjkvNjIzM0REM0VFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvM0Q5MzdBMzBF QkIyMTFFRUE5M0Q5QjE0QzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAo BAIAATAiMAwDBAGnZ1oDBAWnZ0ADBACnZ6owDAMEAKdn7QMEAKdn9jANBgkqhkiG 9w0BAQsFAAOCAQEAIPv1tLHWGAxb38/XGkIeMOcpmkZqi/mgn4v5uJGCFiKdSQAu wYcILTUnCBTbafyAhXTl5qHWnWn3BbP3zWwqJejxmiZB38wjL0tuEGwpodl13PTJ +qXYdOJtjSZ+xPnklC7iy1vYMTWeXn16N20YAOi+RfdaOR5bkltGW2/F4No1Awtn XHeIY6nOUCxoGW6s/zXldytcdG6lNfWmCxBOP9HKIBtO9OYyDLP++1f/mJkdVryd qWO+Y64gIo7HfrmPZyjT2zBN2UCmEDg3C6ZauWALnSgzCMiNpqHke4iTHKE9efJ4 B4sBnZijbpK6hdROB/y8mLNtblIxgaYjvjukQw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:34:28 2026 by rpki-client