$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/42DAE250C8C711F08A7B6740C4F9AE02.roa File: 42DAE250C8C711F08A7B6740C4F9AE02.roa (raw, json) Hash identifier: RvDR+CwV5r8nXBYVtiJ4seGZbUdvtwvjuoEWjfxE9n4= Subject key identifier: AA:46:09:58:CF:4B:BC:4A:99:FD:DC:66:D3:A9:5D:A8:63:B2:9C:0B Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Certificate serial: 35BB Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/42DAE250C8C711F08A7B6740C4F9AE02.roa Signing time: Tue 16 Jun 2026 15:13:00 +0000 ROA not before: Tue 16 Jun 2026 15:13:00 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 1299 IP address blocks: 103.112.36.0/22 maxlen: 24 180.189.160.0/20 maxlen: 24 2405:1f00::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13755 (0x35bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Validity Not Before: Jun 16 15:13:00 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3167fc-21e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:ae:ee:7e:ae:b1:8d:9c:c3:52:7f:ac:aa: 74:41:4c:c5:24:d5:08:9a:ef:c8:d5:37:62:04:06: a7:38:30:9a:d1:68:a8:40:cf:de:00:00:7b:ca:71: 78:a2:2b:4f:72:b3:50:70:21:30:3c:65:e1:a1:1e: f3:b3:5e:b8:86:18:fb:38:f6:20:56:50:ca:73:8e: bf:ab:aa:fc:bb:66:a7:81:a5:ff:27:57:08:e9:28: 2c:23:43:5a:4f:95:63:8f:2e:c1:c8:05:d2:b2:10: a2:d5:cb:11:38:91:e8:d6:4f:6f:8c:e2:4e:36:31: 7f:a8:a3:c2:37:55:0d:fd:62:60:e2:ed:4e:af:24: 5f:81:5f:47:31:5e:15:66:93:ca:27:a3:ed:d2:f3: c7:66:68:49:af:e6:c8:0a:be:07:d7:d3:a1:a8:e0: ac:41:09:19:b8:2b:75:03:c4:9e:4c:f3:03:3f:8f: e4:37:ec:6c:71:4a:0a:d2:df:47:8c:fd:14:5e:af: 46:c5:85:cd:45:06:57:1e:c3:b0:64:c3:7c:76:01: 76:ab:0f:7a:aa:4a:b5:8a:8c:31:ea:da:30:de:6a: 5d:9d:33:49:a4:23:ce:ad:1f:f7:d2:9e:8d:06:f2: 59:99:20:36:8e:b3:14:82:95:10:75:72:67:df:40: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:46:09:58:CF:4B:BC:4A:99:FD:DC:66:D3:A9:5D:A8:63:B2:9C:0B X509v3 Authority Key Identifier: keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/42DAE250C8C711F08A7B6740C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.112.36.0/22 180.189.160.0/20 IPv6: 2405:1f00::/32 Signature Algorithm: sha256WithRSAEncryption 80:bd:e5:8a:47:63:33:30:77:d1:ec:48:00:ba:8c:6b:32:54: 3f:88:2b:97:08:f7:78:71:f1:98:2a:49:ce:7b:fa:ac:a8:24: d3:48:c3:fd:0c:7e:7a:c0:05:ef:f5:64:ff:64:81:fa:9c:fc: 76:03:7f:2c:08:67:fd:e8:6d:6e:9e:6e:4d:0d:c9:4d:82:a5: 46:ef:06:17:08:5d:f5:90:06:04:f5:7a:07:02:ff:04:e9:82: 65:c6:c2:7c:0c:38:2f:1a:bc:d6:cf:2c:ae:76:ce:ed:cd:f0: fe:6e:9e:b2:19:3b:29:d7:da:cd:3d:74:4d:90:55:f9:8d:76: 1a:b9:6f:c3:2e:f1:d8:d1:90:d5:1b:37:c5:21:1f:ac:cb:77: 2d:ea:1d:b9:f6:7f:ff:3e:42:16:ba:d7:7b:5c:e9:d3:d2:06: c2:75:7c:5b:63:78:aa:45:ab:a2:d4:42:f7:8d:ab:86:50:f9: a8:83:a1:47:99:7a:03:97:45:d1:34:5e:91:9c:bc:f3:33:2a: a0:29:c8:95:aa:38:4e:86:82:9b:b8:cc:f6:1c:f9:22:2e:bc: 7f:c9:7a:e4:ee:fe:3a:e2:4e:16:f7:a0:2e:c4:68:8e:d6:68: 10:3b:4f:c1:0b:a6:8d:8a:21:19:d8:d3:fb:ea:de:d7:ac:17: 9d:a7:de:e4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICNbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThEMjIxMTAvBgNVBAUTKEE2ODNGNjcyNEMwMkExM0YyRDM5Q0YyRjIxNTAwQkUw MDM4MERERTMwHhcNMjYwNjE2MTUxMzAwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMxNjdmYy0yMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsb2u7n6usY2cw1J/rKp0QUzFJNUImu/I1TdiBAanODCa0WioQM/eAAB7ynF4 oitPcrNQcCEwPGXhoR7zs164hhj7OPYgVlDKc46/q6r8u2angaX/J1cI6SgsI0Na T5Vjjy7ByAXSshCi1csROJHo1k9vjOJONjF/qKPCN1UN/WJg4u1OryRfgV9HMV4V ZpPKJ6Pt0vPHZmhJr+bICr4H19OhqOCsQQkZuCt1A8SeTPMDP4/kN+xscUoK0t9H jP0UXq9GxYXNRQZXHsOwZMN8dgF2qw96qkq1iowx6tow3mpdnTNJpCPOrR/30p6N BvJZmSA2jrMUgpUQdXJn30DiZwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFKpGCVjP S7xKmf3cZtOpXahjspwLMB8GA1UdIwQYMBaAFKaD9nJMAqE/LTnPLyFQC+ADgN3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEQyMi8yNTI2OTc5ODFE OTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29UOHRPYzh2SVZBTDRBT0Ez ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvUDJja3dDb1Q4dE9jOHZJVkFMNEFPQTNlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThEMjIvMjUyNjk3OTgxRDkyMTFFMkI2MThDQUY0MDhCMDJDRDIvNDJEQUUyNTBD OEM3MTFGMDhBN0I2NzQwQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ3AkAwQEtL2gMA0EAgACMAcDBQAkBR8AMA0GCSqGSIb3DQEBCwUA A4IBAQCAveWKR2MzMHfR7EgAuoxrMlQ/iCuXCPd4cfGYKknOe/qsqCTTSMP9DH56 wAXv9WT/ZIH6nPx2A38sCGf96G1unm5NDclNgqVG7wYXCF31kAYE9XoHAv8E6YJl xsJ8DDgvGrzWzyyuds7tzfD+bp6yGTsp19rNPXRNkFX5jXYauW/DLvHY0ZDVGzfF IR+sy3ct6h259n//PkIWutd7XOnT0gbCdXxbY3iqRaui1EL3jauGUPmog6FHmXoD l0XRNF6RnLzzMyqgKciVqjhOhoKbuMz2HPkiLrx/yXrk7v464k4W96AuxGiO1mgQ O0/BC6aNiiEZ2NP76t7XrBedp97k -----END CERTIFICATE-----Generated at Tue Jul 21 14:03:43 2026 by rpki-client