$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/B0D1967C75DE11F1B0B3EF026FA30FBC.roa File: B0D1967C75DE11F1B0B3EF026FA30FBC.roa (raw, json) Hash identifier: BbiChF6SCYai4IgXuQnZsuKwnZh6TKyuuRyPn5NnFys= Subject key identifier: 10:3F:C6:B0:80:D4:AD:6A:45:22:06:3D:92:A3:1A:AF:FD:CF:4B:1E Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0C74 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/B0D1967C75DE11F1B0B3EF026FA30FBC.roa Signing time: Thu 02 Jul 2026 06:24:33 +0000 ROA not before: Thu 02 Jul 2026 06:24:33 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 216138 IP address blocks: 43.239.104.0/24 maxlen: 24 45.124.204.0/24 maxlen: 24 45.124.205.0/24 maxlen: 24 45.124.206.0/24 maxlen: 24 45.124.207.0/24 maxlen: 24 103.25.100.0/24 maxlen: 24 103.25.101.0/24 maxlen: 24 103.25.102.0/24 maxlen: 24 103.25.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Jul 2 06:24:33 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a460421-eaf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:da:5e:f6:a7:1f:21:9b:43:64:64:cd:1f: aa:7c:4d:0b:a2:80:e7:f4:dc:2e:a5:f1:0b:43:04: 7e:1b:62:40:58:6b:4b:9c:cd:3a:0e:52:31:47:c8: 47:2f:23:92:ee:ca:b8:17:49:de:9d:7d:04:ed:82: 0f:65:36:87:13:b7:34:0b:ab:f1:d0:48:82:35:e8: 7c:3b:ef:3d:fb:0e:be:0d:7d:fd:79:af:71:7a:47: 80:24:71:0d:be:b1:e0:db:35:89:39:f6:fc:22:b6: ae:c2:c3:7b:6f:ee:7e:a5:7b:4b:ea:6e:01:5f:4c: f7:a9:bc:23:04:b5:a0:94:9d:58:de:0f:74:93:74: 82:d3:ec:60:cf:25:b9:70:8b:b8:5c:c2:cc:c2:2c: 85:89:57:50:70:67:4f:0f:c7:c9:88:21:3c:b0:0e: b2:33:16:e1:15:fe:6a:62:d3:62:73:f8:ce:bb:19: 34:08:0a:e8:b3:e4:b9:3c:89:dc:01:9a:f7:c9:8d: c7:ca:80:c5:2f:7e:27:ef:30:10:9a:51:f1:c6:92: d8:d7:81:4f:f2:15:7b:26:aa:10:ec:44:6f:ae:16: 9c:23:36:17:77:e1:5d:1c:f1:ea:e3:6f:26:71:0c: b9:eb:9b:9d:12:99:ea:4c:e8:9c:13:09:05:b6:ca: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:C6:B0:80:D4:AD:6A:45:22:06:3D:92:A3:1A:AF:FD:CF:4B:1E X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/B0D1967C75DE11F1B0B3EF026FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.239.104.0/24 45.124.204.0/22 103.25.100.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:18:15:c3:1b:75:53:d2:9c:bb:f3:dd:87:24:b8:eb:a8:84: 47:ed:01:2e:3b:72:32:0d:1a:4f:87:1c:94:a8:d8:37:f6:c1: be:ff:4c:99:d7:04:fe:0f:59:32:00:35:9a:18:bf:d1:cf:6f: 94:69:72:f7:75:1a:db:20:f9:5f:42:30:a2:8e:6f:e7:9b:df: 66:ca:f6:79:bc:17:64:99:c1:c7:21:95:ab:c1:e2:e2:75:36: 6d:90:d7:37:02:e4:07:f2:65:e5:11:67:76:19:cb:48:a1:d9: 32:55:48:93:84:b9:55:48:71:1e:b7:33:db:f2:f7:80:86:29: 29:b0:70:7c:6e:64:44:7a:83:f2:bd:a2:2c:40:71:97:fa:08: 2d:40:71:c7:c1:b6:93:69:19:ac:b0:1d:0f:ea:8a:7c:9f:5f: eb:22:0a:75:2c:22:29:89:34:96:30:b7:59:00:02:86:56:84: ad:b2:dc:dc:26:bc:d1:9e:cb:25:80:54:2a:33:ce:39:3b:ae: 01:6d:01:72:14:ad:6c:7d:a5:30:95:cf:ac:df:59:3b:c8:2a: 88:e3:ad:70:ba:7e:fd:cd:77:dc:18:85:cd:4b:f5:fe:23:46: 1d:fe:4a:88:ce:23:d2:aa:62:6b:d4:75:24:b8:e2:ff:5a:2e: 40:5c:9d:95 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjYwNzAyMDYyNDMzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2MDQyMS1lYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCzaXvanHyGbQ2RkzR+qfE0LooDn9NwupfELQwR+G2JAWGtLnM06DlIxR8hH LyOS7sq4F0nenX0E7YIPZTaHE7c0C6vx0EiCNeh8O+89+w6+DX39ea9xekeAJHEN vrHg2zWJOfb8IrauwsN7b+5+pXtL6m4BX0z3qbwjBLWglJ1Y3g90k3SC0+xgzyW5 cIu4XMLMwiyFiVdQcGdPD8fJiCE8sA6yMxbhFf5qYtNic/jOuxk0CAros+S5PInc AZr3yY3HyoDFL34n7zAQmlHxxpLY14FP8hV7JqoQ7ERvrhacIzYXd+FdHPHq428m cQy565udEpnqTOicEwkFtsqPmQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFBA/xrCA 1K1qRSIGPZKjGq/9z0seMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvQjBEMTk2N0M3 NURFMTFGMUIwQjNFRjAyNkZBMzBGQkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK+9oAwQCLXzMAwQCZxlkMA0GCSqGSIb3DQEBCwUAA4IBAQAbGBXD G3VT0py7892HJLjrqIRH7QEuO3IyDRpPhxyUqNg39sG+/0yZ1wT+D1kyADWaGL/R z2+UaXL3dRrbIPlfQjCijm/nm99myvZ5vBdkmcHHIZWrweLidTZtkNc3AuQH8mXl EWd2GctIodkyVUiThLlVSHEetzPb8veAhikpsHB8bmREeoPyvaIsQHGX+ggtQHHH wbaTaRmssB0P6op8n1/rIgp1LCIpiTSWMLdZAAKGVoStstzcJrzRnsslgFQqM845 O64BbQFyFK1sfaUwlc+s31k7yCqI461wun79zXfcGIXNS/X+I0Yd/kqIziPSqmJr 1HUkuOL/Wi5AXJ2V -----END CERTIFICATE-----Generated at Tue Jul 21 19:36:24 2026 by rpki-client