$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/1B8AAA547EA811F1B1B4ABB165A30FBC.roa File: 1B8AAA547EA811F1B1B4ABB165A30FBC.roa (raw, json) Hash identifier: CrxDIG23oExmjO7SdSCqEOfcY+3UGQ0HeSLQRNX0rk4= Subject key identifier: B5:F1:7E:27:62:66:E0:38:CA:11:79:3D:72:D7:51:12:21:F7:C9:C9 Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Certificate serial: 028D Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/1B8AAA547EA811F1B1B4ABB165A30FBC.roa Signing time: Mon 13 Jul 2026 10:46:31 +0000 ROA not before: Mon 13 Jul 2026 10:46:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150791 IP address blocks: 103.101.98.0/24 maxlen: 24 103.101.99.0/24 maxlen: 24 2001:df2:fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Validity Not Before: Jul 13 10:46:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a54c207-b048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:cb:31:e2:45:2d:1a:77:46:f3:2c:cc:fe: 71:2a:92:c7:b7:81:1d:f9:5a:d1:a3:ef:fa:53:28: d2:78:60:11:ea:ba:b6:29:78:81:b2:95:63:9f:85: c0:a7:6c:da:c9:6b:05:a7:98:91:09:b2:85:5e:af: e3:02:cc:61:97:e4:f9:d1:9e:42:2f:35:86:76:bd: 57:1c:bc:88:0d:2d:66:9b:db:c2:19:8e:20:1a:a8: f8:b5:20:a7:de:fd:9f:a6:df:6e:f5:58:18:ed:79: 1a:cb:75:96:7f:7a:c2:b0:f3:63:52:da:1c:d6:da: cf:34:09:d2:cc:c3:27:48:99:76:62:f9:21:87:90: a3:4d:e6:f5:d8:a7:94:05:16:33:c4:c2:e9:66:79: 2f:c9:da:5c:f3:24:fe:27:b1:ee:82:95:74:b4:e2: 46:cf:77:91:fb:d9:4b:cc:c5:45:22:78:d1:7f:bc: 58:2b:05:b9:7a:b5:1e:11:13:cf:57:80:48:87:c3: 16:50:e8:f7:f3:43:22:a8:8f:c6:a2:75:7f:90:c7: 49:d7:3d:db:a0:8f:a1:a1:9b:b8:76:4c:4c:d1:ee: c5:55:a7:26:20:c3:ed:c8:a3:a7:5b:a4:a7:59:49: f1:a3:42:aa:e1:b6:7c:57:d8:35:b8:eb:af:2d:74: 3f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F1:7E:27:62:66:E0:38:CA:11:79:3D:72:D7:51:12:21:F7:C9:C9 X509v3 Authority Key Identifier: keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/1B8AAA547EA811F1B1B4ABB165A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.101.98.0/23 IPv6: 2001:df2:fc0::/48 Signature Algorithm: sha256WithRSAEncryption a1:81:14:1c:0c:bb:fa:5f:a2:55:22:7f:a8:19:ca:7e:09:52: 86:41:47:c9:ba:e9:df:b4:ec:5f:e5:56:b6:f7:51:d2:5a:2e: 2c:8d:9c:34:6e:d2:98:59:f4:76:f5:a4:53:31:90:20:b9:86: 18:03:0c:19:6b:4f:16:79:fe:cc:99:fb:48:85:0e:03:5f:bd: de:8b:b2:85:6a:72:20:72:fb:63:2f:5f:02:63:eb:d6:df:90: 03:59:c5:5e:1c:f3:71:4b:db:a9:ee:7c:03:82:2b:a8:c8:b0: 6e:58:f4:9f:d9:e3:9f:b9:fa:6b:5a:e2:87:94:d3:e2:dc:91: bc:6d:9b:25:0f:3d:47:85:e3:af:18:3b:2c:ea:d1:70:00:75: 7d:97:09:35:36:4b:05:0e:d9:32:40:21:91:33:6d:2c:28:3e: 5b:36:d6:f2:2b:9c:e5:0b:7d:87:f7:a0:c9:ea:8e:db:00:d0: 5d:8f:7c:1b:d8:20:d7:16:b2:87:d3:78:a0:85:08:15:6e:52: bb:f1:a5:2c:58:87:ac:44:9b:b7:72:4d:58:76:a0:66:3e:1e: 2f:bc:e6:f0:7f:05:bc:b6:49:df:82:84:a7:34:67:6d:3a:dd: 0d:a6:f7:fb:07:2e:a1:48:b0:0c:0d:63:fb:13:cb:ef:bf:0f: b2:0b:3b:c9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBNDAxMTAvBgNVBAUTKDM3QjYyQTc3MjUxQzUyQTA0QjMzQjgyRDJFRDAyMDRD OTI3QTQyOUEwHhcNMjYwNzEzMTA0NjMxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU0YzIwNy1iMDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgXLMeJFLRp3RvMszP5xKpLHt4Ed+VrRo+/6UyjSeGAR6rq2KXiBspVjn4XA p2zayWsFp5iRCbKFXq/jAsxhl+T50Z5CLzWGdr1XHLyIDS1mm9vCGY4gGqj4tSCn 3v2fpt9u9VgY7Xkay3WWf3rCsPNjUtoc1trPNAnSzMMnSJl2Yvkhh5CjTeb12KeU BRYzxMLpZnkvydpc8yT+J7HugpV0tOJGz3eR+9lLzMVFInjRf7xYKwW5erUeERPP V4BIh8MWUOj380MiqI/GonV/kMdJ1z3boI+hoZu4dkxM0e7FVacmIMPtyKOnW6Sn WUnxo0Kq4bZ8V9g1uOuvLXQ/KQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLXxfidi ZuA4yhF5PXLXURIh98nJMB8GA1UdIwQYMBaAFDe2KnclHFKgSzO4LS7QIEySekKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREE0MC85NkYwRDcwQ0JC REExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1VxQkxNN2d0THRBZ1RKSjZR cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL043WXFkeVVjVXFCTE03Z3RMdEFnVEpKNlFwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRBNDAvOTZGMEQ3MENCQkRBMTFFRDg4NzhFRjQ3QzRGOUFFMDIvMUI4QUFBNTQ3 RUE4MTFGMUIxQjRBQkIxNjVBMzBGQkMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ2ViMA8EAgACMAkDBwAgAQ3yD8AwDQYJKoZIhvcNAQELBQADggEB AKGBFBwMu/pfolUif6gZyn4JUoZBR8m66d+07F/lVrb3UdJaLiyNnDRu0phZ9Hb1 pFMxkCC5hhgDDBlrTxZ5/syZ+0iFDgNfvd6LsoVqciBy+2MvXwJj69bfkANZxV4c 83FL26nufAOCK6jIsG5Y9J/Z45+5+mta4oeU0+LckbxtmyUPPUeF468YOyzq0XAA dX2XCTU2SwUO2TJAIZEzbSwoPls21vIrnOULfYf3oMnqjtsA0F2PfBvYINcWsofT eKCFCBVuUrvxpSxYh6xEm7dyTVh2oGY+Hi+85vB/Bby2Sd+ChKc0Z2063Q2m9/sH LqFIsAwNY/sTy++/D7ILO8k= -----END CERTIFICATE-----Generated at Sat Jul 25 01:35:17 2026 by rpki-client