$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/3A73B3A254EB11E7A50F9822C4F9AE02.roa File: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (raw, json) Hash identifier: rbb9vzT6ZdvpjVZ3GXOm6few5Y28G7tYzO6mN3D77lw= Subject key identifier: 9A:B1:AA:B4:3E:CA:85:E9:C2:3B:10:1B:96:5F:99:13:AF:CC:63:FF Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Certificate serial: 2591 Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/3A73B3A254EB11E7A50F9822C4F9AE02.roa Signing time: Mon 08 Jun 2026 16:18:11 +0000 ROA not before: Mon 08 Jun 2026 16:18:11 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 59370 IP address blocks: 103.233.56.0/22 maxlen: 23 2401:2b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9617 (0x2591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Validity Not Before: Jun 8 16:18:11 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a26eb43-98f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b6:34:47:5e:4b:67:4f:9c:d0:83:82:08:99: e4:14:cb:c7:04:33:34:89:3c:79:d3:9f:43:d2:54: b5:0e:8f:19:40:21:91:e7:89:64:89:f7:f8:76:fb: 82:4b:56:7d:fe:17:f8:bd:5a:05:29:db:7e:2b:eb: f3:9b:19:37:20:fb:89:a7:2a:96:ce:73:d0:7e:cb: 34:a9:42:26:81:4f:3f:a1:d7:04:0c:15:56:07:92: da:89:00:86:0f:a1:1b:4b:6e:03:19:e9:69:9b:9f: b4:5a:78:74:1f:30:39:86:94:72:a3:08:30:c8:d0: 5d:01:38:43:df:bb:a0:ee:c6:e0:0e:58:f8:5a:f5: eb:d5:cd:6c:90:44:3a:0a:a7:3b:32:2e:01:cf:fe: 2c:ce:90:a6:94:2a:8b:dd:2d:82:86:5b:83:41:08: bc:7f:4d:08:e4:99:3f:c5:23:b9:e8:65:16:8a:1a: 4a:28:29:4d:a2:bc:73:0e:c9:aa:cf:ce:fd:98:67: 26:21:f4:17:8e:81:70:14:e5:0b:72:ae:45:dd:b2: 75:18:45:93:ed:d5:34:d8:af:a4:38:b2:90:90:cf: dd:c0:f4:e4:dd:71:66:81:68:63:43:2b:50:29:0f: 28:c1:db:b9:6a:44:7d:7b:e1:2e:5e:02:3a:65:da: f7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B1:AA:B4:3E:CA:85:E9:C2:3B:10:1B:96:5F:99:13:AF:CC:63:FF X509v3 Authority Key Identifier: keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/3A73B3A254EB11E7A50F9822C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.233.56.0/22 IPv6: 2401:2b80::/32 Signature Algorithm: sha256WithRSAEncryption 55:3c:dc:68:3e:a6:21:bb:db:2a:f0:7b:fd:b3:81:91:df:22: a0:bc:b9:60:a0:7f:43:6c:57:7d:32:b0:10:a7:d6:ef:26:00: fd:15:39:73:95:90:cc:c1:1a:77:63:98:f1:6b:85:c0:c8:bd: 0a:03:7f:0a:1c:fe:14:bb:05:d6:e6:da:e7:4b:e8:b8:7c:3a: 12:fa:c2:c5:8f:70:95:7e:db:7a:fc:29:18:8a:23:c5:0e:e4: 6d:1d:50:78:7a:3b:c1:fa:28:ef:8c:80:43:2d:aa:01:a0:d5: 30:ac:df:3c:12:94:1b:1f:19:b8:f5:53:64:f2:1c:48:a5:3a: 83:96:93:b9:d1:ad:f2:4d:71:12:e1:34:46:de:31:ac:04:7f: fc:2c:67:14:82:bd:48:d1:4a:3c:a3:9e:62:9e:8c:b3:0f:4e: f9:8a:80:27:57:96:05:90:19:60:89:f2:f9:a7:d0:50:cf:1c: ce:8f:7b:59:70:da:53:c2:3b:8f:b7:40:69:e4:cd:f4:b1:57: 71:c9:a8:0a:a1:03:94:e0:a6:3d:db:da:3c:ec:54:d0:fb:31: 70:f4:dc:db:df:cc:68:54:43:a2:55:1f:fb:b5:46:56:4d:16: 36:5a:3d:42:c3:84:17:4a:88:8f:8e:74:70:e4:60:f1:a6:42: c7:12:8f:74 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICJZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5 RUEwNEQ0RTEwHhcNMjYwNjA4MTYxODExWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTI2ZWI0My05OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rY0R15LZ0+c0IOCCJnkFMvHBDM0iTx5059D0lS1Do8ZQCGR54lkiff4dvuC S1Z9/hf4vVoFKdt+K+vzmxk3IPuJpyqWznPQfss0qUImgU8/odcEDBVWB5LaiQCG D6EbS24DGelpm5+0Wnh0HzA5hpRyowgwyNBdAThD37ug7sbgDlj4WvXr1c1skEQ6 Cqc7Mi4Bz/4szpCmlCqL3S2ChluDQQi8f00I5Jk/xSO56GUWihpKKClNorxzDsmq z879mGcmIfQXjoFwFOULcq5F3bJ1GEWT7dU02K+kOLKQkM/dwPTk3XFmgWhjQytQ KQ8owdu5akR9e+EuXgI6Zdr3mwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJqxqrQ+ yoXpwjsQG5ZfmROvzGP/MB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUU5Q0MvMTQwRTUyN0MzQTg5MTFFNTlFODAyMzYyQzRGOUFFMDIvM0E3M0IzQTI1 NEVCMTFFN0E1MEY5ODIyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ+k4MA0EAgACMAcDBQAkASuAMA0GCSqGSIb3DQEBCwUAA4IBAQBV PNxoPqYhu9sq8Hv9s4GR3yKgvLlgoH9DbFd9MrAQp9bvJgD9FTlzlZDMwRp3Y5jx a4XAyL0KA38KHP4UuwXW5trnS+i4fDoS+sLFj3CVftt6/CkYiiPFDuRtHVB4ejvB +ijvjIBDLaoBoNUwrN88EpQbHxm49VNk8hxIpTqDlpO50a3yTXES4TRG3jGsBH/8 LGcUgr1I0Uo8o55inoyzD075ioAnV5YFkBlgifL5p9BQzxzOj3tZcNpTwjuPt0Bp 5M30sVdxyagKoQOU4KY929o87FTQ+zFw9Nzb38xoVEOiVR/7tUZWTRY2Wj1Cw4QX SoiPjnRw5GDxpkLHEo90 -----END CERTIFICATE-----Generated at Fri Jul 24 19:53:12 2026 by rpki-client