$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C808370768A11F18379E3C263A30FBC.roa File: 9C808370768A11F18379E3C263A30FBC.roa (raw, json) Hash identifier: qAybuICjipusNf4WUb9EwGbHfCgicRlLINVm074FIK8= Subject key identifier: 06:23:6B:21:5B:5C:5F:C8:AD:73:55:4C:83:4A:D3:BF:DF:D8:EA:B9 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6CD2 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C808370768A11F18379E3C263A30FBC.roa Signing time: Fri 03 Jul 2026 02:55:13 +0000 ROA not before: Fri 03 Jul 2026 02:55:13 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135951 IP address blocks: 101.101.96.0/23 maxlen: 24 103.130.216.0/22 maxlen: 23 103.142.24.0/23 maxlen: 24 103.142.26.0/23 maxlen: 24 103.155.162.0/23 maxlen: 24 103.161.178.0/23 maxlen: 23 103.162.14.0/23 maxlen: 24 103.162.20.0/23 maxlen: 24 103.162.22.0/23 maxlen: 23 103.177.110.0/23 maxlen: 24 103.179.184.0/23 maxlen: 24 116.118.44.0/22 maxlen: 24 180.93.136.0/22 maxlen: 24 2400:4de0::/48 maxlen: 48 2401:45e0::/48 maxlen: 48 2405:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27858 (0x6cd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Jul 3 02:55:13 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a472491-2611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3f:6c:23:ba:0a:b3:85:4c:b3:5b:11:0b:13: 98:50:e9:3d:fa:2e:00:5a:e0:1d:1a:1f:a4:bb:f6: 7f:1a:38:b2:37:d9:3c:19:fe:39:92:c9:f8:b0:82: 6e:d2:72:bd:d3:58:e6:18:6b:de:49:63:c0:4a:23: 2a:8f:39:96:60:dc:41:3b:63:a9:a6:5e:8f:02:0c: d7:d2:f9:94:d2:6b:14:30:5c:3a:a7:43:34:32:9d: 7b:73:81:22:cb:cb:f2:6e:dd:9a:40:55:23:d4:d8: c7:26:92:8d:a5:2b:ed:44:74:da:54:4e:ae:79:cf: 20:7a:5f:17:24:8f:69:6f:6d:c2:c5:a1:26:0b:47: 6a:85:c6:b9:1f:3d:c4:b5:97:56:17:be:31:6d:89: 37:0f:ca:9b:43:e1:43:63:5f:5d:39:70:4e:53:2e: ce:3c:30:02:a6:40:c3:66:74:96:26:cd:49:2b:0a: cc:de:99:a1:d2:92:50:c0:e2:07:04:b4:b8:75:d9: 56:12:e1:7f:41:86:c6:28:b3:3e:4e:a4:3d:f7:60: ef:f9:86:bc:22:68:88:57:98:ec:2c:dc:87:1a:7a: 64:34:eb:82:f6:2c:66:79:08:17:03:93:86:cd:a9: ec:53:ee:23:6c:21:bc:cf:ad:96:f8:54:eb:a0:c8: 6c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:23:6B:21:5B:5C:5F:C8:AD:73:55:4C:83:4A:D3:BF:DF:D8:EA:B9 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C808370768A11F18379E3C263A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 101.101.96.0/23 103.130.216.0/22 103.142.24.0/22 103.155.162.0/23 