$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BE243D98CCE311EAA397205EC4F9AE02.roa File: BE243D98CCE311EAA397205EC4F9AE02.roa (raw, json) Hash identifier: u1RDbYNdHTAW3BTDzKScEWLA3q8xl+IocU5STlH9Ois= Subject key identifier: A3:B0:B7:A0:CD:CA:F8:70:1A:C1:52:F5:19:6C:79:D2:04:35:E3:F4 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 0924 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BE243D98CCE311EAA397205EC4F9AE02.roa Signing time: Fri 10 Jul 2026 21:21:37 +0000 ROA not before: Fri 10 Jul 2026 21:21:37 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 134179 IP address blocks: 103.57.0.0/22 maxlen: 22 103.57.0.0/24 maxlen: 24 103.57.1.0/24 maxlen: 24 103.57.2.0/24 maxlen: 24 103.57.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Jul 10 21:21:37 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a516261-464b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:da:9c:c8:ae:52:90:f2:5b:dd:3f:24:cc:31: 1f:45:8d:9d:f5:86:a5:13:a2:ee:86:87:a0:ab:f7: e4:42:c6:72:f9:eb:90:37:5d:bd:53:e4:3d:6c:18: 3a:a9:b2:aa:aa:f0:4e:90:27:6b:6d:2b:1b:50:34: 63:6f:5e:6c:ba:a1:4f:ea:5e:99:91:10:6c:bf:1c: 59:53:a3:27:d2:1e:08:0e:05:49:ec:a0:5a:f4:18: 59:9a:ad:94:55:d2:96:66:84:77:e1:78:5a:4d:c1: d0:3c:86:70:f2:e5:9a:56:c5:fb:51:d6:72:79:98: bc:08:67:a3:cc:a0:e3:05:7e:9a:3e:a2:9f:72:a7: 1c:12:2c:68:36:40:cf:17:67:26:4f:04:7c:04:4d: 8d:5d:42:41:ff:46:5e:f3:b2:92:82:ca:44:91:59: d1:e7:64:78:c6:0a:04:50:ac:d7:96:58:b5:49:02: 5c:6a:cb:8f:c4:4b:c4:80:ca:96:e2:bb:a0:35:bb: 37:66:66:c4:bf:40:3a:a7:18:6f:70:1a:75:98:cb: e1:93:c3:7f:d3:ae:c3:65:18:7a:37:ee:b5:1b:cc: 26:77:72:8b:90:7c:d5:b2:ea:5d:a1:2d:83:46:47: b5:01:90:1f:8c:e0:93:47:fb:ef:f8:a9:81:a8:e9: 24:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B0:B7:A0:CD:CA:F8:70:1A:C1:52:F5:19:6C:79:D2:04:35:E3:F4 X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BE243D98CCE311EAA397205EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.57.0.0/22 Signature Algorithm: sha256WithRSAEncryption c9:d4:d0:63:cf:f5:5f:98:41:a5:9a:86:79:31:cb:03:3e:12: 9d:ce:71:d2:19:0f:3f:dc:c1:d7:ef:a1:69:84:e0:e9:6c:73: 2f:a9:f4:69:dc:87:44:90:90:03:67:04:77:a9:39:dd:70:ea: 79:88:68:0c:15:dc:f3:ba:50:a9:9d:33:07:b4:31:ff:33:28: 6b:46:6e:67:18:6e:fe:88:67:37:0b:ff:7b:ae:86:95:07:95: 2f:bf:49:13:6f:c9:5d:55:72:b4:5f:79:b1:d3:14:b6:15:29: 86:00:bf:01:d4:6f:be:db:41:7a:8d:e0:f6:12:09:9f:8f:34: 2b:d8:5c:68:2d:f0:06:4a:12:fd:0e:0f:d2:ef:df:a4:8c:36: 15:0d:7c:c9:f4:70:4d:71:77:8a:e2:b9:f5:8b:75:a7:a3:e9: 35:a2:66:a9:7c:52:be:76:8c:89:f9:67:ac:85:a4:50:a6:dc: 14:bd:5b:cd:6f:7b:30:ed:d2:28:7d:cb:bf:41:71:6b:f6:b9: c3:7c:ff:30:e6:5c:53:3a:87:df:5f:d5:88:40:ef:fb:07:30: f1:bf:f5:f0:c4:32:4f:5f:a0:66:85:ac:1c:1d:81:c1:6f:2e: 48:de:93:c8:e6:eb:8d:98:1c:e9:d1:e0:8c:ec:8d:14:2d:88: e3:b3:22:5c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjYwNzEwMjEyMTM3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTUxNjI2MS00NjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdqcyK5SkPJb3T8kzDEfRY2d9YalE6Luhoegq/fkQsZy+euQN129U+Q9bBg6 qbKqqvBOkCdrbSsbUDRjb15suqFP6l6ZkRBsvxxZU6Mn0h4IDgVJ7KBa9BhZmq2U VdKWZoR34XhaTcHQPIZw8uWaVsX7UdZyeZi8CGejzKDjBX6aPqKfcqccEixoNkDP F2cmTwR8BE2NXUJB/0Ze87KSgspEkVnR52R4xgoEUKzXlli1SQJcasuPxEvEgMqW 4rugNbs3ZmbEv0A6pxhvcBp1mMvhk8N/067DZRh6N+61G8wmd3KLkHzVsupdoS2D Rke1AZAfjOCTR/vv+KmBqOkkVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKOwt6DN yvhwGsFS9RlsedIENeP0MB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwQzAvMDIyREJDQTRDQ0UzMTFFQUFGNzNGQzVEQzRGOUFFMDIvQkUyNDNEOThD Q0UzMTFFQUEzOTcyMDVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZzkAMA0GCSqGSIb3DQEBCwUAA4IBAQDJ1NBjz/VfmEGlmoZ5McsD PhKdznHSGQ8/3MHX76FphODpbHMvqfRp3IdEkJADZwR3qTndcOp5iGgMFdzzulCp nTMHtDH/MyhrRm5nGG7+iGc3C/97roaVB5Uvv0kTb8ldVXK0X3mx0xS2FSmGAL8B 1G++20F6jeD2EgmfjzQr2FxoLfAGShL9Dg/S79+kjDYVDXzJ9HBNcXeK4rn1i3Wn o+k1omapfFK+doyJ+WeshaRQptwUvVvNb3sw7dIofcu/QXFr9rnDfP8w5lxTOoff X9WIQO/7BzDxv/XwxDJPX6BmhawcHYHBby5I3pPI5uuNmBzp0eCM7I0ULYjjsyJc -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:34 2026 by rpki-client