$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa File: C443D86A55A311E7896BED09C4F9AE02.roa (raw, json) Hash identifier: hkXxeNyW6zU7R/3tjUaDIgOzon4gIXx8opB7l3LzhSA= Subject key identifier: 39:D9:FB:AA:81:18:77:16:F2:2F:68:72:5C:AF:DC:47:EA:48:91:2D Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1B28 Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa Signing time: Sat 04 Jul 2026 17:16:14 +0000 ROA not before: Sat 04 Jul 2026 17:16:14 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 8360 IP address blocks: 103.85.135.0/24 maxlen: 24 103.119.72.0/23 maxlen: 23 103.119.72.0/24 maxlen: 24 103.119.73.0/24 maxlen: 24 103.233.172.0/23 maxlen: 24 103.233.174.0/23 maxlen: 23 103.233.174.0/24 maxlen: 24 103.233.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6952 (0x1b28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Jul 4 17:16:14 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a493fde-525c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ef:42:88:df:ec:0f:cb:80:6e:a0:15:23:96: 80:2c:48:fd:84:c7:e4:ad:37:9e:8e:4c:1a:ba:17: b2:66:3d:cf:99:6b:f4:a4:6e:00:7e:6e:54:fb:43: 98:6f:0f:b7:f4:54:0f:d7:d5:2c:ac:54:fb:d2:8f: c3:5c:f9:9a:31:4f:84:95:94:10:68:16:dd:54:0d: cb:2a:04:1e:f8:2b:36:f6:56:2a:9c:69:db:ba:d3: cd:44:f5:8b:c5:76:fd:95:33:ef:fd:43:7c:78:be: 59:2d:a2:b8:4b:ac:d6:dd:c7:b7:1e:7d:71:36:bc: 17:0e:ae:16:b8:67:9b:d6:47:d7:e5:f7:6d:5e:29: e1:20:bc:4b:c3:31:be:b2:37:84:37:2f:12:86:70: 86:1a:68:4b:45:7d:7b:72:c9:0e:03:ad:fc:01:c8: 49:0b:00:b2:f4:3f:ec:74:34:e3:60:b7:c2:fb:b3: 11:21:e8:57:ff:4f:04:5d:41:18:f3:ed:c9:2f:c6: 02:42:95:e1:72:30:b3:cc:73:65:00:d9:10:50:db: 41:0c:5c:31:21:e2:05:5a:35:8d:24:03:39:da:15: 5c:3d:ad:ac:46:1d:26:08:e9:20:87:a0:e4:53:dd: 3d:0a:f5:cc:ed:21:52:0f:1e:9c:11:10:64:f0:5e: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D9:FB:AA:81:18:77:16:F2:2F:68:72:5C:AF:DC:47:EA:48:91:2D X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.85.135.0/24 103.119.72.0/23 103.233.172.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:e7:e0:95:28:d1:5b:ad:7e:34:fe:7f:60:ac:2a:99:62:63: b2:64:44:ce:ff:73:b5:a7:b7:48:7e:75:99:e8:65:8f:b0:63: 33:9e:bb:1e:00:04:c1:ab:b2:75:e3:19:bb:72:b9:4f:db:15: 7b:da:dc:4d:ab:08:52:18:1d:33:ce:8b:60:07:af:1c:40:14: ef:81:fa:4b:5e:b9:93:dc:d4:e5:71:a0:5b:69:67:1b:13:e4: 7c:b7:8e:6d:6b:59:1a:69:77:9b:d5:c0:91:42:20:51:76:ab: 27:50:c3:d8:56:0c:15:61:03:a7:0a:cf:4c:34:fc:86:2b:10: 3f:37:a0:e3:31:4b:a1:aa:d6:0c:48:08:4c:7b:65:5d:f8:4a: 7b:a6:7e:2a:bd:f9:a4:48:6a:d1:cc:46:70:2d:0d:1c:d3:d0: 1e:fd:de:c9:46:32:f9:38:ef:b1:08:5a:40:13:5a:c6:29:26: 09:e5:16:47:fc:c8:2d:87:41:0e:9f:0b:5b:ed:48:97:4a:f3: 9d:d0:00:be:cb:4b:ce:3c:14:27:07:dc:35:72:be:2e:7d:92: 92:53:55:02:39:b2:0b:6f:2d:f0:af:59:17:fc:7f:f8:9a:10: 8e:dd:f9:ed:39:c2:ba:5a:3a:1a:88:55:06:03:bc:55:18:0c: 9a:53:4d:24 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICGygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjYwNzA0MTcxNjE0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5M2ZkZS01MjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+9CiN/sD8uAbqAVI5aALEj9hMfkrTeejkwauheyZj3PmWv0pG4Afm5U+0OY bw+39FQP19UsrFT70o/DXPmaMU+ElZQQaBbdVA3LKgQe+Cs29lYqnGnbutPNRPWL xXb9lTPv/UN8eL5ZLaK4S6zW3ce3Hn1xNrwXDq4WuGeb1kfX5fdtXinhILxLwzG+ sjeENy8ShnCGGmhLRX17cskOA638AchJCwCy9D/sdDTjYLfC+7MRIehX/08EXUEY 8+3JL8YCQpXhcjCzzHNlANkQUNtBDFwxIeIFWjWNJAM52hVcPa2sRh0mCOkgh6Dk U909CvXM7SFSDx6cERBk8F6P5QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDnZ+6qB GHcW8i9oclyv3EfqSJEtMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjUzQTUvMjU4MEE4RDY0QjY1MTFFN0I0NjlDMDdBQzRGOUFFMDIvQzQ0M0Q4NkE1 NUEzMTFFNzg5NkJFRDA5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ1WHAwQBZ3dIAwQCZ+msMA0GCSqGSIb3DQEBCwUAA4IBAQBP5+CV KNFbrX40/n9grCqZYmOyZETO/3O1p7dIfnWZ6GWPsGMznrseAATBq7J14xm7crlP 2xV72txNqwhSGB0zzotgB68cQBTvgfpLXrmT3NTlcaBbaWcbE+R8t45ta1kaaXeb 1cCRQiBRdqsnUMPYVgwVYQOnCs9MNPyGKxA/N6DjMUuhqtYMSAhMe2Vd+Ep7pn4q vfmkSGrRzEZwLQ0c09Ae/d7JRjL5OO+xCFpAE1rGKSYJ5RZH/Mgth0EOnwtb7UiX SvOd0AC+y0vOPBQnB9w1cr4ufZKSU1UCObILby3wr1kX/H/4mhCO3fntOcK6Wjoa iFUGA7xVGAyaU00k -----END CERTIFICATE-----Generated at Fri Jul 24 10:59:58 2026 by rpki-client