$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/A05116766B2311F1965223AA8747A888.roa File: A05116766B2311F1965223AA8747A888.roa (raw, json) Hash identifier: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0= Subject key identifier: 73:23:2E:53:D3:42:80:ED:64:04:7F:6F:DB:53:75:F4:AD:D7:F9:D6 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35AA Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/A05116766B2311F1965223AA8747A888.roa Signing time: Wed 22 Jul 2026 15:10:47 +0000 ROA not before: Wed 22 Jul 2026 15:10:47 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 62597 IP address blocks: 103.35.248.0/24 maxlen: 24 103.35.249.0/24 maxlen: 24 103.35.250.0/24 maxlen: 24 2402:cf80::/32 maxlen: 32 2402:cf80::/48 maxlen: 48 2402:cf80:100::/44 maxlen: 48 2402:cf80:1000::/48 maxlen: 48 2402:cf80:1003::/48 maxlen: 48 2402:cf80:1004::/48 maxlen: 48 2402:cf80:1005::/48 maxlen: 48 2402:cf80:1006::/48 maxlen: 48 2402:cf80:1007::/48 maxlen: 48 2402:cf80:6259::/48 maxlen: 48 2402:cf80:7ffe::/48 maxlen: 48 2402:cf80:7fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13738 (0x35aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Jul 22 15:10:47 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a60dd77-6c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:7a:14:14:24:9e:64:3f:ae:64:70:3d:f1: 9c:9f:ae:8a:5d:bc:f6:60:31:95:18:41:38:e0:f7: 49:88:75:8b:a5:e1:36:5b:37:6f:78:5c:db:a6:c3: 99:d9:5b:0f:d0:33:7c:40:e5:5f:5f:0d:20:b5:af: 9b:45:77:8e:76:a1:52:34:48:26:d4:f6:95:d1:e6: a2:5d:18:4d:f6:87:f4:39:67:c1:68:98:a2:dc:15: 93:e8:56:ec:43:0d:ff:47:ba:ce:05:98:98:02:0f: a9:84:b0:b5:b5:56:1d:5b:a4:2e:a3:fc:62:56:24: cf:f9:42:c8:b1:fa:3e:52:7b:d7:b3:21:7f:18:36: 8d:0e:45:21:1a:7c:15:da:6f:04:dc:ac:6e:9b:57: c3:56:9c:9b:f5:af:b6:eb:32:e8:f0:df:4b:0c:fa: a2:64:7d:b1:1b:59:26:80:a4:8c:26:aa:bc:7d:63: 77:71:ab:1d:17:90:39:89:61:35:ad:94:75:73:4f: 79:1c:f4:88:c6:a2:a1:6e:88:77:5c:4d:cf:c4:12: e9:51:9b:26:cb:82:16:38:5c:21:50:31:a5:bc:c8: 7e:93:2c:33:e2:c4:95:98:4e:c0:2b:88:9d:7e:cb: 37:1f:86:58:29:4d:e5:8e:37:0d:a6:e2:fe:85:64: 61:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:23:2E:53:D3:42:80:ED:64:04:7F:6F:DB:53:75:F4:AD:D7:F9:D6 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/A05116766B2311F1965223AA8747A888.roa sbgp-ipAddrBlock: critical IPv4: 103.35.248.0-103.35.250.255 IPv6: 2402:cf80::/32 Signature Algorithm: sha256WithRSAEncryption 96:65:d0:6e:5e:45:bd:33:d3:34:6a:87:28:61:c0:d2:66:f3: 45:69:01:50:7c:37:8b:0d:f1:b9:9a:a5:d7:6b:b3:72:b9:97: 30:0a:eb:53:8b:5e:8e:e3:0a:c5:29:c6:86:46:91:a6:60:95: 2a:57:b5:fb:88:47:2c:4d:e8:5c:9c:ce:54:82:14:df:c9:5e: c3:98:a7:cc:1b:32:d0:94:5f:7e:ac:e8:8f:36:62:69:e7:92: 20:36:29:a4:4a:35:85:54:fa:bc:1d:58:a9:0f:ac:cc:2b:65: 1a:0c:f8:e8:a2:93:20:c5:2e:e4:1b:32:30:96:12:f2:ec:b2: a8:40:42:a6:87:bf:26:bc:5a:ef:08:0d:17:65:e0:3a:3e:a2: a5:9c:e8:d9:d0:8a:44:e6:fe:7d:52:79:8a:4a:74:7b:5c:74: 0e:a1:55:46:6d:ea:45:c9:f3:90:43:2b:24:3f:90:73:66:f3: 47:02:12:57:37:18:73:cc:fe:a5:21:0f:a3:65:54:db:a6:3e: cc:7e:0a:b3:ef:93:5d:5d:5b:1a:9c:ca:c9:a8:d5:35:bd:33: 92:ed:e3:5a:b7:dd:66:30:27:44:68:2d:d4:9e:94:84:a4:a5: 3f:9d:93:a8:45:4f:5e:03:7a:dd:ed:28:bf:5b:2f:68:1c:4f: 3d:e0:b0:c0 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICNaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNzIyMTUxMDQ3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYwZGQ3Ny02Yzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrZ6FBQknmQ/rmRwPfGcn66KXbz2YDGVGEE44PdJiHWLpeE2WzdveFzbpsOZ 2VsP0DN8QOVfXw0gta+bRXeOdqFSNEgm1PaV0eaiXRhN9of0OWfBaJii3BWT6Fbs Qw3/R7rOBZiYAg+phLC1tVYdW6Quo/xiViTP+ULIsfo+UnvXsyF/GDaNDkUhGnwV 2m8E3Kxum1fDVpyb9a+26zLo8N9LDPqiZH2xG1kmgKSMJqq8fWN3casdF5A5iWE1 rZR1c095HPSIxqKhboh3XE3PxBLpUZsmy4IWOFwhUDGlvMh+kywz4sSVmE7AK4id fss3H4ZYKU3ljjcNpuL+hWRhqQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFHMjLlPT QoDtZAR/b9tTdfSt1/nWMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzNTAvMzkxM0JDQTAxRDg3MTFFMkI0MkIwMkRGMDhCMDJDRDIvQTA1MTE2NzY2 QjIzMTFGMTk2NTIyM0FBODc0N0E4ODgucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBANnI/gDBABnI/owDQQCAAIwBwMFACQCz4AwDQYJKoZIhvcNAQEL BQADggEBAJZl0G5eRb0z0zRqhyhhwNJm80VpAVB8N4sN8bmapddrs3K5lzAK61OL Xo7jCsUpxoZGkaZglSpXtfuIRyxN6FyczlSCFN/JXsOYp8wbMtCUX36s6I82Ymnn kiA2KaRKNYVU+rwdWKkPrMwrZRoM+OiikyDFLuQbMjCWEvLssqhAQqaHvya8Wu8I DRdl4Do+oqWc6NnQikTm/n1SeYpKdHtcdA6hVUZt6kXJ85BDKyQ/kHNm80cCElc3 GHPM/qUhD6NlVNumPsx+CrPvk11dWxqcysmo1TW9M5Lt41q33WYwJ0RoLdSelISk pT+dk6hFT14Det3tKL9bL2gcTz3gsMA= -----END CERTIFICATE-----Generated at Fri Jul 24 01:59:48 2026 by rpki-client