$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/0AFFF078577811ED959AC36FC4F9AE02.roa File: 0AFFF078577811ED959AC36FC4F9AE02.roa (raw, json) Hash identifier: cXCRp9D8nLh2OADm8x+9jvTxFsaNkGvRt8yDC/0Utus= Subject key identifier: 17:C2:59:92:B7:8A:B9:BB:F7:9C:46:BC:12:79:BA:C6:FA:77:61:0E Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36 Certificate serial: 02C0 Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/0AFFF078577811ED959AC36FC4F9AE02.roa Signing time: Fri 03 Jul 2026 02:27:48 +0000 ROA not before: Fri 03 Jul 2026 02:27:48 +0000 ROA not after: Sun 01 Nov 2026 00:00:00 +0000 asID: 138633 IP address blocks: 103.135.98.0/24 maxlen: 24 103.135.99.0/24 maxlen: 24 2404:79c0::/48 maxlen: 48 2404:79c0:1::/48 maxlen: 48 2404:79c0:2::/48 maxlen: 48 2404:79c0:3::/48 maxlen: 48 2404:79c0:4::/48 maxlen: 48 2404:79c0:5::/48 maxlen: 48 2404:79c0:6::/48 maxlen: 48 2404:79c0:7::/48 maxlen: 48 2404:79c0:8::/48 maxlen: 48 2404:79c0:9::/48 maxlen: 48 2404:79c0:a::/48 maxlen: 48 2404:79c0:b::/48 maxlen: 48 2404:79c0:c::/48 maxlen: 48 2404:79c0:d::/48 maxlen: 48 2404:79c0:e::/48 maxlen: 48 2404:79c0:f::/48 maxlen: 48 2404:79c0:1001::/48 maxlen: 48 2404:79c0:1002::/48 maxlen: 48 2404:79c0:1003::/48 maxlen: 48 2404:79c0:2000::/48 maxlen: 48 2404:79c0:2001::/48 maxlen: 48 2404:79c0:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36 Validity Not Before: Jul 3 02:27:48 2026 GMT Not After : Nov 1 00:00:00 2026 GMT Subject: CN=6a471e24-eac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:de:66:dd:64:ea:a9:46:39:fa:df:e4:76: 3f:b5:97:b5:d3:96:2f:76:17:12:42:65:a5:56:55: d5:77:9d:1c:f0:90:59:1d:d8:01:aa:7d:a6:c6:0b: 47:d5:c3:0e:56:14:32:a7:cf:cd:a0:dd:17:be:e6: ba:13:57:ed:ea:2c:14:6b:12:d6:1d:6a:fa:17:bc: a6:d3:21:af:5e:2d:5d:83:d2:73:0a:46:96:21:f6: 44:71:f5:cc:d9:76:d9:f2:bd:f0:f5:e6:aa:1f:fe: 6b:c4:71:5d:55:ef:fa:07:f7:51:a1:77:c3:03:d0: a0:9a:10:18:db:d4:38:45:36:5f:e3:6c:0f:fc:2f: 3d:3c:f7:8f:59:f8:b0:b4:24:8a:49:09:46:5b:05: 25:57:64:b5:7d:82:72:6d:91:32:84:c0:27:90:8a: f0:8c:5d:6e:c8:a3:a3:a1:0b:9b:c6:a3:ca:df:dc: f7:d2:db:ca:61:c5:07:09:e1:9d:b0:92:9b:de:37: be:92:1e:81:4c:33:60:92:7a:b8:ae:d1:c3:19:0f: d7:0d:4c:bb:50:60:62:e7:f6:e9:72:15:88:49:56: d6:20:8e:3b:ba:bf:3e:06:64:64:98:33:07:1a:7b: 62:af:b0:ba:59:56:ed:90:f3:61:4a:be:37:49:5e: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C2:59:92:B7:8A:B9:BB:F7:9C:46:BC:12:79:BA:C6:FA:77:61:0E X509v3 Authority Key Identifier: keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/0AFFF078577811ED959AC36FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.98.0/23 IPv6: 2404:79c0::/44 