$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/2F939E3C750911F19B5A4D0A6DA30FBC.roa File: 2F939E3C750911F19B5A4D0A6DA30FBC.roa (raw, json) Hash identifier: HnLiuGCrAI+NDuwEK/UZpwY6cCsnnWIESYz6GJ1T9Gk= Subject key identifier: 7F:35:56:AE:AC:FB:B2:C7:A4:80:BE:8D:B6:17:FB:FB:D3:CF:58:DF Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0BF9 Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/2F939E3C750911F19B5A4D0A6DA30FBC.roa Signing time: Fri 03 Jul 2026 15:00:53 +0000 ROA not before: Fri 03 Jul 2026 15:00:53 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133938 IP address blocks: 103.48.119.0/24 maxlen: 24 103.108.140.0/24 maxlen: 24 103.132.96.0/24 maxlen: 24 2404:2f40::/32 maxlen: 32 2404:2f40::/36 maxlen: 36 2404:2f40:1000::/36 maxlen: 36 2404:2f40:2000::/36 maxlen: 36 2404:2f40:3000::/36 maxlen: 36 2404:2f40:4000::/36 maxlen: 36 2404:2f40:5000::/36 maxlen: 36 2404:2f40:6000::/36 maxlen: 36 2404:2f40:7000::/36 maxlen: 36 2404:2f40:8000::/36 maxlen: 36 2404:2f40:9000::/36 maxlen: 36 2404:2f40:a000::/36 maxlen: 36 2404:2f40:b000::/36 maxlen: 36 2404:2f40:c000::/36 maxlen: 36 2404:2f40:d000::/36 maxlen: 36 2404:2f40:e000::/36 maxlen: 36 2404:2f40:f000::/36 maxlen: 36 2404:2f40:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 19:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3065 (0xbf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Jul 3 15:00:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a47cea5-75f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:f4:95:c5:43:5b:93:a3:92:04:42:0d:33: 05:f5:bc:1f:30:93:01:99:95:03:81:d3:0a:65:9f: b1:12:d4:62:b6:d1:23:f0:cb:2c:7a:af:44:a2:32: 0b:9b:19:2b:a4:ff:3b:b9:cf:a3:c7:9a:14:21:4a: 9c:19:09:17:4c:c0:38:fd:7a:10:1a:2b:5e:fa:6f: 8d:1f:6f:00:cc:c2:ff:c7:c9:ea:b7:80:06:5d:df: 70:fa:ac:65:7c:72:c6:4d:a9:da:ed:7e:22:bb:bd: e6:63:bf:30:9e:30:10:9d:3d:6d:4b:77:b7:52:a2: 63:9c:4d:84:cd:66:df:c5:44:a4:ed:95:66:33:c9: 49:8f:bd:26:ce:7f:6d:17:de:b2:5b:58:fc:57:9d: 1a:fc:eb:b3:63:b9:04:1c:bd:2b:59:86:c7:0b:a1: 84:ab:ff:2c:a4:2a:69:d4:de:96:15:37:f3:ae:9f: e0:04:ee:81:15:fb:d6:fd:45:d4:3c:51:32:56:5c: 42:8d:8e:c2:4d:88:0e:e8:d6:66:97:74:33:6e:d4: 69:69:be:34:fd:0a:3b:d1:11:b8:06:84:08:51:ef: 56:96:ea:54:93:5e:26:d7:d1:8c:3c:aa:ae:8d:c1: 86:4b:44:df:a0:92:95:1a:74:4c:b4:33:4c:68:69: 24:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:35:56:AE:AC:FB:B2:C7:A4:80:BE:8D:B6:17:FB:FB:D3:CF:58:DF