$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/E6F3687CBCE711EAACD6466CC4F9AE02.roa File: E6F3687CBCE711EAACD6466CC4F9AE02.roa (raw, json) Hash identifier: /BHXZw097Vnx6svspg9H0QFXzJ+pPqoQmyYjSxe8qDA= Subject key identifier: BF:18:91:C5:E1:72:94:8A:37:F9:29:14:3D:6B:26:CB:39:89:13:25 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 096A Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/E6F3687CBCE711EAACD6466CC4F9AE02.roa Signing time: Wed 24 Jun 2026 20:25:01 +0000 ROA not before: Wed 24 Jun 2026 20:25:01 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 139056 IP address blocks: 103.139.16.0/23 maxlen: 24 2400:ffa0::/32 maxlen: 32 2400:ffa0::/34 maxlen: 34 2400:ffa0::/36 maxlen: 36 2400:ffa0:1000::/36 maxlen: 36 2400:ffa0:2000::/36 maxlen: 36 2400:ffa0:3000::/36 maxlen: 36 2400:ffa0:4000::/34 maxlen: 34 2400:ffa0:4000::/36 maxlen: 36 2400:ffa0:5000::/36 maxlen: 36 2400:ffa0:6000::/36 maxlen: 36 2400:ffa0:7000::/36 maxlen: 36 2400:ffa0:8000::/34 maxlen: 34 2400:ffa0:8000::/36 maxlen: 36 2400:ffa0:9000::/36 maxlen: 36 2400:ffa0:a000::/36 maxlen: 36 2400:ffa0:b000::/36 maxlen: 36 2400:ffa0:c000::/34 maxlen: 34 2400:ffa0:c000::/36 maxlen: 36 2400:ffa0:d000::/36 maxlen: 36 2400:ffa0:e000::/36 maxlen: 36 2400:ffa0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 20:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Jun 24 20:25:01 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3c3d1c-6bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:d5:4a:fa:64:14:60:a3:2a:72:74:09:c7: d6:39:3e:86:c1:73:fe:32:85:8c:76:fd:4a:37:81: 37:f9:72:bd:22:9b:01:27:42:0d:23:62:b3:03:2d: 2b:6a:e8:ae:05:87:76:62:17:c3:b8:96:46:4b:aa: fb:3a:3d:09:55:80:24:8d:21:8e:8d:f0:b5:41:d3: 17:1a:af:2c:e6:71:5c:ac:d9:70:42:74:2c:43:c9: a5:ca:14:90:bb:ce:f0:25:ab:15:75:d1:c1:d6:b9: 07:65:b4:a1:ef:67:b5:26:50:be:db:22:93:15:7f: 4f:d1:ce:5e:21:35:e6:cb:84:e3:08:4b:23:34:82: 61:a2:33:4f:30:bd:32:8f:5d:5c:8e:04:9b:cf:64: 8c:7f:a4:66:40:64:a0:81:ab:5d:4f:ad:a6:06:3c: 93:f2:99:0a:28:08:9a:f6:ad:87:e4:56:55:52:33: 28:20:9a:1c:50:6f:d5:4c:62:05:20:9c:0b:8f:34: 4a:4b:20:b8:fb:ac:46:7b:58:55:17:6a:17:91:b5: 86:6c:c0:59:54:97:d4:27:dd:ca:91:fc:3e:d5:71: e4:4c:75:20:c2:4a:e4:b6:99:1f:2c:c1:38:1e:0b: d5:90:8c:4d:12:6e:43:d5:ba:84:e8:7d:b2:67:de: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:18:91:C5:E1:72:94:8A:37:F9:29:14:3D:6B:26:CB:39:89:13:25 