$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/A5B7D874091F11EFA6EDE141C4F9AE02.roa File: A5B7D874091F11EFA6EDE141C4F9AE02.roa (raw, json) Hash identifier: RRHBbu8CLmSmiPxmYAkEV9Yq+PqsqGzcbre4j4oCADM= Subject key identifier: 5F:31:1B:B6:84:7E:1D:54:F1:6D:26:4C:BB:0F:66:A2:45:D1:D7:0A Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Certificate serial: 0F54 Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/A5B7D874091F11EFA6EDE141C4F9AE02.roa Signing time: Tue 30 Jun 2026 18:22:41 +0000 ROA not before: Tue 30 Jun 2026 18:22:41 +0000 ROA not after: Fri 30 Oct 2026 00:00:00 +0000 asID: 136617 IP address blocks: 103.94.68.0/22 maxlen: 24 203.109.36.0/22 maxlen: 22 203.109.36.0/24 maxlen: 24 203.109.37.0/24 maxlen: 24 203.109.38.0/24 maxlen: 24 203.109.39.0/24 maxlen: 24 2401:35c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3924 (0xf54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Validity Not Before: Jun 30 18:22:41 2026 GMT Not After : Oct 30 00:00:00 2026 GMT Subject: CN=6a440971-de3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:34:20:b2:9c:39:0d:f2:61:74:0d:3f:1d: 1c:cb:fe:f3:9f:60:fd:4d:3b:f7:f7:5b:42:55:0a: 45:ba:be:c1:71:59:5e:b6:84:9b:9f:5a:d3:b7:5c: bd:bb:21:d0:96:de:81:0b:c3:cd:61:f0:f4:8a:02: 20:16:fa:69:1c:ba:25:17:f2:3f:48:c7:2e:40:41: 5a:5f:b9:51:c5:38:ad:9f:d3:a6:2e:14:f7:20:e4: 88:fd:0d:0e:00:1a:0f:d6:fb:81:b2:f4:87:41:bf: f2:d4:e6:87:6e:40:26:18:32:c5:28:c8:93:fa:b7: 03:b3:71:90:72:56:17:8b:55:53:f1:b5:a1:ea:9e: c9:76:d2:19:37:53:24:90:f6:5b:bf:b9:1d:66:df: f0:fe:87:2c:d8:3a:83:82:5f:6e:bf:de:50:8c:23: f0:6f:e3:44:d6:76:96:65:4f:13:e0:95:25:63:fd: 44:f6:5f:6d:7f:a5:93:f7:52:21:7a:c3:23:94:d6: 38:32:c1:4e:0b:25:14:28:5b:0f:59:85:39:94:13: 12:6c:7d:59:79:81:0e:79:e4:05:37:c5:13:72:59: 81:dc:02:dd:b5:5a:7d:ca:93:33:de:fe:5d:40:75: 90:8c:9b:85:95:d1:f7:66:72:ec:27:15:c6:68:93: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:31:1B:B6:84:7E:1D:54:F1:6D:26:4C:BB:0F:66:A2:45:D1:D7:0A X509v3 Authority Key Identifier: keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/A5B7D874091F11EFA6EDE141C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.94.68.0/22 203.109.36.0/22 IPv6: 2401:35c0::/32 Signature Algorithm: sha256WithRSAEncryption 14:46:d7:ad:81:d2:b3:02:16:0e:4c:25:05:18:b8:4c:3f:b7: 16:c6:fe:5e:1a:d4:fc:c5:17:44:a6:a4:c6:b1:2f:72:29:11: e4:b3:a6:f1:3f:37:d4:82:d9:1f:d2:18:c3:af:43:e7:81:62: bd:59:52:ba:ef:13:65:82:ec:53:cb:23:45:ae:b4:6f:d0:44: 9b:36:02:c7:f1:f4:73:05:49:31:45:f6:b7:5f:8a:55:50:ec: d9:e7:63:b4:c5:6d:39:e0:67:d7:b7:5b:10:5c:a7:66:f4:c4: 26:51:fd:f8:ff:a3:a1:e4:01:93:11:b0:4f:e7:5d:e0:77:d7: 2a:50:6d:0d:e3:69:4b:ba:9b:e8:86:1a:b5:b8:ff:4d:f1:0d: 55:09:bc:bc:36:95:b1:70:17:d3:bc:6d:8c:50:48:03:b3:bd: 4f:b4:db:1d:33:b1:d5:ad:ae:fd:62:7d:e7:d7:15:8c:10:2c: 43:16:fb:8f:f7:82:7a:aa:1e:91:b2:46:70:41:55:1b:5e:08: 82:f8:08:9f:b1:77:54:2a:d1:fa:24:d4:f9:7f:ef:41:f4:42: 8c:c5:11:3f:49:97:55:12:b1:f3:f5:d7:96:c9:0f:3c:ba:43: 59:b3:ce:be:75:39:b7:6b:73:00:8d:f7:23:a7:12:42:df:a0: 37:ca:91:b7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICD1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5 N0VDNUQ1RDYwHhcNMjYwNjMwMTgyMjQxWhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0MDk3MS1kZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3o0ILKcOQ3yYXQNPx0cy/7zn2D9TTv391tCVQpFur7BcVletoSbn1rTt1y9 uyHQlt6BC8PNYfD0igIgFvppHLolF/I/SMcuQEFaX7lRxTitn9OmLhT3IOSI/Q0O ABoP1vuBsvSHQb/y1OaHbkAmGDLFKMiT+rcDs3GQclYXi1VT8bWh6p7JdtIZN1Mk kPZbv7kdZt/w/ocs2DqDgl9uv95QjCPwb+NE1naWZU8T4JUlY/1E9l9tf6WT91Ih esMjlNY4MsFOCyUUKFsPWYU5lBMSbH1ZeYEOeeQFN8UTclmB3ALdtVp9ypMz3v5d QHWQjJuFldH3ZnLsJxXGaJOEjwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFF8xG7aE fh1U8W0mTLsPZqJF0dcKMB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3 RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ2NjgvN0M5MDA5QUM5N0YxMTFFOUEyRTUxOTgxQzRGOUFFMDIvQTVCN0Q4NzQw OTFGMTFFRkE2RURFMTQxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ15EAwQCy20kMA0EAgACMAcDBQAkATXAMA0GCSqGSIb3DQEBCwUA A4IBAQAURtetgdKzAhYOTCUFGLhMP7cWxv5eGtT8xRdEpqTGsS9yKRHks6bxPzfU gtkf0hjDr0PngWK9WVK67xNlguxTyyNFrrRv0ESbNgLH8fRzBUkxRfa3X4pVUOzZ 52O0xW054GfXt1sQXKdm9MQmUf34/6Oh5AGTEbBP513gd9cqUG0N42lLupvohhq1 uP9N8Q1VCby8NpWxcBfTvG2MUEgDs71PtNsdM7HVra79Yn3n1xWMECxDFvuP94J6 qh6RskZwQVUbXgiC+AifsXdUKtH6JNT5f+9B9EKMxRE/SZdVErHz9deWyQ88ukNZ s86+dTm3a3MAjfcjpxJC36A3ypG3 -----END CERTIFICATE-----Generated at Fri Jul 24 09:27:18 2026 by rpki-client