X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/2F939E3C750911F19B5A4D0A6DA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.48.119.0/24 103.108.140.0/24 103.132.96.0/24 IPv6: 2404:2f40::/32 Signature Algorithm: sha256WithRSAEncryption 6c:8e:de:26:a2:54:1d:9a:92:89:e0:ea:3c:2c:d6:3e:14:70: e1:e3:9b:da:77:53:a9:7c:e4:a2:16:bf:86:14:ef:84:6e:0a: 21:db:c3:f7:5d:12:27:06:0d:e5:a5:33:eb:91:6f:19:4a:aa: f2:b6:9c:f7:4b:23:26:a5:5a:d5:2b:7b:3e:fc:35:95:79:bc: a9:d7:79:b7:7f:c6:e9:17:8c:f5:da:69:7f:e8:b9:39:9d:5d: 58:95:b6:8b:ca:0b:69:8a:38:38:7d:a6:97:37:b3:d2:5c:7b: 99:62:27:bb:0a:26:5f:b6:ae:72:65:2f:b4:2c:37:55:ab:4d: 39:6f:68:99:bf:ac:d8:e3:c0:6d:aa:1a:ec:c0:cd:6c:73:31: a8:b2:26:28:4e:cd:7a:b4:9b:99:df:c5:4f:9c:45:34:82:f8: 4d:1d:cc:6f:de:18:30:9a:9c:ea:66:36:26:48:33:38:8a:f0: c7:d6:0a:78:3d:26:e7:7b:e4:90:3d:fa:e2:d9:19:fa:9e:66: 7c:af:c9:52:9b:29:44:c1:b6:d7:81:2d:4f:dd:58:0d:1f:33: dc:97:d0:6b:eb:0c:95:df:67:10:43:3a:6f:d1:17:14:f3:cd: 5f:a7:d8:40:2f:af:77:89:12:c9:56:1c:fa:b8:23:97:a3:ef: ea:7d:c3:fb -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICC/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjYwNzAzMTUwMDUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3Y2VhNS03NWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+70lcVDW5OjkgRCDTMF9bwfMJMBmZUDgdMKZZ+xEtRittEj8Msseq9EojIL mxkrpP87uc+jx5oUIUqcGQkXTMA4/XoQGite+m+NH28AzML/x8nqt4AGXd9w+qxl fHLGTana7X4iu73mY78wnjAQnT1tS3e3UqJjnE2EzWbfxUSk7ZVmM8lJj70mzn9t F96yW1j8V50a/OuzY7kEHL0rWYbHC6GEq/8spCpp1N6WFTfzrp/gBO6BFfvW/UXU PFEyVlxCjY7CTYgO6NZml3QzbtRpab40/Qo70RG4BoQIUe9WlupUk14m19GMPKqu jcGGS0TfoJKVGnRMtDNMaGkkzwIDAQABo4ICezCCAncwHQYDVR0OBBYEFH81Vq6s +7LHpIC+jbYX+/vTz1jfMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIzODQvQkY0QkQ0NTg0NDgzMTFFQThFQkM2RDI1QzRGOUFFMDIvMkY5MzlFM0M3 NTA5MTFGMTlCNUE0RDBBNkRBMzBGQkMucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZzB3AwQAZ2yMAwQAZ4RgMA0EAgACMAcDBQAkBC9AMA0GCSqGSIb3 DQEBCwUAA4IBAQBsjt4molQdmpKJ4Oo8LNY+FHDh45vad1OpfOSiFr+GFO+Ebgoh 28P3XRInBg3lpTPrkW8ZSqrytpz3SyMmpVrVK3s+/DWVebyp13m3f8bpF4z12ml/ 6Lk5nV1YlbaLygtpijg4faaXN7PSXHuZYie7CiZftq5yZS+0LDdVq005b2iZv6zY 48BtqhrswM1sczGosiYoTs16tJuZ38VPnEU0gvhNHcxv3hgwmpzqZjYmSDM4ivDH 1gp4PSbne+SQPfri2Rn6nmZ8r8lSmylEwbbXgS1P3VgNHzPcl9Br6wyV32cQQzpv 0RcU881fp9hAL693iRLJVhz6uCOXo+/qfcP7 -----END CERTIFICATE-----Generated at Sat Jul 18 01:14:19 2026 by rpki-client