$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/8670D60E096611EF99F30750C4F9AE02.roa File: 8670D60E096611EF99F30750C4F9AE02.roa (raw, json) Hash identifier: xQfXZG9thzj3/CL2WyGBShFxcEh/aS+ejX4ZQkD/eSA= Subject key identifier: 19:DC:94:26:7F:CE:C5:7E:A7:CF:C4:86:54:89:90:A6:2B:B1:CF:D4 Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: 019E Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/8670D60E096611EF99F30750C4F9AE02.roa Signing time: Fri 05 Jun 2026 05:36:02 +0000 ROA not before: Fri 05 Jun 2026 05:36:02 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 152732 IP address blocks: 103.136.212.0/23 maxlen: 23 103.136.212.0/24 maxlen: 24 103.136.213.0/24 maxlen: 24 2401:9960::/32 maxlen: 32 2401:9960::/48 maxlen: 48 2401:9960:1::/48 maxlen: 48 2401:9960:2::/48 maxlen: 48 2401:9960:3::/48 maxlen: 48 2401:9960:4::/48 maxlen: 48 2401:9960:5::/48 maxlen: 48 2401:9960:6::/48 maxlen: 48 2401:9960:7::/48 maxlen: 48 2401:9960:8::/48 maxlen: 48 2401:9960:9::/48 maxlen: 48 2401:9960:10::/48 maxlen: 48 2401:9960:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Jun 5 05:36:02 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a226042-22ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:5b:4d:ef:41:4d:24:21:26:3f:6b:75:a7: 01:83:11:14:b8:5f:47:c4:ab:93:15:f4:85:e0:97: 89:90:68:99:af:e5:1f:3c:52:66:87:79:8b:5d:23: ae:94:7e:79:48:09:44:f3:34:46:7b:e3:3b:0a:b7: 78:ee:48:c8:81:30:56:ae:9f:be:16:fe:68:07:27: 07:16:5a:45:99:01:78:d8:54:d7:58:8d:9c:4e:ba: c5:0a:4b:f3:06:f7:28:b0:03:e5:39:7b:eb:9f:72: 12:1f:44:b7:ea:7a:53:cc:bd:d2:55:03:f2:a4:bf: 8e:78:21:56:86:a6:66:ec:64:f6:e0:1d:e7:42:ba: 99:27:30:8d:1e:87:64:1c:30:84:d3:d7:9f:78:4a: 02:d4:2f:f5:ec:8b:b2:c2:bc:93:8d:71:87:e7:9e: b0:87:e1:71:c1:b4:20:8a:42:25:12:0e:54:2c:79: 1c:9a:a9:bd:2d:35:e5:e5:d0:fd:ee:29:8a:6d:41: 0f:a7:8a:10:ea:64:ad:c6:0f:ac:53:d6:0d:93:98: 4e:80:88:f7:cb:2a:74:66:22:6c:fe:ba:44:6a:b1: 25:a3:74:e1:f1:b3:5f:00:9f:c7:dc:2d:99:94:32: e0:c2:a4:05:49:db:f5:1e:81:42:53:31:d0:2e:be: d3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DC:94:26:7F:CE:C5:7E:A7:CF:C4:86:54:89:90:A6:2B:B1:CF:D4 X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/8670D60E096611EF99F30750C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.212.0/23 IPv6: 2401:9960::/32 Signature Algorithm: sha256WithRSAEncryption ad:e7:7d:85:f9:b5:30:0d:9c:ee:93:4c:3a:41:0a:c5:16:b4: 1a:1f:f2:08:fa:aa:11:19:7c:27:82:3f:5e:6a:64:63:00:38: 07:2a:f9:e6:27:8c:31:7b:41:10:38:86:9c:db:82:45:c7:c1: b6:a5:6d:c1:b0:df:53:8d:0b:b0:8a:5d:e0:f3:7e:13:9a:e6: 8f:22:69:a0:95:39:0c:82:82:2a:50:ed:bc:c7:9e:3e:2b:9d: 26:ab:bf:da:54:ab:f3:09:b3:eb:29:95:39:4b:c8:d1:b4:fe: 7b:a4:fc:04:c2:2c:30:db:89:ae:58:96:3d:25:9c:12:e0:99: c5:93:72:2a:7f:de:80:13:38:34:09:bc:df:6b:ae:8a:76:5d: 52:52:09:92:00:cc:58:66:5b:d3:bc:a5:f1:d1:4a:31:ce:83: b6:ad:47:a4:89:8d:a6:1f:3b:25:8f:b4:56:26:02:08:2b:df: 01:3d:be:c8:4d:8b:75:ca:d1:c8:eb:a7:03:9d:26:3f:b2:39: 42:ca:e4:5b:89:25:bb:f9:0f:9b:ad:30:d5:0f:95:d9:fe:19: fa:3c:80:96:93:69:22:9e:0c:b2:e2:97:4f:70:bb:a0:7b:55: 55:61:40:26:93:ea:19:1b:07:b8:10:eb:bc:eb:10:c5:ba:38: b7:34:2c:30 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjYwNjA1MDUzNjAyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyNjA0Mi0yMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3RbTe9BTSQhJj9rdacBgxEUuF9HxKuTFfSF4JeJkGiZr+UfPFJmh3mLXSOu lH55SAlE8zRGe+M7Crd47kjIgTBWrp++Fv5oBycHFlpFmQF42FTXWI2cTrrFCkvz BvcosAPlOXvrn3ISH0S36npTzL3SVQPypL+OeCFWhqZm7GT24B3nQrqZJzCNHodk HDCE09efeEoC1C/17IuywryTjXGH556wh+FxwbQgikIlEg5ULHkcmqm9LTXl5dD9 7imKbUEPp4oQ6mStxg+sU9YNk5hOgIj3yyp0ZiJs/rpEarElo3Th8bNfAJ/H3C2Z lDLgwqQFSdv1HoFCUzHQLr7TSQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBnclCZ/ zsV+p8/EhlSJkKYrsc/UMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzM3REQvMjQ4NTVEODAwOTY1MTFFRkE0QkNFODdBQzRGOUFFMDIvODY3MEQ2MEUw OTY2MTFFRjk5RjMwNzUwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4jUMA0EAgACMAcDBQAkAZlgMA0GCSqGSIb3DQEBCwUAA4IBAQCt 532F+bUwDZzuk0w6QQrFFrQaH/II+qoRGXwngj9eamRjADgHKvnmJ4wxe0EQOIac 24JFx8G2pW3BsN9TjQuwil3g834TmuaPImmglTkMgoIqUO28x54+K50mq7/aVKvz CbPrKZU5S8jRtP57pPwEwiww24muWJY9JZwS4JnFk3Iqf96AEzg0Cbzfa66Kdl1S UgmSAMxYZlvTvKXx0UoxzoO2rUekiY2mHzslj7RWJgIIK98BPb7ITYt1ytHI66cD nSY/sjlCyuRbiSW7+Q+brTDVD5XZ/hn6PICWk2kingyy4pdPcLuge1VVYUAmk+oZ Gwe4EOu86xDFuji3NCww -----END CERTIFICATE-----Generated at Fri Jul 24 09:11:55 2026 by rpki-client