$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa File: 0D06C406887511F094C09643C4F9AE02.roa (raw, json) Hash identifier: mvmCUaHLFK6lWtpOP/a7JndDHiEPczE/1UX7ywZQ+lk= Subject key identifier: 1C:58:D5:41:55:1D:8A:23:04:96:BE:79:44:B7:00:01:8D:EE:DD:F5 Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Certificate serial: 9B Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa Signing time: Wed 01 Jul 2026 05:08:54 +0000 ROA not before: Wed 01 Jul 2026 05:08:54 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 154166 IP address blocks: 203.174.16.0/23 maxlen: 23 203.174.16.0/24 maxlen: 24 203.174.17.0/24 maxlen: 24 2402:2560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Validity Not Before: Jul 1 05:08:54 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a44a0e6-8ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:71:4b:1e:47:e4:41:51:2b:51:ef:c1:15:aa: 1a:69:b9:36:cf:8f:22:2f:ad:a4:25:2d:ac:d4:82: 7a:99:cc:b0:a9:89:9c:bb:9f:8e:b6:de:e9:aa:c0: 44:6f:b6:ee:b6:80:38:16:92:6f:4f:26:b2:ca:1b: a7:95:7a:5e:ee:9e:13:9d:2a:af:02:56:cf:f8:34: 25:d1:b1:b8:84:bf:82:85:ff:d0:69:1c:d9:a3:50: 08:75:37:9c:cd:df:62:dc:19:72:e5:40:88:c7:b9: e8:fd:55:c5:44:0b:84:cf:f6:23:15:90:1b:70:73: fb:1d:8b:18:8c:56:0b:1c:c2:23:6c:ea:37:b2:5a: 41:de:89:a8:28:0d:27:06:0e:a7:bd:fc:5a:3b:b6: d0:78:72:38:e9:59:c5:31:ba:b6:7e:80:62:6d:83: a9:31:53:8e:04:f9:e2:0b:4b:ac:7a:50:b5:6e:f8: 72:4a:e7:a5:40:db:32:ce:a6:ed:6e:45:f8:64:cd: d5:de:3d:a2:fd:f7:9c:38:79:0c:bb:3f:b2:ae:fd: a6:87:01:44:8e:51:ab:1d:39:32:49:0a:58:e2:39: 23:3e:02:99:8e:57:8e:5d:ec:c0:d9:55:82:40:2c: e7:fe:55:96:f7:d6:40:f0:f6:84:c6:f6:2d:45:5f: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:58:D5:41:55:1D:8A:23:04:96:BE:79:44:B7:00:01:8D:EE:DD:F5 X509v3 Authority Key Identifier: keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.174.16.0/23 IPv6: 2402:2560::/32 Signature Algorithm: sha256WithRSAEncryption aa:cf:fb:d5:6b:b2:ca:97:ef:17:7b:3f:91:81:0e:48:9a:19: 55:78:5a:b5:c8:b7:4a:15:91:fb:e4:68:fc:1e:f6:cb:7f:b7: 36:64:39:89:5c:ba:bd:63:d8:77:f7:c5:83:62:40:ba:09:59: b7:4e:1f:22:16:be:70:bd:61:57:03:7a:35:95:50:4c:eb:07: f0:03:b0:a3:ef:ad:74:75:d7:4d:52:52:a3:25:cb:2e:d1:65: 14:ac:6b:f3:94:59:74:b2:35:39:07:2d:bd:0b:2f:ca:16:e3: d1:d1:3f:51:66:7e:8b:4e:9e:9d:15:ac:cd:30:c1:39:03:fb: 91:bd:4b:8d:57:69:4f:13:86:84:b1:4c:0f:92:df:b9:39:ad: aa:54:ea:02:06:8d:77:5e:9a:95:15:1c:69:db:84:59:8f:f1: c5:5b:40:7b:99:14:de:a1:c5:dc:b8:47:0d:45:8d:32:e3:bf: e2:6c:49:5c:df:fb:c6:40:0f:40:e7:25:3a:e2:11:a3:1d:66: c4:13:5a:64:c2:e0:03:f1:47:4a:d0:23:6a:aa:65:e8:ff:c3: 20:53:70:d1:06:3e:d0:7f:af:71:38:96:e2:12:c3:ae:58:59: 8e:ee:cb:8d:c3:c1:8f:bc:b9:18:62:83:b4:35:22:63:5c:de: dd:61:34:02 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZERDAxMTAvBgNVBAUTKDkyQjRDMkE2OTI5NDBCNTQ4RTYzNTA0NDMzNUE5ODVC RUUyMkJEQTEwHhcNMjYwNzAxMDUwODU0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0YTBlNi04ZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XFLHkfkQVErUe/BFaoaabk2z48iL62kJS2s1IJ6mcywqYmcu5+Ott7pqsBE b7butoA4FpJvTyayyhunlXpe7p4TnSqvAlbP+DQl0bG4hL+Chf/QaRzZo1AIdTec zd9i3Bly5UCIx7no/VXFRAuEz/YjFZAbcHP7HYsYjFYLHMIjbOo3slpB3omoKA0n Bg6nvfxaO7bQeHI46VnFMbq2foBibYOpMVOOBPniC0uselC1bvhySuelQNsyzqbt bkX4ZM3V3j2i/fecOHkMuz+yrv2mhwFEjlGrHTkySQpY4jkjPgKZjleOXezA2VWC QCzn/lWW99ZA8PaExvYtRV9mkwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBxY1UFV HYojBJa+eUS3AAGN7t31MB8GA1UdIwQYMBaAFJK0wqaSlAtUjmNQRDNamFvuIr2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkREMC85RTBFRTg0NDg4 NzQxMUYwOEJENzNCM0ZDNEY5QUUwMi9rclRDcHBLVUMxU09ZMUJFTTFxWVctNGl2 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tyVENwcEtVQzFTT1kxQkVNMXFZVy00aXZhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZERDAvOUUwRUU4NDQ4ODc0MTFGMDhCRDczQjNGQzRGOUFFMDIvMEQwNkM0MDY4 ODc1MTFGMDk0QzA5NjQzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBy64QMA0EAgACMAcDBQAkAiVgMA0GCSqGSIb3DQEBCwUAA4IBAQCq z/vVa7LKl+8Xez+RgQ5ImhlVeFq1yLdKFZH75Gj8HvbLf7c2ZDmJXLq9Y9h398WD YkC6CVm3Th8iFr5wvWFXA3o1lVBM6wfwA7Cj7610dddNUlKjJcsu0WUUrGvzlFl0 sjU5By29Cy/KFuPR0T9RZn6LTp6dFazNMME5A/uRvUuNV2lPE4aEsUwPkt+5Oa2q VOoCBo13XpqVFRxp24RZj/HFW0B7mRTeocXcuEcNRY0y47/ibElc3/vGQA9A5yU6 4hGjHWbEE1pkwuAD8UdK0CNqqmXo/8MgU3DRBj7Qf69xOJbiEsOuWFmO7suNw8GP vLkYYoO0NSJjXN7dYTQC -----END CERTIFICATE-----Generated at Fri Jul 24 06:57:17 2026 by rpki-client