$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/6228B5D67C3311F1A4365A405EA30FBC.roa File: 6228B5D67C3311F1A4365A405EA30FBC.roa (raw, json) Hash identifier: lm6a6sSlcGo7UiIokAJc0to+ipQDBzDwod6EvR7ZUXs= Subject key identifier: 6C:C9:05:2A:CC:E1:26:0A:B2:87:F6:F2:61:CC:60:D8:5F:05:5A:BB Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 08D3 Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/6228B5D67C3311F1A4365A405EA30FBC.roa Signing time: Sun 02 Aug 2026 21:40:48 +0000 ROA not before: Sun 02 Aug 2026 21:40:47 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 2519 IP address blocks: 43.231.220.0/22 maxlen: 22 103.8.240.0/22 maxlen: 22 103.20.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 21:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2259 (0x8d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: Aug 2 21:40:47 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a6fb95f-a761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:01:55:91:16:68:57:dc:14:bf:25:39:73:f2: 29:27:52:df:8b:58:7a:5e:88:ce:4e:2c:4c:14:91: 6e:dc:01:59:53:e9:68:3c:cd:21:ba:c4:f5:9c:70: c8:d6:9d:fb:77:b3:70:8d:51:9d:a6:81:0a:1c:2c: d4:c3:74:ce:16:f9:90:19:bb:1f:b7:de:0f:03:ce: 20:05:3d:9b:3a:8f:14:f3:1c:49:cc:40:82:29:ca: ff:57:d8:b1:23:c0:e2:52:89:45:ec:69:26:65:53: 4f:f7:a7:2a:9c:7b:f8:41:4f:d2:af:62:d3:ba:d5: 8d:55:4f:24:3d:e9:e7:e9:4b:fe:3c:a7:d5:f8:a7: 44:13:c7:92:84:af:67:3b:aa:28:5b:b4:38:10:4b: ed:d1:0d:ba:f7:f4:e9:50:3f:cc:82:c4:a9:1e:46: fa:b2:5e:48:6d:9a:df:26:7a:05:6a:5e:71:82:e1: 00:f4:20:96:e0:fa:b8:63:05:99:8d:8e:e1:9b:f8: 49:63:44:ea:d4:26:b4:5d:e1:1e:49:65:15:de:2b: 3b:af:9a:c7:cb:c7:6a:fb:6c:58:0b:12:f1:15:be: 10:91:7f:59:11:91:46:ce:26:21:dc:e4:72:3e:93: f5:e5:05:19:ef:69:5e:af:2c:14:1c:45:10:ef:bb: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C9:05:2A:CC:E1:26:0A:B2:87:F6:F2:61:CC:60:D8:5F:05:5A:BB X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/6228B5D67C3311F1A4365A405EA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.231.220.0/22 103.8.240.0/22 103.20.156.0/22 Signature Algorithm: sha256WithRSAEncryption 57:a1:38:3d:2d:be:95:da:f1:ea:f6:e1:60:9b:48:3e:69:a8: 7e:80:0d:69:2c:e4:ae:e2:e1:ae:ff:7b:2c:83:1b:ee:c1:b5: e1:2b:0d:97:94:76:06:13:81:75:16:fb:4f:28:7f:e3:6f:d3: b9:4a:45:20:6f:46:9b:af:7b:51:39:8d:fa:96:dc:f5:19:42: 83:ba:41:a5:b3:e0:5f:5e:cb:99:a0:95:a9:41:48:26:f7:81: 4e:7a:3e:cf:3b:8f:80:7e:6f:59:eb:5e:53:05:f2:8a:79:be: 6f:68:9d:64:2f:03:18:31:a3:8b:f0:fc:45:83:73:11:d9:db: b4:06:9c:cf:77:b9:c6:ed:b5:3b:da:12:58:bd:18:e9:e2:d0: c7:67:bb:4b:5d:0f:4c:c2:43:ce:6a:ed:1d:a4:69:4a:ec:da: 3c:7a:7c:b6:98:bb:99:c3:2b:08:09:82:e8:88:6f:2c:71:0f: c8:d7:3f:39:6b:ef:9a:96:6a:1e:30:20:81:68:c7:1e:b0:96: 6f:1f:38:8f:82:62:f9:a1:b1:a8:5e:9e:97:32:81:e9:bb:ff: 62:da:9f:86:04:b5:16:74:53:02:25:6c:7c:42:59:a9:0c:83: 05:89:4d:f8:14:f8:ec:1b:b8:5d:77:cf:a7:8f:8a:72:66:35: 3a:1e:93:e7 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjYwODAyMjE0MDQ3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZmYjk1Zi1hNzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wFVkRZoV9wUvyU5c/IpJ1Lfi1h6XojOTixMFJFu3AFZU+loPM0husT1nHDI 1p37d7NwjVGdpoEKHCzUw3TOFvmQGbsft94PA84gBT2bOo8U8xxJzECCKcr/V9ix I8DiUolF7GkmZVNP96cqnHv4QU/Sr2LTutWNVU8kPenn6Uv+PKfV+KdEE8eShK9n O6ooW7Q4EEvt0Q269/TpUD/MgsSpHkb6sl5IbZrfJnoFal5xguEA9CCW4Pq4YwWZ jY7hm/hJY0Tq1Ca0XeEeSWUV3is7r5rHy8dq+2xYCxLxFb4QkX9ZEZFGziYh3ORy PpP15QUZ72lerywUHEUQ77uZpwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGzJBSrM 4SYKsof28mHMYNhfBVq7MB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQxRTkvREFEOEZCODAwNzkwMTFFQkJCOThDMDc2QzRGOUFFMDIvNjIyOEI1RDY3 QzMzMTFGMUE0MzY1QTQwNUVBMzBGQkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK+fcAwQCZwjwAwQCZxScMA0GCSqGSIb3DQEBCwUAA4IBAQBXoTg9 Lb6V2vHq9uFgm0g+aah+gA1pLOSu4uGu/3ssgxvuwbXhKw2XlHYGE4F1FvtPKH/j b9O5SkUgb0abr3tROY36ltz1GUKDukGls+BfXsuZoJWpQUgm94FOej7PO4+Afm9Z 615TBfKKeb5vaJ1kLwMYMaOL8PxFg3MR2du0BpzPd7nG7bU72hJYvRjp4tDHZ7tL XQ9MwkPOau0dpGlK7No8eny2mLuZwysICYLoiG8scQ/I1z85a++almoeMCCBaMce sJZvHziPgmL5obGoXp6XMoHpu/9i2p+GBLUWdFMCJWx8QlmpDIMFiU34FPjsG7hd d8+nj4pyZjU6HpPn -----END CERTIFICATE-----Generated at Wed Aug 19 17:02:30 2026 by rpki-client