$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/FE5CF51C86FF11F194514C90ABEE528E.roa File: FE5CF51C86FF11F194514C90ABEE528E.roa (raw, json) Hash identifier: P/aNl0Ulk5rA/lL4A3KxGeaENKKe4bsePOgY/uN5wsg= Subject key identifier: A7:9B:76:BC:FE:6E:B2:B8:B4:25:E9:B3:84:AB:E7:3D:81:72:94:FE Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Certificate serial: 1329 Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/FE5CF51C86FF11F194514C90ABEE528E.roa Signing time: Fri 24 Jul 2026 01:35:47 +0000 ROA not before: Fri 24 Jul 2026 01:35:47 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 7600 IP address blocks: 14.102.136.0/21 maxlen: 24 43.247.116.0/22 maxlen: 24 103.237.160.0/22 maxlen: 24 115.42.0.0/20 maxlen: 24 115.42.16.0/20 maxlen: 24 122.129.221.0/24 maxlen: 24 122.129.222.0/24 maxlen: 24 122.129.223.0/24 maxlen: 24 123.136.32.0/19 maxlen: 19 203.18.23.0/24 maxlen: 24 203.25.185.0/24 maxlen: 24 203.57.0.0/23 maxlen: 23 210.56.80.0/20 maxlen: 20 210.56.80.0/21 maxlen: 24 210.56.88.0/21 maxlen: 21 210.56.88.0/24 maxlen: 24 210.56.90.0/24 maxlen: 24 210.56.90.192/26 maxlen: 26 210.56.91.0/24 maxlen: 24 210.56.95.0/24 maxlen: 24 2404:9600::/32 maxlen: 32 2404:9600:300::/40 maxlen: 40 2404:9601::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 01:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4905 (0x1329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Validity Not Before: Jul 24 01:35:47 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6a62c173-c07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f5:c0:2e:88:c7:dc:d2:84:28:6e:3f:19:8a: 9e:39:c5:f8:f6:6f:2e:50:b1:96:22:58:2a:22:4a: 37:ca:1c:da:e4:6c:71:64:60:98:70:ad:4d:5f:e5: 53:9b:fe:0e:34:b9:98:8f:4a:28:c9:10:a5:9d:3f: 75:25:e9:17:6d:44:54:c0:b6:aa:b7:ee:80:ec:d6: c0:eb:66:86:d0:51:43:5c:c6:e4:0f:17:41:1c:0c: 78:74:33:0e:f0:89:a3:f5:90:ac:dc:13:66:a8:4e: 3f:e4:12:f7:63:a7:ae:a3:fc:f0:d9:01:40:f6:a1: 93:82:aa:51:9b:10:9a:92:22:30:16:66:ea:22:60: fa:17:71:38:3b:87:80:16:90:8e:2c:70:ba:a8:c4: 15:fa:dd:7c:c1:e4:99:29:d6:21:b2:73:3a:b8:4c: 26:8b:42:60:7f:a2:24:c8:bf:b1:8a:9f:f2:e3:f9: f2:74:a1:40:44:10:a4:15:74:36:0d:bf:c4:47:d6: 3d:a9:f0:b8:02:a2:a3:82:8a:05:e1:96:56:c1:57: f5:f6:00:be:08:3f:14:a5:bb:8b:dd:de:62:72:f5: 4f:45:2f:79:3c:eb:3f:58:9c:2f:f4:d0:9f:75:3b: d5:b9:bb:bf:72:0d:d5:e6:11:7c:72:11:ab:9f:06: 5f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9B:76:BC:FE:6E:B2:B8:B4:25:E9:B3:84:AB:E7:3D:81:72:94:FE X509v3 Authority Key Identifier: keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/FE5CF51C86FF11F194514C90ABEE528E.roa