$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/E206DC460DEA11F0A924CF5CC4F9AE02.roa File: E206DC460DEA11F0A924CF5CC4F9AE02.roa (raw, json) Hash identifier: TwfOtqELROfwbdGW94mJ46Jldk9YfuE63pysMVGHVgU= Subject key identifier: 11:0E:74:17:EE:25:A0:12:58:FF:2C:CD:79:A1:89:DA:C4:5F:67:C3 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 0A4B Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/E206DC460DEA11F0A924CF5CC4F9AE02.roa Signing time: Mon 10 Aug 2026 02:43:45 +0000 ROA not before: Mon 10 Aug 2026 02:43:45 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 140951 IP address blocks: 45.248.200.0/22 maxlen: 24 103.23.168.0/24 maxlen: 24 103.23.169.0/24 maxlen: 24 103.23.170.0/24 maxlen: 24 103.23.171.0/24 maxlen: 24 103.168.230.0/23 maxlen: 23 103.217.160.0/24 maxlen: 24 103.217.161.0/24 maxlen: 24 103.217.162.0/23 maxlen: 23 103.217.162.0/24 maxlen: 24 103.217.163.0/24 maxlen: 24 103.242.73.0/24 maxlen: 24 103.242.74.0/24 maxlen: 24 103.242.75.0/24 maxlen: 24 220.158.132.0/23 maxlen: 23 220.158.132.0/24 maxlen: 24 220.158.133.0/24 maxlen: 24 2401:47c0:1e00::/40 maxlen: 40 2401:47c0:1f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2635 (0xa4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Aug 10 02:43:45 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a793ae1-73e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:a9:ff:08:e2:9f:3e:82:be:7e:85:bd:9b: 4e:04:33:d0:d7:cb:da:5d:c2:a5:07:29:90:dc:a2: 55:dc:23:de:c8:b5:60:0c:d1:57:e3:e8:27:c3:1b: b2:55:b7:a4:68:21:2a:56:a0:9a:69:e7:4d:57:9b: e8:26:04:24:2a:9a:ac:2f:df:5d:d3:75:a3:22:23: 44:9d:61:46:89:56:8c:b9:be:a7:7d:4f:f4:42:87: bc:b6:5d:04:2f:bf:e8:d2:34:f1:2f:77:d7:aa:90: 2b:7e:26:d7:03:e5:dc:65:b0:ab:59:11:ee:76:e4: 9b:66:c9:7a:c3:76:c8:0e:19:ce:55:ab:6a:aa:f9: 1d:26:c2:0a:25:6b:04:e2:4d:28:7f:f6:c6:ca:79: b1:5d:97:9b:44:ef:3a:22:2a:8e:42:5f:1c:2a:52: fc:31:2d:30:0a:9f:34:b0:2f:18:4e:2e:07:e0:66: 5a:59:43:e4:6c:9a:f3:a2:16:99:d3:9f:95:f6:fd: 7d:db:3b:d1:da:6d:31:36:4a:8b:57:9f:5e:2d:d3: 64:55:54:d3:67:60:b0:a1:bf:8d:3c:5c:8d:b0:d0: c4:36:e0:6c:59:07:d4:18:24:18:ab:5e:26:54:e9: 70:aa:c0:8a:42:80:c7:d3:62:2d:8a:7c:b7:b3:50: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0E:74:17:EE:25:A0:12:58:FF:2C:CD:79:A1:89:DA:C4:5F:67:C3 X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/E206DC460DEA11F0A924CF5CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.248.200.0/22 