$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/D00FC228F46111ECA631AC55C4F9AE02.roa File: D00FC228F46111ECA631AC55C4F9AE02.roa (raw, json) Hash identifier: /LeLgNBBApVoU9W0PiPoKX0e1+iJ16jhEcyi7pM1vXY= Subject key identifier: 6A:25:0E:3E:4A:8C:7B:20:4D:D4:DA:DE:D2:6F:B4:26:8A:C1:0C:81 Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 0821 Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/D00FC228F46111ECA631AC55C4F9AE02.roa Signing time: Wed 22 Jul 2026 22:22:35 +0000 ROA not before: Wed 22 Jul 2026 22:22:34 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 134236 IP address blocks: 45.120.96.0/22 maxlen: 22 45.120.96.0/23 maxlen: 23 45.120.96.0/24 maxlen: 24 45.120.97.0/24 maxlen: 24 45.120.98.0/23 maxlen: 23 45.120.98.0/24 maxlen: 24 45.120.99.0/24 maxlen: 24 103.60.160.0/22 maxlen: 22 103.60.160.0/23 maxlen: 23 103.60.160.0/24 maxlen: 24 103.60.161.0/24 maxlen: 24 103.60.162.0/23 maxlen: 23 103.60.162.0/24 maxlen: 24 103.60.163.0/24 maxlen: 24 2406:cc40::/32 maxlen: 32 2406:cc40:1::/48 maxlen: 48 2406:cc40:2::/48 maxlen: 48 2406:cc40:a::/48 maxlen: 48 2406:cc40:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2081 (0x821) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Jul 22 22:22:34 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a6142aa-9623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:9d:93:dc:10:71:f6:f3:a3:c1:60:d5:85: 29:b2:01:54:e5:32:06:19:de:51:50:af:3b:a7:71: e0:49:9c:8c:18:97:42:35:6d:ab:32:13:3e:02:85: f7:6b:78:d0:41:f5:b8:ab:e1:76:11:98:c9:33:52: 23:ff:80:f8:62:5c:30:aa:f8:85:27:cd:81:a6:98: ea:a5:48:02:51:5d:6e:02:3d:00:b1:b0:a0:20:06: ee:92:b6:f4:04:f5:4b:c1:80:87:4d:b1:92:e7:21: 50:a1:b7:46:55:77:11:d9:40:ae:2c:08:b2:22:ba: b7:8c:3a:e8:27:9c:81:43:cb:46:3d:be:26:2f:91: 96:ed:ab:9c:04:32:55:9a:c4:9b:6e:8a:de:35:8a: ed:1a:9e:cd:08:df:dc:1a:30:e6:1b:79:31:e1:6a: e1:8f:d4:b4:03:e6:c6:d6:2d:d6:aa:83:09:1d:3f: 3d:d9:30:c4:e7:11:6f:d3:e5:39:8d:9d:4c:99:25: b3:4e:72:e5:ca:50:0e:69:23:87:e8:04:00:58:a6: b2:62:cd:b5:c8:03:30:b1:aa:32:6a:94:0d:a4:4c: fa:18:9e:31:5c:95:4e:59:ee:ef:1d:be:71:9b:9d: 2a:60:3d:03:3f:e6:e0:5e:bc:a3:cf:80:fd:2c:c2: 71:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:25:0E:3E:4A:8C:7B:20:4D:D4:DA:DE:D2:6F:B4:26:8A:C1:0C:81 X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/D00FC228F46111ECA631AC55C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.96.0/22 103.60.160.0/22 IPv6: 2406:cc40::/32 Signature Algorithm: sha256WithRSAEncryption ab:d2:68:70:18:9f:3f:00:d4:5e:07:fb:36:31:0c:97:d1:5f: e9:5d:e3:1e:48:af:08:f3:49:ed:e6:c1:94:fa:2f:5a:e1:b4: 81:74:db:aa:f2:01:7d:42:9b:33:49:e3:0d:13:0e:ba:75:63: 21:0b:a6:b8:d1:b8:bf:76:91:71:2e:df:84:e4:2b:da:69:77: 44:e2:88:74:a9:0c:33:8e:85:35:97:d4:53:60:73:53:cb:6c: 53:f4:e8:79:d0:81:68:06:04:fc:d3:16:12:f8:7e:b5:74:69: 67:5c:4c:7a:c0:61:7b:a5:2a:39:17:49:3e:f4:fe:df:2a:5d: 19:41:29:21:56:2a:f4:95:95:18:4f:fd:a8:03:0a:ed:b3:86: 8e:ef:93:9d:d5:66:2c:ca:29:72:46:df:84:14:6f:8d:6c:e2: 76:21:37:58:2f:9d:8b:36:81:ff:08:a4:50:3e:d0:e7:b3:bf: b0:12:1b:82:fa:d2:a4:b6:29:27:58:94:04:0a:bb:06:2a:42: 9d:2d:9e:61:7d:94:3c:ae:8d:40:b0:2a:82:34:23:fa:94:e1: 65:b3:2f:5f:94:10:c2:f8:88:ec:62:e5:fb:26:2a:da:62:b4: ef:44:98:a7:73:50:ff:bf:e7:3f:2b:f4:6c:b5:9e:b3:d0:86: 39:0a:7f:d2 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjYwNzIyMjIyMjM0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxNDJhYS05NjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/Cdk9wQcfbzo8Fg1YUpsgFU5TIGGd5RUK87p3HgSZyMGJdCNW2rMhM+AoX3 a3jQQfW4q+F2EZjJM1Ij/4D4YlwwqviFJ82BppjqpUgCUV1uAj0AsbCgIAbukrb0 BPVLwYCHTbGS5yFQobdGVXcR2UCuLAiyIrq3jDroJ5yBQ8tGPb4mL5GW7aucBDJV msSbboreNYrtGp7NCN/cGjDmG3kx4Wrhj9S0A+bG1i3WqoMJHT892TDE5xFv0+U5 jZ1MmSWzTnLlylAOaSOH6AQAWKayYs21yAMwsaoyapQNpEz6GJ4xXJVOWe7vHb5x m50qYD0DP+bgXryjz4D9LMJxQwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGolDj5K jHsgTdTa3tJvtCaKwQyBMB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMkIvMUNEMEUwNTAyRjM0MTFFQjk3RkUxNzg2QzRGOUFFMDIvRDAwRkMyMjhG NDYxMTFFQ0E2MzFBQzU1QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXhgAwQCZzygMA0EAgACMAcDBQAkBsxAMA0GCSqGSIb3DQEBCwUA A4IBAQCr0mhwGJ8/ANReB/s2MQyX0V/pXeMeSK8I80nt5sGU+i9a4bSBdNuq8gF9 QpszSeMNEw66dWMhC6a40bi/dpFxLt+E5CvaaXdE4oh0qQwzjoU1l9RTYHNTy2xT 9Oh50IFoBgT80xYS+H61dGlnXEx6wGF7pSo5F0k+9P7fKl0ZQSkhVir0lZUYT/2o Awrts4aO75Od1WYsyilyRt+EFG+NbOJ2ITdYL52LNoH/CKRQPtDns7+wEhuC+tKk tiknWJQECrsGKkKdLZ5hfZQ8ro1AsCqCNCP6lOFlsy9flBDC+IjsYuX7JiraYrTv RJinc1D/v+c/K/RstZ6z0IY5Cn/S -----END CERTIFICATE-----Generated at Fri Jul 24 05:03:09 2026 by rpki-client