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/E6F3687CBCE711EAACD6466CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.16.0/23 IPv6: 2400:ffa0::/32 Signature Algorithm: sha256WithRSAEncryption 8a:32:5f:05:5f:d6:8d:12:ff:d1:4e:38:eb:04:b2:08:7a:57: 33:f4:68:69:50:f4:7e:72:7d:1c:b9:46:f8:ff:d9:01:20:85: 16:be:90:0c:b2:00:3b:5b:bc:90:4c:b7:d4:4f:42:e6:ae:de: db:a6:2a:eb:0f:43:08:fb:c5:7a:34:08:c6:1d:94:a7:04:18: 53:e2:a1:94:49:0f:d5:0e:0a:1b:3f:3c:04:ee:40:ed:e5:be: bf:d1:5d:4e:c7:5a:cb:ee:54:38:60:ba:3c:78:26:be:7d:1e: ae:d0:2d:58:77:9c:8f:de:4c:0c:89:7e:e5:91:c0:a7:75:48: 84:10:12:d9:6c:2c:ec:16:cb:1f:ec:94:48:12:18:ac:01:02: 76:3f:5c:cf:b7:19:1d:49:34:a2:f5:3f:49:44:25:ea:87:cb: c1:da:eb:50:5c:b1:49:d4:5f:f7:08:0b:57:db:55:1a:0e:ef: e4:b4:73:e2:e4:cd:b1:ee:82:62:a0:44:99:23:cb:a1:3d:d7: 84:dc:2d:e4:02:58:d2:90:1c:45:50:dd:c2:e7:33:dc:5f:da: c8:07:5c:b7:35:95:bb:ea:64:78:d8:ae:17:17:bf:ad:34:26: 8f:22:57:c7:5f:79:33:5b:58:36:b6:bc:6e:73:4a:a9:1d:62: d5:ce:9b:e0 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjYwNjI0MjAyNTAxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNjM2QxYy02YmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUbVSvpkFGCjKnJ0CcfWOT6GwXP+MoWMdv1KN4E3+XK9IpsBJ0INI2KzAy0r auiuBYd2YhfDuJZGS6r7Oj0JVYAkjSGOjfC1QdMXGq8s5nFcrNlwQnQsQ8mlyhSQ u87wJasVddHB1rkHZbSh72e1JlC+2yKTFX9P0c5eITXmy4TjCEsjNIJhojNPML0y j11cjgSbz2SMf6RmQGSggatdT62mBjyT8pkKKAia9q2H5FZVUjMoIJocUG/VTGIF IJwLjzRKSyC4+6xGe1hVF2oXkbWGbMBZVJfUJ93Kkfw+1XHkTHUgwkrktpkfLME4 HgvVkIxNEm5D1bqE6H2yZ95dqQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFL8YkcXh cpSKN/kpFD1rJss5iRMlMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI4OUMvM0FCMUUyRENCQ0U3MTFFQUJFOTcyQzZDQzRGOUFFMDIvRTZGMzY4N0NC Q0U3MTFFQUFDRDY0NjZDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4sQMA0EAgACMAcDBQAkAP+gMA0GCSqGSIb3DQEBCwUAA4IBAQCK Ml8FX9aNEv/RTjjrBLIIelcz9GhpUPR+cn0cuUb4/9kBIIUWvpAMsgA7W7yQTLfU T0Lmrt7bpirrD0MI+8V6NAjGHZSnBBhT4qGUSQ/VDgobPzwE7kDt5b6/0V1Ox1rL 7lQ4YLo8eCa+fR6u0C1Yd5yP3kwMiX7lkcCndUiEEBLZbCzsFssf7JRIEhisAQJ2 P1zPtxkdSTSi9T9JRCXqh8vB2utQXLFJ1F/3CAtX21UaDu/ktHPi5M2x7oJioESZ I8uhPdeE3C3kAljSkBxFUN3C5zPcX9rIB1y3NZW76mR42K4XF7+tNCaPIlfHX3kz W1g2trxuc0qpHWLVzpvg -----END CERTIFICATE-----Generated at Sat Jul 18 01:49:16 2026 by rpki-client