$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa File: 324967826D8D11EE9883B985C4F9AE02.roa (raw, json) Hash identifier: FdVP/EbnoWbW+SwswO9IBvz4Tx/t0gGhpNr1OdlhBmA= Subject key identifier: 26:5C:F8:8E:46:12:4F:69:77:7F:63:81:58:3B:EF:8A:C2:7A:88:D8 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 0219 Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa Signing time: Mon 22 Jun 2026 09:04:08 +0000 ROA not before: Mon 22 Jun 2026 09:04:08 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 139053 IP address blocks: 103.138.250.0/24 maxlen: 24 103.138.251.0/24 maxlen: 24 2001:df0:5e80::/48 maxlen: 48 2402:ba0::/32 maxlen: 32 2402:ba0::/48 maxlen: 48 2402:ba0:a::/48 maxlen: 48 2402:ba0:1000::/36 maxlen: 40 2402:ba0:a000::/36 maxlen: 40 2402:ba0:c000::/36 maxlen: 44 2402:ba0:face::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: Jun 22 09:04:08 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a38fa88-4dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:10:fb:17:2a:5a:0b:9e:f9:b3:9a:ba:8d:41: f0:4e:06:1a:c4:d0:38:39:f8:29:7d:b6:ff:f7:fe: 12:7b:5d:c5:73:fb:f6:c9:5d:00:c0:9b:e7:71:1a: 24:fd:37:ca:60:41:34:a9:9c:2d:43:c9:4d:96:57: 91:b0:c5:a9:4c:a0:d0:b3:59:1c:68:ec:15:c9:c8: de:3e:4b:d1:72:c7:c1:e4:48:d6:b6:99:77:8b:b7: c9:1a:29:97:b2:0d:56:9d:5e:b3:fc:17:38:03:1e: 32:f2:52:d3:1c:15:ea:32:e3:70:fb:b8:1d:4a:4d: a1:a2:ee:6b:08:e2:3a:a9:16:fb:b0:fd:f0:03:42: 2b:f0:5d:c1:ce:7d:9d:4f:93:92:f4:7d:ab:67:e1: 0d:28:ad:f0:db:47:42:02:16:9b:d0:10:f7:6b:4a: 58:f4:48:99:7e:8a:f1:af:d0:c5:d2:9c:37:b6:e1: 80:29:c7:a4:a6:99:65:15:aa:2e:65:3f:61:22:2c: 3a:88:51:06:0f:c4:ac:4d:68:62:1f:e3:38:c6:56: 82:7e:5f:da:65:ae:21:35:3f:44:6b:c5:ea:db:ec: 00:b6:f3:3e:df:d8:9c:58:31:cd:cc:c9:3e:bf:85: e8:99:18:78:bf:a6:31:24:73:9f:e4:47:92:11:d0: 09:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5C:F8:8E:46:12:4F:69:77:7F:63:81:58:3B:EF:8A:C2:7A:88:D8 X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.250.0/23 IPv6: 2001:df0:5e80::/48 2402:ba0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:4f:59:c5:6c:78:3f:dd:3c:31:32:ff:00:1a:1e:0a:0b:89: 1c:6e:f9:a8:af:10:7b:b1:1f:f2:78:27:25:40:c5:4f:b8:fc: 6a:99:86:a2:94:01:bd:34:90:21:d3:25:fe:ec:e8:46:70:9c: 08:d5:ed:25:47:07:23:74:17:ec:89:17:a7:41:79:6a:43:c0: 07:ce:3d:47:91:b0:ec:ce:5f:2e:c2:55:4d:b6:67:0c:c7:32: 5f:bd:8b:d8:02:06:a8:e3:20:39:93:5b:58:8a:df:7f:ce:2c: 1c:54:b2:9d:f9:1c:f6:1e:7b:1b:21:ce:a0:86:36:d0:4f:be: 47:2d:ca:6f:6d:d1:5f:7b:2d:76:d9:c0:a7:f1:1e:9e:dc:08: b6:32:31:28:62:9a:39:19:d4:99:d1:42:0f:15:97:87:f0:93: e8:e0:be:1d:16:58:52:15:29:9f:45:1e:7e:bc:30:9d:9e:6a: 59:c9:8b:4a:5d:7e:0d:f2:22:1f:b0:af:c7:a9:1f:62:6e:c8: df:54:b9:fb:d4:c1:36:8f:26:05:2e:a5:27:2e:48:9c:c4:7a: ee:c4:0d:b2:18:6d:88:6d:28:41:dd:04:ba:18:bc:54:30:de: cf:46:fd:b3:03:a2:29:c1:c0:8f:76:d8:be:bb:b0:21:3a:c1: 63:ca:a5:ce -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjYwNjIyMDkwNDA4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM4ZmE4OC00ZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+hD7FypaC575s5q6jUHwTgYaxNA4Ofgpfbb/9/4Se13Fc/v2yV0AwJvncRok /TfKYEE0qZwtQ8lNlleRsMWpTKDQs1kcaOwVycjePkvRcsfB5EjWtpl3i7fJGimX sg1WnV6z/Bc4Ax4y8lLTHBXqMuNw+7gdSk2hou5rCOI6qRb7sP3wA0Ir8F3Bzn2d T5OS9H2rZ+ENKK3w20dCAhab0BD3a0pY9EiZforxr9DF0pw3tuGAKcekppllFaou ZT9hIiw6iFEGD8SsTWhiH+M4xlaCfl/aZa4hNT9Ea8Xq2+wAtvM+39icWDHNzMk+ v4XomRh4v6YxJHOf5EeSEdAJkwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFCZc+I5G Ek9pd39jgVg774rCeojYMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkREODIvMTk3RjlEOTI5MUUyMTFFOTk3Njg4OTBFQzRGOUFFMDIvMzI0OTY3ODI2 RDhEMTFFRTk4ODNCOTg1QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM BAIAATAGAwQBZ4r6MBYEAgACMBADBwAgAQ3wXoADBQAkAgugMA0GCSqGSIb3DQEB CwUAA4IBAQAsT1nFbHg/3TwxMv8AGh4KC4kcbvmorxB7sR/yeCclQMVPuPxqmYai lAG9NJAh0yX+7OhGcJwI1e0lRwcjdBfsiRenQXlqQ8AHzj1HkbDszl8uwlVNtmcM xzJfvYvYAgao4yA5k1tYit9/ziwcVLKd+Rz2HnsbIc6ghjbQT75HLcpvbdFfey12 2cCn8R6e3Ai2MjEoYpo5GdSZ0UIPFZeH8JPo4L4dFlhSFSmfRR5+vDCdnmpZyYtK XX4N8iIfsK/HqR9ibsjfVLn71ME2jyYFLqUnLkicxHruxA2yGG2IbShB3QS6GLxU MN7PRv2zA6IpwcCPdti+u7AhOsFjyqXO -----END CERTIFICATE-----Generated at Fri Jul 24 01:47:16 2026 by rpki-client