$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa File: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (raw, json) Hash identifier: nM/cR32Kk8Z50H56cLn2XFpHm3KmnpYu/XbItfnfxPM= Subject key identifier: D9:25:8B:25:57:89:84:98:AC:9C:8F:27:2D:C7:8F:F7:F9:36:8F:83 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1AF6 Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa Signing time: Tue 30 Jun 2026 17:19:19 +0000 ROA not before: Tue 30 Jun 2026 17:19:19 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 133450 IP address blocks: 103.94.128.0/22 maxlen: 22 103.94.128.0/23 maxlen: 23 103.94.128.0/24 maxlen: 24 103.94.129.0/24 maxlen: 24 103.94.130.0/23 maxlen: 23 103.94.130.0/24 maxlen: 24 103.94.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 16:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6902 (0x1af6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Jun 30 17:19:19 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a43fa96-df2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:00:a1:52:98:68:4d:f1:42:7d:16:07:cf: 82:e8:99:1f:ee:10:80:e6:d5:2a:0d:ea:ce:dd:2e: 51:7f:c0:ac:f6:0e:5c:a6:e2:b1:88:be:b0:10:60: 93:bf:9e:77:7c:02:1d:5b:81:76:15:8d:d9:d0:2e: f8:27:d3:fd:35:fc:da:a0:50:91:78:cc:d5:04:b4: 0a:b1:b4:75:3f:70:08:7d:23:22:1e:f8:f9:ab:7c: eb:eb:9d:61:dc:05:48:04:f1:28:da:7f:fd:1e:aa: 6d:42:46:7b:0a:54:95:7d:1f:58:55:c9:fd:de:74: 3c:56:d2:8a:f1:e3:cd:01:40:4e:17:03:1f:4e:e5: 4c:6d:a2:d2:9b:42:a3:2a:f1:64:57:d1:1c:8a:ae: 02:5b:5b:84:a7:bb:de:a2:f8:95:b3:a3:a6:dc:2e: c7:e8:ab:5d:6c:16:b8:4d:ae:11:4a:b1:10:eb:7d: 40:1c:18:21:8c:86:60:1a:96:14:c7:8a:76:54:cc: 18:c4:87:df:13:f7:72:2e:96:99:45:27:5c:75:bf: 26:71:9a:c2:5b:eb:4e:6a:70:b2:20:6d:af:27:87: ca:dc:c3:d8:4d:db:86:28:c4:41:88:35:62:0d:b6: 83:48:66:fc:90:cc:39:7b:f0:b3:9d:f3:44:b6:f8: 1d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:25:8B:25:57:89:84:98:AC:9C:8F:27:2D:C7:8F:F7:F9:36:8F:83 X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.94.128.0/22 Signature Algorithm: sha256WithRSAEncryption 91:f0:48:a4:d0:ac:1b:2b:89:59:66:fa:db:37:22:7f:cb:a5: a3:db:c1:02:0d:a0:6e:32:64:f1:bb:0b:1a:4b:b1:31:ab:11: c1:c8:a3:6a:71:1b:e6:67:e8:87:b6:96:52:ea:77:19:90:a7: 2c:f6:68:7e:31:40:33:1f:67:0d:22:ee:61:85:a4:4d:79:36: ab:96:c4:8f:8b:30:bc:c7:01:a9:80:c7:c9:0f:7e:a9:97:4f: 8e:2a:52:f9:0f:52:0b:11:d5:f5:67:8b:cd:1f:01:f0:17:10: 85:51:4c:9b:12:44:34:28:76:1d:24:e7:71:b8:25:d0:96:53: 43:71:86:7e:7d:88:52:ac:53:5b:90:96:21:15:38:c6:dd:08: b5:0d:e6:9b:8c:76:46:a7:ab:a4:af:ed:24:e2:d5:f2:ba:95: 8b:b3:83:b3:5f:fa:df:0c:d0:63:a6:8c:6b:2d:15:ea:7f:13: a6:d7:b9:14:c2:44:94:ae:37:07:1a:82:d5:38:53:ca:49:a9: 1f:6d:45:de:a8:3b:2d:df:d7:b9:77:dc:08:fb:9a:e3:0e:d5: 75:b5:a0:63:54:a0:c8:93:36:54:96:c0:b5:a7:08:17:34:47: e4:45:90:c4:22:c6:64:e2:98:6f:91:97:1e:78:89:5b:29:cb: 8a:e1:a3:e4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjYwNjMwMTcxOTE5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQzZmE5Ni1kZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSMAoVKYaE3xQn0WB8+C6Jkf7hCA5tUqDerO3S5Rf8Cs9g5cpuKxiL6wEGCT v553fAIdW4F2FY3Z0C74J9P9NfzaoFCReMzVBLQKsbR1P3AIfSMiHvj5q3zr651h 3AVIBPEo2n/9HqptQkZ7ClSVfR9YVcn93nQ8VtKK8ePNAUBOFwMfTuVMbaLSm0Kj KvFkV9Eciq4CW1uEp7veoviVs6Om3C7H6KtdbBa4Ta4RSrEQ631AHBghjIZgGpYU x4p2VMwYxIffE/dyLpaZRSdcdb8mcZrCW+tOanCyIG2vJ4fK3MPYTduGKMRBiDVi DbaDSGb8kMw5e/CznfNEtvgdCwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNkliyVX iYSYrJyPJy3Hj/f5No+DMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA1QUIvMDUyNDNBQzY0QzI4MTFFNzk2OEFEMjExQzRGOUFFMDIvNEVGNDgzQzY0 QzI5MTFFNzhCRjFCRDEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ16AMA0GCSqGSIb3DQEBCwUAA4IBAQCR8Eik0KwbK4lZZvrbNyJ/ y6Wj28ECDaBuMmTxuwsaS7ExqxHByKNqcRvmZ+iHtpZS6ncZkKcs9mh+MUAzH2cN Iu5hhaRNeTarlsSPizC8xwGpgMfJD36pl0+OKlL5D1ILEdX1Z4vNHwHwFxCFUUyb EkQ0KHYdJOdxuCXQllNDcYZ+fYhSrFNbkJYhFTjG3Qi1DeabjHZGp6ukr+0k4tXy upWLs4OzX/rfDNBjpoxrLRXqfxOm17kUwkSUrjcHGoLVOFPKSakfbUXeqDst39e5 d9wI+5rjDtV1taBjVKDIkzZUlsC1pwgXNEfkRZDEIsZk4phvkZceeIlbKcuK4aPk -----END CERTIFICATE-----Generated at Sun Jul 5 09:24:05 2026 by rpki-client