$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/BD22BBE0819111F19E01271496A30FBC.roa File: BD22BBE0819111F19E01271496A30FBC.roa (raw, json) Hash identifier: 8ErZg6ohMcZyXajrV7ek0726t8ekgrrUiQOSg+s1XoU= Subject key identifier: 36:EE:38:BF:9C:41:70:6B:D8:C3:D6:74:46:ED:BB:53:70:42:22:E3 Certificate issuer: /CN=A91D0ECA/serialNumber=AF03D050A9893C7310CADDB40AEDACDAB5E238E0 Certificate serial: 08 Authority key identifier: AF:03:D0:50:A9:89:3C:73:10:CA:DD:B4:0A:ED:AC:DA:B5:E2:38:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/BD22BBE0819111F19E01271496A30FBC.roa Signing time: Fri 17 Jul 2026 06:34:36 +0000 ROA not before: Fri 17 Jul 2026 06:34:36 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 55506 IP address blocks: 203.23.31.0/24 maxlen: 24 203.25.31.0/24 maxlen: 24 203.25.40.0/24 maxlen: 24 203.25.41.0/24 maxlen: 24 203.25.42.0/24 maxlen: 24 203.25.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.crl rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0ECA, serialNumber=AF03D050A9893C7310CADDB40AEDACDAB5E238E0 Validity Not Before: Jul 17 06:34:36 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a59ccfc-b105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:d1:30:05:da:65:1c:34:5a:a8:55:1c:e3: 4a:83:0b:84:13:90:71:ef:ff:5c:db:ad:a6:95:ba: a9:fa:3d:ee:df:35:1f:ef:04:f4:09:6f:07:73:a5: e3:6f:88:a2:2d:cb:12:90:e5:b4:d3:c3:23:4a:46: 26:cd:fc:83:dc:ea:d1:3e:4e:c0:32:4f:25:d8:04: 64:e0:1f:82:c8:ac:96:6e:60:b2:52:88:23:fe:02: 2f:f1:13:0a:2a:f8:b4:03:19:c3:3f:26:c1:b3:f3: d1:20:80:b1:f6:a2:2b:55:1b:19:b7:fc:64:60:bc: e2:97:fd:04:bb:36:35:4d:65:31:c5:a5:ff:a0:9e: 6e:12:b7:0f:7c:c7:9b:62:1f:3a:22:e7:34:40:3d: 29:f5:16:49:85:78:77:92:c4:74:8c:3c:ee:c4:d6: 42:97:bf:4a:d1:c9:e7:1a:0b:d8:93:6d:82:fd:51: b5:57:b7:fc:27:38:a6:c3:46:49:50:a1:9a:0e:8c: b5:15:a2:da:e0:b0:c7:bf:98:4d:8e:6f:ab:2b:95: 32:5f:2f:9a:98:14:27:9b:e7:c4:94:03:e8:dc:c1: e4:52:55:47:26:46:7a:e4:f8:13:1d:6a:07:ac:c0: 69:a0:58:93:bd:26:9b:b7:d6:10:3f:80:bd:08:fd: e0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EE:38:BF:9C:41:70:6B:D8:C3:D6:74:46:ED:BB:53:70:42:22:E3 X509v3 Authority Key Identifier: keyid:AF:03:D0:50:A9:89:3C:73:10:CA:DD:B4:0A:ED:AC:DA:B5:E2:38:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/BD22BBE0819111F19E01271496A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 203.23.31.0/24 203.25.31.0/24 203.25.40.0/22 Signature Algorithm: sha256WithRSAEncryption 