$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/354314309C0F11EBAEFB6225C4F9AE02.roa File: 354314309C0F11EBAEFB6225C4F9AE02.roa (raw, json) Hash identifier: jAGmP87t7oxMEv7nGZXAMBhcSPHFWWcPYJqTR2/qDwE= Subject key identifier: AC:7E:B3:9C:1D:4C:C1:FE:31:B9:31:5F:7E:7C:C0:C9:FB:81:99:71 Certificate issuer: /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Certificate serial: 0715 Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/354314309C0F11EBAEFB6225C4F9AE02.roa Signing time: Tue 04 Aug 2026 22:43:34 +0000 ROA not before: Tue 04 Aug 2026 22:43:34 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 135345 IP address blocks: 103.214.12.0/24 maxlen: 24 103.214.13.0/24 maxlen: 24 103.214.14.0/24 maxlen: 24 103.214.15.0/24 maxlen: 24 115.42.120.0/24 maxlen: 24 115.42.121.0/24 maxlen: 24 115.42.122.0/24 maxlen: 24 115.42.123.0/24 maxlen: 24 115.42.124.0/24 maxlen: 24 115.42.125.0/24 maxlen: 24 115.42.126.0/24 maxlen: 24 115.42.127.0/24 maxlen: 24 144.48.28.0/24 maxlen: 24 144.48.29.0/24 maxlen: 24 144.48.30.0/24 maxlen: 24 144.48.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 21:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Validity Not Before: Aug 4 22:43:34 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a726b16-959b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2e:b3:cd:cc:69:be:78:ef:55:d9:6e:24:9d: 11:8d:d0:00:60:d1:ac:87:d8:97:68:9a:62:30:a9: 6e:55:16:d2:b9:18:2c:86:ee:2e:55:30:bb:89:53: f9:5a:29:27:fd:35:d2:15:60:33:2a:49:44:f7:db: b0:e5:a8:85:58:6d:67:2c:45:b4:cc:a5:75:81:5a: 70:fb:cf:65:c2:e5:58:ae:71:af:92:65:02:d8:c8: da:17:7c:9a:40:d9:8a:6f:b9:8d:03:0a:f4:99:e0: e0:c1:da:e7:3e:a1:13:d8:4d:0b:d9:a7:dc:d8:d7: cf:05:69:d0:7d:6f:5e:d6:64:96:bf:5b:22:08:17: 77:59:87:ad:db:79:1c:51:47:f7:ff:25:af:0a:6f: a8:8c:1e:14:ab:32:8e:32:a6:7e:77:c9:13:6d:ba: c8:f5:62:15:0d:75:ae:2d:46:e8:40:fc:92:6e:bc: f1:b3:6c:a5:59:4c:8a:0f:86:f4:b7:56:54:f2:b1: 91:f0:2a:c4:94:61:3c:68:c7:6c:44:7f:1b:41:a7: c5:d6:c5:83:ad:51:b1:12:e6:f2:5a:76:15:76:a6: 1a:1d:ca:70:a8:48:f6:e0:07:b0:25:55:9d:31:29: 68:a5:f6:04:4c:a0:eb:00:16:0e:53:0a:e7:97:21: 5e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7E:B3:9C:1D:4C:C1:FE:31:B9:31:5F:7E:7C:C0:C9:FB:81:99:71 X509v3 Authority Key Identifier: keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/354314309C0F11EBAEFB6225C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.214.12.0/22 115.42.120.0/21 144.48.28.0/22 Signature Algorithm: