$ rpki-client -vvf rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/CEDD71FAE48811F09BEEC367446F56BC.roa File: CEDD71FAE48811F09BEEC367446F56BC.roa (raw, json) Hash identifier: v+w6FMXM2xR0r2SO7jbmxEeAiii0dpp5GEOdFjQ8hTM= Subject key identifier: 6D:EB:42:6B:AE:B2:2D:4F:23:A0:67:6D:51:3C:6C:AC:F4:2F:99:67 Certificate issuer: /CN=A91F85CD/serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532 Certificate serial: 08FF Authority key identifier: E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/CEDD71FAE48811F09BEEC367446F56BC.roa Signing time: Mon 06 Jul 2026 06:57:22 +0000 ROA not before: Mon 06 Jul 2026 06:57:22 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 15830 IP address blocks: 103.30.234.0/24 maxlen: 24 103.30.235.0/24 maxlen: 24 103.138.17.0/24 maxlen: 24 2404:bd40:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F85CD, serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532 Validity Not Before: Jul 6 06:57:22 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a4b51d2-71a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:19:bd:60:de:ec:fe:82:78:ec:d9:63:12: 07:59:10:5a:3a:91:50:19:64:5a:7a:5e:12:aa:a6: 5a:26:d0:d3:62:72:74:08:97:83:a3:ac:0e:ab:08: 56:54:88:6e:68:84:b7:9d:fb:9c:43:5f:3e:eb:31: ee:a6:da:9e:86:d7:a2:18:6a:ab:f0:a5:77:93:8b: cb:af:6b:24:5e:2c:a2:4d:3e:76:bd:6e:34:c6:34: ee:46:09:a3:7d:f4:dd:67:c3:b4:8f:9b:8d:a0:16: 27:7a:bb:40:50:20:7a:4b:92:19:7d:84:6f:f0:77: f2:e6:c4:52:e5:e5:17:4f:79:9a:95:fd:5a:bd:51: 07:8f:7d:2a:a5:82:03:b7:47:32:86:38:9b:b8:e9: 09:d1:7a:4c:46:85:56:2c:33:ce:37:d1:dd:9b:bf: e7:13:52:88:c6:e4:c3:d2:ec:e2:f9:a6:2d:8c:a2: dc:fd:fc:d2:6d:47:6d:1e:1b:1e:a6:fc:99:f6:bc: 2e:4d:64:3b:2a:bc:79:b4:e2:99:54:6a:8e:7e:66: 60:8d:fa:28:08:8c:4e:72:bf:a7:4e:ab:bb:eb:c8: 6a:40:4e:52:ff:7a:7c:9b:79:30:08:e4:b2:67:b0: 55:e6:bb:3a:63:3e:89:6d:71:93:02:ae:72:53:91: 27:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EB:42:6B:AE:B2:2D:4F:23:A0:67:6D:51:3C:6C:AC:F4:2F:99:67 X509v3 Authority Key Identifier: keyid:E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/CEDD71FAE48811F09BEEC367446F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.30.234.0/23 103.138.17.0/24 IPv6: 2404:bd40:15::/48 Signature Algorithm: sha256WithRSAEncryption 52:db:c6:b2:b2:9a:e1:de:3b:01:a1:f4:bf:d0:da:c2:c7:2a: 75:dd:85:f0:8b:f7:26:07:32:8c:08:84:7f:8b:bd:e5:06:cb: 07:c4:0c:f0:1a:89:88:af:27:fa:b3:da:5e:a9:b7:ac:e2:5b: 79:7d:70:cd:38:5c:9c:e6:53:9d:29:a2:b0:d0:0e:8f:18:2a: 1e:2b:29:49:a9:6d:d7:df:8e:b6:22:9b:e1:6e:4e:dc:4f:92: 3c:8f:8e:f1:c9:df:18:29:96:fe:66:a1:37:71:c6:46:48:90: 58:cf:0c:83:59:36:70:8a:64:dd:7b:fc:e1:96:8f:4b:72:55: aa:53:f1:c0:4e:81:bb:e4:03:e3:07:6a:3f:8c:40:0e:24:9c: 0c:81:fc:51:38:e9:6b:2d:cf:e1:07:73:fc:fb:f1:fe:74:37: ed:b3:5c:96:e2:d1:32:61:aa:31:49:49:4c:55:4e:62:02:25: d2:4d:17:d4:2a:4a:69:27:e6:c3:0d:98:57:16:61:e8:72:71: 37:bc:34:2e:10:18:06:8f:71:c8:81:58:b4:fd:7c:1f:74:e0: d9:01:aa:0a:7a:2e:98:aa:3b:da:3f:d7:ee:0c:6d:7d:53:d1: 87:75:ae:fe:27:2e:d4:87:cf:30:e4:2c:b2:bd:52:3d:eb:97: d7:a9:41:e7 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1Q0QxMTAvBgNVBAUTKEUyMTFDRDg1RTA3MjU1MEUzM0U0Q0M4NkE2M0ZCQ0RG QUQxRDM1MzIwHhcNMjYwNzA2MDY1NzIyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiNTFkMi03MWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstkZvWDe7P6CeOzZYxIHWRBaOpFQGWRael4SqqZaJtDTYnJ0CJeDo6wOqwhW VIhuaIS3nfucQ18+6zHuptqehteiGGqr8KV3k4vLr2skXiyiTT52vW40xjTuRgmj ffTdZ8O0j5uNoBYnertAUCB6S5IZfYRv8Hfy5sRS5eUXT3malf1avVEHj30qpYID t0cyhjibuOkJ0XpMRoVWLDPON9Hdm7/nE1KIxuTD0uzi+aYtjKLc/fzSbUdtHhse pvyZ9rwuTWQ7Krx5tOKZVGqOfmZgjfooCIxOcr+nTqu768hqQE5S/3p8m3kwCOSy Z7BV5rs6Yz6JbXGTAq5yU5EnZwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFG3rQmuu si1PI6BnbVE8bKz0L5lnMB8GA1UdIwQYMBaAFOIRzYXgclUOM+TMhqY/vN+tHTUy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODVDRC84QTUwNTU4OERE MTkxMUVBOTREMjYwMTFDNEY5QUUwMi80aEhOaGVCeVZRNHo1TXlHcGotODM2MGRO VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRoSE5oZUJ5VlE0ejVNeUdwai04MzYwZE5USS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg1Q0QvOEE1MDU1ODhERDE5MTFFQTk0RDI2MDExQzRGOUFFMDIvQ0VERDcxRkFF NDg4MTFGMDlCRUVDMzY3NDQ2RjU2QkMucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQBZx7qAwQAZ4oRMA8EAgACMAkDBwAkBL1AABUwDQYJKoZIhvcNAQEL BQADggEBAFLbxrKymuHeOwGh9L/Q2sLHKnXdhfCL9yYHMowIhH+LveUGywfEDPAa iYivJ/qz2l6pt6ziW3l9cM04XJzmU50porDQDo8YKh4rKUmpbdffjrYim+FuTtxP kjyPjvHJ3xgplv5moTdxxkZIkFjPDINZNnCKZN17/OGWj0tyVapT8cBOgbvkA+MH aj+MQA4knAyB/FE46Wstz+EHc/z78f50N+2zXJbi0TJhqjFJSUxVTmICJdJNF9Qq Smkn5sMNmFcWYehycTe8NC4QGAaPcciBWLT9fB904NkBqgp6LpiqO9o/1+4MbX1T 0Yd1rv4nLtSHzzDkLLK9Uj3rl9epQec= -----END CERTIFICATE-----Generated at Fri Jul 24 02:49:23 2026 by rpki-client