$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/1CF68346F0BF11EEA1A0B559C4F9AE02.roa File: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (raw, json) Hash identifier: bDXcTdd3+KI00Tu5QIah+xvRBUeXyNYVufxWd0r1cSs= Subject key identifier: 80:43:5C:B5:9C:8F:71:88:59:D2:37:32:DF:2C:0B:C2:76:5B:ED:59 Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Certificate serial: 047C Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/1CF68346F0BF11EEA1A0B559C4F9AE02.roa Signing time: Tue 23 Jun 2026 05:17:24 +0000 ROA not before: Tue 23 Jun 2026 05:17:24 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 134697 IP address blocks: 43.225.60.0/22 maxlen: 24 45.248.48.0/22 maxlen: 24 103.205.28.0/23 maxlen: 24 103.214.220.0/22 maxlen: 24 103.216.190.0/23 maxlen: 24 144.48.164.0/22 maxlen: 24 203.7.236.0/22 maxlen: 24 203.12.0.0/23 maxlen: 24 203.12.2.0/23 maxlen: 24 203.12.4.0/23 maxlen: 24 203.12.6.0/23 maxlen: 23 203.12.6.0/24 maxlen: 24 203.12.7.0/24 maxlen: 24 203.12.8.0/23 maxlen: 24 203.12.10.0/23 maxlen: 24 203.12.12.0/23 maxlen: 24 203.12.14.0/23 maxlen: 24 2404:e80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 01:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Validity Not Before: Jun 23 05:17:24 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a3a16e4-1c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:2d:24:ba:65:15:86:5f:5a:31:98:cd:08: f7:e3:50:c0:ce:38:7f:8c:4d:ff:72:be:fc:fc:15: 22:13:ed:3e:cb:6c:34:f9:01:3a:f2:66:44:70:79: c5:0c:68:09:70:24:29:05:82:ef:6f:35:36:02:60: 97:76:d7:ed:84:93:ea:47:3f:c8:e0:8a:16:d9:80: f7:62:9d:c8:48:65:88:bf:ad:8a:90:ad:ee:b6:2f: 9e:98:b2:27:a0:e5:bc:69:7c:c8:ac:3c:84:06:27: b0:ee:a6:1a:33:42:23:4e:90:0d:96:a8:a2:c2:16: 8e:46:05:c5:40:d2:e8:fc:50:b5:2e:24:85:2d:91: 94:5f:b9:61:26:a1:65:8f:84:04:83:0f:99:00:e7: 7b:a8:23:19:8b:5d:b0:e0:18:8f:04:26:b4:db:e9: 27:f5:19:84:ce:df:7a:4d:9b:31:18:02:b3:ea:8b: fe:ec:25:c9:3e:be:c1:c8:a0:99:4f:d0:ad:be:92: 2f:2c:d0:24:1b:5b:eb:d0:b7:c3:e7:9a:99:ea:cd: a5:99:cf:b8:b0:c9:6b:21:37:29:a4:a4:69:98:b8: d2:6d:79:f1:2a:2f:de:b4:86:7e:0f:98:0f:09:0e: a6:94:39:11:f6:fd:67:ca:10:e5:01:04:2b:8f:be: b0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:43:5C:B5:9C:8F:71:88:59:D2:37:32:DF:2C:0B:C2:76:5B:ED:59 X509v3 Authority Key Identifier: keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/1CF68346F0BF11EEA1A0B559C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.60.0/22 45.248.48.0/22 103.205.28.0/23 103.214.220.0/22 103.216.190.0/23 144.48.164.0/22 203.7.236.0/22 203.12.0.0/20 