$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/21C0B7E23BD311F0B1BF6C56C4F9AE02.roa File: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (raw, json) Hash identifier: N32OeeZ0M0QwJZR+gONpAMWKoMVtOv5ROglEC/3vkfc= Subject key identifier: 81:D9:69:FE:C3:40:39:90:6B:65:36:12:21:4B:56:F0:D0:30:E4:8D Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 35C7 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/21C0B7E23BD311F0B1BF6C56C4F9AE02.roa Signing time: Fri 03 Jul 2026 05:41:41 +0000 ROA not before: Fri 03 Jul 2026 05:41:41 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 3758 IP address blocks: 111.65.100.0/24 maxlen: 24 111.65.101.0/24 maxlen: 24 111.65.102.0/23 maxlen: 23 111.65.104.0/21 maxlen: 22 111.65.112.0/20 maxlen: 20 202.78.48.0/24 maxlen: 24 202.78.49.0/24 maxlen: 24 202.78.50.0/24 maxlen: 24 202.78.51.0/24 maxlen: 24 202.78.52.0/22 maxlen: 22 202.78.55.0/24 maxlen: 24 2400:1c00:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13767 (0x35c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Jul 3 05:41:41 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a474b95-de4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:11:7e:73:55:d9:8c:33:8f:8b:d7:1f:c4:cf: 2f:7f:ce:3b:25:af:ec:63:8e:4d:b5:46:a0:ae:75: 4d:8a:26:85:6c:29:3f:e3:e0:6a:c8:0e:64:e9:44: 28:d4:c8:98:67:e5:14:25:d1:0b:37:76:84:43:bc: e2:43:7d:04:fb:a6:93:33:42:e8:9a:28:f7:5c:60: 2b:ea:66:d6:12:39:1b:0b:4a:6b:5b:5e:3e:0c:b1: 63:93:4d:fa:42:8d:15:ee:ce:47:e5:c8:ee:37:e1: 92:9f:d1:8a:31:ac:30:a2:67:f5:c2:00:31:33:86: ed:06:a2:e8:d0:5d:60:c9:5a:9e:d0:88:3e:8e:11: 65:66:a5:bd:36:ef:f9:78:df:5d:f7:27:81:2f:e2: 5d:09:80:25:37:c7:de:00:22:e3:29:b3:76:f5:97: bc:f9:2a:b2:54:fd:4b:35:71:b4:46:78:d8:62:9f: 53:0c:73:b1:11:a9:83:33:28:65:93:c9:ee:08:78: ce:3e:8a:56:3d:4b:c7:bc:d5:e0:6d:99:d1:5c:91: 26:7a:7d:6b:26:b5:93:05:06:1f:ce:dc:34:50:c7: 89:7a:2d:11:15:08:9b:af:03:87:15:27:89:eb:16: ce:b2:78:e6:17:e4:25:fa:1f:48:12:2d:6a:a7:7f: 1a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D9:69:FE:C3:40:39:90:6B:65:36:12:21:4B:56:F0:D0:30:E4:8D X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/21C0B7E23BD311F0B1BF6C56C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 111.65.100.0-111.65.127.255 202.78.48.0/21 IPv6: 2400:1c00:13::/48 Signature Algorithm: sha256WithRSAEncryption 6b:c5:f1:10:f7:f9:12:9a:08:c9:d4:27:6d:f4:7a:6e:0b:f1: a2:37:24:dd:8b:e9:ca:d6:f1:8f:15:f5:59:3b:a5:77:ec:23: 52:13:6c:a7:18:f6:37:03:6f:6d:a8:d6:94:0e:6b:09:2d:d9: a2:82:11:be:d4:82:59:1c:a7:c3:58:1f:68:82:76:98:5e:b5: be:55:26:9d:f1:d7:71:29:ea:46:62:cc:47:d0:e2:c3:eb:dd: e2:83:01:e3:f7:60:5b:34:80:77:1a:bd:12:01:e1:09:25:27: 46:d3:bb:27:5b:dc:57:52:e6:8a:ac:2a:f9:5b:36:9a:c0:bb: 67:6d:d2:ea:e6:be:40:d5:cf:63:e7:ae:92:90:f4:12:a7:d2: 05:ae:60:35:df:95:7c:f2:6f:71:75:e7:7e:43:8a:6c:fa:77: cf:a5:b5:75:cb:44:ae:41:10:ee:50:89:71:30:22:c9:e6:43: 22:00:09:ad:b8:86:d5:45:73:04:4f:75:45:50:a0:ad:f1:83: 0b:76:1a:f6:da:66:92:8e:69:c0:3a:14:d6:ad:ee:d6:6e:10: 26:58:cc:96:fc:78:01:ca:a2:7f:c6:9b:2a:6e:c0:05:97:5b: 13:1b:2b:13:dc:51:27:1a:e9:8d:f9:cb:a5:57:ce:6b:72:96: 3e:32:3e:59 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgICNccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjYwNzAzMDU0MTQxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3NGI5NS1kZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RF+c1XZjDOPi9cfxM8vf847Ja/sY45NtUagrnVNiiaFbCk/4+BqyA5k6UQo 1MiYZ+UUJdELN3aEQ7ziQ30E+6aTM0Lomij3XGAr6mbWEjkbC0prW14+DLFjk036 Qo0V7s5H5cjuN+GSn9GKMawwomf1wgAxM4btBqLo0F1gyVqe0Ig+jhFlZqW9Nu/5 eN9d9yeBL+JdCYAlN8feACLjKbN29Ze8+SqyVP1LNXG0RnjYYp9TDHOxEamDMyhl k8nuCHjOPopWPUvHvNXgbZnRXJEmen1rJrWTBQYfztw0UMeJei0RFQibrwOHFSeJ 6xbOsnjmF+Ql+h9IEi1qp38aJQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFIHZaf7D QDmQa2U2EiFLVvDQMOSNMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUE0OEYvOEM4MUE4NTYxRDhEMTFFMjg2NkM1MEVCMDhCMDJDRDIvMjFDMEI3RTIz QkQzMTFGMEIxQkY2QzU2QzRGOUFFMDIucm9hMD4GCCsGAQUFBwEHAQH/BC8wLTAa BAIAATAUMAwDBAJvQWQDBAdvQQADBAPKTjAwDwQCAAIwCQMHACQAHAAAEzANBgkq hkiG9w0BAQsFAAOCAQEAa8XxEPf5EpoIydQnbfR6bgvxojck3YvpytbxjxX1WTul d+wjUhNspxj2NwNvbajWlA5rCS3ZooIRvtSCWRynw1gfaIJ2mF61vlUmnfHXcSnq RmLMR9Diw+vd4oMB4/dgWzSAdxq9EgHhCSUnRtO7J1vcV1Lmiqwq+Vs2msC7Z23S 6ua+QNXPY+eukpD0EqfSBa5gNd+VfPJvcXXnfkOKbPp3z6W1dctErkEQ7lCJcTAi yeZDIgAJrbiG1UVzBE91RVCgrfGDC3Ya9tpmko5pwDoU1q3u1m4QJljMlvx4Acqi f8abKm7ABZdbExsrE9xRJxrpjfnLpVfOa3KWPjI+WQ== -----END CERTIFICATE-----Generated at Tue Jul 21 21:51:11 2026 by rpki-client