$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/F208B4B05DEF11F187405161BD833773.roa File: F208B4B05DEF11F187405161BD833773.roa (raw, json) Hash identifier: ZWgiWF4CXCt37kranqZqOv/FlMQUzVgBnDh5EhOP1cI= Subject key identifier: F3:49:89:8C:47:E8:3E:E0:19:82:3D:25:28:6A:8E:CE:F8:1B:B8:CD Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0D0C Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/F208B4B05DEF11F187405161BD833773.roa Signing time: Mon 01 Jun 2026 19:27:37 +0000 ROA not before: Mon 01 Jun 2026 19:27:36 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138346 IP address blocks: 103.123.169.0/24 maxlen: 24 103.123.170.0/24 maxlen: 24 103.123.171.0/24 maxlen: 24 2403:a540::/32 maxlen: 32 2403:a540::/33 maxlen: 33 2403:a540::/34 maxlen: 34 2403:a540::/40 maxlen: 40 2403:a540::/48 maxlen: 48 2403:a540:2::/48 maxlen: 48 2403:a540:3::/48 maxlen: 48 2403:a540:4::/48 maxlen: 48 2403:a540:5::/48 maxlen: 48 2403:a540:6::/48 maxlen: 48 2403:a540:7::/48 maxlen: 48 2403:a540:8::/48 maxlen: 48 2403:a540:9::/48 maxlen: 48 2403:a540:a::/48 maxlen: 48 2403:a540:b::/48 maxlen: 48 2403:a540:204::/48 maxlen: 48 2403:a540:20f::/48 maxlen: 48 2403:a540:21f::/48 maxlen: 48 2403:a540:4000::/34 maxlen: 34 2403:a540:8000::/33 maxlen: 33 2403:a540:8000::/34 maxlen: 34 2403:a540:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: Jun 1 19:27:36 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a1ddd28-bf78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:05:83:db:68:ba:55:2f:f8:45:13:34:e4: 1b:fa:b3:d6:7f:e2:fc:47:5b:ba:2f:36:da:dc:47: f8:52:0c:bc:01:dd:7f:36:af:bb:60:ef:d1:7f:90: 21:5c:b2:07:56:a7:7f:05:23:07:a8:43:80:72:0f: c0:b1:74:f6:db:f7:de:1b:38:c7:66:58:4a:26:3b: e0:ae:64:2f:91:cc:80:54:50:1a:a3:06:e8:f5:f9: 66:55:bd:31:9f:c8:f3:f5:ec:c8:7f:b3:6f:0e:f2: b0:c5:98:2b:4a:06:e3:26:51:d3:3c:71:4a:3c:d3: 4e:96:f0:e3:8f:82:59:cd:4c:c3:25:5c:83:0b:92: f0:f1:ce:dd:d0:83:21:d0:4a:93:15:ab:fa:f0:b7: 4e:86:ef:5c:1d:66:e3:79:9c:13:63:ac:b2:cd:c0: 2b:90:d8:2b:49:90:b2:3b:d8:51:77:ea:3b:4b:74: 74:da:5b:ea:9f:7c:6a:96:ea:29:eb:ee:f8:9d:9e: 36:df:f1:3a:30:fb:10:32:2d:83:76:77:80:5f:1c: 2a:87:a3:3e:58:af:f7:99:18:f9:9a:90:50:d6:06: 7f:12:60:be:57:64:32:7b:c8:a3:70:68:0d:b9:5b: eb:92:59:9a:fb:67:b6:a3:3e:71:18:a1:eb:b5:3c: 8e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:49:89:8C:47:E8:3E:E0:19:82:3D:25:28:6A:8E:CE:F8:1B:B8:CD