$ rpki-client -vvf rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/21028CF67EF811EAAD47CD30C4F9AE02.roa File: 21028CF67EF811EAAD47CD30C4F9AE02.roa (raw, json) Hash identifier: N4nwatfxEhehTAjjh/ZeTrbraCN50LGzf/5xzXSLM4M= Subject key identifier: 57:0A:2E:5D:19:25:39:2C:46:A7:C0:90:86:54:22:03:18:44:9E:68 Certificate issuer: /CN=A91A459D/serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B Certificate serial: 0ABA Authority key identifier: 52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/21028CF67EF811EAAD47CD30C4F9AE02.roa Signing time: Tue 28 Jul 2026 20:39:28 +0000 ROA not before: Tue 28 Jul 2026 20:39:28 +0000 ROA not after: Sat 28 Nov 2026 00:00:00 +0000 asID: 138684 IP address blocks: 103.136.132.0/22 maxlen: 22 103.136.132.0/24 maxlen: 24 103.136.133.0/24 maxlen: 24 103.136.134.0/24 maxlen: 24 103.136.135.0/24 maxlen: 24 2404:93c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2746 (0xaba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A459D, serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B Validity Not Before: Jul 28 20:39:28 2026 GMT Not After : Nov 28 00:00:00 2026 GMT Subject: CN=6a691380-a76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:af:df:82:89:24:60:76:a2:1a:02:9f:96:82: 18:04:67:7a:af:1c:92:bb:47:30:c5:ba:02:c3:99: 82:ab:37:d4:e0:90:95:9f:b9:05:17:ca:2d:0b:d3: 1f:f2:dd:58:d4:50:2a:76:b2:84:46:19:df:f5:7e: c9:88:7f:1a:28:d2:cc:c0:ef:f8:0a:e2:76:7e:26: 93:b8:72:db:a0:cb:69:d0:d4:01:35:03:ff:1b:10: 69:34:d5:86:39:f0:9f:be:d7:fc:bf:10:60:24:6d: c7:0c:8e:ba:98:3f:c1:30:e0:c3:f1:e3:da:96:33: c0:d5:a5:e4:af:d0:be:e0:ac:ea:64:95:cc:31:8d: 83:cb:91:3a:df:af:a0:24:54:df:1e:7d:a0:83:61: dc:e0:08:10:7d:06:24:ba:d6:56:60:1c:b0:c9:60: 20:df:58:d3:e5:21:4b:6f:52:47:12:fa:17:05:ab: 92:1a:e2:f9:58:5a:6f:7a:0f:bc:f1:b2:02:d1:d0: 14:e1:92:4d:23:bb:85:ab:95:d2:21:c4:44:74:6f: 36:24:8a:91:04:0b:fe:d7:cb:75:56:2d:39:76:70: b7:31:9a:c6:e2:61:93:55:9b:94:83:21:09:2e:7a: 20:cb:56:83:49:cc:12:f5:fb:62:c0:5f:9a:89:12: 3e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0A:2E:5D:19:25:39:2C:46:A7:C0:90:86:54:22:03:18:44:9E:68 X509v3 Authority Key Identifier: keyid:52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/21028CF67EF811EAAD47CD30C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.132.0/22 IPv6: 2404:93c0::/32 Signature Algorithm: sha256WithRSAEncryption 71:7d:5c:57:36:a8:c4:8b:99:09:62:fc:bd:15:e8:1f:f4:8e: