$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/B1D05CAC75DE11F1B0B3EF026FA30FBC.roa File: B1D05CAC75DE11F1B0B3EF026FA30FBC.roa (raw, json) Hash identifier: 58VxQi4kdt0KNatAs8ssP+0cLBCzRpsqHJy3Xk3Ojwg= Subject key identifier: A1:7B:83:D3:46:DC:0C:BE:35:E1:29:9C:A4:D1:2F:B3:75:27:FA:BB Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0C75 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/B1D05CAC75DE11F1B0B3EF026FA30FBC.roa Signing time: Thu 02 Jul 2026 06:24:35 +0000 ROA not before: Thu 02 Jul 2026 06:24:35 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 23532 IP address blocks: 43.239.104.0/24 maxlen: 24 45.124.204.0/24 maxlen: 24 45.124.205.0/24 maxlen: 24 45.124.206.0/24 maxlen: 24 45.124.207.0/24 maxlen: 24 103.25.100.0/24 maxlen: 24 103.25.101.0/24 maxlen: 24 103.25.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3189 (0xc75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Jul 2 06:24:35 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a460423-383b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:05:48:d2:5b:4b:73:60:22:0a:f9:b1:a4: d9:91:98:6d:47:fa:56:30:06:33:73:11:d8:47:4e: 9d:c0:4f:ae:b5:1e:0b:0c:bd:dc:f9:3f:37:e5:bd: b1:01:28:4c:3e:09:c1:5b:d2:44:40:89:c3:78:d1: 9d:08:f1:85:60:95:6f:7e:a6:0a:60:9b:d0:44:a4: ee:46:00:7d:fa:2b:c3:ff:55:63:44:30:4c:32:7e: a6:cf:07:6d:97:f8:9d:96:87:fc:e6:6d:5a:3c:05: 46:f9:ac:4d:af:61:e3:41:8c:e6:e9:7b:b9:e9:45: 38:82:0d:2c:8d:5d:b0:ef:59:74:52:ec:b8:6e:3f: 8e:93:c4:18:b8:f4:0e:60:9e:c8:64:8d:d6:3c:c0: 17:6b:40:07:71:de:eb:05:dd:e3:48:25:c2:e1:f5: b2:4a:b2:42:81:07:4b:00:41:eb:94:42:b3:73:d9: ca:bb:e9:4f:07:36:cf:5f:94:66:49:3b:ab:11:2e: 40:eb:4e:fd:ae:3f:a9:90:c3:3c:cc:85:c6:8c:c6: a2:b0:22:6e:5c:96:71:42:0e:fa:48:d0:14:85:fe: d3:45:96:0c:42:e2:80:89:5c:26:97:1a:12:90:cd: 92:cf:db:2c:e4:c9:8e:92:a1:05:0d:92:2d:ff:0f: 90:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7B:83:D3:46:DC:0C:BE:35:E1:29:9C:A4:D1:2F:B3:75:27:FA:BB X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/B1D05CAC75DE11F1B0B3EF026FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.239.104.0/24 45.124.204.0/22 103.25.100.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:d2:a5:4a:2b:58:42:3c:e4:6d:ab:1c:35:55:62:58:23:8f: 1f:19:0a:7c:85:42:f8:60:c1:20:9e:04:6e:33:02:60:53:c0: 27:08:9c:ba:c0:5a:0c:90:0a:0b:07:73:8a:9e:99:0b:52:e0: a0:a1:b2:34:ad:0b:89:74:da:6b:04:cf:e7:66:47:b0:d1:1a: 82:e9:26:8d:81:43:46:54:ec:a2:26:22:9a:53:0a:39:4f:41: 15:a7:c8:b7:d1:2f:84:db:2d:de:51:63:f3:97:a1:b8:14:dd: 63:a2:82:47:c1:b5:b6:40:6f:43:f6:a1:64:b2:b2:19:87:49: 75:5a:f2:59:02:21:ec:12:ff:d0:c7:3f:26:8f:9a:2f:3d:27: e5:50:52:6d:dd:48:47:4b:11:cc:09:69:f4:c7:f2:1e:54:c1: d3:d3:8d:64:34:2d:28:d5:e8:82:cc:4d:f1:05:00:b6:e3:7a: 0b:c4:64:c2:07:df:37:75:66:96:7b:52:c4:13:c6:93:a0:39: 8b:74:b3:55:20:b6:13:e6:c1:01:4b:7c:f5:ef:25:ae:65:1c: 4f:04:d3:95:34:7d:63:76:94:c5:ce:3b:69:8c:81:98:fc:7d: a8:34:05:4c:95:a1:66:e1:ab:3a:1e:d4:50:31:ea:ba:51:e4: bf:e7:f5:d1 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjYwNzAyMDYyNDM1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2MDQyMy0zODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx50FSNJbS3NgIgr5saTZkZhtR/pWMAYzcxHYR06dwE+utR4LDL3c+T835b2x AShMPgnBW9JEQInDeNGdCPGFYJVvfqYKYJvQRKTuRgB9+ivD/1VjRDBMMn6mzwdt l/idlof85m1aPAVG+axNr2HjQYzm6Xu56UU4gg0sjV2w71l0Uuy4bj+Ok8QYuPQO YJ7IZI3WPMAXa0AHcd7rBd3jSCXC4fWySrJCgQdLAEHrlEKzc9nKu+lPBzbPX5Rm STurES5A6079rj+pkMM8zIXGjMaisCJuXJZxQg76SNAUhf7TRZYMQuKAiVwmlxoS kM2Sz9ss5MmOkqEFDZIt/w+QTwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKF7g9NG 3Ay+NeEpnKTRL7N1J/q7MB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvQjFEMDVDQUM3 NURFMTFGMUIwQjNFRjAyNkZBMzBGQkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK+9oAwQCLXzMAwQCZxlkMA0GCSqGSIb3DQEBCwUAA4IBAQCK0qVK K1hCPORtqxw1VWJYI48fGQp8hUL4YMEgngRuMwJgU8AnCJy6wFoMkAoLB3OKnpkL UuCgobI0rQuJdNprBM/nZkew0RqC6SaNgUNGVOyiJiKaUwo5T0EVp8i30S+E2y3e UWPzl6G4FN1jooJHwbW2QG9D9qFksrIZh0l1WvJZAiHsEv/Qxz8mj5ovPSflUFJt 3UhHSxHMCWn0x/IeVMHT041kNC0o1eiCzE3xBQC243oLxGTCB983dWaWe1LEE8aT oDmLdLNVILYT5sEBS3z17yWuZRxPBNOVNH1jdpTFzjtpjIGY/H2oNAVMlaFm4as6 HtRQMeq6UeS/5/XR -----END CERTIFICATE-----Generated at Tue Jul 21 19:36:24 2026 by rpki-client