$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/970B3004280411F19C40334AB5833773.roa File: 970B3004280411F19C40334AB5833773.roa (raw, json) Hash identifier: lMjCNVwocxANjTxNFwd68T9KEsNNF6/64vuWWoyS0o0= Subject key identifier: D1:F0:76:FA:C3:34:BA:94:F4:7F:DC:EB:50:DC:74:CE:C3:F6:E6:1A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6CB2 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/970B3004280411F19C40334AB5833773.roa Signing time: Wed 17 Jun 2026 04:01:34 +0000 ROA not before: Wed 17 Jun 2026 04:01:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154552 IP address blocks: 103.199.10.0/24 maxlen: 24 103.199.11.0/24 maxlen: 24 103.216.125.0/24 maxlen: 24 103.216.126.0/24 maxlen: 24 103.216.127.0/24 maxlen: 24 163.128.60.0/23 maxlen: 23 163.128.60.0/24 maxlen: 24 163.128.61.0/24 maxlen: 24 2001:df4:14c0::/48 maxlen: 48 2001:df6:d440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27826 (0x6cb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Jun 17 04:01:34 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a321c1e-ad16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:de:93:00:5b:7a:04:ec:f3:f9:99:2a:4f:6f: 2f:27:6d:58:2e:90:27:0d:b5:b6:a0:a9:ab:bd:0d: 9a:ff:4f:e1:cf:eb:3b:18:e7:d4:bd:44:df:47:96: 9c:bd:f0:d1:fe:3d:10:2b:99:1d:75:32:7b:5b:00: 75:04:60:ba:94:4c:ed:2b:f1:5a:0f:60:8c:fb:b7: 65:01:58:48:14:c4:b0:42:eb:9b:6d:95:70:c7:52: 18:fa:aa:59:5e:a8:88:87:75:66:10:19:6d:8b:c5: a8:82:4a:0e:3a:99:1d:0c:5c:ab:1d:41:c9:bb:8a: 5b:c2:89:69:c0:f6:68:ec:e4:02:3a:c7:9c:7a:35: 43:b1:4d:37:7d:ed:bd:70:37:ac:70:90:d5:b0:0f: 42:c8:d5:32:7f:14:e9:bf:76:b3:6d:18:dc:58:85: 9a:78:42:eb:33:65:11:ca:bf:da:0d:7d:98:5c:e1: a5:e6:1b:32:bd:64:f2:37:58:c7:36:08:e0:15:85: 1d:26:a0:a3:78:b8:9f:25:32:86:51:5a:f4:46:82: 72:8f:62:56:76:f8:81:50:31:31:68:7c:d5:8b:a9: 4d:90:8f:d3:ca:1d:f4:76:ab:2a:fb:88:30:1c:f2: cc:8b:b9:ff:05:c1:fd:d2:0d:00:6d:a7:ac:89:71: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F0:76:FA:C3:34:BA:94:F4:7F:DC:EB:50:DC:74:CE:C3:F6:E6:1A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/970B3004280411F19C40334AB5833773.roa sbgp-ipAddrBlock: critical IPv4: 103.199.10.0/23 103.216.125.0-103.216.127.255 163.128.60.0/23 IPv6: 2001:df4:14c0::/48 2001:df6:d440::/48 Signature Algorithm: sha256WithRSAEncryption 66:60:d8:ca:d3:42:f3:61:4c:b9:63:8e:24:4e:d6:3b:f7:cd: 15:6c:61:45:0e:57:5b:b9:99:5d:21:02:29:6c:3d:63:62:0c: 5d:6f:a9:ad:96:2a:b1:5c:a0:cc:2e:92:20:8b:86:0b:0e:14: 89:0a:2a:d7:dc:ab:6e:2c:7e:2c:ff:79:ef:43:1d:62:7e:48: 40:c7:af:93:31:ab:5c:6b:cc:ef:24:a0:fe:b9:28:87:eb:33: 04:fc:47:07:a2:98:68:13:80:58:8c:96:a1:e7:62:17:7b:9e: 4c:e9:e2:bb:4e:ae:70:de:95:89:2b:7e:d2:cb:cb:cb:a6:b1: de:3d:2b:9c:e6:3c:df:e8:19:b4:85:34:6d:1c:b9:a1:fc:42: 90:7b:8c:79:95:b0:d3:6b:b2:32:4f:31:f1:77:1f:d9:05:19: 90:10:38:8d:92:20:2c:22:bd:2b:b7:8b:25:a5:5c:2a:ca:40: 9a:4a:99:fc:11:52:45:33:4d:74:e4:44:79:35:5f:d0:c4:a7: d2:5e:1e:91:bc:a9:2e:04:b9:cc:38:88:16:2e:06:db:12:b4: ee:8a:14:81:10:c2:12:1b:26:b0:be:4b:e6:81:39:8f:2e:a7: 72:77:f9:2d:2b:e3:39:5f:52:64:d4:14:ef:92:55:8e:20:f3: 97:dc:4c:e6 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICbLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYwNjE3MDQwMTM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMyMWMxZS1hZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA596TAFt6BOzz+ZkqT28vJ21YLpAnDbW2oKmrvQ2a/0/hz+s7GOfUvUTfR5ac vfDR/j0QK5kddTJ7WwB1BGC6lEztK/FaD2CM+7dlAVhIFMSwQuubbZVwx1IY+qpZ XqiIh3VmEBlti8WogkoOOpkdDFyrHUHJu4pbwolpwPZo7OQCOsecejVDsU03fe29 cDescJDVsA9CyNUyfxTpv3azbRjcWIWaeELrM2URyr/aDX2YXOGl5hsyvWTyN1jH NgjgFYUdJqCjeLifJTKGUVr0RoJyj2JWdviBUDExaHzVi6lNkI/Tyh30dqsq+4gw HPLMi7n/BcH90g0AbaesiXEoTwIDAQABo4ICjjCCAoowHQYDVR0OBBYEFNHwdvrD NLqU9H/c61DcdM7D9uYaMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOTcwQjMwMDQy ODA0MTFGMTlDNDAzMzRBQjU4MzM3NzMucm9hME0GCCsGAQUFBwEHAQH/BD4wPDAg BAIAATAaAwQBZ8cKMAwDBABn2H0DBAdn2AADBAGjgDwwGAQCAAIwEgMHACABDfQU wAMHACABDfbUQDANBgkqhkiG9w0BAQsFAAOCAQEAZmDYytNC82FMuWOOJE7WO/fN FWxhRQ5XW7mZXSECKWw9Y2IMXW+prZYqsVygzC6SIIuGCw4UiQoq19yrbix+LP95 70MdYn5IQMevkzGrXGvM7ySg/rkoh+szBPxHB6KYaBOAWIyWoediF3ueTOniu06u cN6ViSt+0svLy6ax3j0rnOY83+gZtIU0bRy5ofxCkHuMeZWw02uyMk8x8Xcf2QUZ kBA4jZIgLCK9K7eLJaVcKspAmkqZ/BFSRTNNdOREeTVf0MSn0l4ekbypLgS5zDiI Fi4G2xK07ooUgRDCEhsmsL5L5oE5jy6ncnf5LSvjOV9SZNQU75JVjiDzl9xM5g== -----END CERTIFICATE-----Generated at Tue Jul 21 23:02:14 2026 by rpki-client