$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/713C4814F9DC11EBA9C81A44C4F9AE02.roa File: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (raw, json) Hash identifier: lkhGPvHLt5B4SMlhrUjjiqTdeEOWM5w+xJQVTXf+Zdo= Subject key identifier: 3B:C2:81:24:7B:F3:1F:DB:74:B6:6E:CE:E0:E4:ED:4C:5F:E1:AB:8F Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 0614 Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/713C4814F9DC11EBA9C81A44C4F9AE02.roa Signing time: Tue 21 Jul 2026 00:24:56 +0000 ROA not before: Tue 21 Jul 2026 00:24:56 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 142593 IP address blocks: 103.170.138.0/23 maxlen: 23 103.170.138.0/24 maxlen: 24 103.170.139.0/24 maxlen: 24 2407:b2c0::/32 maxlen: 32 2407:b2c0::/36 maxlen: 36 2407:b2c0:1000::/36 maxlen: 36 2407:b2c0:2000::/36 maxlen: 36 2407:b2c0:3000::/36 maxlen: 36 2407:b2c0:4000::/36 maxlen: 36 2407:b2c0:5000::/36 maxlen: 36 2407:b2c0:6000::/36 maxlen: 36 2407:b2c0:7000::/36 maxlen: 36 2407:b2c0:8000::/36 maxlen: 36 2407:b2c0:9000::/36 maxlen: 36 2407:b2c0:a000::/36 maxlen: 36 2407:b2c0:b000::/36 maxlen: 36 2407:b2c0:c000::/36 maxlen: 36 2407:b2c0:d000::/36 maxlen: 36 2407:b2c0:e000::/36 maxlen: 36 2407:b2c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Validity Not Before: Jul 21 00:24:56 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a5ebc58-f809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:89:54:a8:b2:56:0f:58:84:7e:42:08:e5: a1:34:8b:99:2e:e2:58:70:1f:f9:05:e2:dc:29:a2: 8c:9a:07:ba:49:8f:94:1a:d2:59:30:11:3f:4e:28: cd:c4:33:4a:a3:70:b4:37:95:a6:96:84:4a:d9:6f: 9c:f1:59:10:67:c5:cd:6e:56:90:29:51:0f:55:5e: 04:9a:15:1b:87:da:ec:3c:95:9f:c7:59:8f:86:80: 38:68:db:a1:0c:5a:08:68:dd:e4:76:d0:1f:85:3a: b4:f3:e8:4a:12:04:31:89:81:27:ef:34:0a:ca:c6: 5c:34:3a:2b:08:15:8b:f6:f3:79:59:d8:19:c3:19: da:48:3a:80:c6:9c:3d:56:7d:6e:12:63:fc:4d:9b: fe:1c:ab:46:32:9d:1a:f3:1a:1d:c6:b7:bf:13:fe: 5b:4b:3d:76:e4:28:2c:9f:f8:79:9b:79:cf:9d:53: d4:ef:76:7e:3f:30:79:46:aa:62:87:8f:52:1f:89: 90:e2:08:c9:84:fb:74:35:a6:f9:bd:92:3a:e5:1f: 33:9d:a6:bc:03:00:c3:94:77:48:77:c7:eb:06:27: c3:a6:2e:7d:c6:38:9e:3c:85:43:f8:09:42:6c:71: 4b:f5:22:ca:f8:0c:7f:21:87:1f:84:54:ae:6c:b3: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:81:24:7B:F3:1F:DB:74:B6:6E:CE:E0:E4:ED:4C:5F:E1:AB:8F X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/713C4814F9DC11EBA9C81A44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.170.138.0/23 IPv6: 2407:b2c0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:64:18:84:17:80:2a:61:47:8f:b7:f9:1c:3f:c4:c6:e2:86: ee:bb:a9:df:71:b4:af:77:49:d1:61:1f:82:c9:d2:5e:97:9e: 31:34:62:6b:b2:ce:9f:1b:e0:a1:82:a8:0d:5f:22:0e:15:b7: 66:b6:ac:3f:86:88:c1:88:e9:37:5c:d4:2d:a0:1a:d6:f7:9e: fb:14:15:dc:33:89:52:e5:7a:97:8b:6f:ae:ff:e6:0e:e5:72: da:8d:44:33:33:62:aa:45:3a:b8:49:db:d6:81:9c:36:73:9f: 10:4f:96:43:c6:a4:6f:4b:73:40:fd:78:28:e2:c1:77:fe:b9: c6:c9:93:45:c9:40:4d:28:76:a9:48:ba:1e:7a:36:f6:10:a4: 05:26:bd:6f:47:a0:74:15:99:b3:bf:33:28:22:6d:68:00:36: 6c:33:48:37:d7:c0:af:04:33:2d:4a:23:8b:06:93:be:75:36: da:e1:c0:de:2d:90:43:4f:3d:49:ea:d5:55:ac:16:43:fc:66: 1a:47:b2:6a:86:a2:e1:74:22:7c:90:0c:4a:8c:98:e5:ab:71: b8:99:1f:b6:e9:0a:c3:01:4a:f5:26:c0:8f:37:b0:0d:f0:d4: 42:58:9d:cf:03:63:1a:e8:35:b1:d5:40:64:70:8c:37:6b:2b: 19:7b:fa:10 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjYwNzIxMDAyNDU2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlYmM1OC1mODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEuJVKiyVg9YhH5CCOWhNIuZLuJYcB/5BeLcKaKMmge6SY+UGtJZMBE/TijN xDNKo3C0N5WmloRK2W+c8VkQZ8XNblaQKVEPVV4EmhUbh9rsPJWfx1mPhoA4aNuh DFoIaN3kdtAfhTq08+hKEgQxiYEn7zQKysZcNDorCBWL9vN5WdgZwxnaSDqAxpw9 Vn1uEmP8TZv+HKtGMp0a8xodxre/E/5bSz125Cgsn/h5m3nPnVPU73Z+PzB5Rqpi h49SH4mQ4gjJhPt0Nab5vZI65R8znaa8AwDDlHdId8frBifDpi59xjiePIVD+AlC bHFL9SLK+Ax/IYcfhFSubLOHcQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDvCgSR7 8x/bdLZuzuDk7Uxf4auPMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkQ5QjcvMTQ5ODA0OThGOUQ5MTFFQjhEMkIwRTNFQzRGOUFFMDIvNzEzQzQ4MTRG OURDMTFFQkE5QzgxQTQ0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6qKMA0EAgACMAcDBQAkB7LAMA0GCSqGSIb3DQEBCwUAA4IBAQAP ZBiEF4AqYUePt/kcP8TG4obuu6nfcbSvd0nRYR+CydJel54xNGJrss6fG+ChgqgN XyIOFbdmtqw/hojBiOk3XNQtoBrW9577FBXcM4lS5XqXi2+u/+YO5XLajUQzM2Kq RTq4SdvWgZw2c58QT5ZDxqRvS3NA/Xgo4sF3/rnGyZNFyUBNKHapSLoeejb2EKQF Jr1vR6B0FZmzvzMoIm1oADZsM0g318CvBDMtSiOLBpO+dTba4cDeLZBDTz1J6tVV rBZD/GYaR7JqhqLhdCJ8kAxKjJjlq3G4mR+26QrDAUr1JsCPN7AN8NRCWJ3PA2Ma 6DWx1UBkcIw3aysZe/oQ -----END CERTIFICATE-----Generated at Fri Jul 24 10:02:27 2026 by rpki-client