a1:97:a7:2d:5c:6a:29:25:f3:85:60:57:b1:c8:c0:d2:df:c3: 2d:7f:aa:3c:bc:23:3f:c6:78:55:81:ad:20:8d:4c:94:96:26: b5:84:26:08:c2:4e:27:e3:2f:2e:66:fa:98:d6:0f:b5:40:a9: 51:31:d6:29:68:4d:62:67:e3:bb:51:41:d9:73:4c:d1:fb:c5: 85:dc:42:c1:c9:63:8c:7b:9c:9f:82:6e:fe:32:7c:68:55:c8: d3:d9:b1:b5:de:6a:54:53:fd:2c:a3:7a:21:c1:e3:29:b7:2c: 9c:7b:d2:3b:01:8f:b7:a6:3a:2a:75:08:d4:21:51:dc:64:48: c1:8e:82:12:ef:dd:f8:bf:32:a8:28:6d:54:ea:da:4a:7a:a5: bc:0f:eb:54:0b:a6:d4:94:df:88:1e:8f:fd:ef:d6:65:ab:4f: a2:5c:36:ad:dc:ef:ee:b4:3f:89:49:aa:99:2b:7c:94:b4:67: 64:00:7b:b9:10:1a:5a:bb:3d:25:61:a8:29:fa:a8:aa:9d:5c: 13:5a:10:61:72:22:78:2d:79:5d:fe:bd:7a:5e:73:82:24:a4: b5:b8:94:4b:ea:fe:e2:0b:6a:e0:6b:41:c6:2f:14:19:4b:0e: 5b:49:42:19 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1OUQxMTAvBgNVBAUTKDUyQjIxOTk1NDI5QzQ0RjhBN0Y0RUM5OUU1MzA0MDg3 MEQ2RDM4NUIwHhcNMjYwNzI4MjAzOTI4WhcNMjYxMTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MTM4MC1hNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2q/fgokkYHaiGgKfloIYBGd6rxySu0cwxboCw5mCqzfU4JCVn7kFF8otC9Mf 8t1Y1FAqdrKERhnf9X7JiH8aKNLMwO/4CuJ2fiaTuHLboMtp0NQBNQP/GxBpNNWG OfCfvtf8vxBgJG3HDI66mD/BMODD8ePaljPA1aXkr9C+4KzqZJXMMY2Dy5E636+g JFTfHn2gg2Hc4AgQfQYkutZWYBywyWAg31jT5SFLb1JHEvoXBauSGuL5WFpveg+8 8bIC0dAU4ZJNI7uFq5XSIcREdG82JIqRBAv+18t1Vi05dnC3MZrG4mGTVZuUgyEJ Lnogy1aDScwS9ftiwF+aiRI+kQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFcKLl0Z JTksRqfAkIZUIgMYRJ5oMB8GA1UdIwQYMBaAFFKyGZVCnET4p/TsmeUwQIcNbThb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU5RC81RkFCOTcyRTdF RjYxMUVBQTk3OUEzMkRDNEY5QUUwMi9VcklabFVLY1JQaW45T3laNVRCQWh3MXRP RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VySVpsVUtjUlBpbjlPeVo1VEJBaHcxdE9Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1OUQvNUZBQjk3MkU3RUY2MTFFQUE5NzlBMzJEQzRGOUFFMDIvMjEwMjhDRjY3 RUY4MTFFQUFENDdDRDMwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4iEMA0EAgACMAcDBQAkBJPAMA0GCSqGSIb3DQEBCwUAA4IBAQBx fVxXNqjEi5kJYvy9Fegf9I6hl6ctXGopJfOFYFexyMDS38Mtf6o8vCM/xnhVga0g jUyUlia1hCYIwk4n4y8uZvqY1g+1QKlRMdYpaE1iZ+O7UUHZc0zR+8WF3ELByWOM e5yfgm7+MnxoVcjT2bG13mpUU/0so3ohweMptyyce9I7AY+3pjoqdQjUIVHcZEjB joIS7934vzKoKG1U6tpKeqW8D+tUC6bUlN+IHo/979Zlq0+iXDat3O/utD+JSaqZ K3yUtGdkAHu5EBpauz0lYagp+qiqnVwTWhBhciJ4LXld/r16XnOCJKS1uJRL6v7i C2rga0HGLxQZSw5bSUIZ -----END CERTIFICATE-----Generated at Wed Aug 19 14:28:42 2026 by rpki-client