$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/6AB849742C9C11EBB49A3A32C4F9AE02.roa File: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (raw, json) Hash identifier: JhX0nZ0CCIVHodHlqLs92wmDOp8x0s4aAu3q2TCcgqw= Subject key identifier: 8B:AB:7E:A7:77:4D:B5:10:8B:C9:D9:EB:42:A2:A4:66:C2:34:6E:7B Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Certificate serial: 0871 Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/6AB849742C9C11EBB49A3A32C4F9AE02.roa Signing time: Mon 31 Aug 2026 21:41:03 +0000 ROA not before: Mon 31 Aug 2026 21:41:03 +0000 ROA not after: Fri 01 Jan 2027 00:00:00 +0000 asID: 45178 IP address blocks: 103.28.132.0/22 maxlen: 24 103.112.164.0/22 maxlen: 22 103.112.164.0/24 maxlen: 24 103.112.165.0/24 maxlen: 24 103.112.166.0/24 maxlen: 24 103.112.167.0/24 maxlen: 24 111.125.152.0/21 maxlen: 21 111.125.152.0/22 maxlen: 22 111.125.152.0/23 maxlen: 23 111.125.152.0/24 maxlen: 24 111.125.153.0/24 maxlen: 24 111.125.154.0/24 maxlen: 24 111.125.155.0/24 maxlen: 24 111.125.156.0/24 maxlen: 24 111.125.157.0/24 maxlen: 24 111.125.158.0/24 maxlen: 24 111.125.159.0/24 maxlen: 24 116.206.188.0/24 maxlen: 24 116.206.189.0/24 maxlen: 24 116.206.190.0/24 maxlen: 24 203.174.27.0/24 maxlen: 24 2406:d100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Validity Not Before: Aug 31 21:41:03 2026 GMT Not After : Jan 1 00:00:00 2027 GMT Subject: CN=6a95f4ef-5d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6b:16:53:1d:e6:5b:67:f6:f0:79:7b:2e:60: 7b:8d:15:14:89:7c:5c:d7:88:69:9a:fd:f6:1e:2e: 41:fa:80:eb:d1:4b:c6:d1:fb:74:14:31:51:b2:54: 5b:14:6b:4f:c1:9f:c7:68:e6:50:66:6a:e7:d7:39: 0e:73:67:fe:0b:f0:e4:a5:a9:03:f2:57:b6:27:bd: be:b9:40:86:2a:7f:06:b7:0e:4f:fa:72:75:17:b4: 90:90:73:23:9b:31:6a:67:13:15:7c:43:1a:c5:99: 45:eb:e9:dd:4b:b5:09:9b:57:c5:05:94:a3:43:fd: c2:4c:41:dc:30:37:b7:f0:80:db:b0:a2:83:06:a7: 25:8a:bd:8b:4d:6e:76:9c:bb:15:e8:38:6f:74:f1: 1e:b6:e2:6f:cc:dc:0c:3e:f9:08:7a:52:86:10:62: a9:2d:a5:37:93:ae:dc:9e:54:5c:cf:32:f5:b8:8d: e4:d6:56:aa:6d:d4:37:76:27:0e:3d:85:cb:38:0f: 4d:2a:18:40:f7:96:d1:75:e0:96:bc:bc:f4:bb:69: 49:c0:5b:84:74:e8:e2:02:58:4d:38:86:f3:1c:e1: 63:23:88:fd:05:5a:c2:e9:e8:79:0a:50:58:bb:f3: ee:14:19:c7:bd:11:90:15:10:18:d0:b8:a1:9b:dd: 76:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AB:7E:A7:77:4D:B5:10:8B:C9:D9:EB:42:A2:A4:66:C2:34:6E:7B X509v3 Authority Key Identifier: keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/6AB849742C9C11EBB49A3A32C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.28.132.0/22 103.112.164.0/22 111.125.152.0/21 