$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/3C5B5EF4FDC011F0B8AD40E9676F56BC.roa File: 3C5B5EF4FDC011F0B8AD40E9676F56BC.roa (raw, json) Hash identifier: z+YkDVCxHIqN3QUlYGYvRtLpkeGO91vbNLFc9h3UONw= Subject key identifier: 52:83:2F:21:59:9F:9F:C1:E8:94:7D:A0:3C:E0:74:22:DA:60:50:74 Certificate issuer: /CN=A91F5DFB/serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F Certificate serial: 4E Authority key identifier: 2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/3C5B5EF4FDC011F0B8AD40E9676F56BC.roa Signing time: Wed 17 Jun 2026 08:38:41 +0000 ROA not before: Wed 17 Jun 2026 08:38:41 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 45243 IP address blocks: 103.246.224.0/22 maxlen: 22 103.246.224.0/24 maxlen: 24 103.246.225.0/24 maxlen: 24 103.246.226.0/24 maxlen: 24 103.246.227.0/24 maxlen: 24 203.212.24.0/22 maxlen: 22 203.212.24.0/24 maxlen: 24 203.212.25.0/24 maxlen: 24 203.212.26.0/24 maxlen: 24 203.212.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5DFB, serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F Validity Not Before: Jun 17 08:38:41 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a325d10-24a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:42:ae:bc:b1:6e:bc:5f:60:c1:cc:70:c9: b6:a4:10:04:e9:0c:a1:07:a6:21:db:7d:e3:3e:fb: ec:3a:9d:cb:d9:89:f4:39:7a:46:a3:dd:41:e0:66: 2d:3a:ff:7f:60:55:cd:98:9d:50:2d:85:64:c8:77: 8b:7b:9a:da:df:d6:22:23:e2:9d:33:19:06:db:f9: 88:60:64:2d:63:79:82:58:52:1c:0d:6b:12:f8:b9: 65:cc:9a:08:8b:36:b8:84:03:d1:f8:d3:f0:65:cc: bb:4e:08:63:75:4c:d5:cf:b7:ca:57:6c:ee:ce:09: a3:47:6d:03:1f:3e:38:68:13:5b:f4:4e:1d:63:de: 4c:bd:97:da:9c:39:d7:dc:24:14:e9:ac:09:43:83: 9a:f0:2f:06:07:7a:54:f0:55:a0:74:b7:e6:29:f3: 39:e0:f5:95:ee:c7:34:ff:ca:1c:a8:43:7a:bd:03: 10:7d:21:8d:d3:41:80:71:13:2f:80:e8:50:29:4c: cd:29:03:a2:c4:b0:84:66:42:82:34:0e:f2:42:a5: 96:d9:f4:41:40:aa:c6:1a:b5:97:b0:f1:4d:13:31: e2:85:20:1c:e9:ca:c7:59:9e:9b:7d:ec:08:93:de: b9:b0:4b:aa:6b:19:18:fc:35:e0:a6:fe:d5:78:fb: 31:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:83:2F:21:59:9F:9F:C1:E8:94:7D:A0:3C:E0:74:22:DA:60:50:74 X509v3 Authority Key Identifier: keyid:2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/3C5B5EF4FDC011F0B8AD40E9676F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.246.224.0/22 203.212.24.