$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3E0BA21CEBB211EEA93D9B14C4F9AE02.roa File: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (raw, json) Hash identifier: yxilBFlE1MgXEF3lGJREKxdKcg1wggFTb7Z4QOAKfZc= Subject key identifier: 70:F5:93:7C:B5:16:DF:D8:8E:3D:FF:BD:CC:FB:02:4B:D0:46:7A:55 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 0235 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3E0BA21CEBB211EEA93D9B14C4F9AE02.roa Signing time: Thu 09 Jul 2026 06:31:50 +0000 ROA not before: Thu 09 Jul 2026 06:31:50 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 16509 IP address blocks: 167.103.90.0/24 maxlen: 24 167.103.91.0/24 maxlen: 24 167.103.92.0/24 maxlen: 24 167.103.93.0/24 maxlen: 24 167.103.94.0/24 maxlen: 24 167.103.95.0/24 maxlen: 24 167.103.170.0/24 maxlen: 24 167.103.237.0/24 maxlen: 24 167.103.238.0/24 maxlen: 24 167.103.239.0/24 maxlen: 24 167.103.240.0/24 maxlen: 24 167.103.241.0/24 maxlen: 24 167.103.242.0/24 maxlen: 24 167.103.243.0/24 maxlen: 24 167.103.244.0/24 maxlen: 24 167.103.245.0/24 maxlen: 24 167.103.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Jul 9 06:31:50 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4f4056-a682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:0b:e9:1f:fc:1d:2b:2e:01:1b:5d:6b:8e: 6f:56:58:de:74:b3:88:78:19:da:1f:47:94:03:70: 46:59:78:3a:1e:de:68:0b:e9:04:95:4e:ff:ce:41: 37:f2:08:73:1a:43:cb:6c:af:00:0c:21:ef:64:cb: ac:f9:61:8e:4c:77:01:29:48:fd:27:5e:5e:f1:a5: 33:9f:b6:21:c3:2a:64:50:0f:52:66:93:dc:f7:60: 89:30:0f:64:1f:38:f0:3f:3d:91:f3:ba:ab:62:64: e2:e2:1f:c6:af:2d:98:f7:40:44:c8:8c:ca:64:b4: 82:85:4b:b8:c5:2a:8c:37:41:dc:3e:d2:59:93:93: e3:bf:f6:e4:76:a4:d9:8d:cb:67:6a:80:50:9f:77: b5:f7:ca:ab:f1:89:8a:73:fe:d4:2c:30:e5:23:79: 17:c6:77:1e:fc:02:e0:c1:c1:d7:84:4b:a9:a2:5c: e7:16:77:b9:e4:31:61:45:fd:fe:85:bf:3f:8f:bd: df:a2:86:b9:49:5a:0a:2a:9c:0c:1b:9e:a3:fd:57: 64:f8:4a:ab:40:60:cd:d3:30:c7:3b:0a:c8:81:35: ff:4b:88:1c:4e:70:d5:02:87:06:bc:f3:21:b5:1c: 37:3f:0a:65:f2:e5:93:e4:dd:9f:5f:cb:f9:f6:62: 30:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F5:93:7C:B5:16:DF:D8:8E:3D:FF:BD:CC:FB:02:4B:D0:46:7A:55 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3E0BA21CEBB211EEA93D9B14C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 167.103.90.0-167.103.95.255 167.103.170.0/24 167.103.237.0-167.103.246.255 Signature Algorithm: sha256WithRSAEncryption 5e:10:13:23:13:02:1a:1c:8a:0a:66:c6:1f:48:80:97:93:28: 29:aa:99:81:85:74:6e:61:7b:be:74:c5:16:12:e9:b9:38:2c: e8:00:3c:b2:bf:57:4d:80:db:f6:11:af:97:d9:da:db:65:cf: e6:a3:04:a6:9b:66:6d:28:dd:d2:93:6d:87:e3:44:27:fa:15: 4d:81:c1:07:7f:e1:40:53:9f:e7:a2:06:84:16:83:f5:40:2f: 7e:9b:eb:6b:4c:ec:46:36:1d:86:d8:f7:bd:48:24:58:65:5a: 34:97:c0:15:f5:02:5c:5d:42:d4:6b:ca:35:c0:2d:bc:61:ee: ac:f7:f5:a2:82:1b:8a:ad:9a:68:ae:36:7d:b9:9e:12:7a:45: 44:8d:03:36:64:82:98:76:00:74:d6:9a:cb:56:25:ba:92:67: 49:0c:d3:d3:a6:ca:6c:1b:a8:72:03:a8:8c:3e:a0:f2:ac:d6: 92:a9:6b:c3:0b:aa:ef:1d:d6:df:48:5f:dc:97:5f:ce:31:ee: d9:e1:38:40:82:70:a3:26:9d:1f:e1:9b:8a:eb:17:e5:12:9a: 68:e1:4b:32:5c:7e:16:a5:e4:31:6e:2f:75:a9:3a:cb:d3:9c: bc:48:f0:d0:b4:51:95:9a:f4:06:c8:62:03:ca:6c:72:30:3f: 29:0a:fb:a2 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjYwNzA5MDYzMTUwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmNDA1Ni1hNjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7QL6R/8HSsuARtda45vVljedLOIeBnaH0eUA3BGWXg6Ht5oC+kElU7/zkE3 8ghzGkPLbK8ADCHvZMus+WGOTHcBKUj9J15e8aUzn7YhwypkUA9SZpPc92CJMA9k HzjwPz2R87qrYmTi4h/Gry2Y90BEyIzKZLSChUu4xSqMN0HcPtJZk5Pjv/bkdqTZ jctnaoBQn3e198qr8YmKc/7ULDDlI3kXxnce/ALgwcHXhEupolznFne55DFhRf3+ hb8/j73fooa5SVoKKpwMG56j/Vdk+EqrQGDN0zDHOwrIgTX/S4gcTnDVAocGvPMh tRw3Pwpl8uWT5N2fX8v59mIw0wIDAQABo4ICfDCCAngwHQYDVR0OBBYEFHD1k3y1 Ft/Yjj3/vcz7AkvQRnpVMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcxNjkvNjIzM0REM0VFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvM0UwQkEyMUNF QkIyMTFFRUE5M0Q5QjE0QzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAo BAIAATAiMAwDBAGnZ1oDBAWnZ0ADBACnZ6owDAMEAKdn7QMEAKdn9jANBgkqhkiG 9w0BAQsFAAOCAQEAXhATIxMCGhyKCmbGH0iAl5MoKaqZgYV0bmF7vnTFFhLpuTgs 6AA8sr9XTYDb9hGvl9na22XP5qMEpptmbSjd0pNth+NEJ/oVTYHBB3/hQFOf56IG hBaD9UAvfpvra0zsRjYdhtj3vUgkWGVaNJfAFfUCXF1C1GvKNcAtvGHurPf1ooIb iq2aaK42fbmeEnpFRI0DNmSCmHYAdNaay1YlupJnSQzT06bKbBuocgOojD6g8qzW kqlrwwuq7x3W30hf3JdfzjHu2eE4QIJwoyadH+GbiusX5RKaaOFLMlx+FqXkMW4v dak6y9OcvEjw0LRRlZr0BshiA8pscjA/KQr7og== -----END CERTIFICATE-----Generated at Fri Jul 24 04:16:35 2026 by rpki-client