$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/3729B51E870611F18212677BADEE528E.roa File: 3729B51E870611F18212677BADEE528E.roa (raw, json) Hash identifier: KmqkE4g5dl2qjiw7G2tcNNphjk7q9UbrdXY3bWAn7D8= Subject key identifier: 8B:A2:40:EA:D4:12:52:44:A9:3C:3A:D4:7D:AF:AC:89:53:A0:9F:70 Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 3419 Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/3729B51E870611F18212677BADEE528E.roa Signing time: Fri 24 Jul 2026 02:20:19 +0000 ROA not before: Fri 24 Jul 2026 02:20:19 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 24482 IP address blocks: 49.213.16.0/20 maxlen: 21 49.213.20.0/24 maxlen: 24 49.213.28.0/22 maxlen: 22 103.14.244.0/22 maxlen: 24 116.251.208.0/20 maxlen: 22 116.251.208.0/24 maxlen: 24 116.251.209.0/24 maxlen: 24 116.251.210.0/24 maxlen: 24 116.251.211.0/24 maxlen: 24 116.251.212.0/24 maxlen: 24 116.251.213.0/24 maxlen: 24 116.251.214.0/24 maxlen: 24 116.251.215.0/24 maxlen: 24 116.251.216.0/24 maxlen: 24 116.251.217.0/24 maxlen: 24 116.251.218.0/24 maxlen: 24 116.251.219.0/24 maxlen: 24 116.251.220.0/24 maxlen: 24 116.251.221.0/24 maxlen: 24 116.251.222.0/24 maxlen: 24 116.251.223.0/24 maxlen: 24 124.6.32.0/20 maxlen: 24 124.6.48.0/21 maxlen: 24 163.47.176.0/22 maxlen: 24 203.175.160.0/20 maxlen: 24 2405:4200::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 03:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13337 (0x3419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Validity Not Before: Jul 24 02:20:19 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a62cbe3-954b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9b:77:fc:76:c6:70:1a:df:fe:9c:71:7f:9d: 35:4f:db:03:c2:45:03:a3:3e:51:90:9f:63:db:68: 70:e5:05:d9:8c:37:0f:77:68:3a:f3:dc:c7:15:5e: 9f:41:8e:29:20:79:9a:b6:89:62:12:58:7f:91:28: 82:a1:31:1b:00:59:a3:38:24:e5:63:7f:bf:be:01: 9f:7d:7e:f0:18:ff:50:d2:5a:99:91:f6:49:97:ad: db:a8:17:94:94:7c:82:5e:61:a5:fd:71:de:96:b3: 7b:e8:6a:66:01:06:79:20:ca:8b:83:c9:9a:47:fd: 2c:f1:05:df:e7:0e:ef:61:4a:b1:b7:76:0b:b9:bc: 50:54:87:e8:89:ae:58:d2:ea:62:44:02:42:e0:f3: e9:d0:a1:7d:3e:4f:1b:54:7b:d6:15:33:40:0e:af: c6:32:23:44:7a:fc:eb:c0:52:0f:69:d4:23:56:e0: 4e:65:d6:ac:ea:9e:96:bf:f1:55:3d:f3:11:75:af: ae:95:44:bd:ac:c0:9b:d6:f6:e2:68:7a:50:5b:0f: b3:ce:a6:8a:a9:b9:22:f7:9f:c6:0f:94:79:5d:3a: c1:d9:b0:ee:90:2b:8d:a9:92:d7:35:68:31:6b:cd: 48:25:c0:cb:6a:26:c4:9c:09:0b:75:b4:aa:43:7f: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A2:40:EA:D4:12:52:44:A9:3C:3A:D4:7D:AF:AC:89:53:A0:9F:70 