X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/F208B4B05DEF11F187405161BD833773.roa sbgp-ipAddrBlock: critical IPv4: 103.123.169.0-103.123.171.255 IPv6: 2403:a540::/32 Signature Algorithm: sha256WithRSAEncryption 65:24:47:86:4f:08:de:02:9e:b5:a5:40:91:cc:d5:e1:02:6e: 44:8c:94:6c:86:3b:a5:c4:f0:3c:99:76:7f:66:72:b2:a4:da: 30:5b:92:66:e4:83:b2:19:69:e3:3f:e7:45:6b:25:21:d3:ed: 61:b6:ef:f4:e1:51:db:fe:cc:44:76:ea:fb:3a:0d:3e:ac:fb: ed:43:ed:28:a5:12:70:dd:8c:d6:35:22:28:5c:b4:0d:17:d1: 9d:76:a9:d4:21:ae:ae:e1:b9:db:a7:f2:fc:8d:94:72:0e:0c: 88:a2:21:0f:44:f5:48:5d:53:66:ab:78:71:b6:71:ef:01:2f: 47:f8:a0:28:32:a8:41:5b:b9:d8:50:f0:b3:5d:95:d3:ad:8e: f7:5f:6a:5c:d1:20:e8:bc:93:98:84:dd:89:c3:58:ad:52:b2: 4e:95:33:58:03:c7:f1:5e:75:2f:37:8e:72:59:0b:ca:7f:6f: 8a:54:6d:e7:ab:23:02:3b:c1:d1:09:a4:86:d3:a3:79:1b:8f: 7b:68:a7:6d:76:40:a0:e6:53:d4:84:bb:86:25:97:03:83:a1: c4:59:93:86:91:fd:a1:0e:fd:f2:cc:ee:1c:15:ec:95:d6:ce: 30:a5:f4:75:cf:7e:e4:3d:cb:99:ba:ca:a3:9d:e8:73:5a:e3: 03:6f:4a:91 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjYwNjAxMTkyNzM2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFkZGQyOC1iZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWcFg9toulUv+EUTNOQb+rPWf+L8R1u6Lzba3Ef4Ugy8Ad1/Nq+7YO/Rf5Ah XLIHVqd/BSMHqEOAcg/AsXT22/feGzjHZlhKJjvgrmQvkcyAVFAaowbo9flmVb0x n8jz9ezIf7NvDvKwxZgrSgbjJlHTPHFKPNNOlvDjj4JZzUzDJVyDC5Lw8c7d0IMh 0EqTFav68LdOhu9cHWbjeZwTY6yyzcArkNgrSZCyO9hRd+o7S3R02lvqn3xqluop 6+74nZ423/E6MPsQMi2DdneAXxwqh6M+WK/3mRj5mpBQ1gZ/EmC+V2Qye8ijcGgN uVvrklma+2e2oz5xGKHrtTyOEQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFPNJiYxH 6D7gGYI9JShqjs74G7jNMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNBRDcvMDdDRjhEN0EwQjg0MTFFQUEyMTY3ODRGQzRGOUFFMDIvRjIwOEI0QjA1 REVGMTFGMTg3NDA1MTYxQkQ4MzM3NzMucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBABne6kDBAJne6gwDQQCAAIwBwMFACQDpUAwDQYJKoZIhvcNAQEL BQADggEBAGUkR4ZPCN4CnrWlQJHM1eECbkSMlGyGO6XE8DyZdn9mcrKk2jBbkmbk g7IZaeM/50VrJSHT7WG27/ThUdv+zER26vs6DT6s++1D7SilEnDdjNY1IihctA0X 0Z12qdQhrq7hudun8vyNlHIODIiiIQ9E9UhdU2areHG2ce8BL0f4oCgyqEFbudhQ 8LNdldOtjvdfalzRIOi8k5iE3YnDWK1Ssk6VM1gDx/FedS83jnJZC8p/b4pUbeer IwI7wdEJpIbTo3kbj3top212QKDmU9SEu4YllwODocRZk4aR/aEO/fLM7hwV7JXW zjCl9HXPfuQ9y5m6yqOd6HNa4wNvSpE= -----END CERTIFICATE-----Generated at Tue Jun 2 22:08:13 2026 by rpki-client