$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/025F93342CC111F18F49A0CD8E833773.roa File: 025F93342CC111F18F49A0CD8E833773.roa (raw, json) Hash identifier: 9OxQnJdbcQDzkvTkGEhjvJVE/K7YZ3jW1C9gUIBfMOo= Subject key identifier: 24:D9:15:B7:8B:FC:68:CF:15:38:3D:8B:35:8C:63:ED:76:1A:B8:11 Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Certificate serial: 06E4 Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/025F93342CC111F18F49A0CD8E833773.roa Signing time: Fri 10 Jul 2026 07:18:50 +0000 ROA not before: Fri 10 Jul 2026 07:18:50 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 134143 IP address blocks: 14.102.164.0/24 maxlen: 24 14.102.165.0/24 maxlen: 24 14.102.166.0/24 maxlen: 24 45.248.196.0/22 maxlen: 24 103.4.55.0/24 maxlen: 24 103.55.92.0/24 maxlen: 24 103.55.93.0/24 maxlen: 24 103.55.94.0/24 maxlen: 24 103.55.95.0/24 maxlen: 24 103.133.52.0/22 maxlen: 24 103.217.164.0/22 maxlen: 24 103.228.104.0/22 maxlen: 24 2405:e180::/28 maxlen: 28 2405:e180::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1764 (0x6e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Validity Not Before: Jul 10 07:18:50 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a509cd9-a507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f3:59:89:c9:6a:2c:dd:d2:20:6a:a6:25:24: 54:ef:bf:e3:3b:1d:a4:cb:9f:41:2e:79:11:43:ab: 98:4c:98:cb:4d:25:4e:a0:49:db:be:59:db:6a:1a: 8b:f2:59:32:40:d6:99:23:7c:14:0c:fa:27:3a:5e: a7:7f:79:4a:1b:93:53:1c:7f:00:f8:a7:00:24:88: cf:7c:4d:f2:17:44:bf:3f:a5:62:ee:15:12:c0:e0: b6:7f:c3:c1:5a:ed:47:7b:f2:f9:98:40:3d:64:39: 76:09:4b:9c:41:26:47:d3:36:be:06:79:08:30:d0: 8e:9e:bf:22:c6:87:4c:0e:10:0c:88:bd:66:99:fb: 46:bf:3e:0d:93:b7:14:47:f4:33:af:a8:a4:af:b4: 28:b8:2f:cf:74:06:8e:ee:64:51:a7:6a:ea:42:36: 94:2f:37:41:0f:64:76:66:21:e7:0d:b6:9b:d1:80: 53:3f:43:85:37:9b:b6:e4:5a:3c:d2:57:93:95:2c: 7c:08:7a:3d:0c:da:3a:70:81:6c:dc:6f:cd:65:9d: a6:a1:05:b7:66:9b:90:e1:e0:6b:eb:26:98:c6:9f: 57:0f:c0:df:43:b0:2d:d4:0f:0c:ad:7e:64:1b:55: 5e:35:f8:fa:20:98:ee:d1:51:d4:ba:1e:ad:37:fb: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D9:15:B7:8B:FC:68:CF:15:38:3D:8B:35:8C:63:ED:76:1A:B8:11 X509v3 Authority Key Identifier: keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/025F93342CC111F18F49A0CD8E833773.roa sbgp-ipAddrBlock: critical IPv4: 14.102.164.0-14.102.166.255 45.248.196.0/22 103.4.55.0/24 103.55.92.0/22 103.133.52.0/22 103.217.164.0/22 103.228.104.0/22 IPv6: 2405:e180::/28 Signature Algorithm: sha256WithRSAEncryption 