$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D2392E7886EC11F19E006003A7EE528E.roa File: D2392E7886EC11F19E006003A7EE528E.roa (raw, json) Hash identifier: /EKK1bYish9YkpKFk7lZQQfQE2DHY5Z3eS0D3n247UA= Subject key identifier: A2:1F:FF:8E:19:09:A4:0F:94:0E:00:AC:79:8B:76:5E:4F:37:B0:E9 Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Certificate serial: 362E Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D2392E7886EC11F19E006003A7EE528E.roa Signing time: Thu 23 Jul 2026 23:18:32 +0000 ROA not before: Thu 23 Jul 2026 23:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23838 IP address blocks: 43.255.160.0/22 maxlen: 22 43.255.160.0/24 maxlen: 24 43.255.161.0/24 maxlen: 24 43.255.162.0/24 maxlen: 24 43.255.163.0/24 maxlen: 24 103.8.252.0/22 maxlen: 23 116.90.135.0/24 maxlen: 24 120.136.48.0/20 maxlen: 20 120.136.48.0/21 maxlen: 21 120.136.49.0/24 maxlen: 24 120.136.53.0/24 maxlen: 24 120.136.56.0/21 maxlen: 21 120.136.56.0/24 maxlen: 24 120.136.58.0/24 maxlen: 24 2401:f000:6::/48 maxlen: 48 2401:f000:8::/48 maxlen: 48 2401:f000:16::/48 maxlen: 48 2401:f000:18::/48 maxlen: 48 2402:1c00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 23:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13870 (0x362e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Validity Not Before: Jul 23 23:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a62a148-9d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:69:4b:83:1e:66:70:76:91:09:b8:47:4d:cf: 2b:92:91:58:e8:93:7b:d3:42:05:57:75:ae:ab:de: 21:53:20:01:8c:9b:fa:c3:36:4f:dd:41:4c:91:8e: 10:7c:92:af:d0:c3:1d:06:5b:52:4a:63:fc:45:d5: c3:64:b0:e3:8b:34:75:65:c7:b0:de:ff:d2:69:a6: ee:07:10:4c:0d:da:49:7c:ff:0e:9b:6b:38:39:fb: 9a:8f:18:24:8c:4d:94:a8:a3:e1:6b:f0:76:22:21: a4:74:cd:c3:02:ad:bc:4d:c1:e4:62:8f:78:55:ec: 11:aa:3f:c9:5a:fb:ce:44:b7:6d:f8:f1:8b:b8:ec: b8:3a:d5:d1:d9:01:09:62:4c:d4:f8:94:35:9b:a4: aa:8a:0d:00:0f:37:d2:b1:bf:c0:62:c7:8c:2c:56: c9:fb:6b:53:2f:35:37:4b:15:8a:52:ba:bf:09:e2: 86:d6:90:18:f3:bc:7c:bd:b9:96:01:1c:94:a7:d8: 8e:b2:8e:df:a5:0f:ad:cc:54:71:5d:c7:33:c0:81: 9d:81:0c:c8:48:54:e6:59:7f:79:0c:2f:8e:95:16: e5:a1:c3:dc:06:bf:61:bf:1d:10:81:72:a8:6f:13: 20:2f:66:63:74:f5:60:0c:dc:fa:0b:56:e2:6d:dd: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1F:FF:8E:19:09:A4:0F:94:0E:00:AC:79:8B:76:5E:4F:37:B0:E9 X509v3 Authority Key Identifier: keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D2392E7886EC11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 