$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2BB9C24A608E11F09975FE53C4F9AE02.roa File: 2BB9C24A608E11F09975FE53C4F9AE02.roa (raw, json) Hash identifier: 2Wg4PDX8jcwCdjl0U3IG7PLy1vrFahdbq5Lm8lMhpUg= Subject key identifier: 85:74:EE:29:7E:8C:1B:C0:1B:C1:59:10:A5:7B:30:FD:67:A8:06:BF Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6CBC Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2BB9C24A608E11F09975FE53C4F9AE02.roa Signing time: Thu 25 Jun 2026 10:10:48 +0000 ROA not before: Thu 25 Jun 2026 10:10:48 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 63730 IP address blocks: 103.9.156.0/22 maxlen: 22 103.168.36.0/23 maxlen: 23 103.185.184.0/23 maxlen: 24 2400:69e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27836 (0x6cbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Jun 25 10:10:48 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a3cfea8-0c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:71:a2:07:65:2d:0c:23:3c:a9:5f:55:0c: 69:73:56:60:de:76:ee:02:88:17:a3:26:06:35:e3: 03:45:30:ed:d5:5d:11:b8:f3:41:eb:d3:49:b5:dd: f1:b6:e9:1e:80:8d:c0:b4:d2:90:9b:3d:82:5a:1f: ee:04:51:81:e6:35:45:8f:da:39:57:37:ed:34:26: 0d:f4:b2:c2:26:28:f4:a2:fb:3f:3c:0d:63:fb:dd: 59:25:34:7b:17:e6:29:27:e3:cd:31:e6:a3:87:35: 99:fb:72:c1:26:88:7a:40:65:fe:f4:eb:c7:1e:63: 06:08:2b:2f:78:d9:09:e5:cf:92:e6:2b:a3:54:19: 9a:3a:de:15:cc:2c:e5:65:c5:2e:9f:12:fe:f7:6f: fb:0d:d5:bc:45:d4:05:8c:6c:42:6b:f2:17:98:26: 5f:12:ac:13:42:68:09:94:9a:41:a8:7c:f3:74:25: 7b:3c:7c:88:5f:40:12:86:1e:19:06:bf:17:24:87: ac:d9:18:54:14:12:07:81:9b:eb:27:cb:72:dd:c8: 89:0c:75:02:41:83:40:56:ba:a5:3c:fa:7f:c0:54: 17:a5:1f:e7:f3:6c:ec:9a:0f:54:73:f3:ec:d1:07: da:85:2f:28:30:e9:d4:53:ef:d6:ab:3f:6f:bf:7f: 76:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:74:EE:29:7E:8C:1B:C0:1B:C1:59:10:A5:7B:30:FD:67:A8:06:BF X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2BB9C24A608E11F09975FE53C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.9.156.0/22 103.168.36.0/23 103.185.184.0/23 IPv6: 2400:69e0::/48 Signature Algorithm: sha256WithRSAEncryption 0e:12:07:23:86:9b:5d:b5:69:b5:92:8a:ce:3b:d4:e4:e1:8d: 5c:01:68:ab:19:7a:53:f3:88:f1:f2:15:64:22:88:06:31:05: 7e:d9:5b:1d:d6:2b:6b:bb:59:29:4c:76:37:02:64:1a:2e:b4: 93:0e:d1:4c:8c:20:56:1c:f2:ad:13:99:ce:d4:05:fb:88:29: e3:cb:a0:20:3b:5c:11:4c:a7:a8:7a:c4:8f:fb:2f:d4:ae:1d: 4d:af:35:3b:ea:9e:4a:3c:8a:a9:b6:6b:57:60:a8:bf:29:7d: c2:c0:19:66:8e:6c:bb:8a:88:bd:be:3d:72:aa:f4:8d:cd:90: 34:68:cd:60:3a:7b:0e:b9:32:53:62:cc:f9:a3:fc:f4:10:0f: c1:c3:a1:ca:8b:86:95:0f:1f:da:9e:39:05:1a:69:b9:8a:a0: c9:6c:0c:a8:43:5f:eb:ca:e9:98:f5:cf:42:95:0f:c2:22:16: f4:48:70:55:8f:4c:0c:a0:fc:49:48:ba:14:ba:65:67:34:15: 90:43:a7:a6:24:da:a1:0f:b5:6a:ca:aa:3f:cf:ab:44:3e:f0: e2:de:f0:33:c6:b5:8f:43:23:6d:a4:b5:76:47:75:43:5c:33: a8:2f:91:08:48:3b:9a:d5:72:6b:5c:54:ef:f1:56:94:5b:d9: a2:94:88:a6 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICbLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYwNjI1MTAxMDQ4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNjZmVhOC0wYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfNxogdlLQwjPKlfVQxpc1Zg3nbuAogXoyYGNeMDRTDt1V0RuPNB69NJtd3x tukegI3AtNKQmz2CWh/uBFGB5jVFj9o5VzftNCYN9LLCJij0ovs/PA1j+91ZJTR7 F+YpJ+PNMeajhzWZ+3LBJoh6QGX+9OvHHmMGCCsveNkJ5c+S5iujVBmaOt4VzCzl ZcUunxL+92/7DdW8RdQFjGxCa/IXmCZfEqwTQmgJlJpBqHzzdCV7PHyIX0AShh4Z Br8XJIes2RhUFBIHgZvrJ8ty3ciJDHUCQYNAVrqlPPp/wFQXpR/n82zsmg9Uc/Ps 0QfahS8oMOnUU+/Wqz9vv392TQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFIV07il+ jBvAG8FZEKV7MP1nqAa/MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMkJCOUMyNEE2 MDhFMTFGMDk5NzVGRTUzQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQCZwmcAwQBZ6gkAwQBZ7m4MA8EAgACMAkDBwAkAGngAAAwDQYJKoZI hvcNAQELBQADggEBAA4SByOGm121abWSis471OThjVwBaKsZelPziPHyFWQiiAYx BX7ZWx3WK2u7WSlMdjcCZBoutJMO0UyMIFYc8q0Tmc7UBfuIKePLoCA7XBFMp6h6 xI/7L9SuHU2vNTvqnko8iqm2a1dgqL8pfcLAGWaObLuKiL2+PXKq9I3NkDRozWA6 ew65MlNizPmj/PQQD8HDocqLhpUPH9qeOQUaabmKoMlsDKhDX+vK6Zj1z0KVD8Ii FvRIcFWPTAyg/ElIuhS6ZWc0FZBDp6Yk2qEPtWrKqj/Pq0Q+8OLe8DPGtY9DI22k tXZHdUNcM6gvkQhIO5rVcmtcVO/xVpRb2aKUiKY= -----END CERTIFICATE-----Generated at Tue Jul 21 23:00:58 2026 by rpki-client