$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/568554A2493411EF859C1D49C4F9AE02.roa File: 568554A2493411EF859C1D49C4F9AE02.roa (raw, json) Hash identifier: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg= Subject key identifier: 3E:D4:12:50:9D:C9:21:DE:79:B3:10:0C:86:2D:75:1D:42:E6:18:6A Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35A6 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/568554A2493411EF859C1D49C4F9AE02.roa Signing time: Wed 22 Jul 2026 15:10:38 +0000 ROA not before: Wed 22 Jul 2026 15:10:38 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 14618 IP address blocks: 103.35.251.0/24 maxlen: 24 103.195.128.0/24 maxlen: 24 103.195.129.0/24 maxlen: 24 103.195.130.0/24 maxlen: 24 103.212.169.0/24 maxlen: 24 103.212.170.0/24 maxlen: 24 160.202.137.0/24 maxlen: 24 160.202.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13734 (0x35a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Jul 22 15:10:38 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a60dd6e-8237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:51:94:15:30:92:98:12:17:e4:3d:7c:b3:ca: 9c:6d:ee:e0:ad:30:fb:bd:70:57:94:90:6c:37:e0: 90:ae:d0:22:16:e2:a2:29:e4:8e:b5:d4:c8:9f:b8: 5a:1f:9a:f4:fd:94:3c:2d:20:88:2f:b4:15:c7:20: 4c:2d:7e:31:6d:7e:49:ec:8c:07:dc:21:1d:04:34: 8a:07:51:9c:0b:df:85:82:48:56:a3:46:50:4f:a6: 06:71:7c:33:11:c2:6c:c9:8b:5c:fb:60:8b:11:08: e4:f8:bb:75:88:d5:92:db:8f:46:dd:ef:c5:41:88: c9:9d:42:4a:fe:2d:87:fc:cc:a8:68:ad:63:e0:c4: 5f:ff:ac:ee:5b:4c:d1:4f:1d:10:57:af:76:cf:58: ba:df:68:2a:c2:50:c2:eb:d9:28:1c:9c:94:52:c5: ef:d9:60:2c:2c:e4:59:54:76:55:9b:ae:21:0e:2c: 15:e0:ae:2a:96:25:dc:c3:03:cb:ee:6d:cc:7b:f6: 5d:fc:cf:94:44:e7:d5:0d:1f:44:30:a0:e2:e9:54: c3:13:87:bc:9c:c2:f2:ba:5b:9a:eb:96:53:3a:58: d0:1c:43:d2:26:ad:4a:56:98:6a:ea:54:bc:d8:07: dc:62:43:2b:d3:0f:2f:a9:e9:9b:21:71:23:2b:44: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D4:12:50:9D:C9:21:DE:79:B3:10:0C:86:2D:75:1D:42:E6:18:6A X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/568554A2493411EF859C1D49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.35.251.0/24 103.195.128.0-103.195.130.255 103.212.169.0-103.212.170.255 160.202.137.0-160.202.138.255 Signature Algorithm: sha256WithRSAEncryption 81:c6:67:bd:fe:34:0c:5c:81:72:3d:d6:36:3c:7f:7f:03:cc: 63:81:cd:c2:ee:7e:78:88:14:ab:0b:2e:5b:d1:aa:bb:70:8e: 8b:33:a7:7d:dd:c8:5b:17:44:e6:95:ea:93:3b:d6:e9:b7:86: 77:72:5e:0c:56:7f:8c:92:ea:46:49:35:29:a3:cf:17:71:fe: e8:e3:e7:8e:ce:3a:be:79:22:d2:cd:ba:98:86:87:10:b2:06: 97:b5:95:96:fe:e0:5f:84:53:95:4b:0e:41:e8:36:48:b4:18: 1b:5b:1e:df:84:fc:61:ad:ff:8a:59:ea:ea:eb:c5:65:9f:0a: ac:20:d6:6e:fd:5a:ee:ed:70:bd:dd:7b:48:c0:1f:81:7a:99: e6:a3:e8:8c:39:cc:7c:fc:20:9e:6a:a2:10:8a:a6:d7:99:49: 3b:0f:2b:ae:26:a1:10:36:b5:8c:bf:00:30:86:42:46:26:00: a9:cd:93:d8:f0:46:07:1f:ab:92:99:50:32:bc:52:ef:89:f1: ad:8c:d5:b6:40:15:89:22:81:28:d7:43:3f:11:a4:6c:f5:14: c5:51:7d:56:1d:b7:16:74:b4:2e:28:c5:6e:6f:23:03:cd:9e: d6:82:48:cd:9d:00:14:15:bb:cb:74:ce:46:49:ce:ca:b4:13: 08:a5:64:81 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICNaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNzIyMTUxMDM4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYwZGQ2ZS04MjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhFGUFTCSmBIX5D18s8qcbe7grTD7vXBXlJBsN+CQrtAiFuKiKeSOtdTIn7ha H5r0/ZQ8LSCIL7QVxyBMLX4xbX5J7IwH3CEdBDSKB1GcC9+FgkhWo0ZQT6YGcXwz EcJsyYtc+2CLEQjk+Lt1iNWS249G3e/FQYjJnUJK/i2H/MyoaK1j4MRf/6zuW0zR Tx0QV692z1i632gqwlDC69koHJyUUsXv2WAsLORZVHZVm64hDiwV4K4qliXcwwPL 7m3Me/Zd/M+UROfVDR9EMKDi6VTDE4e8nMLyulua65ZTOljQHEPSJq1KVphq6lS8 2AfcYkMr0w8vqembIXEjK0S2wwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFD7UElCd ySHeebMQDIYtdR1C5hhqMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzNTAvMzkxM0JDQTAxRDg3MTFFMkI0MkIwMkRGMDhCMDJDRDIvNTY4NTU0QTI0 OTM0MTFFRjg1OUMxRDQ5QzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQAZyP7MAwDBAdnw4ADBABnw4IwDAMEAGfUqQMEAGfUqjAMAwQAoMqJ AwQAoMqKMA0GCSqGSIb3DQEBCwUAA4IBAQCBxme9/jQMXIFyPdY2PH9/A8xjgc3C 7n54iBSrCy5b0aq7cI6LM6d93chbF0TmleqTO9bpt4Z3cl4MVn+MkupGSTUpo88X cf7o4+eOzjq+eSLSzbqYhocQsgaXtZWW/uBfhFOVSw5B6DZItBgbWx7fhPxhrf+K Werq68VlnwqsINZu/Vru7XC93XtIwB+Bepnmo+iMOcx8/CCeaqIQiqbXmUk7Dyuu JqEQNrWMvwAwhkJGJgCpzZPY8EYHH6uSmVAyvFLvifGtjNW2QBWJIoEo10M/EaRs 9RTFUX1WHbcWdLQuKMVubyMDzZ7WgkjNnQAUFbvLdM5GSc7KtBMIpWSB -----END CERTIFICATE-----Generated at Thu Jul 23 22:37:00 2026 by rpki-client