116.206.188.0-116.206.190.255 203.174.27.0/24 IPv6: 2406:d100::/32 Signature Algorithm: sha256WithRSAEncryption cf:e8:02:31:86:33:e2:87:37:2a:88:42:0b:93:df:3a:8e:74: 29:e2:c2:1b:05:fa:3b:d9:0d:dd:bc:01:e9:8b:fc:48:ad:fc: f5:14:e6:8d:20:90:d7:d4:56:73:e4:6a:f1:6f:51:ca:d7:2e: 26:84:bf:18:f2:29:e2:ac:27:81:73:e1:ac:03:4c:af:de:8b: 52:18:52:9f:78:56:fc:e3:4f:bb:79:6b:dd:12:89:4d:ae:d1: fe:35:5d:5a:a3:c8:69:8b:e9:09:04:bf:31:71:cc:4a:89:c1: 6a:4e:c8:23:88:a2:07:e6:7c:9c:9a:56:ed:35:d4:79:ee:b2: 19:10:a4:f8:d7:dd:01:d4:23:a4:e3:30:24:e4:04:cf:0b:31: 7f:40:64:45:a0:37:f7:1e:19:93:a8:0a:0e:73:3c:6d:77:88: f6:81:56:72:b8:a9:04:f6:1b:94:d2:63:5b:55:49:92:c3:d1: 29:c5:f4:84:ff:fd:55:4c:fb:c6:b0:db:ab:0a:c5:23:2c:10: 56:05:95:5a:f6:1d:55:6d:7a:d3:99:02:d6:7c:70:14:fe:aa: d9:00:a4:98:8a:9c:6d:c1:93:d9:fd:20:60:14:b8:74:60:30: 24:8d:f2:36:f1:76:f6:b1:61:ee:a5:38:77:56:77:cd:ec:52: df:fd:81:15 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGODcxMTAvBgNVBAUTKDdBNTQ3NDEyM0M1NDg4MTdFMjVGMzQ4NENDMjZCNjBC MDY0MUJENjkwHhcNMjYwODMxMjE0MTAzWhcNMjcwMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1ZjRlZi01ZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GsWUx3mW2f28Hl7LmB7jRUUiXxc14hpmv32Hi5B+oDr0UvG0ft0FDFRslRb FGtPwZ/HaOZQZmrn1zkOc2f+C/DkpakD8le2J72+uUCGKn8Gtw5P+nJ1F7SQkHMj mzFqZxMVfEMaxZlF6+ndS7UJm1fFBZSjQ/3CTEHcMDe38IDbsKKDBqclir2LTW52 nLsV6DhvdPEetuJvzNwMPvkIelKGEGKpLaU3k67cnlRczzL1uI3k1laqbdQ3dicO PYXLOA9NKhhA95bRdeCWvLz0u2lJwFuEdOjiAlhNOIbzHOFjI4j9BVrC6eh5ClBY u/PuFBnHvRGQFRAY0Lihm912jQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFIurfqd3 TbUQi8nZ60KipGbCNG57MB8GA1UdIwQYMBaAFHpUdBI8VIgX4l80hMwmtgsGQb1p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9CMUNENzFGMDI2 ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlCZmlYelNFekNhMkN3WkJ2 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsUjBFanhVaUJmaVh6U0V6Q2EyQ3daQnZXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZGODcvQjFDRDcxRjAyNjg4MTFFQkJFN0M2ODJCQzRGOUFFMDIvNkFCODQ5NzQy QzlDMTFFQkI0OUEzQTMyQzRGOUFFMDIucm9hME4GCCsGAQUFBwEHAQH/BD8wPTAs BAIAATAmAwQCZxyEAwQCZ3CkAwQDb32YMAwDBAJ0zrwDBAB0zr4DBADLrhswDQQC AAIwBwMFACQG0QAwDQYJKoZIhvcNAQELBQADggEBAM/oAjGGM+KHNyqIQguT3zqO dCniwhsF+jvZDd28AemL/Eit/PUU5o0gkNfUVnPkavFvUcrXLiaEvxjyKeKsJ4Fz 4awDTK/ei1IYUp94VvzjT7t5a90SiU2u0f41XVqjyGmL6QkEvzFxzEqJwWpOyCOI ogfmfJyaVu011HnushkQpPjX3QHUI6TjMCTkBM8LMX9AZEWgN/ceGZOoCg5zPG13 iPaBVnK4qQT2G5TSY1tVSZLD0SnF9IT//VVM+8aw26sKxSMsEFYFlVr2HVVtetOZ AtZ8cBT+qtkApJiKnG3Bk9n9IGAUuHRgMCSN8jbxdvaxYe6lOHdWd83sUt/9gRU= -----END CERTIFICATE-----Generated at Wed Sep 23 19:35:00 2026 by rpki-client