$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/A4890D6473E511F185E76C018DA30FBC.roa File: A4890D6473E511F185E76C018DA30FBC.roa (raw, json) Hash identifier: ceMs0ZWVV6AYuiMcgooM25QQZcYhNLkc9LYFIIi0V2o= Subject key identifier: 76:F0:F0:E6:C9:F1:57:DD:71:2F:E8:AC:F3:27:FE:5E:2F:B0:76:BD Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0CD7 Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/A4890D6473E511F185E76C018DA30FBC.roa Signing time: Mon 29 Jun 2026 18:09:17 +0000 ROA not before: Mon 29 Jun 2026 18:09:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9387 IP address blocks: 103.11.60.0/24 maxlen: 24 113.203.233.0/24 maxlen: 24 113.203.234.0/24 maxlen: 24 113.203.235.0/24 maxlen: 24 113.203.236.0/24 maxlen: 24 113.203.237.0/24 maxlen: 24 113.203.238.0/24 maxlen: 24 113.203.239.0/24 maxlen: 24 113.203.240.0/24 maxlen: 24 180.178.128.0/24 maxlen: 24 180.178.129.0/24 maxlen: 24 180.178.132.0/24 maxlen: 24 180.178.133.0/24 maxlen: 24 180.178.134.0/24 maxlen: 24 180.178.135.0/24 maxlen: 24 180.178.136.0/24 maxlen: 24 180.178.137.0/24 maxlen: 24 180.178.138.0/24 maxlen: 24 180.178.139.0/24 maxlen: 24 180.178.172.0/24 maxlen: 24 180.178.174.0/24 maxlen: 24 180.178.175.0/24 maxlen: 24 2401:4100::/32 maxlen: 32 2401:4100::/33 maxlen: 33 2401:4100:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Jun 29 18:09:17 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a42b4cd-0364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:01:bd:15:48:f5:14:67:88:64:fa:78:ad: 24:c5:8a:ce:4d:bd:47:3f:ba:b5:2d:37:39:82:4f: c2:a8:ad:8f:03:1f:7b:c5:b8:8f:51:78:85:e7:b0: a9:bf:5c:a1:0f:45:d5:74:63:27:5b:66:75:ef:31: dc:dd:5b:b3:28:d3:fd:7f:af:48:f1:d5:fc:c0:9d: 0c:a4:5f:86:b4:92:f4:e9:12:a5:37:d6:ef:18:de: f8:c7:96:3d:f3:5d:a3:c1:f3:87:7b:d8:86:fe:97: db:82:51:ca:41:c9:26:bf:c7:f2:15:0d:29:f5:ba: 2f:f6:63:de:66:b0:4a:9e:97:d8:e1:09:50:f1:a1: 17:04:5d:0e:6e:fc:39:e9:bf:33:74:9a:26:e5:4f: b6:10:7f:88:a8:c5:db:32:62:3d:55:47:4a:34:bb: d0:c7:70:5a:44:5b:74:47:63:b6:0b:ac:b6:4a:71: 7a:60:49:3e:a1:f3:85:21:37:cc:fa:36:89:10:99: ac:2d:21:5d:48:ff:75:38:2e:4f:25:88:85:9b:b1: 24:37:0a:11:9c:c9:ea:cf:d3:12:14:7a:0e:e4:14: d4:2f:72:44:76:01:8e:5a:60:a1:b0:fd:68:e0:ba: 38:8a:34:3e:64:71:e6:47:9d:6f:9b:73:e9:11:5c: bf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F0:F0:E6:C9:F1:57:DD:71:2F:E8:AC:F3:27:FE:5E:2F:B0:76:BD