55:7a:b3:d8:e0:9a:8c:d4:b7:df:01:5c:72:1e:cf:a9:14:0d: 65:02:8b:16:40:a3:92:f2:f4:36:d4:c2:d3:db:7b:a8:d8:bc: 5c:78:98:55:35:96:a1:5e:27:2b:b7:50:40:7a:05:72:ce:10: 96:4d:fa:1e:79:45:fd:59:15:b6:e4:9c:21:cd:6f:fa:e2:74: 17:51:5b:ad:35:fd:51:bc:76:f3:b7:14:05:37:74:2d:f7:ef: 58:28:21:cb:05:d2:30:00:d1:68:e2:a6:57:3d:04:db:97:69: 02:29:7b:1a:b2:f6:b3:43:8e:09:b1:ce:c2:9f:be:35:86:77: 87:0b:2c:78:71:ec:25:96:a2:3e:4e:f1:f2:a9:d4:19:f1:b3: e3:c7:8c:fc:2c:ea:0a:2d:0c:4a:4a:09:8c:1e:9e:ef:c6:58: 44:b0:72:95:f2:f4:c2:96:7b:16:76:89:6b:d6:0f:8c:14:22: 64:a5:5e:f3:23:d0:55:38:c9:ea:a8:c0:3f:03:4c:e5:c3:20: 21:52:7b:64:6e:ac:f4:83:88:37:14:09:d5:0d:b2:4d:6d:2d: b9:3f:58:9f:e8:3f:47:46:59:b4:d0:4b:0f:c7:35:b4:a8:64: 76:72:70:08:ea:d6:74:4a:1b:80:0a:bc:8a:ba:f6:b6:29:de: ba:2a:f7:90 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEVDQTExMC8GA1UEBRMoQUYwM0QwNTBBOTg5M0M3MzEwQ0FEREI0MEFFREFDREFC NUUyMzhFMDAeFw0yNjA3MTcwNjM0MzZaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNTljY2ZjLWIxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8UNEwBdplHDRaqFUc40qDC4QTkHHv/1zbraaVuqn6Pe7fNR/vBPQJbwdzpeNv iKItyxKQ5bTTwyNKRibN/IPc6tE+TsAyTyXYBGTgH4LIrJZuYLJSiCP+Ai/xEwoq +LQDGcM/JsGz89EggLH2oitVGxm3/GRgvOKX/QS7NjVNZTHFpf+gnm4Stw98x5ti Hzoi5zRAPSn1FkmFeHeSxHSMPO7E1kKXv0rRyecaC9iTbYL9UbVXt/wnOKbDRklQ oZoOjLUVotrgsMe/mE2Ob6srlTJfL5qYFCeb58SUA+jcweRSVUcmRnrk+BMdages wGmgWJO9Jpu31hA/gL0I/eABAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUNu44v5xB cGvYw9Z0Ru27U3BCIuMwHwYDVR0jBBgwFoAUrwPQUKmJPHMQyt20Cu2s2rXiOOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRUNBL0VCMkMxQjg2ODE5 MDExRjE5QkQ0QkFGQjk1QTMwRkJDL3J3UFFVS21KUEhNUXl0MjBDdTJzMnJYaU9P QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcndQUVVLbUpQSE1ReXQyMEN1MnMyclhpT09BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEVDQS9FQjJDMUI4NjgxOTAxMUYxOUJENEJBRkI5NUEzMEZCQy9CRDIyQkJFMDgx OTExMUYxOUUwMTI3MTQ5NkEzMEZCQy5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBADLFx8DBADLGR8DBALLGSgwDQYJKoZIhvcNAQELBQADggEBAFV6s9jg mozUt98BXHIez6kUDWUCixZAo5Ly9DbUwtPbe6jYvFx4mFU1lqFeJyu3UEB6BXLO EJZN+h55Rf1ZFbbknCHNb/ridBdRW601/VG8dvO3FAU3dC3371goIcsF0jAA0Wji plc9BNuXaQIpexqy9rNDjgmxzsKfvjWGd4cLLHhx7CWWoj5O8fKp1Bnxs+PHjPws 6gotDEpKCYwenu/GWESwcpXy9MKWexZ2iWvWD4wUImSlXvMj0FU4yeqowD8DTOXD ICFSe2RurPSDiDcUCdUNsk1tLbk/WJ/oP0dGWbTQSw/HNbSoZHZycAjq1nRKG4AK vIq69rYp3roq95A= -----END CERTIFICATE-----Generated at Fri Jul 24 01:29:23 2026 by rpki-client