$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/9A74033486EF11F19E006003A7EE528E.roa File: 9A74033486EF11F19E006003A7EE528E.roa (raw, json) Hash identifier: nM6DOGTCq1XiY4QFr/gSv6xfQY2Pps9Pkd6SvoqHBpY= Subject key identifier: 9B:2E:E6:A0:67:03:D2:BE:9B:35:CD:31:64:48:F1:A2:87:3F:8B:E3 Certificate issuer: /CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824 Certificate serial: 23C3 Authority key identifier: 5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/9A74033486EF11F19E006003A7EE528E.roa Signing time: Thu 23 Jul 2026 23:38:27 +0000 ROA not before: Thu 23 Jul 2026 23:38:27 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 55569 IP address blocks: 103.229.140.0/22 maxlen: 24 116.213.20.0/22 maxlen: 22 116.213.20.0/24 maxlen: 24 116.213.21.0/24 maxlen: 24 116.213.22.0/24 maxlen: 24 116.213.23.0/24 maxlen: 24 182.161.72.0/22 maxlen: 22 182.161.72.0/24 maxlen: 24 182.161.73.0/24 maxlen: 24 182.161.74.0/24 maxlen: 24 182.161.75.0/24 maxlen: 24 2406:2600::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 01:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9155 (0x23c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE107, serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824 Validity Not Before: Jul 23 23:38:27 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a62a5f3-52f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:2c:e3:54:c7:54:47:3f:53:cc:85:ec:82: 32:c6:fd:50:ed:60:fa:aa:af:05:4e:db:c1:59:53: 93:92:73:a1:ed:51:11:c5:c5:e6:c3:8e:06:46:ef: 42:f9:8f:74:be:df:f7:53:c6:0c:5e:c5:55:52:56: 7b:9e:2d:77:cb:e1:78:4d:73:a5:2a:51:cd:e7:09: 98:7a:5e:f7:82:fe:67:0a:ec:ec:45:f9:fb:c7:ea: 02:92:f6:6b:07:f0:ff:b4:4a:f1:fc:06:f6:34:3e: 6d:60:76:c3:cd:e5:4b:e3:fc:95:8f:d0:91:9e:dc: 55:d8:ef:60:35:bc:f0:73:23:13:76:77:3e:38:16: 39:85:f0:07:38:ad:56:f1:fd:83:8b:e8:71:2f:c4: 16:8f:df:8e:b9:6c:11:e5:b1:b9:d1:b3:d7:78:34: 8f:1e:fc:5b:c8:68:61:3d:bd:fe:57:86:a9:6d:4e: 4d:b1:09:b3:5f:85:05:c0:16:6d:b6:1c:0c:27:e0: ac:2c:8f:ef:4c:85:a1:8c:f7:5f:b0:ae:6f:60:78: 81:fe:70:95:0f:fd:21:91:c8:3c:18:6c:dc:ab:95: 9c:85:ed:83:2c:7b:9f:79:0b:93:65:fe:57:50:89: 23:b4:bf:08:0f:3d:6a:38:f0:eb:11:9f:7b:2c:bb: 34:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2E:E6:A0:67:03:D2:BE:9B:35:CD:31:64:48:F1:A2:87:3F:8B:E3 X509v3 Authority Key Identifier: keyid:5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/9A74033486EF11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.229.140.0/22 116.213.20.0/22 182.161.72.0/22 IPv6: 2406:2600::/32 