IPv6: 2404:e80::/32 Signature Algorithm: sha256WithRSAEncryption 64:cc:e8:1f:3c:37:da:53:42:83:5b:ea:c1:22:20:1c:9e:03: 62:85:df:ab:16:41:f1:b0:30:96:04:70:34:34:fc:a6:0a:ef: 9f:e3:bf:30:b6:a8:8d:a7:8a:77:fa:fa:4a:8f:d7:f4:63:b0: 80:d7:81:1b:dc:b9:ed:de:e1:39:dc:92:7a:eb:71:24:e9:1c: e5:1f:26:14:e8:8e:83:ea:42:b0:bd:ec:72:f1:6f:b2:72:c6: 4a:4b:f4:b2:00:70:de:d8:bb:4c:96:f2:b3:53:d7:fc:34:bc: 39:db:8b:ba:19:17:8b:81:df:a4:11:63:3b:66:27:1d:20:10: b6:47:ed:93:0d:91:0f:06:ab:70:19:ae:bb:59:65:0f:38:2d: 0c:3b:af:2b:7a:92:65:13:e5:34:e8:68:7b:d8:e0:6f:fa:d5: da:ca:2f:9e:10:27:c7:cc:4f:38:9e:6c:bc:d3:71:c0:f6:0d: 72:4e:ae:b5:f7:6b:f4:33:a9:a6:1c:dd:c0:f8:93:bf:0e:5a: a7:ae:f7:e7:59:e6:83:ae:6a:c3:d3:1e:b4:a0:c7:0b:46:2f: 15:18:fd:c0:49:26:cc:e4:1e:4c:fe:3d:5d:cc:f0:0d:74:f2: a0:c8:76:56:a4:e7:88:e2:24:db:c7:cd:e2:c8:35:a4:31:9d: 88:73:d8:92 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1Q0MxMTAvBgNVBAUTKDBCQUM0Mjk4NkU5QUJEQjdDRUUyQ0RGQjJBOUZFOEQ2 RDAyQUFCNUMwHhcNMjYwNjIzMDUxNzI0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNhMTZlNC0xYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsREtJLplFYZfWjGYzQj341DAzjh/jE3/cr78/BUiE+0+y2w0+QE68mZEcHnF DGgJcCQpBYLvbzU2AmCXdtfthJPqRz/I4IoW2YD3Yp3ISGWIv62KkK3uti+emLIn oOW8aXzIrDyEBiew7qYaM0IjTpANlqiiwhaORgXFQNLo/FC1LiSFLZGUX7lhJqFl j4QEgw+ZAOd7qCMZi12w4BiPBCa02+kn9RmEzt96TZsxGAKz6ov+7CXJPr7ByKCZ T9CtvpIvLNAkG1vr0LfD55qZ6s2lmc+4sMlrITcppKRpmLjSbXnxKi/etIZ+D5gP CQ6mlDkR9v1nyhDlAQQrj76wuQIDAQABo4ICmTCCApUwHQYDVR0OBBYEFIBDXLWc j3GIWdI3Mt8sC8J2W+1ZMB8GA1UdIwQYMBaAFAusQphumr23zuLN+yqf6NbQKqtc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xRUEzNDNFMkFG RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZiZk80czM3S3BfbzF0QXFx MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2eENtRzZhdmJmTzRzMzdLcF9vMXRBcXExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc1Q0MvMUVBMzQzRTJBRkUzMTFFQ0EyQ0IwNjZEQzRGOUFFMDIvMUNGNjgzNDZG MEJGMTFFRUExQTBCNTU5QzRGOUFFMDIucm9hMFgGCCsGAQUFBwEHAQH/BEkwRzA2 BAIAATAwAwQCK+E8AwQCLfgwAwQBZ80cAwQCZ9bcAwQBZ9i+AwQCkDCkAwQCywfs AwQEywwAMA0EAgACMAcDBQAkBA6AMA0GCSqGSIb3DQEBCwUAA4IBAQBkzOgfPDfa U0KDW+rBIiAcngNihd+rFkHxsDCWBHA0NPymCu+f478wtqiNp4p3+vpKj9f0Y7CA 14Eb3Lnt3uE53JJ663Ek6RzlHyYU6I6D6kKwvexy8W+ycsZKS/SyAHDe2LtMlvKz U9f8NLw524u6GReLgd+kEWM7ZicdIBC2R+2TDZEPBqtwGa67WWUPOC0MO68repJl E+U06Gh72OBv+tXayi+eECfHzE84nmy803HA9g1yTq6192v0M6mmHN3A+JO/Dlqn rvfnWeaDrmrD0x60oMcLRi8VGP3ASSbM5B5M/j1dzPANdPKgyHZWpOeI4iTbx83i yDWkMZ2Ic9iS -----END CERTIFICATE-----Generated at Tue Jul 21 22:59:12 2026 by rpki-client