$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/355461A4372C11EDB1059640C4F9AE02.roa File: 355461A4372C11EDB1059640C4F9AE02.roa (raw, json) Hash identifier: xC4AxLthKoIO9wupJuxOV3grb/ZghSAyWXsgSt6YemQ= Subject key identifier: 44:2B:6F:3E:4C:71:17:0E:8F:C2:CA:4D:A4:A4:4E:A4:00:C7:43:CA Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 36AD Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/355461A4372C11EDB1059640C4F9AE02.roa Signing time: Fri 12 Jun 2026 15:13:13 +0000 ROA not before: Fri 12 Jun 2026 15:13:13 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 58778 IP address blocks: 114.130.10.0/24 maxlen: 24 114.130.36.0/24 maxlen: 24 114.130.46.0/24 maxlen: 24 114.130.47.0/24 maxlen: 24 114.130.48.0/24 maxlen: 24 114.130.50.0/24 maxlen: 24 114.130.101.0/24 maxlen: 24 114.130.112.0/24 maxlen: 24 114.130.113.0/24 maxlen: 24 114.130.115.0/24 maxlen: 24 114.130.121.0/24 maxlen: 24 114.130.122.0/24 maxlen: 24 2403:ec00:36::/48 maxlen: 48 2403:ec00:37::/48 maxlen: 48 2403:ec00:40::/48 maxlen: 48 2403:ec00:41::/48 maxlen: 48 2403:ec00:51::/48 maxlen: 48 2403:ec00:112::/48 maxlen: 48 2403:ec00:113::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 14:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13997 (0x36ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Jun 12 15:13:13 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a2c2209-0f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4a:0a:56:fb:5d:30:1b:d8:19:53:89:12:a7: 33:d3:51:4d:1c:e2:4f:fa:7a:ba:7b:1e:91:09:23: cf:fb:6a:aa:45:13:1f:cf:02:9b:13:5a:fb:cc:05: 98:55:03:61:44:48:65:c6:4c:d0:a3:da:ab:32:10: 4a:c7:a8:24:5b:ab:20:c7:7c:8d:dd:50:9a:18:65: 21:a5:b4:4a:b0:94:a3:79:a6:90:bc:68:fd:a6:a8: 08:4d:91:22:d2:b9:f2:bd:85:ca:b4:e5:ee:d8:df: 7c:02:d2:71:20:a9:13:18:67:f0:66:88:f0:64:dd: 54:a6:71:94:5e:ec:a4:0d:f6:be:76:2a:b8:06:dc: b9:5b:f2:24:18:5e:71:e5:1c:ee:d0:c2:52:47:cf: da:dc:09:41:bc:b8:1d:e7:9e:58:dc:3e:66:e6:d3: 8a:da:7a:87:68:ec:3c:a0:ad:f0:1c:f0:d8:25:fa: 4b:8d:02:fb:cb:3f:2b:29:75:66:7d:16:a9:75:f2: 8e:98:b7:8a:c6:46:64:d1:e8:54:21:02:08:c8:7a: 66:2d:50:db:3d:ee:a5:8e:57:1c:70:85:29:4b:33: 5b:7b:2f:ac:00:2e:93:4d:75:32:b5:22:80:8c:c6: 4b:29:c0:8c:e7:68:d1:f6:7a:90:59:3f:16:ea:f5: ea:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2B:6F:3E:4C:71:17:0E:8F:C2:CA:4D:A4:A4:4E:A4:00:C7:43:CA X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/355461A4372C11EDB1059640C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.130.10.0/24 