2404:79c0:1001::-2404:79c0:1003:ffff:ffff:ffff:ffff:ffff 2404:79c0:2000::/47 2404:79c0:3000::/48 Signature Algorithm: sha256WithRSAEncryption 8d:04:52:15:9b:0a:c3:61:17:e0:3f:b9:99:34:e9:76:f4:f2: cd:fd:6e:d2:db:54:c3:31:48:f0:6b:0d:e1:20:01:68:61:50: 74:94:4f:dc:54:95:e2:d5:01:5f:81:10:af:26:15:56:c9:fa: e5:a8:69:9b:6e:99:75:09:9a:23:b5:24:54:63:30:74:e0:e8: 56:90:34:9a:3a:e6:0b:7f:5a:a3:68:dd:1f:d3:b4:0a:51:44: 91:86:7f:31:68:66:91:7c:39:31:de:bd:62:e3:ee:9d:a2:70: 3a:a8:f2:11:c6:ce:9a:6c:84:6a:55:80:4e:1a:cf:0b:1d:b6: 5b:84:52:88:ac:5c:ac:40:1d:2c:fe:e2:5c:2d:9d:05:35:55: 51:dd:b0:61:f2:38:75:6c:66:f8:9c:c7:8d:39:17:31:15:b7: 8a:0d:ee:26:e5:00:f7:ac:6c:70:90:51:92:6a:cc:61:d9:9a: ba:e3:6a:a2:ca:ad:76:d8:7f:4b:68:b0:30:91:3c:f5:2a:35: 54:44:86:6f:5e:17:c2:30:02:00:84:75:99:a6:32:b8:6c:1d: a2:cd:79:ed:0e:4c:6c:a2:1c:e2:9c:e7:3c:99:20:e0:27:5a: fa:4b:c4:d1:7f:67:b1:a7:e8:f1:2d:9e:9f:a2:4c:74:35:02: 1c:de:69:f7 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBQzQxMTAvBgNVBAUTKEEzMzc2MzNFMzU5MTk5NDBCRDcyOUQ5MTJGMzY2MzE1 OEMyNjdDMzYwHhcNMjYwNzAzMDIyNzQ4WhcNMjYxMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3MWUyNC1lYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMfeZt1k6qlGOfrf5HY/tZe105YvdhcSQmWlVlXVd50c8JBZHdgBqn2mxgtH 1cMOVhQyp8/NoN0Xvua6E1ft6iwUaxLWHWr6F7ym0yGvXi1dg9JzCkaWIfZEcfXM 2XbZ8r3w9eaqH/5rxHFdVe/6B/dRoXfDA9CgmhAY29Q4RTZf42wP/C89PPePWfiw tCSKSQlGWwUlV2S1fYJybZEyhMAnkIrwjF1uyKOjoQubxqPK39z30tvKYcUHCeGd sJKb3je+kh6BTDNgknq4rtHDGQ/XDUy7UGBi5/bpchWISVbWII47ur8+BmRkmDMH Gntir7C6WVbtkPNhSr43SV5ZMwIDAQABo4IClzCCApMwHQYDVR0OBBYEFBfCWZK3 irm795xGvBJ5usb6d2EOMB8GA1UdIwQYMBaAFKM3Yz41kZlAvXKdkS82YxWMJnw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFDNC9DOEZFMTc0QzU3 NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1VQzljcDJSTHpaakZZd21m RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ZGpQaldSbVVDOWNwMlJMelpqRll3bWZEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhBQzQvQzhGRTE3NEM1Nzc1MTFFRDgxRjEzQjZGQzRGOUFFMDIvMEFGRkYwNzg1 Nzc4MTFFRDk1OUFDMzZGQzRGOUFFMDIucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTAM BAIAATAGAwQBZ4diMDUEAgACMC8DBwQkBHnAAAAwEgMHACQEecAQAQMHAiQEecAQ AAMHASQEecAgAAMHACQEecAwADANBgkqhkiG9w0BAQsFAAOCAQEAjQRSFZsKw2EX 4D+5mTTpdvTyzf1u0ttUwzFI8GsN4SABaGFQdJRP3FSV4tUBX4EQryYVVsn65ahp m26ZdQmaI7UkVGMwdODoVpA0mjrmC39ao2jdH9O0ClFEkYZ/MWhmkXw5Md69YuPu naJwOqjyEcbOmmyEalWAThrPCx22W4RSiKxcrEAdLP7iXC2dBTVVUd2wYfI4dWxm +JzHjTkXMRW3ig3uJuUA96xscJBRkmrMYdmauuNqosqtdth/S2iwMJE89So1VESG b14XwjACAIR1maYyuGwdos157Q5MbKIc4pznPJkg4Cda+kvE0X9nsafo8S2en6JM dDUCHN5p9w== -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:59 2026 by rpki-client