sbgp-ipAddrBlock: critical IPv4: 14.102.136.0/21 43.247.116.0/22 103.237.160.0/22 115.42.0.0/19 122.129.221.0-122.129.223.255 123.136.32.0/19 203.18.23.0/24 203.25.185.0/24 203.57.0.0/23 210.56.80.0/20 IPv6: 2404:9600::/31 Signature Algorithm: sha256WithRSAEncryption 7b:65:cc:51:0b:bd:01:30:cf:00:6f:ab:74:97:ae:e4:0d:db: 81:6a:21:80:83:2e:a5:4f:d7:73:76:6d:2b:e5:e0:83:b9:82: 98:aa:f7:be:fb:87:03:82:b2:d4:db:4a:83:84:4d:8b:f7:71: f0:0d:11:17:9a:93:fb:cc:86:70:55:9f:16:9f:5f:f3:cc:f9: 70:8b:0e:dc:8a:a0:33:77:2e:ac:48:0b:01:ea:b7:2b:5a:04: 89:ff:2e:55:6e:1a:62:9b:9a:f7:92:66:78:c6:34:b2:49:3c: 05:73:74:c2:cb:63:fc:c7:e4:f4:04:67:ff:e6:2a:b4:db:d5: 61:93:d8:a0:02:9b:6e:fe:42:ae:84:01:f6:a5:d1:65:78:3c: 45:3f:15:fa:ec:0b:91:83:d6:0e:ce:77:fe:fc:f9:db:7a:55: dc:63:bc:31:ff:22:fe:b0:14:f3:01:06:7d:c8:14:e1:b8:77: 3e:dc:eb:74:97:3f:f2:3f:fa:77:a0:62:02:28:27:2a:f9:f4: 51:cc:aa:56:65:50:fe:2e:02:98:d2:05:fd:1a:06:c4:5c:74: 27:54:b4:ec:b6:5a:6a:9e:b0:37:d7:2f:e1:e8:49:e9:4b:fd: 3a:6a:81:45:7b:1a:c5:d5:1b:c7:8c:b3:86:7b:51:48:b8:41: 33:a3:c8:30 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICEykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy M0ZBRUVBMDgwHhcNMjYwNzI0MDEzNTQ3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYzE3My1jMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PXALojH3NKEKG4/GYqeOcX49m8uULGWIlgqIko3yhza5GxxZGCYcK1NX+VT m/4ONLmYj0ooyRClnT91JekXbURUwLaqt+6A7NbA62aG0FFDXMbkDxdBHAx4dDMO 8Imj9ZCs3BNmqE4/5BL3Y6euo/zw2QFA9qGTgqpRmxCakiIwFmbqImD6F3E4O4eA FpCOLHC6qMQV+t18weSZKdYhsnM6uEwmi0Jgf6IkyL+xip/y4/nydKFARBCkFXQ2 Db/ER9Y9qfC4AqKjgooF4ZZWwVf19gC+CD8UpbuL3d5icvVPRS95POs/WJwv9NCf dTvVubu/cg3V5hF8chGrnwZfNwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKebdrz+ brK4tCXps4Sr5z2BcpT+MB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI2OEEvODRGQjRDOUNEREExMTFFOEEyRTc4QTY5QzRGOUFFMDIvRkU1Q0Y1MUM4 NkZGMTFGMTk0NTE0QzkwQUJFRTUyOEUucm9hMGwGCCsGAQUFBwEHAQH/BF0wWzBK BAIAATBEAwQDDmaIAwQCK/d0AwQCZ+2gAwQFcyoAMAwDBAB6gd0DBAV6gcADBAV7 iCADBADLEhcDBADLGbkDBAHLOQADBATSOFAwDQQCAAIwBwMFASQElgAwDQYJKoZI hvcNAQELBQADggEBAHtlzFELvQEwzwBvq3SXruQN24FqIYCDLqVP13N2bSvl4IO5 gpiq9777hwOCstTbSoOETYv3cfANEReak/vMhnBVnxafX/PM+XCLDtyKoDN3LqxI CwHqtytaBIn/LlVuGmKbmveSZnjGNLJJPAVzdMLLY/zH5PQEZ//mKrTb1WGT2KAC m27+Qq6EAfal0WV4PEU/FfrsC5GD1g7Od/78+dt6VdxjvDH/Iv6wFPMBBn3IFOG4 dz7c63SXP/I/+negYgIoJyr59FHMqlZlUP4uApjSBf0aBsRcdCdUtOy2WmqesDfX L+HoSelL/TpqgUV7GsXVG8eMs4Z7UUi4QTOjyDA= -----END CERTIFICATE-----Generated at Fri Jul 24 09:36:51 2026 by rpki-client