114.130.36.0/24 114.130.46.0-114.130.48.255 114.130.50.0/24 114.130.101.0/24 114.130.112.0/23 114.130.115.0/24 114.130.121.0-114.130.122.255 IPv6: 2403:ec00:36::/47 2403:ec00:40::/47 2403:ec00:51::/48 2403:ec00:112::/47 Signature Algorithm: sha256WithRSAEncryption 76:6d:eb:fe:83:7c:e0:f4:41:45:c9:0d:68:08:d4:c4:ea:12: 27:e3:ef:b7:98:3e:b2:88:64:e8:c3:85:39:22:2c:09:2d:e7: b3:58:75:c3:44:34:f0:04:d7:07:90:bb:03:3e:b6:ef:60:11: 68:f6:d0:18:02:b5:90:70:e4:78:21:25:f9:1a:0d:3e:d4:20: a2:cb:21:ad:94:35:12:c8:66:71:d4:b8:05:e9:f6:fd:ec:69: e0:1f:dc:ef:74:f7:37:07:6a:72:7f:04:65:e2:7f:37:43:2d: 76:b6:e3:6e:00:da:c0:ca:fc:68:ba:7e:03:7e:94:9d:20:7c: 56:c1:a3:ad:ca:2f:3f:67:22:d3:46:87:bf:72:43:1b:28:22: b2:18:ee:10:8a:89:a4:d8:67:29:31:d0:b2:8a:15:72:b2:01: 52:1e:6e:c7:bb:43:99:bc:41:d7:58:5c:eb:c5:af:ab:3a:1a: 0c:05:55:78:5b:87:6c:d9:16:19:3d:b0:4c:1e:c9:74:68:ec: 4f:bc:60:b2:12:b2:21:78:2b:ad:2c:47:45:b6:18:b7:6f:04: 3c:f1:94:54:a7:49:7e:9c:a8:85:e6:aa:28:73:bc:de:64:8d: 99:43:61:64:a9:66:f8:b1:3f:e3:68:12:85:47:16:57:55:42: ea:c6:5c:1e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICNq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjYwNjEyMTUxMzEzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJjMjIwOS0wZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EoKVvtdMBvYGVOJEqcz01FNHOJP+nq6ex6RCSPP+2qqRRMfzwKbE1r7zAWY VQNhREhlxkzQo9qrMhBKx6gkW6sgx3yN3VCaGGUhpbRKsJSjeaaQvGj9pqgITZEi 0rnyvYXKtOXu2N98AtJxIKkTGGfwZojwZN1UpnGUXuykDfa+diq4Bty5W/IkGF5x 5Rzu0MJSR8/a3AlBvLgd555Y3D5m5tOK2nqHaOw8oK3wHPDYJfpLjQL7yz8rKXVm fRapdfKOmLeKxkZk0ehUIQIIyHpmLVDbPe6ljlcccIUpSzNbey+sAC6TTXUytSKA jMZLKcCM52jR9nqQWT8W6vXq+QIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFEQrbz5M cRcOj8LKTaSkTqQAx0PKMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvMzU1NDYxQTQz NzJDMTFFREIxMDU5NjQwQzRGOUFFMDIucm9hMIGFBggrBgEFBQcBBwEB/wR2MHQw RgQCAAEwQAMEAHKCCgMEAHKCJDAMAwQBcoIuAwQAcoIwAwQAcoIyAwQAcoJlAwQB coJwAwQAcoJzMAwDBABygnkDBABygnowKgQCAAIwJAMHASQD7AAANgMHASQD7AAA QAMHACQD7AAAUQMHASQD7AABEjANBgkqhkiG9w0BAQsFAAOCAQEAdm3r/oN84PRB RckNaAjUxOoSJ+Pvt5g+sohk6MOFOSIsCS3ns1h1w0Q08ATXB5C7Az6272ARaPbQ GAK1kHDkeCEl+RoNPtQgosshrZQ1EshmcdS4Ben2/exp4B/c73T3Nwdqcn8EZeJ/ N0MtdrbjbgDawMr8aLp+A36UnSB8VsGjrcovP2ci00aHv3JDGygishjuEIqJpNhn KTHQsooVcrIBUh5ux7tDmbxB11hc68WvqzoaDAVVeFuHbNkWGT2wTB7JdGjsT7xg shKyIXgrrSxHRbYYt28EPPGUVKdJfpyoheaqKHO83mSNmUNhZKlm+LE/42gShUcW V1VC6sZcHg== -----END CERTIFICATE-----Generated at Fri Jun 12 19:16:04 2026 by rpki-client