$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/9C457296810A11F1BDF96ABB6CA30FBC.roa File: 9C457296810A11F1BDF96ABB6CA30FBC.roa (raw, json) Hash identifier: mfMM1rWOREqg0X2Y0BnQVxJe3RdEDQ0y+IePXzNhgjY= Subject key identifier: B1:B2:BD:51:57:75:D8:B5:BE:54:26:64:80:1D:FF:30:7A:C9:27:26 Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 0204 Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/9C457296810A11F1BDF96ABB6CA30FBC.roa Signing time: Thu 16 Jul 2026 13:24:11 +0000 ROA not before: Thu 16 Jul 2026 13:24:11 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150446 IP address blocks: 103.42.62.0/24 maxlen: 24 103.42.63.0/24 maxlen: 24 2401:ede0::/42 maxlen: 48 2401:ede0:40::/42 maxlen: 48 2401:ede0:80::/42 maxlen: 48 2401:ede0:c0::/42 maxlen: 48 2401:ede0:100::/42 maxlen: 48 2401:ede0:140::/42 maxlen: 48 2401:ede0:180::/42 maxlen: 48 2401:ede0:1c0::/42 maxlen: 48 2401:ede0:200::/42 maxlen: 48 2401:ede0:240::/42 maxlen: 48 2401:ede0:280::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 05:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Jul 16 13:24:11 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a58db7b-5f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:9c:01:33:19:93:b4:aa:cf:62:06:cd:e6: f5:c3:d6:44:af:f9:12:7f:6d:76:75:9e:8e:e4:d2: 71:31:6e:3e:4d:62:e0:bc:2c:de:bf:ca:39:0c:7f: 17:a6:fb:40:80:f1:3a:bb:7c:62:50:77:51:22:f7: 62:04:64:3e:1f:fe:0d:6d:d4:5a:a8:8b:ff:7f:0a: 8a:af:91:41:dc:44:58:ab:c8:d8:d2:44:07:45:e8: ee:53:54:0f:38:7c:36:cc:d5:f2:a8:5c:09:38:ed: cb:70:11:7d:cf:36:e7:2f:31:d7:c5:91:63:d1:0c: 70:07:5d:d1:62:b9:47:ec:32:9f:c2:a7:b4:d6:0a: fa:dc:6c:46:58:0d:57:69:b3:5a:e8:31:3b:e7:94: de:b0:32:30:27:3f:fe:d0:20:31:f0:db:b1:d9:c9: 1e:81:27:4c:48:f9:a9:7c:d6:76:6a:76:f9:01:7a: eb:d1:dc:3a:06:07:b4:b6:50:81:b0:b8:19:44:50: 1f:c5:ce:c6:f7:8b:ee:24:41:6c:3f:5c:6e:bd:64: 34:0c:43:fc:e6:98:ae:25:29:94:77:cc:a3:ac:6d: aa:c6:c9:e1:2c:9b:71:19:9c:b5:1d:08:29:0e:24: 06:3c:f2:a0:d3:3e:25:48:34:2a:ce:c3:5d:38:a2: ac:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B2:BD:51:57:75:D8:B5:BE:54:26:64:80:1D:FF:30:7A:C9:27:26 X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/9C457296810A11F1BDF96ABB6CA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.42.62.0/23 IPv6: 2401:ede0::-2401:ede0:2bf:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 43:f9:18:9c:d6:1b:59:ff:85:54:7e:64:81:24:f7:37:17:d1: e3:ce:e1:c3:07:16:9f:75:7c:2d:91:b0:f9:75:e1:db:be:24: ee:16:40:38:5a:6e:1f:8e:7d:11:29:e8:0e:ec:11:92:ec:ae: 52:f4:c2:3d:33:ca:0a:1c:5e:c7:53:fb:9b:38:2d:f3:ab:a5: 35:93:0e:73:5b:49:28:e5:dd:6a:99:eb:22:dd:e1:7f:ed:8b: d4:73:5a:c5:12:dd:1c:23:70:46:e1:ea:88:e3:f9:86:03:44: 26:15:12:c7:b7:8a:70:76:09:c2:b7:74:b7:60:2f:89:3e:a2: 85:3e:2a:da:4c:cc:98:b6:5f:37:8f:8d:4f:ad:a5:28:b8:72: 26:8e:4d:e1:b9:f7:70:3b:aa:4a:1a:5e:5a:97:4d:89:42:6e: a1:b2:c0:43:a8:3d:22:d7:31:44:35:e3:97:fe:5e:81:01:fd: c2:f0:ae:f5:49:53:14:6f:70:e4:9c:4e:c5:a4:f7:cc:1d:87: 3a:8c:fb:3f:73:50:66:05:d5:9e:9a:24:b3:7e:77:8a:5d:fa: bb:91:03:3a:a9:e9:f1:02:67:67:c9:80:a6:d5:9f:4f:a7:d6: 94:80:b4:58:03:c5:1b:33:09:40:cc:2a:fd:08:0d:e4:e1:a6: 2d:04:b8:2b -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjYwNzE2MTMyNDExWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU4ZGI3Yi01Zjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoKcATMZk7Sqz2IGzeb1w9ZEr/kSf212dZ6O5NJxMW4+TWLgvCzev8o5DH8X pvtAgPE6u3xiUHdRIvdiBGQ+H/4NbdRaqIv/fwqKr5FB3ERYq8jY0kQHRejuU1QP OHw2zNXyqFwJOO3LcBF9zzbnLzHXxZFj0QxwB13RYrlH7DKfwqe01gr63GxGWA1X abNa6DE755TesDIwJz/+0CAx8Nux2ckegSdMSPmpfNZ2anb5AXrr0dw6Bge0tlCB sLgZRFAfxc7G94vuJEFsP1xuvWQ0DEP85piuJSmUd8yjrG2qxsnhLJtxGZy1HQgp DiQGPPKg0z4lSDQqzsNdOKKsdQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFLGyvVFX ddi1vlQmZIAd/zB6yScmMB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRFNjIvNzAyQTAyOENDOTlGMTFFRUE4MTU4RTc5QzRGOUFFMDIvOUM0NTcyOTY4 MTBBMTFGMUJERjk2QUJCNkNBMzBGQkMucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQBZyo+MBgEAgACMBIwEAMFBSQB7eADBwYkAe3gAoAwDQYJKoZIhvcN AQELBQADggEBAEP5GJzWG1n/hVR+ZIEk9zcX0ePO4cMHFp91fC2RsPl14du+JO4W QDhabh+OfREp6A7sEZLsrlL0wj0zygocXsdT+5s4LfOrpTWTDnNbSSjl3WqZ6yLd 4X/ti9RzWsUS3RwjcEbh6ojj+YYDRCYVEse3inB2CcK3dLdgL4k+ooU+KtpMzJi2 XzePjU+tpSi4ciaOTeG593A7qkoaXlqXTYlCbqGywEOoPSLXMUQ145f+XoEB/cLw rvVJUxRvcOScTsWk98wdhzqM+z9zUGYF1Z6aJLN+d4pd+ruRAzqp6fECZ2fJgKbV n0+n1pSAtFgDxRszCUDMKv0IDeThpi0EuCs= -----END CERTIFICATE-----Generated at Wed Jul 22 05:04:16 2026 by rpki-client