$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/E2DF828CF20211ECBCC9B986C4F9AE02.roa File: E2DF828CF20211ECBCC9B986C4F9AE02.roa (raw, json) Hash identifier: GXpK+pRpG+NlM+6tNcejzOKzO0QAHDY9K5I7GneuBi0= Subject key identifier: 3B:B4:28:C2:CD:0A:48:6A:B8:33:2A:08:CB:33:6C:01:DE:3C:41:9C Certificate issuer: /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Certificate serial: 0397 Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/E2DF828CF20211ECBCC9B986C4F9AE02.roa Signing time: Mon 29 Jun 2026 01:31:19 +0000 ROA not before: Mon 29 Jun 2026 01:31:18 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 149983 IP address blocks: 103.189.246.0/23 maxlen: 23 103.189.246.0/24 maxlen: 24 103.189.247.0/24 maxlen: 24 2001:df0:dfc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Validity Not Before: Jun 29 01:31:18 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a41cae6-5e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:30:d9:71:7b:d1:b5:58:f2:ab:04:b9:9c:5d: 49:9f:72:7c:a9:9b:a1:e6:78:d4:cf:c3:05:f2:c1: 54:1d:73:e8:37:37:c2:27:c4:37:f6:02:6f:60:87: e7:b2:6d:9b:88:2c:c5:1d:6e:60:aa:04:3d:e9:e2: 8c:d6:2d:88:e5:1b:56:56:f7:26:63:f6:4b:01:80: b0:f5:83:7a:14:d5:40:65:43:ed:7d:9b:88:fd:36: 94:19:f8:9e:43:60:c1:19:99:d6:44:39:ff:87:7f: 6e:e2:56:00:c1:85:cb:3b:6a:54:fc:c0:bc:0d:47: fb:9d:fb:d6:98:cc:22:cc:8f:1c:bd:69:9d:37:5d: 66:e5:e5:25:c3:f2:5c:79:1e:18:99:50:40:df:d3: be:12:9b:dc:b7:b9:80:ad:39:ae:0b:0c:c5:fc:f1: 10:61:84:9a:57:12:90:d3:da:ea:0f:80:b9:75:cf: eb:20:0e:f3:8c:0e:66:6d:76:33:f6:09:ad:a5:19: 87:4e:96:55:87:6d:8e:f6:fa:a9:1f:1c:fb:fc:bd: c6:a5:80:29:a2:2b:99:72:45:3f:03:c2:5f:a9:57: dc:c7:f5:ff:6e:22:56:c2:79:e1:72:08:7e:68:4b: c4:3d:56:a5:d6:c1:6d:49:ec:97:ff:79:c3:28:98: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B4:28:C2:CD:0A:48:6A:B8:33:2A:08:CB:33:6C:01:DE:3C:41:9C X509v3 Authority Key Identifier: keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/E2DF828CF20211ECBCC9B986C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.189.246.0/23 IPv6: 2001:df0:dfc0::/48 Signature Algorithm: sha256WithRSAEncryption 97:a1:10:64:49:47:eb:b5:a1:21:f3:50:bc:99:0d:36:99:3a: 3e:64:98:0a:f2:71:8e:78:15:86:c5:15:9e:fb:52:b6:c2:24: b8:9b:7e:f3:8b:ed:04:c3:b5:19:eb:0a:12:af:87:91:84:dd: 41:d2:93:85:fa:fc:72:10:78:63:ee:3f:6e:41:ae:f0:27:60: d6:35:ec:e3:22:be:a6:9c:a0:40:66:36:63:5b:7d:2a:3d:e2: 07:7c:22:a3:2f:31:6d:df:af:7d:6f:dc:b8:b7:ca:2f:7e:c6: be:ae:a6:d7:76:8d:61:03:db:a9:96:b5:bd:51:61:14:db:ac: ca:fb:22:08:10:f8:da:35:7d:ca:17:42:4f:69:13:54:d4:b7: b1:e1:cc:ce:d7:5c:79:bf:60:39:99:b2:11:1d:2a:03:5b:b5: ed:d6:bb:b4:a3:d5:13:eb:f7:58:67:e5:79:8a:6a:c3:11:f8: 9d:22:37:55:b6:ff:75:e7:ca:31:cc:00:5c:d8:f3:e5:06:95: 5a:e4:71:15:4a:e5:e2:5b:92:8a:a1:70:44:d0:82:7c:42:42: 53:68:17:4b:b9:38:94:33:d0:2d:d4:8d:e3:11:f6:bc:b6:b2: 0d:43:d7:d4:e3:78:3c:63:0f:5b:9a:db:4c:59:3e:c6:98:4d: fe:9c:94:5d -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBRTAxMTAvBgNVBAUTKEUxNDg5RTA1NDU2RTkyQ0FENzE1ODQ3MjAwRTRBNzVE NkMzRTQzQ0UwHhcNMjYwNjI5MDEzMTE4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQxY2FlNi01ZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jDZcXvRtVjyqwS5nF1Jn3J8qZuh5njUz8MF8sFUHXPoNzfCJ8Q39gJvYIfn sm2biCzFHW5gqgQ96eKM1i2I5RtWVvcmY/ZLAYCw9YN6FNVAZUPtfZuI/TaUGfie Q2DBGZnWRDn/h39u4lYAwYXLO2pU/MC8DUf7nfvWmMwizI8cvWmdN11m5eUlw/Jc eR4YmVBA39O+Epvct7mArTmuCwzF/PEQYYSaVxKQ09rqD4C5dc/rIA7zjA5mbXYz 9gmtpRmHTpZVh22O9vqpHxz7/L3GpYApoiuZckU/A8JfqVfcx/X/biJWwnnhcgh+ aEvEPVal1sFtSeyX/3nDKJjVTwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDu0KMLN CkhquDMqCMszbAHePEGcMB8GA1UdIwQYMBaAFOFIngVFbpLK1xWEcgDkp11sPkPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFFMC9GQTA0N0Y1NEYx RkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtzclhGWVJ5QU9TblhXdy1R ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVaWVCVVZ1a3NyWEZZUnlBT1NuWFd3LVE4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjZBRTAvRkEwNDdGNTRGMUZDMTFFQzk5QjJDQjZCQzRGOUFFMDIvRTJERjgyOENG MjAyMTFFQ0JDQzlCOTg2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ732MA8EAgACMAkDBwAgAQ3w38AwDQYJKoZIhvcNAQELBQADggEB AJehEGRJR+u1oSHzULyZDTaZOj5kmArycY54FYbFFZ77UrbCJLibfvOL7QTDtRnr ChKvh5GE3UHSk4X6/HIQeGPuP25BrvAnYNY17OMivqacoEBmNmNbfSo94gd8IqMv MW3fr31v3Li3yi9+xr6uptd2jWED26mWtb1RYRTbrMr7IggQ+No1fcoXQk9pE1TU t7HhzM7XXHm/YDmZshEdKgNbte3Wu7Sj1RPr91hn5XmKasMR+J0iN1W2/3XnyjHM AFzY8+UGlVrkcRVK5eJbkoqhcETQgnxCQlNoF0u5OJQz0C3UjeMR9ry2sg1D19Tj eDxjD1ua20xZPsaYTf6clF0= -----END CERTIFICATE-----Generated at Fri Jul 24 00:10:22 2026 by rpki-client