43.255.160.0/22 103.8.252.0/22 116.90.135.0/24 120.136.48.0/20 IPv6: 2401:f000:6::/48 2401:f000:8::/48 2401:f000:16::/48 2401:f000:18::/48 2402:1c00::/32 Signature Algorithm: sha256WithRSAEncryption 21:a1:cf:e4:8e:05:77:47:e1:64:6a:8a:9a:f9:50:01:b7:4c: bf:d1:d9:1c:fb:82:15:bf:ff:74:6e:6f:f6:60:db:7d:6e:64: 35:9f:24:0a:62:1a:0c:a0:de:f5:54:49:b0:87:c4:b5:12:f7: da:bf:4d:d7:64:a8:c5:74:9c:d7:39:70:5c:09:aa:08:87:3e: d6:b7:29:d3:fe:a6:f7:b7:61:f3:f6:a7:19:22:b8:0e:cb:f3: 76:5b:16:82:32:cf:4f:b1:53:45:b5:aa:0d:fe:e3:c8:e1:5e: 13:2d:53:ae:4f:5e:1a:17:c2:90:15:3e:46:f6:12:14:cc:6d: 9f:4f:e4:59:75:ed:fa:f6:e5:7e:3b:d4:b8:1b:4a:55:f3:7d: 25:73:d5:e9:cc:12:b7:60:cd:3b:c5:c8:b5:e4:97:47:0d:9f: ad:08:ff:c4:20:89:ed:a7:48:8d:d9:62:e2:33:50:b1:11:94: 43:96:d4:37:27:8a:8b:6e:6d:b6:23:de:f3:18:84:8f:43:68: a0:75:e3:fe:f9:6c:b6:db:9e:a1:f0:f7:94:89:50:f2:4c:6c: a3:20:90:bb:a4:2d:db:9e:37:f7:3b:19:73:a1:96:2a:29:14: 43:78:16:3d:a0:2f:47:a2:42:6a:bd:9d:c1:67:0a:27:f2:5c: 84:e0:68:74 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICNi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE RjgzOTZFQkUwHhcNMjYwNzIzMjMxODMyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTE0OC05ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg2lLgx5mcHaRCbhHTc8rkpFY6JN700IFV3Wuq94hUyABjJv6wzZP3UFMkY4Q fJKv0MMdBltSSmP8RdXDZLDjizR1Zcew3v/SaabuBxBMDdpJfP8Om2s4Ofuajxgk jE2UqKPha/B2IiGkdM3DAq28TcHkYo94VewRqj/JWvvORLdt+PGLuOy4OtXR2QEJ YkzU+JQ1m6Sqig0ADzfSsb/AYseMLFbJ+2tTLzU3SxWKUrq/CeKG1pAY87x8vbmW ARyUp9iOso7fpQ+tzFRxXcczwIGdgQzISFTmWX95DC+OlRblocPcBr9hvx0QgXKo bxMgL2ZjdPVgDNz6C1bibd2hcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKIf/44Z CaQPlA4ArHmLdl5PN7DpMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U5NzgvMzIyM0YzNUUxRDk4MTFFMjhBOEMyRTgyMDhCMDJDRDIvRDIzOTJFNzg4 NkVDMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMGQGCCsGAQUFBwEHAQH/BFUwUzAe BAIAATAYAwQCK/+gAwQCZwj8AwQAdFqHAwQEeIgwMDEEAgACMCsDBwAkAfAAAAYD BwAkAfAAAAgDBwAkAfAAABYDBwAkAfAAABgDBQAkAhwAMA0GCSqGSIb3DQEBCwUA A4IBAQAhoc/kjgV3R+Fkaoqa+VABt0y/0dkc+4IVv/90bm/2YNt9bmQ1nyQKYhoM oN71VEmwh8S1Evfav03XZKjFdJzXOXBcCaoIhz7WtynT/qb3t2Hz9qcZIrgOy/N2 WxaCMs9PsVNFtaoN/uPI4V4TLVOuT14aF8KQFT5G9hIUzG2fT+RZde369uV+O9S4 G0pV830lc9XpzBK3YM07xci15JdHDZ+tCP/EIIntp0iN2WLiM1CxEZRDltQ3J4qL bm22I97zGISPQ2igdeP++Wy2256h8PeUiVDyTGyjIJC7pC3bnjf3OxlzoZYqKRRD eBY9oC9HokJqvZ3BZwon8lyE4Gh0 -----END CERTIFICATE-----Generated at Fri Jul 24 14:52:16 2026 by rpki-client