X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/3729B51E870611F18212677BADEE528E.roa sbgp-ipAddrBlock: critical IPv4: 49.213.16.0/20 103.14.244.0/22 116.251.208.0/20 124.6.32.0-124.6.55.255 163.47.176.0/22 203.175.160.0/20 IPv6: 2405:4200::/32 Signature Algorithm: sha256WithRSAEncryption 2e:82:df:0f:96:67:35:40:ec:38:4d:6a:77:a2:71:5f:b1:82: 60:61:c8:97:06:7b:bc:c9:9c:76:d7:b9:0d:7e:45:98:fc:5e: 02:9c:fc:4c:a5:e1:0f:f5:df:25:f1:e1:90:98:ef:1a:2b:f8: 74:9f:e4:f9:84:89:e0:7a:c8:8b:89:b6:87:a1:25:1d:ae:e4: 32:e9:e2:c4:ef:b7:81:3c:31:ce:00:02:1a:f0:51:03:d4:dd: 74:57:42:b4:b1:72:e5:3b:31:56:b0:25:01:c9:87:d5:73:39: 9b:b0:68:46:98:d9:d2:59:63:11:e7:7c:3c:3b:9d:2c:14:98: 7f:f6:d9:30:89:43:0e:39:1e:93:80:0b:15:eb:95:a2:e5:f3: 8f:5c:06:33:30:2a:6d:7a:05:fe:c9:d8:0b:5e:be:10:eb:b0: ec:05:b6:4b:ee:44:f5:80:1b:99:cb:87:1c:35:75:3d:25:9e: 84:dd:c2:eb:e7:5c:db:5a:1d:da:5b:be:2d:00:73:62:9e:21: ab:74:e0:48:50:4a:31:76:28:9f:1b:68:75:c0:76:4f:7e:e5: 23:40:33:68:79:c9:aa:6d:2b:61:26:93:12:8d:41:03:30:17: bb:f0:75:b0:c4:4d:42:ca:4c:b7:eb:4a:a6:dd:92:53:a0:51: 75:09:7d:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjYwNzI0MDIyMDE5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyY2JlMy05NTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55t3/HbGcBrf/pxxf501T9sDwkUDoz5RkJ9j22hw5QXZjDcPd2g689zHFV6f QY4pIHmatoliElh/kSiCoTEbAFmjOCTlY3+/vgGffX7wGP9Q0lqZkfZJl63bqBeU lHyCXmGl/XHelrN76GpmAQZ5IMqLg8maR/0s8QXf5w7vYUqxt3YLubxQVIfoia5Y 0upiRAJC4PPp0KF9Pk8bVHvWFTNADq/GMiNEevzrwFIPadQjVuBOZdas6p6Wv/FV PfMRda+ulUS9rMCb1vbiaHpQWw+zzqaKqbki95/GD5R5XTrB2bDukCuNqZLXNWgx a81IJcDLaibEnAkLdbSqQ395vwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIuiQOrU ElJEqTw61H2vrIlToJ9wMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY4NjMvQkZFNTRBNjg4MTVCMTFFMjlCNThBNzNCMzI5MkI1RTgvMzcyOUI1MUU4 NzA2MTFGMTgyMTI2NzdCQURFRTUyOEUucm9hMFQGCCsGAQUFBwEHAQH/BEUwQzAy BAIAATAsAwQEMdUQAwQCZw70AwQEdPvQMAwDBAV8BiADBAN8BjADBAKjL7ADBATL r6AwDQQCAAIwBwMFACQFQgAwDQYJKoZIhvcNAQELBQADggEBAC6C3w+WZzVA7DhN aneicV+xgmBhyJcGe7zJnHbXuQ1+RZj8XgKc/Eyl4Q/13yXx4ZCY7xor+HSf5PmE ieB6yIuJtoehJR2u5DLp4sTvt4E8Mc4AAhrwUQPU3XRXQrSxcuU7MVawJQHJh9Vz OZuwaEaY2dJZYxHnfDw7nSwUmH/22TCJQw45HpOACxXrlaLl849cBjMwKm16Bf7J 2AtevhDrsOwFtkvuRPWAG5nLhxw1dT0lnoTdwuvnXNtaHdpbvi0Ac2KeIat04EhQ SjF2KJ8baHXAdk9+5SNAM2h5yaptK2EmkxKNQQMwF7vwdbDETULKTLfrSqbdklOg UXUJfdg= -----END CERTIFICATE-----Generated at Fri Jul 24 13:32:10 2026 by rpki-client