$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/084F9934790511F1BAB3F00064A30FBC.roa File: 084F9934790511F1BAB3F00064A30FBC.roa (raw, json) Hash identifier: 1fMeEaP16uvDfLblh2DAsOZRUfhCDS61N5pdsfTpIPM= Subject key identifier: 5A:47:2D:D6:BC:CC:E2:CD:62:B7:39:78:5E:1B:78:3F:AE:AD:58:0D Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0D3B Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/084F9934790511F1BAB3F00064A30FBC.roa Signing time: Mon 06 Jul 2026 06:36:35 +0000 ROA not before: Mon 06 Jul 2026 06:36:35 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 17471 IP address blocks: 103.7.112.0/22 maxlen: 24 122.99.96.0/21 maxlen: 24 202.125.64.0/20 maxlen: 22 202.125.65.0/24 maxlen: 24 202.125.68.0/22 maxlen: 23 202.125.69.0/24 maxlen: 24 202.125.70.0/23 maxlen: 24 202.125.72.0/21 maxlen: 23 202.125.72.0/22 maxlen: 24 202.125.76.0/23 maxlen: 24 202.125.78.0/24 maxlen: 24 203.83.160.0/19 maxlen: 24 203.191.32.0/23 maxlen: 24 2407:f040::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3387 (0xd3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: Jul 6 06:36:35 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a4b4cf3-4c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c8:08:41:44:3c:9a:c6:ef:3f:c7:26:53:16: 03:e9:70:d3:57:3f:5f:fd:60:6d:d5:da:c4:e0:f8: bf:8c:72:92:09:5f:48:ee:bd:36:35:bc:ee:b6:28: a1:26:a7:74:56:68:1f:88:9a:06:ee:a2:01:95:17: 53:d9:ca:f3:1f:58:dd:bf:1c:df:c1:d1:35:ee:20: f7:2d:e6:32:d6:07:eb:72:80:ae:6e:89:ad:99:b9: 07:ed:45:50:22:70:2e:ab:98:4e:3d:2c:fd:27:38: 6e:69:b4:c3:a4:d5:ee:72:55:97:ad:7c:64:66:d5: 77:0a:c7:1f:07:52:7a:3a:60:d2:eb:33:02:51:e6: 26:a2:d4:d3:aa:44:49:bf:16:ba:72:b3:12:66:7e: 8b:fe:53:4f:07:54:ad:13:56:f4:5e:bd:0e:4f:43: 18:2d:13:b4:de:20:8f:f0:f2:9e:f9:60:72:59:d7: 71:2a:38:0f:9e:23:1a:8a:a1:5c:a4:eb:e4:bd:3a: 50:78:e9:9a:c4:a9:f2:f8:b6:c0:34:7c:40:6e:98: 1a:20:a4:6d:31:90:99:57:36:9a:64:b4:bd:79:aa: 30:f1:9f:96:67:8f:69:cf:4c:56:87:61:ae:74:62: 9a:49:b6:79:56:ec:65:89:af:dc:18:70:ba:d3:fe: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:47:2D:D6:BC:CC:E2:CD:62:B7:39:78:5E:1B:78:3F:AE:AD:58:0D X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/084F9934790511F1BAB3F00064A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.7.112.0/22 122.99.96.0/21 202.125.64.0/20 203.83.160.0/19 203.191.32.0/23 IPv6: 2407:f040::/32 Signature Algorithm: sha256WithRSAEncryption ce:de:87:d1:88:9c:d1:37:49:70:c9:47:1e:b8:12:49:b9:3e: 24:d8:fa:fc:23:62:ef:8e:31:0a:7b:f1:4b:60:34:1b:3e:ce: b5:c8:ff:e4:4c:64:df:a2:46:eb:51:92:da:af:1a:06:11:ef: e3:3b:da:06:27:2f:b0:8d:a8:89:09:13:56:10:da:21:64:31: b2:0e:bd:93:99:af:3a:c7:ad:83:3d:f0:64:9b:72:5b:fd:b7: ed:59:58:46:2d:39:57:91:be:9f:8f:29:19:63:85:80:1a:7d: e6:78:bf:1c:cd:10:13:83:36:88:42:c4:be:98:3b:cf:89:5b: 28:54:12:ac:1a:c6:58:c1:40:b2:25:06:b0:db:67:2c:bc:14: cc:eb:78:bf:1a:92:81:ad:ff:ec:5e:83:cd:5f:4c:71:5c:cd: ef:6a:a7:c4:83:af:9c:73:73:31:08:4b:55:84:66:d4:50:a9: 1b:ab:1e:ae:02:82:f2:c5:aa:ac:54:4e:17:07:cf:b5:c0:2b: af:e1:55:65:65:d3:d5:f4:e1:3b:65:77:93:4a:4d:7f:0c:90: ad:7f:56:02:4d:ff:ca:b2:86:77:ef:08:e0:ab:dd:7f:eb:63: 07:e1:3a:7a:ab:f9:45:94:f2:00:f8:35:7b:f9:14:3e:0d:db: ae:98:56:53 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICDTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjYwNzA2MDYzNjM1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiNGNmMy00YzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sgIQUQ8msbvP8cmUxYD6XDTVz9f/WBt1drE4Pi/jHKSCV9I7r02Nbzutiih Jqd0VmgfiJoG7qIBlRdT2crzH1jdvxzfwdE17iD3LeYy1gfrcoCubomtmbkH7UVQ InAuq5hOPSz9JzhuabTDpNXuclWXrXxkZtV3CscfB1J6OmDS6zMCUeYmotTTqkRJ vxa6crMSZn6L/lNPB1StE1b0Xr0OT0MYLRO03iCP8PKe+WByWddxKjgPniMaiqFc pOvkvTpQeOmaxKny+LbANHxAbpgaIKRtMZCZVzaaZLS9eaow8Z+WZ49pz0xWh2Gu dGKaSbZ5Vuxlia/cGHC60/77DwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFFpHLda8 zOLNYrc5eF4beD+urVgNMB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQzNDUvRUM3OENEREEwNTM4MTFFQUI1ODk3NjY4QzRGOUFFMDIvMDg0Rjk5MzQ3 OTA1MTFGMUJBQjNGMDAwNjRBMzBGQkMucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCZwdwAwQDemNgAwQEyn1AAwQFy1OgAwQBy78gMA0EAgACMAcDBQAk B/BAMA0GCSqGSIb3DQEBCwUAA4IBAQDO3ofRiJzRN0lwyUceuBJJuT4k2Pr8I2Lv jjEKe/FLYDQbPs61yP/kTGTfokbrUZLarxoGEe/jO9oGJy+wjaiJCRNWENohZDGy Dr2Tma86x62DPfBkm3Jb/bftWVhGLTlXkb6fjykZY4WAGn3meL8czRATgzaIQsS+ mDvPiVsoVBKsGsZYwUCyJQaw22csvBTM63i/GpKBrf/sXoPNX0xxXM3vaqfEg6+c c3MxCEtVhGbUUKkbqx6uAoLyxaqsVE4XB8+1wCuv4VVlZdPV9OE7ZXeTSk1/DJCt f1YCTf/KsoZ37wjgq91/62MH4Tp6q/lFlPIA+DV7+RQ+DduumFZT -----END CERTIFICATE-----Generated at Fri Jul 24 02:34:13 2026 by rpki-client