$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa File: CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa (raw, json) Hash identifier: lK3L1Hfg0SIrV8H3CTrHwN37liNg5AnBASN1Z5K7YKs= Subject key identifier: B8:D8:5C:A2:B1:1F:DA:75:A8:22:DE:04:38:49:36:1E:24:95:0A:EC Certificate issuer: /CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Certificate serial: 0A02 Authority key identifier: 27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa Signing time: Tue 30 Jun 2026 20:25:52 +0000 ROA not before: Tue 30 Jun 2026 20:25:52 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 140678 IP address blocks: 103.151.174.0/24 maxlen: 24 2001:df3:ce80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2562 (0xa02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3FD, serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Validity Not Before: Jun 30 20:25:52 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a442650-448e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:9b:5d:35:eb:20:09:f0:2f:ec:61:6c:57: 74:f0:d1:fe:5d:13:d1:e0:2f:27:d8:56:64:dd:5a: 9c:22:c6:63:f8:e5:eb:a6:b1:0d:c7:f5:0e:21:7c: c8:8a:81:b0:21:35:3b:56:31:ff:4b:b6:09:e1:45: 44:f8:21:ed:c3:0a:9d:3b:c6:5c:8f:8d:ff:ca:12: 8d:0e:88:78:a5:a1:53:8f:5d:7c:b2:6a:88:a2:a6: 19:31:30:16:c8:c1:6a:90:55:03:4c:6e:24:df:b4: 55:2e:0a:f3:f3:fe:89:3d:9e:47:ee:fa:f5:c7:ee: dd:47:cf:97:71:48:9d:42:7d:77:25:de:4b:bc:6e: 85:6a:48:f4:29:23:5c:d3:72:d9:32:8a:9d:88:f0: 2e:61:7a:21:3d:2c:f5:0f:f2:23:36:3f:eb:bc:cf: fb:a7:a8:f5:09:08:70:33:97:3e:ab:5c:cc:f7:6e: 4a:c2:8f:56:eb:76:f6:9b:f1:09:86:f5:30:80:a3: 6a:37:57:08:db:7b:cd:ff:b3:f8:59:34:71:d9:f0: bf:b0:72:4c:cd:13:f3:e1:cf:43:7c:ce:89:54:79: 20:5b:98:04:1a:1e:e7:fb:9f:42:87:7c:ad:10:37: 2c:ec:88:ba:96:8e:31:05:bf:ca:59:e3:f6:d9:93: cc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D8:5C:A2:B1:1F:DA:75:A8:22:DE:04:38:49:36:1E:24:95:0A:EC X509v3 Authority Key Identifier: keyid:27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.151.174.0/24 IPv6: 2001:df3:ce80::/48 Signature Algorithm: sha256WithRSAEncryption 9d:4a:d1:15:78:01:4c:28:bc:04:2b:7c:cb:52:4f:dc:49:10: 6e:7b:d9:fa:a5:42:06:da:df:d0:49:53:0c:11:95:6f:1e:e4: eb:83:95:4a:e8:34:97:0f:5f:ff:4c:2b:63:b7:c2:3f:ed:7c: eb:e5:99:62:8c:88:b4:9b:4a:4f:a0:76:ee:ce:95:56:d1:5d: cf:f3:be:5d:7c:5c:97:91:1c:79:bb:a9:53:1e:c7:43:4d:fb: ec:82:5b:b1:39:fd:ea:b7:a6:8e:0c:69:c7:51:9b:5b:e1:53: 73:ca:9f:24:8f:e8:95:b7:f7:4a:62:dc:af:01:15:44:d2:ab: 12:da:7f:c2:a6:3c:d9:5a:1e:b1:d1:fb:b2:a5:1f:da:02:43: 5f:e7:7b:5e:a4:eb:c0:fe:60:3e:9d:f1:a8:e0:e5:02:9a:6e: 80:1e:a8:df:8d:03:4e:03:f2:be:b9:14:ec:0f:7b:4a:88:25: db:f7:33:72:73:7f:e8:b0:0e:b4:0f:3c:cb:56:f5:05:f2:44: 30:44:ee:88:9e:b4:1f:86:a0:f8:28:4b:fc:5f:05:2b:e0:44: 75:4f:36:d9:57:04:ba:e3:6e:b7:53:df:b2:66:80:e8:a9:86: 0a:e3:9c:6a:e4:43:31:45:19:8d:1f:f2:8d:82:5d:67:4f:5d: a5:87:b6:43 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRkQxMTAvBgNVBAUTKDI3REQ4QkJCOEZCNUZBQ0RDMTlGMjlEM0VDMjc0NUQ1 MTEwRDhBOUYwHhcNMjYwNjMwMjAyNTUyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0MjY1MC00NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtGbXTXrIAnwL+xhbFd08NH+XRPR4C8n2FZk3VqcIsZj+OXrprENx/UOIXzI ioGwITU7VjH/S7YJ4UVE+CHtwwqdO8Zcj43/yhKNDoh4paFTj118smqIoqYZMTAW yMFqkFUDTG4k37RVLgrz8/6JPZ5H7vr1x+7dR8+XcUidQn13Jd5LvG6Fakj0KSNc 03LZMoqdiPAuYXohPSz1D/IjNj/rvM/7p6j1CQhwM5c+q1zM925Kwo9W63b2m/EJ hvUwgKNqN1cI23vN/7P4WTRx2fC/sHJMzRPz4c9DfM6JVHkgW5gEGh7n+59Ch3yt EDcs7Ii6lo4xBb/KWeP22ZPMCQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLjYXKKx H9p1qCLeBDhJNh4klQrsMB8GA1UdIwQYMBaAFCfdi7uPtfrNwZ8p0+wnRdURDYqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGRC9BNkIzRDQ3ODlG MEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1zM0JueW5UN0NkRjFSRU5p cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o5Mkx1NC0xLXMzQm55blQ3Q2RGMVJFTmlwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMzRkQvQTZCM0Q0Nzg5RjBFMTFFQTgwQjc1QjJDQzRGOUFFMDIvQ0MxREZCQUM5 RjBGMTFFQUE0NDE5RDJEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ5euMA8EAgACMAkDBwAgAQ3zzoAwDQYJKoZIhvcNAQELBQADggEB AJ1K0RV4AUwovAQrfMtST9xJEG572fqlQgba39BJUwwRlW8e5OuDlUroNJcPX/9M K2O3wj/tfOvlmWKMiLSbSk+gdu7OlVbRXc/zvl18XJeRHHm7qVMex0NN++yCW7E5 /eq3po4MacdRm1vhU3PKnySP6JW390pi3K8BFUTSqxLaf8KmPNlaHrHR+7KlH9oC Q1/ne16k68D+YD6d8ajg5QKaboAeqN+NA04D8r65FOwPe0qIJdv3M3Jzf+iwDrQP PMtW9QXyRDBE7oietB+GoPgoS/xfBSvgRHVPNtlXBLrjbrdT37JmgOiphgrjnGrk QzFFGY0f8o2CXWdPXaWHtkM= -----END CERTIFICATE-----Generated at Fri Jul 24 04:01:17 2026 by rpki-client