103.23.168.0/22 103.168.230.0/23 103.217.160.0/22 103.242.73.0-103.242.75.255 220.158.132.0/23 IPv6: 2401:47c0:1e00::/39 Signature Algorithm: sha256WithRSAEncryption ba:9f:63:20:eb:f6:c0:55:8f:f1:a4:6b:76:39:ef:8f:7e:e6: 7e:0b:59:93:56:19:dd:12:a8:d7:a0:e9:68:c0:c9:d7:0e:51: 9e:2b:2d:5a:02:48:09:a7:7c:6a:3e:b5:03:99:47:5b:4a:ab: 69:45:cf:d7:ce:8f:73:24:1a:eb:39:c3:11:38:34:4c:6d:8c: bb:cd:d2:75:4f:e1:d8:39:13:0d:8f:9d:ea:ee:dd:03:eb:db: 92:08:89:49:2a:ac:5f:dc:07:4a:aa:ff:11:55:83:71:57:be: 40:ca:41:61:b0:52:74:5f:bc:e9:f7:3c:4f:31:99:3c:d5:2a: d0:f1:21:a9:45:15:ba:7a:88:e0:e3:81:c3:4f:96:78:b1:c1: 13:80:7e:ad:cd:0e:2e:1d:4b:db:14:f5:75:6b:16:eb:b4:33: c6:42:ba:0d:a8:f6:3f:06:fe:ff:21:ea:0b:9c:f1:dc:4d:b5: e1:6c:c8:1b:50:f9:ff:fa:93:b2:45:ed:d8:e1:a2:ff:9a:e0: 12:d8:6f:c7:6c:27:be:8b:dd:09:53:98:fd:54:88:e0:3d:48: a5:ba:82:f6:4a:18:d8:81:51:44:7c:5e:f9:f3:07:86:5a:74: a9:6c:f6:5e:1c:ad:6a:a7:b2:1d:99:56:12:fe:2b:2f:57:b2: 50:64:79:c1 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjYwODEwMDI0MzQ1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTc5M2FlMS03M2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGCp/wjinz6Cvn6FvZtOBDPQ18vaXcKlBymQ3KJV3CPeyLVgDNFX4+gnwxuy VbekaCEqVqCaaedNV5voJgQkKpqsL99d03WjIiNEnWFGiVaMub6nfU/0Qoe8tl0E L7/o0jTxL3fXqpArfibXA+XcZbCrWRHuduSbZsl6w3bIDhnOVatqqvkdJsIKJWsE 4k0of/bGynmxXZebRO86IiqOQl8cKlL8MS0wCp80sC8YTi4H4GZaWUPkbJrzohaZ 05+V9v192zvR2m0xNkqLV59eLdNkVVTTZ2Cwob+NPFyNsNDENuBsWQfUGCQYq14m VOlwqsCKQoDH02Itiny3s1BjgwIDAQABo4ICljCCApIwHQYDVR0OBBYEFBEOdBfu JaASWP8szXmhidrEX2fDMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU0ODYvODU2QTI0OUNBOTgyMTFFQTkzMkRFQzU0QzRGOUFFMDIvRTIwNkRDNDYw REVBMTFGMEE5MjRDRjVDQzRGOUFFMDIucm9hMFUGCCsGAQUFBwEHAQH/BEYwRDAy BAIAATAsAwQCLfjIAwQCZxeoAwQBZ6jmAwQCZ9mgMAwDBABn8kkDBAJn8kgDBAHc noQwDgQCAAIwCAMGASQBR8AeMA0GCSqGSIb3DQEBCwUAA4IBAQC6n2Mg6/bAVY/x pGt2Oe+PfuZ+C1mTVhndEqjXoOlowMnXDlGeKy1aAkgJp3xqPrUDmUdbSqtpRc/X zo9zJBrrOcMRODRMbYy7zdJ1T+HYORMNj53q7t0D69uSCIlJKqxf3AdKqv8RVYNx V75AykFhsFJ0X7zp9zxPMZk81SrQ8SGpRRW6eojg44HDT5Z4scETgH6tzQ4uHUvb FPV1axbrtDPGQroNqPY/Bv7/IeoLnPHcTbXhbMgbUPn/+pOyRe3Y4aL/muAS2G/H bCe+i90JU5j9VIjgPUiluoL2ShjYgVFEfF758weGWnSpbPZeHK1qp7IdmVYS/isv V7JQZHnB -----END CERTIFICATE-----Generated at Fri Sep 11 07:04:12 2026 by rpki-client