$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/AEDB1D3475DE11F1B0B3EF026FA30FBC.roa File: AEDB1D3475DE11F1B0B3EF026FA30FBC.roa (raw, json) Hash identifier: YDJ8Qkf524XwlEk4TBOaQaaYctJIr8EgzCOvwyJrIM8= Subject key identifier: AE:88:A8:07:DD:55:0F:C8:32:71:64:2F:55:41:18:BA:EE:D9:75:2E Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0C72 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/AEDB1D3475DE11F1B0B3EF026FA30FBC.roa Signing time: Thu 02 Jul 2026 06:24:30 +0000 ROA not before: Thu 02 Jul 2026 06:24:30 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 197537 IP address blocks: 43.239.104.0/24 maxlen: 24 45.124.204.0/24 maxlen: 24 45.124.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 19:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3186 (0xc72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Jul 2 06:24:30 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a46041e-e990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:44:89:ee:49:23:bc:b0:21:a4:b5:55:32:12: 1a:0e:34:51:9f:51:08:cb:b6:91:59:89:e6:13:14: 01:7e:c4:60:b9:85:7c:f9:00:ef:7e:51:6d:79:de: 4e:65:fe:d7:8d:4d:05:ee:dc:48:03:d2:9a:51:50: 53:fa:82:00:65:f8:20:d1:39:c1:49:f2:27:8f:ac: 4d:0d:f0:ef:33:99:a3:85:fa:f4:b8:af:95:ec:19: 30:b7:25:9e:d0:17:27:a8:aa:59:89:2a:fb:57:0d: 2f:4b:49:0a:4c:23:bc:08:3a:5c:61:89:e5:33:ff: 7c:79:50:ef:7b:7a:41:14:9b:97:58:5c:0f:35:c5: fe:2e:b4:4c:23:14:eb:4b:27:d6:77:7e:78:e7:05: de:8b:39:ba:71:5f:c3:4f:a6:1a:45:62:8e:69:5c: 4d:22:45:b1:d5:63:10:23:9d:8f:91:77:65:32:75: a0:db:9d:25:32:e5:f1:2f:39:ad:29:90:7f:50:a5: 00:68:50:f2:a3:f4:49:c8:96:f1:e2:45:9a:5e:2b: 9d:00:ec:7a:e5:81:ae:69:0b:b1:72:cf:d6:eb:a0: b6:5b:fe:92:89:08:1e:18:94:2e:0c:06:18:f7:77: 61:18:4b:1f:1e:8f:c2:f5:f0:da:d5:43:46:c3:8c: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:88:A8:07:DD:55:0F:C8:32:71:64:2F:55:41:18:BA:EE:D9:75:2E X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/AEDB1D3475DE11F1B0B3EF026FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.239.104.0/24 45.124.204.0/23 Signature Algorithm: sha256WithRSAEncryption 10:81:58:c6:19:ac:ac:cb:69:ad:20:41:74:29:92:9c:27:e4: 5d:80:71:e2:63:2c:ff:bb:46:93:d2:ea:f4:ad:69:af:17:c4: ae:28:40:b8:d2:81:d9:9b:7d:fe:b3:fb:07:c0:65:02:53:9e: 62:52:72:4c:e0:46:fb:c8:6c:4d:be:68:d4:97:52:d3:95:19: 60:83:ad:0a:bd:e4:a2:c3:f1:1b:c5:9c:f8:e8:ca:1d:74:61: d9:1b:bb:ca:0c:e6:22:3d:f0:86:86:8d:7b:88:f7:7f:89:31: 4e:5c:75:c3:f9:67:56:23:78:d5:27:3c:a0:37:4e:2b:08:1b: f1:58:33:f5:60:67:6d:f8:08:b3:4f:6e:18:b0:73:db:29:6b: 56:72:6a:5a:77:69:42:0f:4c:8a:85:01:33:ed:70:bc:3b:e1: 96:ff:c1:2a:2b:ad:92:1a:0f:02:8d:22:f8:22:69:4a:36:a5: 6e:3b:fe:32:d0:aa:ca:fa:af:2e:a7:cd:ec:f1:52:0d:a7:ca: a6:22:b1:c2:d2:61:f6:05:96:1e:62:48:20:25:ad:e3:bf:c6: 1b:7e:bb:48:10:87:e3:8b:04:60:02:31:e8:82:94:7f:22:23: 9a:c4:82:05:06:5c:c5:d8:e5:b4:7b:81:6a:5f:7e:4e:e9:8d: 44:d9:ee:90 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjYwNzAyMDYyNDMwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2MDQxZS1lOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0SJ7kkjvLAhpLVVMhIaDjRRn1EIy7aRWYnmExQBfsRguYV8+QDvflFted5O Zf7XjU0F7txIA9KaUVBT+oIAZfgg0TnBSfInj6xNDfDvM5mjhfr0uK+V7BkwtyWe 0BcnqKpZiSr7Vw0vS0kKTCO8CDpcYYnlM/98eVDve3pBFJuXWFwPNcX+LrRMIxTr SyfWd3545wXeizm6cV/DT6YaRWKOaVxNIkWx1WMQI52PkXdlMnWg250lMuXxLzmt KZB/UKUAaFDyo/RJyJbx4kWaXiudAOx65YGuaQuxcs/W66C2W/6SiQgeGJQuDAYY 93dhGEsfHo/C9fDa1UNGw4zr9QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFK6IqAfd VQ/IMnFkL1VBGLru2XUuMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvQUVEQjFEMzQ3 NURFMTFGMUIwQjNFRjAyNkZBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK+9oAwQBLXzMMA0GCSqGSIb3DQEBCwUAA4IBAQAQgVjGGaysy2mt IEF0KZKcJ+RdgHHiYyz/u0aT0ur0rWmvF8SuKEC40oHZm33+s/sHwGUCU55iUnJM 4Eb7yGxNvmjUl1LTlRlgg60KveSiw/EbxZz46ModdGHZG7vKDOYiPfCGho17iPd/ iTFOXHXD+WdWI3jVJzygN04rCBvxWDP1YGdt+AizT24YsHPbKWtWcmpad2lCD0yK hQEz7XC8O+GW/8EqK62SGg8CjSL4ImlKNqVuO/4y0KrK+q8up83s8VINp8qmIrHC 0mH2BZYeYkggJa3jv8YbfrtIEIfjiwRgAjHogpR/IiOaxIIFBlzF2OW0e4FqX35O 6Y1E2e6Q -----END CERTIFICATE-----Generated at Sat Jul 18 01:14:20 2026 by rpki-client