$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/ADFF1B80076711F1A8EB0774023D8C67.roa File: ADFF1B80076711F1A8EB0774023D8C67.roa (raw, json) Hash identifier: Ozwp1kQwSuNs6iz+2dHQMlCodRL+rieEB3kAG5gutg4= Subject key identifier: 1F:C6:03:A8:1B:55:08:01:1D:BA:94:9A:A4:66:3F:56:06:F5:51:F6 Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 1083 Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/ADFF1B80076711F1A8EB0774023D8C67.roa Signing time: Fri 08 May 2026 18:21:16 +0000 ROA not before: Fri 08 May 2026 18:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1828 IP address blocks: 103.38.152.0/24 maxlen: 24 103.38.153.0/24 maxlen: 24 103.38.154.0/24 maxlen: 24 103.38.155.0/24 maxlen: 24 111.221.57.0/24 maxlen: 24 111.221.58.0/23 maxlen: 24 202.58.136.0/21 maxlen: 21 2401:5dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4227 (0x1083) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: May 8 18:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69fe299c-aac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:df:11:68:63:30:0d:b2:06:92:f3:3f:30: 8c:11:07:68:f5:7e:de:36:1c:d1:7b:ea:e0:31:c9: b5:42:87:85:a0:55:06:59:f5:8e:f8:dc:c5:dd:14: 80:9b:07:98:35:0e:04:03:20:9b:64:5c:68:ad:c4: a8:e5:08:b4:63:13:c8:5d:ad:ce:9c:33:2e:a2:b6: d4:28:a3:a6:ad:d5:79:02:65:44:bd:79:07:1b:88: bf:af:a3:94:cd:f6:5b:ba:d0:37:2f:7a:1e:89:fb: b3:bc:95:6c:1f:16:f0:22:68:b8:6d:bd:41:38:fc: 10:4f:fd:8b:f0:b4:d3:f4:47:39:89:60:9f:8d:6a: de:2d:94:ec:bd:12:73:80:41:11:31:86:78:19:f5: 34:84:ed:ec:e3:e3:51:9c:78:60:dd:d0:64:a8:72: 88:60:50:ed:37:47:00:d1:47:9f:45:57:c7:61:8f: c1:8d:86:17:24:29:f7:63:00:cc:c8:9a:23:32:21: 16:dd:f7:67:4a:c2:5b:6f:d4:40:fc:cf:b4:ef:e1: 84:af:10:64:27:e3:56:42:c6:ca:a0:9c:a8:83:fb: 91:03:2e:94:44:16:0e:a8:bf:cc:ad:e8:f1:86:f0: 8b:30:06:4d:aa:0b:91:05:e6:6d:93:79:f4:02:58: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C6:03:A8:1B:55:08:01:1D:BA:94:9A:A4:66:3F:56:06:F5:51:F6 X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/ADFF1B80076711F1A8EB0774023D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.38.152.0/22 111.221.57.0-111.221.59.255 202.58.136.0/21 IPv6: 2401:5dc0::/32 Signature Algorithm: sha256WithRSAEncryption 54:2e:88:65:0f:28:de:de:0a:86:37:75:98:8a:13:2c:2b:ee: 5d:c7:f7:63:a6:bd:31:1e:f5:a3:26:8c:bd:63:e3:c5:42:3b: 77:b0:ba:15:52:1c:f4:6f:16:00:a6:c7:4b:9d:ee:e0:11:c4: 03:ae:47:f8:ff:94:c7:33:13:01:75:9d:26:34:1c:b0:74:2e: 3e:27:8f:9f:4f:36:c5:c0:04:52:57:46:aa:e0:53:55:a4:0c: 00:93:b0:35:6a:5c:1e:7a:22:8d:a3:1f:32:31:34:ee:a6:71: 48:57:b7:3a:f0:63:cc:d1:ad:fc:fb:6e:06:f3:a0:e0:a8:ba: ca:03:e8:f9:c0:93:3a:40:b9:67:68:be:26:cc:cc:8f:d0:7c: 09:0e:fe:dc:86:8c:09:66:28:5a:03:30:19:10:2c:c2:42:e0: d5:8a:22:08:35:7d:a8:ba:01:dc:31:6d:0e:15:4d:a0:32:5f: 7f:b4:16:4d:87:6e:3d:2d:03:8e:dd:67:87:2f:21:23:e4:1b: 9e:d3:f9:ce:09:7f:00:56:28:d1:4f:56:ba:f1:cf:8d:bf:b6: 74:d8:c5:c3:94:2d:6b:c7:ca:c4:57:9e:25:25:5d:79:e0:dc: 4a:a0:4f:e6:ef:26:57:79:a8:69:e7:3f:3c:d0:be:b5:7f:8a: 38:9c:40:23 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICEIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjYwNTA4MTgyMTE2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWZlMjk5Yy1hYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOTfEWhjMA2yBpLzPzCMEQdo9X7eNhzRe+rgMcm1QoeFoFUGWfWO+NzF3RSA mweYNQ4EAyCbZFxorcSo5Qi0YxPIXa3OnDMuorbUKKOmrdV5AmVEvXkHG4i/r6OU zfZbutA3L3oeifuzvJVsHxbwImi4bb1BOPwQT/2L8LTT9Ec5iWCfjWreLZTsvRJz gEERMYZ4GfU0hO3s4+NRnHhg3dBkqHKIYFDtN0cA0UefRVfHYY/BjYYXJCn3YwDM yJojMiEW3fdnSsJbb9RA/M+07+GErxBkJ+NWQsbKoJyog/uRAy6URBYOqL/Mrejx hvCLMAZNqguRBeZtk3n0AljDXwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFB/GA6gb VQgBHbqUmqRmP1YG9VH2MB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFMTYvMTc0ODg1NTA1QkIxMTFFOThCMTAzQjEzQzRGOUFFMDIvQURGRjFCODAw NzY3MTFGMUE4RUIwNzc0MDIzRDhDNjcucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAg BAIAATAaAwQCZyaYMAwDBABv3TkDBAJv3TgDBAPKOogwDQQCAAIwBwMFACQBXcAw DQYJKoZIhvcNAQELBQADggEBAFQuiGUPKN7eCoY3dZiKEywr7l3H92OmvTEe9aMm jL1j48VCO3ewuhVSHPRvFgCmx0ud7uARxAOuR/j/lMczEwF1nSY0HLB0Lj4nj59P NsXABFJXRqrgU1WkDACTsDVqXB56Io2jHzIxNO6mcUhXtzrwY8zRrfz7bgbzoOCo usoD6PnAkzpAuWdovibMzI/QfAkO/tyGjAlmKFoDMBkQLMJC4NWKIgg1fai6Adwx bQ4VTaAyX3+0Fk2Hbj0tA47dZ4cvISPkG57T+c4JfwBWKNFPVrrxz42/tnTYxcOU LWvHysRXniUlXXng3EqgT+bvJld5qGnnPzzQvrV/ijicQCM= -----END CERTIFICATE-----Generated at Wed May 13 08:57:51 2026 by rpki-client