$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa File: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (raw, json) Hash identifier: 4Ttg6a+Izn8a70sY4W6bAM3oSgGKBOsCI9uHmrpaOfc= Subject key identifier: F3:E8:6B:A5:0C:6E:06:54:09:F3:05:E2:70:75:0C:35:DD:99:8E:C6 Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 0249 Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa Signing time: Sun 03 May 2026 03:33:51 +0000 ROA not before: Sun 03 May 2026 03:33:51 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 139839 IP address blocks: 103.132.20.0/23 maxlen: 23 103.132.20.0/24 maxlen: 24 103.132.21.0/24 maxlen: 24 2400:f6a0::/32 maxlen: 32 2400:f6a0::/36 maxlen: 36 2400:f6a0:1000::/36 maxlen: 36 2400:f6a0:2000::/36 maxlen: 36 2400:f6a0:3000::/36 maxlen: 36 2400:f6a0:4000::/36 maxlen: 36 2400:f6a0:5000::/36 maxlen: 36 2400:f6a0:6000::/36 maxlen: 36 2400:f6a0:7000::/36 maxlen: 36 2400:f6a0:8000::/36 maxlen: 36 2400:f6a0:a000::/36 maxlen: 36 2400:f6a0:b000::/36 maxlen: 36 2400:f6a0:c000::/36 maxlen: 36 2400:f6a0:d000::/36 maxlen: 36 2400:f6a0:e000::/36 maxlen: 36 2400:f6a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: May 3 03:33:51 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69f6c21e-c659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:ac:0f:d6:22:2d:ca:4a:7d:1d:be:eb:96: 9f:b1:0d:ff:35:10:de:15:85:6c:16:18:24:7a:41: e1:85:1e:ae:48:38:31:84:49:21:e7:af:08:32:58: ef:41:5a:2f:a9:bf:4a:ee:72:0d:d9:0a:a1:af:e9: f5:4f:03:ac:75:1b:79:58:c4:91:78:f2:d3:94:d1: a6:74:7e:26:35:cf:f7:6e:12:0f:41:aa:03:fd:07: 3a:cd:42:ed:dd:2c:e4:2d:88:77:cd:7e:1d:27:72: 1f:b7:5d:93:9d:f3:92:78:83:71:08:85:09:c6:1f: 2b:5f:bd:f4:9a:11:ac:81:ee:16:61:75:d6:95:9c: b9:9b:eb:45:53:52:56:57:0d:e0:bc:28:1c:7f:b6: 96:1c:aa:dd:b7:46:af:16:0a:ee:b9:1c:b9:3d:40: b0:c5:61:a8:6b:83:32:a4:7c:5e:90:3a:aa:06:04: 21:c7:fe:39:17:58:2e:fd:e0:00:21:84:eb:79:2e: ad:5b:43:77:6f:39:5d:9e:a1:41:a9:dd:8c:3d:1f: 1e:53:4b:e7:04:ea:6f:34:83:3d:e2:f7:8e:16:13: 54:2d:58:ed:39:a9:90:47:29:82:06:1e:b4:98:94: 35:5c:c0:b4:6c:63:f3:44:9a:e7:05:12:15:54:89: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E8:6B:A5:0C:6E:06:54:09:F3:05:E2:70:75:0C:35:DD:99:8E:C6 X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.132.20.0/23 IPv6: 2400:f6a0::/32 Signature Algorithm: sha256WithRSAEncryption 9a:70:d8:9a:aa:5c:f0:b4:ae:48:7f:04:6b:38:a4:57:f3:ab: f8:fe:be:7e:7f:2d:3c:32:90:e6:b8:fd:18:0b:3f:bb:4e:6c: 2e:62:00:85:9a:d5:46:9c:90:9d:f9:3b:2a:a6:21:fa:f0:9b: 9a:92:aa:ab:db:63:9d:d9:27:ec:29:de:13:9a:31:a9:bf:5f: ea:3d:0e:43:81:c0:44:1c:c6:75:2f:e5:48:5f:8b:47:c5:70: 33:9a:41:10:f2:d5:71:fe:36:11:28:e0:fd:c9:d0:a3:86:4a: c6:d7:dd:0d:80:24:8b:6a:94:a1:a4:6d:b4:ed:44:59:46:fe: 11:66:f9:70:4b:2f:0d:10:65:52:1d:5d:e7:7c:f5:2d:9f:4a: 08:27:4d:42:63:dd:53:6f:fc:32:ef:d5:10:c9:74:25:c6:8e: 2a:a9:ee:c5:3a:17:d3:c1:05:c2:fd:6f:4d:e7:df:a3:08:b8: 5f:ea:2e:ff:ed:75:ec:79:b7:bd:fd:89:c1:7e:6d:1b:37:31: e0:9c:08:4a:c7:0c:66:d6:9b:75:34:17:a4:26:84:d0:ca:32: 42:19:df:02:fa:41:f7:c7:33:ed:a6:cd:46:4b:1d:f6:82:e1: aa:e5:1c:96:5c:6b:bc:86:f3:1a:cd:ae:78:53:1d:e8:2e:9d: db:a1:ad:ad -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjYwNTAzMDMzMzUxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY2YzIxZS1jNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArt+sD9YiLcpKfR2+65afsQ3/NRDeFYVsFhgkekHhhR6uSDgxhEkh568IMljv QVovqb9K7nIN2Qqhr+n1TwOsdRt5WMSRePLTlNGmdH4mNc/3bhIPQaoD/Qc6zULt 3SzkLYh3zX4dJ3Ift12TnfOSeINxCIUJxh8rX730mhGsge4WYXXWlZy5m+tFU1JW Vw3gvCgcf7aWHKrdt0avFgruuRy5PUCwxWGoa4MypHxekDqqBgQhx/45F1gu/eAA IYTreS6tW0N3bzldnqFBqd2MPR8eU0vnBOpvNIM94veOFhNULVjtOamQRymCBh60 mJQ1XMC0bGPzRJrnBRIVVInqcQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPPoa6UM bgZUCfMF4nB1DDXdmY7GMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTc4OTAvQURFMTMxODZEQURGMTFFREIxRjlENzE5QzRGOUFFMDIvRUM4Q0E3MkNE QUUzMTFFREEwQTZCMDNEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4QUMA0EAgACMAcDBQAkAPagMA0GCSqGSIb3DQEBCwUAA4IBAQCa cNiaqlzwtK5IfwRrOKRX86v4/r5+fy08MpDmuP0YCz+7TmwuYgCFmtVGnJCd+Tsq piH68Juakqqr22Od2SfsKd4TmjGpv1/qPQ5DgcBEHMZ1L+VIX4tHxXAzmkEQ8tVx /jYRKOD9ydCjhkrG190NgCSLapShpG207URZRv4RZvlwSy8NEGVSHV3nfPUtn0oI J01CY91Tb/wy79UQyXQlxo4qqe7FOhfTwQXC/W9N59+jCLhf6i7/7XXsebe9/YnB fm0bNzHgnAhKxwxm1pt1NBekJoTQyjJCGd8C+kH3xzPtps1GSx32guGq5RyWXGu8 hvMaza54Ux3oLp3boa2t -----END CERTIFICATE-----Generated at Wed May 13 03:57:23 2026 by rpki-client