$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/A88061CA5FDA11F198C149507447A888.roa File: A88061CA5FDA11F198C149507447A888.roa (raw, json) Hash identifier: VB/8E8iYQg+KLWse8U5DMztMoWWkpIsEB2FuM+h9WoU= Subject key identifier: EA:DD:53:18:36:97:35:AE:14:0E:BC:75:0E:DD:02:C1:EC:09:9F:19 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 373C Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/A88061CA5FDA11F198C149507447A888.roa Signing time: Thu 04 Jun 2026 06:03:21 +0000 ROA not before: Thu 04 Jun 2026 06:03:21 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150750 IP address blocks: 103.207.84.0/24 maxlen: 24 116.90.119.0/24 maxlen: 24 116.90.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 14:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14140 (0x373c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Jun 4 06:03:21 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a211529-2c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2d:bc:30:3d:e9:fd:59:1b:33:5a:6a:01:bd: f2:ff:bb:e6:b9:f9:cf:b0:1b:6e:e1:bc:ce:2d:41: 05:9d:19:5a:cc:3f:aa:d1:12:be:5c:69:b4:6b:53: 92:82:60:cd:39:d0:ad:be:79:fd:d1:f4:04:18:d8: 43:b9:e1:db:2f:4f:7e:1f:22:74:5b:5a:b0:c8:80: 82:11:eb:83:23:b3:aa:c6:54:eb:ee:1e:6a:9c:80: a1:d5:ec:64:4a:e1:a6:c3:d0:59:41:44:22:eb:c3: 4d:38:a0:d7:09:29:5f:65:ef:f2:1e:29:4a:81:9f: 24:3c:02:03:1e:48:f7:6d:91:94:cf:8d:c7:6e:55: 70:28:c6:18:86:73:46:8d:34:cc:fe:80:a4:aa:22: 3d:dd:09:d4:63:76:19:c8:72:50:79:70:56:bd:5b: 4c:e1:61:31:44:07:de:0d:d7:64:44:62:25:ee:ef: 39:d6:b6:4a:35:99:8b:81:0b:e5:ff:fe:29:b4:5e: 81:5e:65:49:11:61:8d:4d:3b:d1:ba:50:20:93:3e: 6a:f0:29:8d:56:39:21:2b:5d:16:10:4a:2f:27:7d: ba:70:aa:6d:86:65:56:7a:56:06:b2:8d:82:b8:6c: 57:4b:e0:5a:37:b4:83:9c:e9:7e:5e:e1:03:1d:54: d0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DD:53:18:36:97:35:AE:14:0E:BC:75:0E:DD:02:C1:EC:09:9F:19 X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/A88061CA5FDA11F198C149507447A888.roa sbgp-ipAddrBlock: critical IPv4: 103.207.84.0/24 116.90.119.0/24 116.90.121.0/24 Signature Algorithm: sha256WithRSAEncryption 28:e4:64:f4:4f:3c:bc:13:e9:7a:a4:d1:61:40:5a:82:7c:b4: 12:d9:7c:a2:f7:ed:89:18:36:7c:e1:96:b0:c4:85:08:48:44: 5e:c6:3d:87:78:9c:c8:41:dd:6b:b2:af:99:17:c5:cd:49:76: 32:9d:db:a1:b0:88:e5:1c:ad:98:4b:21:81:42:7c:ea:6f:d2: 4d:bd:4a:83:f4:e6:0e:c0:a4:6d:f8:24:2d:07:28:7c:d0:73: 4c:5b:d6:35:dd:f8:6d:9c:c7:23:09:61:2e:f1:85:d0:77:3a: f2:c1:27:b2:91:31:41:aa:32:9a:f6:05:78:b1:11:cd:0d:96: 9f:e0:0f:62:58:e9:5f:69:70:bc:61:17:d2:1e:3c:03:17:6e: 62:01:c2:88:0a:33:6a:1d:0c:d3:3c:64:5b:cf:f1:eb:71:5a: c5:73:d2:f2:ad:3e:45:27:2e:5e:55:ae:8b:dc:67:75:c2:36: 21:8e:1a:d8:33:a3:8e:e8:c3:0c:ee:4d:bf:3b:f0:ce:3f:e8: 17:bd:49:ef:d9:1e:02:6e:e3:54:60:31:c1:3f:58:2b:87:d9: 86:77:82:1f:5a:8f:1d:84:b5:7d:18:c7:1e:f8:0f:18:e3:e0: 26:5a:69:83:9a:2a:c7:b4:77:84:b7:82:e2:61:02:8e:b7:b7: 6f:aa:9c:09 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICNzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjYwNjA0MDYwMzIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIxMTUyOS0yYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1i28MD3p/VkbM1pqAb3y/7vmufnPsBtu4bzOLUEFnRlazD+q0RK+XGm0a1OS gmDNOdCtvnn90fQEGNhDueHbL09+HyJ0W1qwyICCEeuDI7OqxlTr7h5qnICh1exk SuGmw9BZQUQi68NNOKDXCSlfZe/yHilKgZ8kPAIDHkj3bZGUz43HblVwKMYYhnNG jTTM/oCkqiI93QnUY3YZyHJQeXBWvVtM4WExRAfeDddkRGIl7u851rZKNZmLgQvl //4ptF6BXmVJEWGNTTvRulAgkz5q8CmNVjkhK10WEEovJ326cKpthmVWelYGso2C uGxXS+BaN7SDnOl+XuEDHVTQUwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOrdUxg2 lzWuFA68dQ7dAsHsCZ8ZMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvQTg4MDYxQ0E1 RkRBMTFGMTk4QzE0OTUwNzQ0N0E4ODgucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ89UAwQAdFp3AwQAdFp5MA0GCSqGSIb3DQEBCwUAA4IBAQAo5GT0 Tzy8E+l6pNFhQFqCfLQS2Xyi9+2JGDZ84ZawxIUISERexj2HeJzIQd1rsq+ZF8XN SXYynduhsIjlHK2YSyGBQnzqb9JNvUqD9OYOwKRt+CQtByh80HNMW9Y13fhtnMcj CWEu8YXQdzrywSeykTFBqjKa9gV4sRHNDZaf4A9iWOlfaXC8YRfSHjwDF25iAcKI CjNqHQzTPGRbz/HrcVrFc9LyrT5FJy5eVa6L3Gd1wjYhjhrYM6OO6MMM7k2/O/DO P+gXvUnv2R4CbuNUYDHBP1grh9mGd4IfWo8dhLV9GMce+A8Y4+AmWmmDmirHtHeE t4LiYQKOt7dvqpwJ -----END CERTIFICATE-----Generated at Fri Jun 12 14:15:46 2026 by rpki-client