103.161.178.0/23 103.162.14.0/23 103.162.20.0/22 103.177.110.0/23 103.179.184.0/23 116.118.44.0/22 180.93.136.0/22 IPv6: 2400:4de0::/48 2401:45e0::/48 2405:2840::/48 Signature Algorithm: sha256WithRSAEncryption 89:6e:d2:aa:9f:a1:e9:c9:a9:db:5f:ac:3e:4c:0d:4a:68:bf: 41:b8:ff:29:a9:dd:5b:59:78:35:e1:b5:09:d1:fb:f1:bf:ea: 04:cf:02:ab:32:78:e2:72:1f:12:50:48:14:81:2c:65:ac:31: fa:1b:8e:29:21:4f:ea:be:ba:28:d1:86:ed:d6:1e:4d:c0:4e: 02:5a:58:5c:60:e2:5d:d5:82:b1:5d:f3:19:04:47:91:2b:40: fe:16:22:a0:e3:ed:ac:d7:aa:fc:7b:3a:27:d0:f4:7c:b0:db: 70:de:59:43:92:4c:bb:18:8f:d6:a2:b1:72:30:e9:e8:b2:ee: 38:0e:f7:fb:9d:14:e5:60:01:9a:57:5c:64:b6:8e:cb:fd:6f: e6:d5:4d:0b:90:54:72:d1:e0:9e:6e:d0:4e:18:8f:2e:aa:bf: 9e:9c:83:6e:32:aa:d0:96:04:26:44:1c:91:05:70:c2:1c:f4: 8c:e0:e4:86:3f:a4:e9:a3:31:44:b3:b9:62:fd:b1:33:de:8b: fe:77:04:b0:64:c1:4b:95:46:b4:9d:33:42:c9:7d:b8:7c:05: ea:ab:b6:46:44:2b:51:30:23:70:dc:ad:d6:0b:50:17:d3:07: 77:98:92:b9:2e:3f:9a:0d:34:79:3e:cc:4f:fc:5a:a3:4f:30: 13:f8:f3:3c -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICbNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYwNzAzMDI1NTEzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3MjQ5MS0yNjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzT9sI7oKs4VMs1sRCxOYUOk9+i4AWuAdGh+ku/Z/GjiyN9k8Gf45ksn4sIJu 0nK901jmGGveSWPASiMqjzmWYNxBO2Oppl6PAgzX0vmU0msUMFw6p0M0Mp17c4Ei y8vybt2aQFUj1NjHJpKNpSvtRHTaVE6uec8gel8XJI9pb23CxaEmC0dqhca5Hz3E tZdWF74xbYk3D8qbQ+FDY19dOXBOUy7OPDACpkDDZnSWJs1JKwrM3pmh0pJQwOIH BLS4ddlWEuF/QYbGKLM+TqQ992Dv+Ya8ImiIV5jsLNyHGnpkNOuC9ixmeQgXA5OG zansU+4jbCG8z62W+FTroMhsqQIDAQABo4ICvzCCArswHQYDVR0OBBYEFAYjayFb XF/IrXNVTINK07/f2Oq5MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOUM4MDgzNzA3 NjhBMTFGMTgzNzlFM0MyNjNBMzBGQkMucm9hMH4GCCsGAQUFBwEHAQH/BG8wbTBI BAIAATBCAwQBZWVgAwQCZ4LYAwQCZ44YAwQBZ5uiAwQBZ6GyAwQBZ6IOAwQCZ6IU AwQBZ7FuAwQBZ7O4AwQCdHYsAwQCtF2IMCEEAgACMBsDBwAkAE3gAAADBwAkAUXg AAADBwAkBShAAAAwDQYJKoZIhvcNAQELBQADggEBAIlu0qqfoenJqdtfrD5MDUpo v0G4/ymp3VtZeDXhtQnR+/G/6gTPAqsyeOJyHxJQSBSBLGWsMfobjikhT+q+uijR hu3WHk3ATgJaWFxg4l3VgrFd8xkER5ErQP4WIqDj7azXqvx7OifQ9Hyw23DeWUOS TLsYj9aisXIw6eiy7jgO9/udFOVgAZpXXGS2jsv9b+bVTQuQVHLR4J5u0E4Yjy6q v56cg24yqtCWBCZEHJEFcMIc9Izg5IY/pOmjMUSzuWL9sTPei/53BLBkwUuVRrSd M0LJfbh8BeqrtkZEK1EwI3DcrdYLUBfTB3eYkrkuP5oNNHk+zE/8WqNPMBP48zw= -----END CERTIFICATE-----Generated at Tue Jul 21 22:56:20 2026 by rpki-client