sha256WithRSAEncryption 42:e3:6c:54:e2:43:10:f4:d1:5f:21:69:8f:c1:f9:21:a7:10: d8:09:43:d6:b6:c6:1c:1a:10:4b:00:ba:be:a7:a4:fe:e4:43: f7:4c:6d:54:48:d8:0a:79:64:61:a9:9b:eb:7e:77:0a:cc:7f: 86:cd:01:6e:0c:3b:50:9c:eb:a1:d1:e7:2f:c3:c6:e3:1c:57: d2:f6:a4:0b:c9:25:40:ee:c5:fd:bd:a9:2b:2e:a5:5f:83:73: 4f:96:47:4b:9b:c6:e3:ac:87:cc:91:2b:61:18:bf:c7:6d:56: 8d:9c:c3:41:b5:fb:9f:d4:08:31:15:01:a2:c9:cf:42:d4:01: f5:7f:df:24:8a:df:b5:81:67:77:2a:f6:c4:eb:00:31:c0:52: e7:24:5d:81:c2:c4:61:40:dc:7f:b1:23:21:e1:50:58:90:b0: ca:07:28:ec:f1:2c:0c:e6:07:07:ac:69:03:0b:ec:d7:39:ae: 52:5c:90:50:ad:0f:45:08:35:a2:e4:a2:78:62:c2:15:26:2f: b2:2c:8e:b2:fe:21:9e:95:36:0a:55:36:db:5a:12:5a:99:98: 32:b0:bf:35:c1:5e:24:83:ed:67:06:55:de:bd:af:03:04:64: 01:53:12:28:04:f5:a5:5f:a7:3b:7e:e3:d6:b9:94:6b:7c:69: 96:91:46:74 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5REYxMTAvBgNVBAUTKDYwOUEzMTI2RTIzNjlBOTdENDdGRDY0NDk4RDgxNjVF MjFFNTI1QzUwHhcNMjYwODA0MjI0MzM0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcyNmIxNi05NTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyi6zzcxpvnjvVdluJJ0RjdAAYNGsh9iXaJpiMKluVRbSuRgshu4uVTC7iVP5 Wikn/TXSFWAzKklE99uw5aiFWG1nLEW0zKV1gVpw+89lwuVYrnGvkmUC2MjaF3ya QNmKb7mNAwr0meDgwdrnPqET2E0L2afc2NfPBWnQfW9e1mSWv1siCBd3WYet23kc UUf3/yWvCm+ojB4UqzKOMqZ+d8kTbbrI9WIVDXWuLUboQPySbrzxs2ylWUyKD4b0 t1ZU8rGR8CrElGE8aMdsRH8bQafF1sWDrVGxEubyWnYVdqYaHcpwqEj24AewJVWd MSlopfYETKDrABYOUwrnlyFe4QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKx+s5wd TMH+MbkxX358wMn7gZlxMB8GA1UdIwQYMBaAFGCaMSbiNpqX1H/WRJjYFl4h5SXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlERi9CQjUyRjRBQzlD MEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1wZlVmOVpFbU5nV1hpSGxK Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKb3hKdUkybXBmVWY5WkVtTmdXWGlIbEpjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5REYvQkI1MkY0QUM5QzBEMTFFQkFFRDg0QjI0QzRGOUFFMDIvMzU0MzE0MzA5 QzBGMTFFQkFFRkI2MjI1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ9YMAwQDcyp4AwQCkDAcMA0GCSqGSIb3DQEBCwUAA4IBAQBC42xU 4kMQ9NFfIWmPwfkhpxDYCUPWtsYcGhBLALq+p6T+5EP3TG1USNgKeWRhqZvrfncK zH+GzQFuDDtQnOuh0ecvw8bjHFfS9qQLySVA7sX9vakrLqVfg3NPlkdLm8bjrIfM kSthGL/HbVaNnMNBtfuf1AgxFQGiyc9C1AH1f98kit+1gWd3KvbE6wAxwFLnJF2B wsRhQNx/sSMh4VBYkLDKByjs8SwM5gcHrGkDC+zXOa5SXJBQrQ9FCDWi5KJ4YsIV Ji+yLI6y/iGelTYKVTbbWhJamZgysL81wV4kg+1nBlXeva8DBGQBUxIoBPWlX6c7 fuPWuZRrfGmWkUZ0 -----END CERTIFICATE-----Generated at Sat Sep 5 05:54:26 2026 by rpki-client