$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/B23B879EE89C11ECA30FD20EC4F9AE02.roa File: B23B879EE89C11ECA30FD20EC4F9AE02.roa (raw, json) Hash identifier: x07pQS6pEgJZLrxI+4SzaUGa4YwQ96qN1jF+DrtdcJY= Subject key identifier: 08:25:C1:94:60:B1:52:58:4D:97:32:31:EE:1F:02:94:FE:E0:F5:DE Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 07D6 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/B23B879EE89C11ECA30FD20EC4F9AE02.roa Signing time: Tue 28 Apr 2026 22:29:50 +0000 ROA not before: Tue 28 Apr 2026 22:29:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133788 IP address blocks: 103.42.208.0/22 maxlen: 22 103.42.208.0/23 maxlen: 23 103.42.209.0/24 maxlen: 24 103.42.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Apr 28 22:29:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f134de-8a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:e1:fa:ad:70:aa:6f:c0:03:02:28:1b:e1: d9:76:1c:3b:e6:de:85:c3:14:80:76:b8:91:f4:11: f3:77:41:57:da:f2:34:8c:21:ed:cd:29:ff:65:9c: 25:48:e3:ea:74:2c:e2:30:0d:64:56:5e:45:da:f6: ad:aa:6d:06:fa:95:b6:d8:53:04:a5:4b:08:09:e0: e1:3c:26:eb:6d:95:9b:9f:e0:f2:d4:eb:33:e6:dd: 9b:a7:07:ed:37:40:74:69:11:52:6c:90:e2:d9:15: 1d:fb:5c:d6:96:19:f7:0c:25:8c:0f:df:bf:ec:65: 03:5c:76:be:14:3c:80:d8:25:56:af:80:c9:1c:ce: 8f:5a:d9:3a:c4:51:22:3e:5a:df:d0:a3:f6:51:0d: c2:b1:41:62:68:bd:cb:74:97:8f:82:a8:fa:2a:62: 66:ce:d2:67:b4:5e:fa:09:aa:fb:88:9b:0e:cb:45: f2:bb:45:30:f9:32:e6:18:6d:5a:ea:bc:01:81:ee: 11:ae:07:16:7d:59:83:86:d3:a4:f4:38:d1:c6:02: 07:89:3a:f0:82:ad:03:78:f5:9a:13:03:4c:d4:74: be:2f:34:ac:4e:d5:0d:0e:89:3e:9c:48:1a:6c:13: 4c:6f:7d:a6:31:24:16:88:85:e2:76:f2:20:1f:17: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:25:C1:94:60:B1:52:58:4D:97:32:31:EE:1F:02:94:FE:E0:F5:DE X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/B23B879EE89C11ECA30FD20EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.42.208.0/22 Signature Algorithm: sha256WithRSAEncryption 87:64:0d:ee:8f:e8:4e:e0:75:1a:11:0d:89:11:ff:e8:29:34: f7:d9:81:00:c8:7f:f8:f9:27:cf:f0:57:6e:70:1b:88:12:b5: c1:73:6f:94:f4:94:14:30:0d:e6:99:bc:8d:5e:49:f6:1b:8c: 41:f3:a6:f5:e7:07:c4:14:c6:ca:e8:69:29:b5:d2:fe:f4:49: 9f:15:31:f0:9b:6d:74:a7:78:5c:94:8b:b3:51:c8:1e:d4:0c: eb:24:98:8f:40:be:e8:ee:f5:9a:0a:5e:36:62:5a:69:50:07: c1:bb:7d:c9:75:90:f7:ee:29:3f:8f:6e:2d:24:fe:68:8c:76: ee:aa:7b:02:a5:15:8f:e3:2b:70:68:58:5c:dd:73:29:8a:49: 67:17:14:b0:34:0c:30:92:96:5b:78:63:ab:ea:d5:d9:be:ef: a8:5c:61:66:d4:0d:f0:9a:ec:79:b4:07:99:62:c9:46:ec:60: 4b:52:ca:ef:fe:d4:42:15:6f:f6:85:43:7f:ba:5c:aa:a6:66: 7e:a9:4f:5d:e8:92:cc:2f:e4:af:51:cc:df:ae:7f:52:1c:8b: 51:a7:12:8a:1e:7d:8d:a0:70:f2:23:db:f3:e7:3a:1c:7c:3b: f4:9b:76:94:5c:3f:0c:18:7d:2e:72:f4:5b:5a:fa:95:e4:b5: 13:92:24:36 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjYwNDI4MjIyOTUwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYxMzRkZS04YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjbh+q1wqm/AAwIoG+HZdhw75t6FwxSAdriR9BHzd0FX2vI0jCHtzSn/ZZwl SOPqdCziMA1kVl5F2vatqm0G+pW22FMEpUsICeDhPCbrbZWbn+Dy1Osz5t2bpwft N0B0aRFSbJDi2RUd+1zWlhn3DCWMD9+/7GUDXHa+FDyA2CVWr4DJHM6PWtk6xFEi Plrf0KP2UQ3CsUFiaL3LdJePgqj6KmJmztJntF76Car7iJsOy0Xyu0Uw+TLmGG1a 6rwBge4RrgcWfVmDhtOk9DjRxgIHiTrwgq0DePWaEwNM1HS+LzSsTtUNDok+nEga bBNMb32mMSQWiIXidvIgHxdJPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAglwZRg sVJYTZcyMe4fApT+4PXeMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhBNDEvNTU0MTQwREU4N0JDMTFFQkIzQzA4MjcyQzRGOUFFMDIvQjIzQjg3OUVF ODlDMTFFQ0EzMEZEMjBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZyrQMA0GCSqGSIb3DQEBCwUAA4IBAQCHZA3uj+hO4HUaEQ2JEf/o KTT32YEAyH/4+SfP8FducBuIErXBc2+U9JQUMA3mmbyNXkn2G4xB86b15wfEFMbK 6GkptdL+9EmfFTHwm210p3hclIuzUcge1AzrJJiPQL7o7vWaCl42YlppUAfBu33J dZD37ik/j24tJP5ojHbuqnsCpRWP4ytwaFhc3XMpiklnFxSwNAwwkpZbeGOr6tXZ vu+oXGFm1A3wmux5tAeZYslG7GBLUsrv/tRCFW/2hUN/ulyqpmZ+qU9d6JLML+Sv Uczfrn9SHItRpxKKHn2NoHDyI9vz5zocfDv0m3aUXD8MGH0ucvRbWvqV5LUTkiQ2 -----END CERTIFICATE-----Generated at Wed May 13 13:52:27 2026 by rpki-client