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:84:e9:a7:eb:d2:12:66:43:ec:ef:c3:2f:30:f7:18:58:7a: 3d:a4:a7:2f:d7:92:17:21:7d:18:95:ec:3b:42:79:cd:07:3d: c4:6c:19:b3:17:0f:e6:42:c6:26:6a:cc:58:d9:d6:a5:dd:2f: 8f:b2:3f:e5:1d:9c:55:1b:05:15:d2:4b:e4:f6:33:d1:25:fd: 06:46:84:1f:d6:5c:63:40:8c:29:49:52:b1:88:de:10:b8:2b: 53:3a:1b:a6:cf:4b:6c:17:d1:58:10:e6:d2:a6:0a:7c:8b:b3: 85:f2:d8:17:05:e1:7b:b0:08:37:f4:90:6c:a9:5f:01:78:54: 3c:fe:94:bd:b9:a5:0f:f2:7d:10:e6:66:ca:01:7e:b1:1e:10: 57:88:a7:5b:04:93:4f:57:c1:e2:42:a2:0d:da:2e:d1:0e:f0: a3:4d:b6:6e:39:ce:bc:d6:59:b1:97:d1:f9:5e:8b:52:e4:06: f9:8f:7a:9d:e2:95:67:ae:94:b4:5c:92:24:c8:81:39:22:3a: 0e:0f:37:65:e8:b5:32:3d:12:9c:b8:d5:2a:cd:1d:b8:dc:4a: c1:29:2a:a5:42:41:50:f1:33:bd:d4:02:23:8e:a9:d0:3f:cc: df:7f:94:41:59:95:76:41:c2:45:82:43:45:92:f3:a3:2e:1d: cb:ae:1d:97 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NURGQjExMC8GA1UEBRMoMkZBOTcxQTYzQkMyNjNBRUI0REFFQkYyMEMyRkM3MTE4 M0NBNjQ4RjAeFw0yNjA2MTcwODM4NDFaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMzI1ZDEwLTI0YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn8EKuvLFuvF9gwcxwybakEATpDKEHpiHbfeM+++w6ncvZifQ5ekaj3UHgZi06 /39gVc2YnVAthWTId4t7mtrf1iIj4p0zGQbb+YhgZC1jeYJYUhwNaxL4uWXMmgiL NriEA9H40/BlzLtOCGN1TNXPt8pXbO7OCaNHbQMfPjhoE1v0Th1j3ky9l9qcOdfc JBTprAlDg5rwLwYHelTwVaB0t+Yp8zng9ZXuxzT/yhyoQ3q9AxB9IY3TQYBxEy+A 6FApTM0pA6LEsIRmQoI0DvJCpZbZ9EFAqsYatZew8U0TMeKFIBzpysdZnpt97AiT 3rmwS6prGRj8NeCm/tV4+zFPAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUUoMvIVmf n8HolH2gPOB0ItpgUHQwHwYDVR0jBBgwFoAUL6lxpjvCY6602uvyDC/HEYPKZI8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1REZCLzQ3Rjc0REU2RkRC RjExRjBBNUZFOENFNjY3NkY1NkJDL0w2bHhwanZDWTY2MDJ1dnlEQ19IRVlQS1pJ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDZseHBqdkNZNjYwMnV2eURDX0hFWVBLWkk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NURGQi80N0Y3NERFNkZEQkYxMUYwQTVGRThDRTY2NzZGNTZCQy8zQzVCNUVGNEZE QzAxMUYwQjhBRDQwRTk2NzZGNTZCQy5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAJn9uADBALL1BgwDQYJKoZIhvcNAQELBQADggEBAA+E6afr0hJmQ+zv wy8w9xhYej2kpy/XkhchfRiV7DtCec0HPcRsGbMXD+ZCxiZqzFjZ1qXdL4+yP+Ud nFUbBRXSS+T2M9El/QZGhB/WXGNAjClJUrGI3hC4K1M6G6bPS2wX0VgQ5tKmCnyL s4Xy2BcF4XuwCDf0kGypXwF4VDz+lL25pQ/yfRDmZsoBfrEeEFeIp1sEk09XweJC og3aLtEO8KNNtm45zrzWWbGX0flei1LkBvmPep3ilWeulLRckiTIgTkiOg4PN2Xo tTI9Epy41SrNHbjcSsEpKqVCQVDxM73UAiOOqdA/zN9/lEFZlXZBwkWCQ0WS86Mu HcuuHZc= -----END CERTIFICATE-----Generated at Fri Jul 24 03:56:45 2026 by rpki-client