Signature Algorithm: sha256WithRSAEncryption a7:1b:e2:7e:2c:f3:60:41:df:84:78:ce:60:7e:36:d6:41:af: 7b:58:fa:96:03:0d:ae:14:b8:bb:42:1f:9b:6d:be:2d:e4:f2: 80:6a:45:14:6c:f2:09:e6:5c:40:81:2d:aa:c7:bd:ef:c8:93: 0d:a3:b4:6c:af:b7:00:80:49:e9:4c:28:e9:9f:4f:e0:9a:50: a7:5e:e1:ca:1f:d6:ac:0a:8a:d3:22:6f:40:a1:70:c4:65:34: 29:d0:54:3c:6c:b9:c9:38:57:97:62:8e:21:8c:8c:27:f8:9e: 5e:37:63:fb:43:85:7a:e5:49:a5:f2:10:1c:4b:8f:fc:35:07: 16:25:c0:44:0a:f3:17:68:39:85:29:e7:50:74:af:e7:47:a1: f4:55:7f:96:4c:72:30:97:80:b7:44:b8:8f:be:8b:a9:dc:5c: 32:4b:37:40:68:83:33:1c:75:cc:f1:f2:c1:1c:a8:7e:0d:03: 01:8d:d6:85:e7:96:c7:80:1e:d3:7f:b9:7d:0e:50:0b:42:d7: 3b:c5:da:f8:6f:de:bc:13:80:81:a2:7f:71:42:f9:18:a5:a7: e5:50:15:ad:1e:10:29:74:cc:44:10:e4:f3:80:b7:c1:06:3f: 97:ac:97:a1:ad:97:3e:08:78:92:15:5d:06:61:30:ea:e6:b4: 14:7f:ad:61 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICI8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUxMDcxMTAvBgNVBAUTKDVFNkI1QTA2ODZGNTZCQTBDMEY3N0ZCM0JGMzFCMzg1 NjMyMjA4MjQwHhcNMjYwNzIzMjMzODI3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTVmMy01MmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVws41THVEc/U8yF7IIyxv1Q7WD6qq8FTtvBWVOTknOh7VERxcXmw44GRu9C +Y90vt/3U8YMXsVVUlZ7ni13y+F4TXOlKlHN5wmYel73gv5nCuzsRfn7x+oCkvZr B/D/tErx/Ab2ND5tYHbDzeVL4/yVj9CRntxV2O9gNbzwcyMTdnc+OBY5hfAHOK1W 8f2Di+hxL8QWj9+OuWwR5bG50bPXeDSPHvxbyGhhPb3+V4apbU5NsQmzX4UFwBZt thwMJ+CsLI/vTIWhjPdfsK5vYHiB/nCVD/0hkcg8GGzcq5Wche2DLHufeQuTZf5X UIkjtL8IDz1qOPDrEZ97LLs0GwIDAQABo4ICezCCAncwHQYDVR0OBBYEFJsu5qBn A9K+mzXNMWRI8aKHP4vjMB8GA1UdIwQYMBaAFF5rWgaG9WugwPd/s78xs4VjIggk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTEwNy9FRTM1QzQ0NjlF NjQxMUU1OUQ0OEZCNjBDNEY5QUUwMi9YbXRhQm9iMWE2REE5My16dnpHemhXTWlD Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1htdGFCb2IxYTZEQTkzLXp2ekd6aFdNaUNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkUxMDcvRUUzNUM0NDY5RTY0MTFFNTlENDhGQjYwQzRGOUFFMDIvOUE3NDAzMzQ4 NkVGMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ+WMAwQCdNUUAwQCtqFIMA0EAgACMAcDBQAkBiYAMA0GCSqGSIb3 DQEBCwUAA4IBAQCnG+J+LPNgQd+EeM5gfjbWQa97WPqWAw2uFLi7Qh+bbb4t5PKA akUUbPIJ5lxAgS2qx73vyJMNo7Rsr7cAgEnpTCjpn0/gmlCnXuHKH9asCorTIm9A oXDEZTQp0FQ8bLnJOFeXYo4hjIwn+J5eN2P7Q4V65Uml8hAcS4/8NQcWJcBECvMX aDmFKedQdK/nR6H0VX+WTHIwl4C3RLiPvoup3FwySzdAaIMzHHXM8fLBHKh+DQMB jdaF55bHgB7Tf7l9DlALQtc7xdr4b968E4CBon9xQvkYpaflUBWtHhApdMxEEOTz gLfBBj+XrJehrZc+CHiSFV0GYTDq5rQUf61h -----END CERTIFICATE-----Generated at Fri Jul 24 12:38:48 2026 by rpki-client