$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/C2065F2CA5F311E8B54BF03DC4F9AE02.roa File: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (raw, json) Hash identifier: vzjzm42ih0JuLqajby6+Lr3dFdD3i/kb+bMCNKPWSA4= Subject key identifier: CE:8E:FC:A1:3E:12:E7:4A:0F:8B:98:B6:FA:D6:96:40:B8:62:CB:5C Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 1421 Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/C2065F2CA5F311E8B54BF03DC4F9AE02.roa Signing time: Wed 22 Jul 2026 17:18:16 +0000 ROA not before: Wed 22 Jul 2026 17:18:16 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 137925 IP address blocks: 103.117.80.0/24 maxlen: 24 2001:df5:a300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5153 (0x1421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Jul 22 17:18:16 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a60fb58-a96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:73:15:5c:1d:ad:d3:56:35:4c:ea:2d:46:0c: 82:81:64:76:31:9a:23:53:66:e0:8c:ac:12:44:9b: 97:0d:5a:fc:b5:1d:f3:ad:7f:9e:e1:bf:c7:31:a5: fc:12:5f:3b:4d:69:cf:9e:5a:26:5c:4d:66:c2:46: 3a:b4:61:98:55:77:fe:d2:52:84:b8:a8:16:ab:31: 2d:33:d0:d7:d7:70:ee:ac:d0:e1:25:9e:c3:a8:10: 85:85:c6:21:aa:dc:c7:d1:ec:af:e3:c4:71:de:04: b5:fd:53:e3:c1:c7:ae:9b:83:d3:f9:9b:fa:b9:04: 14:0e:0d:81:e7:5f:3a:7e:4a:1a:6f:61:26:4d:e6: 3b:8f:a5:1b:94:cc:68:3f:87:9b:10:12:c8:5c:aa: 30:5a:b7:60:37:52:42:04:d7:33:63:d9:68:b6:85: cb:17:f9:b8:15:9b:5b:6d:52:5b:cc:ce:ad:8f:33: 44:09:a6:cf:10:e5:2c:0b:75:ed:1f:f5:50:b5:eb: 26:c7:1f:49:9b:37:19:31:e5:52:c3:45:19:ba:e3: af:c5:35:c6:11:0d:9a:53:e5:f2:24:02:a4:cc:6d: 35:86:38:dc:74:7d:0a:b9:4e:f3:5b:54:28:e9:1d: 72:7f:d0:c1:80:fb:e2:09:c8:98:66:6b:81:64:aa: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8E:FC:A1:3E:12:E7:4A:0F:8B:98:B6:FA:D6:96:40:B8:62:CB:5C X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/C2065F2CA5F311E8B54BF03DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.117.80.0/24 IPv6: 2001:df5:a300::/48 Signature Algorithm: sha256WithRSAEncryption 54:c7:be:36:45:15:f3:a3:c3:f4:e9:61:3e:1b:28:d4:68:12: f3:70:0c:03:68:0a:d4:4a:7c:dd:b4:18:fe:b1:17:a9:6d:0a: 6b:5f:ab:ae:fa:63:52:4f:b7:f8:c3:fb:59:df:64:ac:8f:a9: 62:6a:f8:29:fe:33:e2:df:de:88:85:64:47:8d:ce:57:9b:ed: 52:05:7f:5c:14:ba:a8:f6:9e:f9:0a:c5:b2:67:8b:a5:3f:16: e9:7a:75:4f:c3:da:be:fd:ac:92:7f:3d:41:60:2c:dc:68:a9: 0a:06:cd:c3:16:9a:28:9d:c3:f9:7d:01:8a:12:8d:f6:64:40: 62:94:a0:95:66:e0:72:40:38:9e:5a:1d:53:6c:00:18:95:e2: e7:83:79:65:5c:2f:d2:81:23:06:d2:18:a0:9a:b3:e9:31:73: d1:2d:b3:70:99:9c:11:af:98:ab:f8:5d:b6:7c:44:a3:13:fa: 83:88:84:26:7c:76:f3:1f:db:28:a1:8d:17:9d:16:69:ef:43: 6f:b6:73:1a:5c:84:13:df:e9:89:3e:f5:d6:b3:02:7a:d2:70: f3:e0:c5:9b:4e:cc:c1:78:4a:27:0f:ca:c6:bf:56:b2:ad:16: 99:d5:be:ac:22:73:62:2d:b1:ea:a5:cf:03:33:78:43:ed:bb: d8:db:dc:af -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICFCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjYwNzIyMTcxODE2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYwZmI1OC1hOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiHMVXB2t01Y1TOotRgyCgWR2MZojU2bgjKwSRJuXDVr8tR3zrX+e4b/HMaX8 El87TWnPnlomXE1mwkY6tGGYVXf+0lKEuKgWqzEtM9DX13DurNDhJZ7DqBCFhcYh qtzH0eyv48Rx3gS1/VPjwceum4PT+Zv6uQQUDg2B5186fkoab2EmTeY7j6UblMxo P4ebEBLIXKowWrdgN1JCBNczY9lotoXLF/m4FZtbbVJbzM6tjzNECabPEOUsC3Xt H/VQtesmxx9JmzcZMeVSw0UZuuOvxTXGEQ2aU+XyJAKkzG01hjjcdH0KuU7zW1Qo 6R1yf9DBgPviCciYZmuBZKrNvQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFM6O/KE+ EudKD4uYtvrWlkC4YstcMB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY0MDYvM0Y2NzBDMENBNUYyMTFFODk3QTc1MDNBQzRGOUFFMDIvQzIwNjVGMkNB NUYzMTFFOEI1NEJGMDNEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ3VQMA8EAgACMAkDBwAgAQ31owAwDQYJKoZIhvcNAQELBQADggEB AFTHvjZFFfOjw/TpYT4bKNRoEvNwDANoCtRKfN20GP6xF6ltCmtfq676Y1JPt/jD +1nfZKyPqWJq+Cn+M+Lf3oiFZEeNzleb7VIFf1wUuqj2nvkKxbJni6U/Ful6dU/D 2r79rJJ/PUFgLNxoqQoGzcMWmiidw/l9AYoSjfZkQGKUoJVm4HJAOJ5aHVNsABiV 4ueDeWVcL9KBIwbSGKCas+kxc9Ets3CZnBGvmKv4XbZ8RKMT+oOIhCZ8dvMf2yih jRedFmnvQ2+2cxpchBPf6Yk+9dazAnrScPPgxZtOzMF4SicPysa/VrKtFpnVvqwi c2ItseqlzwMzeEPtu9jb3K8= -----END CERTIFICATE-----Generated at Fri Jul 24 02:47:16 2026 by rpki-client