X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/A4890D6473E511F185E76C018DA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.11.60.0/24 113.203.233.0-113.203.240.255 180.178.128.0/23 180.178.132.0-180.178.139.255 180.178.172.0/24 180.178.174.0/23 IPv6: 2401:4100::/32 Signature Algorithm: sha256WithRSAEncryption 45:a7:02:f5:69:c4:8c:70:13:41:ea:cd:d5:a7:15:a6:0a:f4: 37:32:96:12:b6:43:1b:b0:eb:28:71:a7:77:e5:82:fc:73:02: f4:46:86:e5:55:01:5a:51:7b:b8:ec:f7:5b:f1:4b:7e:d5:09: 0a:75:93:3c:fa:d1:29:ae:21:9f:07:f1:ca:1d:bb:da:51:0a: b2:7f:a0:1b:8e:10:63:43:34:01:d8:f3:be:9a:34:19:d3:cd: 42:bc:89:5c:74:d6:b2:ce:16:f2:7e:e9:14:58:d5:c1:16:20: 05:c2:d6:07:42:2e:86:81:89:dc:17:23:56:9a:22:18:f9:72: df:b9:0e:a8:cb:5c:4f:a3:a1:ed:45:9c:15:b4:d3:60:10:2d: 8a:5a:01:42:29:c0:a0:4c:e6:b9:e1:f9:3b:c4:ca:f6:02:5f: 60:2e:8c:41:1b:68:f9:8d:46:85:6c:ea:fc:91:f5:dd:1d:17: 11:b9:d4:e9:63:04:46:9f:b8:8f:54:f0:06:5f:f4:de:eb:90: 6d:bf:09:9a:cd:c9:fc:88:f6:48:83:8c:aa:74:7a:3d:5f:da: db:3e:c7:a9:e6:3b:7f:32:3f:f8:e1:2f:b8:e1:97:91:46:f7: c6:6c:df:8b:c9:82:c7:68:35:4a:10:7d:91:73:74:01:b8:ed: 6b:38:81:e4 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYwNjI5MTgwOTE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQyYjRjZC0wMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pQBvRVI9RRniGT6eK0kxYrOTb1HP7q1LTc5gk/CqK2PAx97xbiPUXiF57Cp v1yhD0XVdGMnW2Z17zHc3VuzKNP9f69I8dX8wJ0MpF+GtJL06RKlN9bvGN74x5Y9 812jwfOHe9iG/pfbglHKQckmv8fyFQ0p9bov9mPeZrBKnpfY4QlQ8aEXBF0Obvw5 6b8zdJom5U+2EH+IqMXbMmI9VUdKNLvQx3BaRFt0R2O2C6y2SnF6YEk+ofOFITfM +jaJEJmsLSFdSP91OC5PJYiFm7EkNwoRnMnqz9MSFHoO5BTUL3JEdgGOWmChsP1o 4Lo4ijQ+ZHHmR51vm3PpEVy/dwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFHbw8ObJ 8VfdcS/orPMn/l4vsHa9MB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY5RTcvNDZBQUQ2QjI5MDQwMTFFQUE2ODhCRTQ1QzRGOUFFMDIvQTQ4OTBENjQ3 M0U1MTFGMTg1RTc2QzAxOERBMzBGQkMucm9hMFwGCCsGAQUFBwEHAQH/BE0wSzA6 BAIAATA0AwQAZws8MAwDBABxy+kDBABxy/ADBAG0soAwDAMEArSyhAMEArSyiAME ALSyrAMEAbSyrjANBAIAAjAHAwUAJAFBADANBgkqhkiG9w0BAQsFAAOCAQEARacC 9WnEjHATQerN1acVpgr0NzKWErZDG7DrKHGnd+WC/HMC9EaG5VUBWlF7uOz3W/FL ftUJCnWTPPrRKa4hnwfxyh272lEKsn+gG44QY0M0Adjzvpo0GdPNQryJXHTWss4W 8n7pFFjVwRYgBcLWB0IuhoGJ3BcjVpoiGPly37kOqMtcT6Oh7UWcFbTTYBAtiloB QinAoEzmueH5O8TK9gJfYC6MQRto+Y1GhWzq/JH13R0XEbnU6WMERp+4j1TwBl/0 3uuQbb8Jms3J/Ij2SIOMqnR6PV/a2z7HqeY7fzI/+OEvuOGXkUb3xmzfi8mCx2g1 ShB9kXN0AbjtaziB5A== -----END CERTIFICATE-----Generated at Thu Jul 23 21:27:04 2026 by rpki-client