$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/AE41D3E686EF11F19E006003A7EE528E.roa File: AE41D3E686EF11F19E006003A7EE528E.roa (raw, json) Hash identifier: AgcvV/dXbT5F+oY6eDB2LCjjVO6gOEqwvR/1+5WD8VA= Subject key identifier: 9D:D8:25:17:43:F9:7E:B5:82:4D:7B:F0:76:2D:35:F4:D6:C7:19:46 Certificate issuer: /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Certificate serial: 205A Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/AE41D3E686EF11F19E006003A7EE528E.roa Signing time: Thu 23 Jul 2026 23:39:00 +0000 ROA not before: Thu 23 Jul 2026 23:39:00 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38719 IP address blocks: 103.68.164.0/22 maxlen: 22 103.68.164.0/24 maxlen: 24 103.68.165.0/24 maxlen: 24 103.68.166.0/24 maxlen: 24 103.68.167.0/24 maxlen: 24 2400:8240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 01:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8282 (0x205a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Validity Not Before: Jul 23 23:39:00 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6a62a614-0c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:30:78:73:b1:5f:1a:02:73:99:c1:87:1f: 18:19:13:35:12:b5:40:a2:4b:7f:ae:51:9a:e8:ed: b0:35:66:05:b5:a5:15:1a:55:8c:39:0d:96:29:ab: 11:a3:e5:0b:6e:f9:d8:15:63:d3:79:8d:56:f2:a7: 1b:18:fe:b2:af:af:af:ef:ca:f9:b7:8b:00:59:c0: 6e:81:9b:35:56:57:fe:17:db:d8:b5:9a:08:4b:ab: cf:1f:a9:cd:09:61:14:58:de:19:bb:1a:15:d8:09: a6:48:ee:41:71:07:08:a8:61:19:1e:c9:01:ae:12: 47:23:a4:b2:ed:6d:85:7f:39:e5:11:99:c7:30:93: 12:7f:6d:a7:44:95:1e:09:e2:ff:f3:d2:22:6e:71: 57:3a:eb:bc:f6:47:fc:46:bb:70:84:2d:c8:c9:6a: 35:1d:8f:37:a8:83:35:71:16:66:c7:80:8f:68:79: 70:7b:4d:fa:2a:0c:c0:79:1c:64:dd:b9:87:7d:70: 25:32:29:c1:14:d4:31:a9:0e:a4:39:e8:7d:57:72: f6:d2:2f:99:97:a8:71:f5:37:ce:92:65:f9:02:61: 09:9f:c3:85:e5:b0:a8:d1:2a:0f:98:1f:62:7d:5e: 7e:5c:9d:ed:34:19:ed:0a:3d:29:7f:ed:58:ad:77: 35:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D8:25:17:43:F9:7E:B5:82:4D:7B:F0:76:2D:35:F4:D6:C7:19:46 X509v3 Authority Key Identifier: keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/AE41D3E686EF11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.68.164.0/22 IPv6: 2400:8240::/32 Signature Algorithm: sha256WithRSAEncryption 7a:de:a0:39:fe:4d:ee:cc:cd:ce:28:70:35:3e:c4:26:3c:67: ce:57:b3:60:ec:5d:5c:de:9e:3c:a6:39:72:f6:42:9c:c8:02: 1d:6f:5d:9a:23:45:51:51:d0:15:b4:d5:85:3b:23:ee:83:fa: 07:ba:c5:02:3d:3c:77:c5:5e:c3:ba:83:a6:e9:9d:59:c3:5c: b1:f0:69:c6:bf:6a:54:51:1b:8a:87:5a:13:9d:f7:98:8d:9a: da:d0:40:e6:d7:81:7f:98:99:99:ac:54:2b:bb:13:da:8f:93: 86:d4:50:bb:f0:b9:f1:f8:cd:7a:5f:b4:c5:55:dc:39:2b:71: 40:93:46:9a:5a:90:f8:79:df:f9:15:7c:89:c5:d2:a5:f9:78: e4:bc:e9:b5:ce:86:df:b2:df:de:1f:21:86:7a:24:1f:ed:0e: 67:92:a4:31:1e:cc:97:e6:54:5e:ab:b3:65:ac:4b:61:53:63: 93:13:8e:e6:0e:4b:cd:b4:d4:23:42:98:58:6f:2a:f8:46:3c: 1c:90:93:49:16:af:20:62:ed:73:1a:32:6a:69:e9:fb:2e:09: 56:36:fd:ef:01:7a:32:44:83:42:84:d3:02:22:c9:63:4d:49: 72:fc:f4:51:ea:3a:91:69:d7:ac:0b:d6:c3:08:c9:80:06:6b: e6:71:b3:f6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICIFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI0MEIxMTAvBgNVBAUTKDJBNkYxMjA0MTJEODIwRjlGRjI0Q0QwNUQ1RUNGNDlF NjYyRDk5Q0EwHhcNMjYwNzIzMjMzOTAwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTYxNC0wYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMEweHOxXxoCc5nBhx8YGRM1ErVAokt/rlGa6O2wNWYFtaUVGlWMOQ2WKasR o+ULbvnYFWPTeY1W8qcbGP6yr6+v78r5t4sAWcBugZs1Vlf+F9vYtZoIS6vPH6nN CWEUWN4ZuxoV2AmmSO5BcQcIqGEZHskBrhJHI6Sy7W2FfznlEZnHMJMSf22nRJUe CeL/89IibnFXOuu89kf8RrtwhC3IyWo1HY83qIM1cRZmx4CPaHlwe036KgzAeRxk 3bmHfXAlMinBFNQxqQ6kOeh9V3L20i+Zl6hx9TfOkmX5AmEJn8OF5bCo0SoPmB9i fV5+XJ3tNBntCj0pf+1YrXc1IwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJ3YJRdD +X61gk178HYtNfTWxxlGMB8GA1UdIwQYMBaAFCpvEgQS2CD5/yTNBdXs9J5mLZnK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjQwQi81QjczNkQ5MjQz MzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQbl9KTTBGMWV6MG5tWXRt Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ttOFNCQkxZSVBuX0pNMEYxZXowbm1ZdG1jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjI0MEIvNUI3MzZEOTI0MzMzMTFFNjk1OUE3ODE1QzRGOUFFMDIvQUU0MUQzRTY4 NkVGMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ0SkMA0EAgACMAcDBQAkAIJAMA0GCSqGSIb3DQEBCwUAA4IBAQB6 3qA5/k3uzM3OKHA1PsQmPGfOV7Ng7F1c3p48pjly9kKcyAIdb12aI0VRUdAVtNWF OyPug/oHusUCPTx3xV7DuoOm6Z1Zw1yx8GnGv2pUURuKh1oTnfeYjZra0EDm14F/ mJmZrFQruxPaj5OG1FC78Lnx+M16X7TFVdw5K3FAk0aaWpD4ed/5FXyJxdKl+Xjk vOm1zobfst/eHyGGeiQf7Q5nkqQxHsyX5lReq7NlrEthU2OTE47mDkvNtNQjQphY byr4RjwckJNJFq8gYu1zGjJqaen7LglWNv3vAXoyRINChNMCIsljTUly/PRR6jqR adesC9bDCMmABmvmcbP2 -----END CERTIFICATE-----Generated at Fri Jul 24 15:28:12 2026 by rpki-client