$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/35AB985C68B511F18E116D7B7F47A888.roa File: 35AB985C68B511F18E116D7B7F47A888.roa (raw, json) Hash identifier: zJzm+IxndwR1rSvg7Wy91Pwrmnj3T3uEe3l4l9/HMCw= Subject key identifier: 99:6A:04:6B:C7:2C:20:B4:1D:0A:61:12:E4:5D:E8:95:1B:33:DF:15 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 036C Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/35AB985C68B511F18E116D7B7F47A888.roa Signing time: Mon 15 Jun 2026 12:24:53 +0000 ROA not before: Mon 15 Jun 2026 12:24:52 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 15830 IP address blocks: 103.102.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 01:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Jun 15 12:24:52 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a2fef14-f592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:79:13:de:c3:90:2d:8d:85:d6:57:84:91:2b: b0:93:7a:62:3e:04:4a:29:66:06:ca:55:61:f1:70: 1a:ec:56:bd:07:33:61:19:cd:9c:2d:7c:c7:34:e9: 39:81:97:d3:a9:62:5d:fd:96:ef:5b:65:eb:be:09: 14:fc:8c:6f:89:99:cf:45:7c:23:82:59:54:dd:99: 7e:75:1f:99:2e:ad:5d:4c:1a:e5:a0:bb:5b:69:4e: db:1a:70:b1:e6:0d:c0:e9:43:d2:be:a7:62:f5:98: 37:cc:13:f7:d6:15:36:6e:91:05:37:1a:b7:b1:30: 3a:67:46:06:06:c6:01:6b:2e:b5:94:4e:e4:47:11: 45:bc:51:c1:5c:25:ce:a2:93:6a:8d:5b:fa:13:a8: 5c:1c:62:e4:83:09:9c:9d:58:e7:c5:b7:cc:80:1d: 7f:36:24:11:6f:f4:9c:b1:93:61:5c:c0:fd:b6:2d: 9f:88:97:f7:c9:57:62:b8:a1:d3:6b:4a:de:b6:ec: 79:a4:10:ec:b6:37:12:72:3f:ba:a1:77:5d:51:65: da:3e:6c:a9:d6:8a:eb:39:7d:44:da:3b:f3:90:ae: 13:ee:4b:2f:12:fe:26:66:6b:3d:98:da:22:fe:b4: 8b:1d:0f:c8:0b:77:9a:1f:41:d0:f7:76:c7:91:58: 84:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6A:04:6B:C7:2C:20:B4:1D:0A:61:12:E4:5D:E8:95:1B:33:DF:15 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/35AB985C68B511F18E116D7B7F47A888.roa sbgp-ipAddrBlock: critical IPv4: 103.102.124.0/22 Signature Algorithm: sha256WithRSAEncryption 99:79:29:4e:d7:eb:29:39:4a:b8:a4:6d:2e:de:d5:e5:58:e9: 12:a7:b6:cc:f5:7e:ab:a8:58:b1:b7:ec:58:7a:21:2b:fb:6d: f5:95:b6:6b:5f:6e:e1:b2:c9:b0:ee:c6:23:38:de:12:6e:77: e3:6f:ff:b6:88:81:88:81:d9:f1:95:1e:6c:1d:70:61:7c:a2: 87:ba:3b:05:cd:b9:27:6b:41:61:23:6a:c5:15:5f:63:22:51: be:2c:aa:67:12:74:ce:1a:9d:23:5f:d7:9a:d5:47:60:b4:c4: 5f:0f:21:14:13:e6:50:23:83:7b:bf:3b:93:56:42:8b:30:b5: 4e:86:7b:6e:4c:b0:03:52:2d:01:a5:12:57:89:10:7f:4e:6f: 14:42:b2:78:2d:32:f7:6e:ea:0e:11:09:cf:bf:5b:0d:1d:11: 6a:25:35:ae:8c:c0:81:30:30:52:6a:5f:32:32:00:24:23:75: 08:dd:39:be:11:bd:aa:00:ac:6a:8f:9e:f3:c6:4e:b4:4f:9f: 5e:54:70:22:71:0a:c3:60:c0:5f:23:a9:67:e6:f4:61:64:38: 63:33:6b:db:95:21:9c:c7:ce:2c:71:8a:46:8c:b8:62:44:77: 9d:18:04:8d:c2:19:39:16:9d:2b:6e:19:19:34:d3:7a:4e:75: c2:2e:9d:f1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjYwNjE1MTIyNDUyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJmZWYxNC1mNTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3kT3sOQLY2F1leEkSuwk3piPgRKKWYGylVh8XAa7Fa9BzNhGc2cLXzHNOk5 gZfTqWJd/ZbvW2XrvgkU/IxviZnPRXwjgllU3Zl+dR+ZLq1dTBrloLtbaU7bGnCx 5g3A6UPSvqdi9Zg3zBP31hU2bpEFNxq3sTA6Z0YGBsYBay61lE7kRxFFvFHBXCXO opNqjVv6E6hcHGLkgwmcnVjnxbfMgB1/NiQRb/ScsZNhXMD9ti2fiJf3yVdiuKHT a0retux5pBDstjcScj+6oXddUWXaPmyp1orrOX1E2jvzkK4T7ksvEv4mZms9mNoi /rSLHQ/IC3eaH0HQ93bHkViETQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJlqBGvH LCC0HQphEuRd6JUbM98VMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgwRDIvRUJDMUFDMkMxODRGMTFFREFEQkMzQzY1QzRGOUFFMDIvMzVBQjk4NUM2 OEI1MTFGMThFMTE2RDdCN0Y0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2Z8MA0GCSqGSIb3DQEBCwUAA4IBAQCZeSlO1+spOUq4pG0u3tXl WOkSp7bM9X6rqFixt+xYeiEr+231lbZrX27hssmw7sYjON4Sbnfjb/+2iIGIgdnx lR5sHXBhfKKHujsFzbkna0FhI2rFFV9jIlG+LKpnEnTOGp0jX9ea1UdgtMRfDyEU E+ZQI4N7vzuTVkKLMLVOhntuTLADUi0BpRJXiRB/Tm8UQrJ4LTL3buoOEQnPv1sN HRFqJTWujMCBMDBSal8yMgAkI3UI3Tm+Eb2qAKxqj57zxk60T59eVHAicQrDYMBf I6ln5vRhZDhjM2vblSGcx84scYpGjLhiRHedGASNwhk5Fp0rbhkZNNN6TnXCLp3x -----END CERTIFICATE-----Generated at Sun Jul 5 19:09:05 2026 by rpki-client