2c:78:fb:bb:7e:22:e1:11:ba:e6:76:80:3f:ff:b2:06:dd:c0: f9:81:c1:6c:5d:c4:bb:c8:e3:a0:56:c5:14:cd:14:6f:bb:32: d0:57:bf:09:1e:78:5e:fc:6a:6a:b0:1a:5d:dd:f8:3d:c5:5c: 44:84:09:f7:0b:f0:0b:ed:c2:be:8e:0a:fe:f7:58:2b:58:dc: 4c:cf:02:18:19:23:36:80:c5:04:a1:85:2f:ae:c4:75:86:c0: 39:90:3a:94:a8:35:c1:d8:c7:c4:fe:c7:a9:02:e2:6b:3e:e3: fa:93:5d:c7:25:35:b8:b9:61:90:d8:d8:5f:38:98:59:aa:d6: 74:ef:58:0b:0f:12:ae:b3:30:c4:52:9e:c2:b0:c9:9e:c1:85: d2:4b:a6:6e:36:ab:5b:98:5b:da:3c:61:92:00:97:c1:4d:c9: 24:99:e9:de:2f:70:6b:71:a5:28:c8:aa:fd:6a:49:43:bb:c1: 73:22:10:b6:43:8f:17:d5:36:3d:8c:2a:4c:b5:e4:ea:89:ea: fd:f9:22:a4:33:89:47:9a:1f:e6:be:23:eb:6a:b5:a4:46:7c: 90:df:3e:b2:a2:93:e9:10:4e:5c:4f:b2:3e:d2:84:46:69:5d: 8c:11:94:3f:24:3d:d9:25:10:71:ae:41:de:a9:5f:7e:d8:40: dc:eb:a4:08 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKEVDMzZBRjU5NzkwOTFDNkJGQTU4MEVBM0JBMjI1Nzc5 MzU3NTcwRDcwHhcNMjYwNzEwMDcxODUwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTUwOWNkOS1hNTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vNZiclqLN3SIGqmJSRU77/jOx2ky59BLnkRQ6uYTJjLTSVOoEnbvlnbahqL 8lkyQNaZI3wUDPonOl6nf3lKG5NTHH8A+KcAJIjPfE3yF0S/P6Vi7hUSwOC2f8PB Wu1He/L5mEA9ZDl2CUucQSZH0za+BnkIMNCOnr8ixodMDhAMiL1mmftGvz4Nk7cU R/Qzr6ikr7QouC/PdAaO7mRRp2rqQjaULzdBD2R2ZiHnDbab0YBTP0OFN5u25Fo8 0leTlSx8CHo9DNo6cIFs3G/NZZ2moQW3ZpuQ4eBr6yaYxp9XD8DfQ7At1A8MrX5k G1VeNfj6IJju0VHUuh6tN/seHwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCTZFbeL /GjPFTg9izWMY+12GrgRMB8GA1UdIwQYMBaAFOw2r1l5CRxr+lgOo7oiV3k1dXDX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC9EM0MwMTkwQ0JC OUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhHdjZXQTZqdWlKWGVUVjFj TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEYXZXWGtKSEd2NldBNmp1aUpYZVRWMWNOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc1NzgvRDNDMDE5MENCQjlEMTFFQjg0RjczQjNBQzRGOUFFMDIvMDI1RjkzMzQy Q0MxMTFGMThGNDlBMENEOEU4MzM3NzMucm9hMFoGCCsGAQUFBwEHAQH/BEswSTA4 BAIAATAyMAwDBAIOZqQDBAAOZqYDBAIt+MQDBABnBDcDBAJnN1wDBAJnhTQDBAJn 2aQDBAJn5GgwDQQCAAIwBwMFBCQF4YAwDQYJKoZIhvcNAQELBQADggEBACx4+7t+ IuERuuZ2gD//sgbdwPmBwWxdxLvI46BWxRTNFG+7MtBXvwkeeF78amqwGl3d+D3F XESECfcL8Avtwr6OCv73WCtY3EzPAhgZIzaAxQShhS+uxHWGwDmQOpSoNcHYx8T+ x6kC4ms+4/qTXcclNbi5YZDY2F84mFmq1nTvWAsPEq6zMMRSnsKwyZ7BhdJLpm42 q1uYW9o8YZIAl8FNySSZ6d4vcGtxpSjIqv1qSUO7wXMiELZDjxfVNj2MKky15OqJ 6v35IqQziUeaH+a+I+tqtaRGfJDfPrKik+kQTlxPsj7ShEZpXYwRlD8kPdklEHGu Qd6pX37YQNzrpAg= -----END CERTIFICATE-----Generated at Thu Jul 23 19:07:48 2026 by rpki-client