$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa File: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (raw, json) Hash identifier: OFe6pYT5si7P735ls7Y5SGcQNrbPBZR9CsKE32oRmEA= Subject key identifier: 54:8D:6C:D6:72:F7:24:72:A5:62:E3:EF:17:0D:C3:2E:87:90:18:DB Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 097F Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa Signing time: Sat 04 Jul 2026 20:21:10 +0000 ROA not before: Sat 04 Jul 2026 20:21:10 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 140879 IP address blocks: 103.152.218.0/24 maxlen: 24 2400:8ca0::/32 maxlen: 32 2400:8ca0::/48 maxlen: 48 2400:8ca0:1::/48 maxlen: 48 2400:8ca0:2::/48 maxlen: 48 2400:8ca0:3::/48 maxlen: 48 2400:8ca0:4::/48 maxlen: 48 2400:8ca0:5::/48 maxlen: 48 2400:8ca0:6::/48 maxlen: 48 2400:8ca0:7::/48 maxlen: 48 2400:8ca0:8::/48 maxlen: 48 2400:8ca0:9::/48 maxlen: 48 2400:8ca0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2431 (0x97f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Jul 4 20:21:10 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a496b36-0f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:4c:38:69:a0:51:60:11:93:2e:b4:17:db: cd:60:d3:ba:21:65:43:3f:7d:d4:8d:b1:52:55:ac: 78:93:f4:60:1d:50:d1:7e:e1:39:5f:aa:b9:7c:ec: 0b:fd:14:98:4b:15:90:4a:a5:45:9b:93:3f:7b:7b: fd:fa:fa:38:e4:15:6c:37:9a:a0:e8:68:76:bb:1d: b1:55:d0:1d:29:44:d3:01:a7:23:f0:c3:dc:32:c8: c6:24:ec:22:4e:6a:ea:f9:75:cf:f6:2c:48:62:b8: 97:cb:b2:9f:47:81:be:9b:9e:aa:74:5d:f1:52:ed: 8a:2d:1b:18:89:60:c2:ed:75:c7:c6:a2:83:93:66: b6:8c:75:23:99:17:83:09:83:63:4c:90:dd:5e:77: 34:0d:6e:dc:82:c6:59:5c:97:e2:ce:fb:d6:d4:db: 69:2d:cd:02:75:26:1d:ef:ec:b4:0d:f1:e5:ed:4a: 2b:95:71:be:2a:c1:8c:fc:41:9b:7a:2d:e3:95:a1: 32:89:e3:a1:a7:00:5e:f8:4e:01:ff:be:4a:81:4f: 96:0d:45:98:cd:5a:08:ed:bf:9b:a4:96:30:1e:6f: 58:1a:35:a5:f0:c0:08:62:1b:56:c2:6e:92:39:c7: c5:fc:5b:e0:d4:2c:23:53:19:5d:9a:03:b9:06:e1: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8D:6C:D6:72:F7:24:72:A5:62:E3:EF:17:0D:C3:2E:87:90:18:DB X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.218.0/24 IPv6: 2400:8ca0::/32 Signature Algorithm: sha256WithRSAEncryption b8:29:4e:f0:9d:a5:90:3e:90:82:5d:d7:fa:40:d2:2e:e9:fa: e6:bc:8d:2e:f4:68:21:51:ac:cd:5f:f2:36:37:1e:19:8c:d6: 6d:a7:1c:b4:15:41:29:c6:12:0c:75:1e:eb:0b:83:7f:9f:89: 25:77:9f:83:2a:11:fb:97:f4:78:6d:1e:b1:a2:ba:78:08:c5: 63:bb:33:18:a6:fd:74:bd:73:96:78:b4:f8:44:4e:47:34:55: 88:32:21:e3:d2:84:8b:15:9d:da:1c:71:1c:bf:3a:04:c0:f4: 9b:62:2f:0b:d7:e5:ac:14:61:ee:a0:ab:80:46:f4:71:85:0c: df:15:f6:d9:fe:7d:5a:e2:08:a3:8e:e9:ae:a6:b3:cf:7f:e0: 7d:63:c0:d6:c2:6e:d0:a7:26:6e:88:88:e1:6b:44:0a:5e:24: f9:a3:0d:4c:ba:76:db:84:b7:9d:4b:c3:32:a0:cf:17:2f:41: 6f:b5:05:d1:7a:d1:64:97:ac:95:c3:3d:f4:19:d2:84:a6:0d: e5:55:c5:3e:5b:97:61:a0:3a:a6:bc:17:8e:98:ab:a3:c1:5e: 17:dd:00:d3:10:11:8b:bb:b6:00:67:03:d8:20:00:3e:db:4f: db:44:64:11:e2:18:bb:01:77:b9:33:77:46:bf:70:53:1e:b2: d6:76:c5:a0 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjYwNzA0MjAyMTEwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5NmIzNi0wZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWhMOGmgUWARky60F9vNYNO6IWVDP33UjbFSVax4k/RgHVDRfuE5X6q5fOwL /RSYSxWQSqVFm5M/e3v9+vo45BVsN5qg6Gh2ux2xVdAdKUTTAacj8MPcMsjGJOwi Tmrq+XXP9ixIYriXy7KfR4G+m56qdF3xUu2KLRsYiWDC7XXHxqKDk2a2jHUjmReD CYNjTJDdXnc0DW7cgsZZXJfizvvW1NtpLc0CdSYd7+y0DfHl7UorlXG+KsGM/EGb ei3jlaEyieOhpwBe+E4B/75KgU+WDUWYzVoI7b+bpJYwHm9YGjWl8MAIYhtWwm6S OcfF/Fvg1CwjUxldmgO5BuEmkQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFSNbNZy 9yRypWLj7xcNwy6HkBjbMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRGMUIvMjNGMzA1NTBCQzRGMTFFQUJBOEM5NjJGQzRGOUFFMDIvRTZDN0QzRUFB RjJEMTFGMDgxMUJCODNCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAZ5jaMA0EAgACMAcDBQAkAIygMA0GCSqGSIb3DQEBCwUAA4IBAQC4 KU7wnaWQPpCCXdf6QNIu6frmvI0u9GghUazNX/I2Nx4ZjNZtpxy0FUEpxhIMdR7r C4N/n4kld5+DKhH7l/R4bR6xorp4CMVjuzMYpv10vXOWeLT4RE5HNFWIMiHj0oSL FZ3aHHEcvzoEwPSbYi8L1+WsFGHuoKuARvRxhQzfFfbZ/n1a4gijjumuprPPf+B9 Y8DWwm7QpyZuiIjha0QKXiT5ow1MunbbhLedS8MyoM8XL0FvtQXRetFkl6yVwz30 GdKEpg3lVcU+W5dhoDqmvBeOmKujwV4X3QDTEBGLu7YAZwPYIAA+20/bRGQR4hi7 AXe5M3dGv3BTHrLWdsWg -----END CERTIFICATE-----Generated at Fri Jul 24 12:37:39 2026 by rpki-client