$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa File: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (raw, json) Hash identifier: Vx2WbMEsYUJvjxHD6WL00kPDD7uH5hiABevdW4+Xt0o= Subject key identifier: 13:F8:8A:B5:CF:F6:AA:73:5F:87:3C:F5:53:17:14:AE:84:F0:3A:C3 Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 1156 Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa Signing time: Tue 16 Jun 2026 17:20:25 +0000 ROA not before: Tue 16 Jun 2026 17:20:25 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 152676 IP address blocks: 103.24.132.0/23 maxlen: 23 2406:bf00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 17:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4438 (0x1156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Jun 16 17:20:25 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a3185d9-8557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:28:1d:8a:5d:c5:a4:cb:cf:46:fd:4c:41: b2:d9:0a:f1:68:55:32:6c:09:6f:40:5e:3c:f7:33: 47:ce:8d:57:05:c5:a0:2d:c9:e9:eb:7d:9f:7e:db: 71:aa:8e:bc:53:74:53:0d:5d:01:19:11:ad:25:85: 5e:5f:02:44:49:1e:02:69:e0:e7:9a:99:72:fc:3e: 80:e3:e4:36:5d:2c:8e:20:40:58:43:1c:4e:6f:cf: 24:f7:d3:40:79:96:d9:81:95:54:16:78:9c:cf:22: 50:33:9b:c9:31:c5:80:a4:fb:06:e0:af:27:ed:97: 3c:1d:df:9d:a7:0a:16:24:30:7d:0a:de:b8:89:2d: 55:73:56:26:c2:f2:55:9e:cd:89:7a:d1:27:88:d6: 5b:80:95:42:c6:90:aa:56:ff:c9:3c:47:1e:d9:69: ad:b1:8c:9e:be:c6:67:d3:f5:3e:6c:e5:44:58:0f: e1:53:bb:a9:68:d1:65:ff:fb:fa:69:34:e3:9e:46: 08:9a:c9:8f:64:50:c7:53:d6:78:a3:1c:71:df:b3: e5:c0:b9:2f:4c:a7:d4:25:94:f3:33:88:96:7f:00: bc:af:00:35:13:a0:f5:f8:12:84:fa:8c:bd:4b:91: 16:db:50:72:7a:f5:81:e3:e0:43:cf:8c:db:7b:25: fe:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F8:8A:B5:CF:F6:AA:73:5F:87:3C:F5:53:17:14:AE:84:F0:3A:C3 X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.132.0/23 IPv6: 2406:bf00::/48 Signature Algorithm: sha256WithRSAEncryption 1f:d8:02:f2:6e:8b:12:db:1a:a9:ae:3b:71:c7:ad:5a:bd:ad: 6c:47:9f:74:03:55:0e:e7:76:39:78:ff:04:85:e6:3f:58:68: 20:d5:27:3e:ab:fa:0e:02:0e:af:e5:d3:2c:2c:e9:b8:2c:8b: 8f:76:f4:5d:c3:15:95:4b:76:73:b8:87:72:ae:88:be:e3:bc: 10:2b:bf:a5:4b:87:a6:24:85:71:63:ab:ea:00:56:3a:e8:9c: b7:a2:9c:74:98:b7:e1:9a:19:20:d3:39:e9:65:26:7f:65:d6: 83:a2:7d:dc:20:c9:d4:cd:c2:8d:20:af:94:c2:f6:1c:e3:1f: 76:ff:c2:e4:5c:29:1c:82:a8:3e:57:fc:53:fb:96:d6:1a:30: 24:a0:e4:68:2f:4e:2a:2b:a9:59:15:81:0c:d8:52:02:8d:0f: 8c:f2:7d:40:a5:eb:7c:5a:88:a8:79:9d:57:4e:fc:f3:e5:91: 30:95:30:95:f1:f3:df:de:1d:14:9b:b1:8e:55:c2:b8:eb:85: a4:3b:4e:23:8c:ae:f8:54:d9:cf:2f:48:ba:ca:6d:7c:d8:6d: 99:36:0e:44:fb:f1:e8:4f:5d:9b:17:e3:55:15:73:8f:93:1e: 2e:46:e2:a3:dd:93:15:26:0b:b3:29:b2:e7:b6:52:6e:c7:71: 4d:95:5a:c3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICEVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjYwNjE2MTcyMDI1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMxODVkOS04NTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HIoHYpdxaTLz0b9TEGy2QrxaFUybAlvQF489zNHzo1XBcWgLcnp632ffttx qo68U3RTDV0BGRGtJYVeXwJESR4CaeDnmply/D6A4+Q2XSyOIEBYQxxOb88k99NA eZbZgZVUFniczyJQM5vJMcWApPsG4K8n7Zc8Hd+dpwoWJDB9Ct64iS1Vc1YmwvJV ns2JetEniNZbgJVCxpCqVv/JPEce2WmtsYyevsZn0/U+bOVEWA/hU7upaNFl//v6 aTTjnkYImsmPZFDHU9Z4oxxx37PlwLkvTKfUJZTzM4iWfwC8rwA1E6D1+BKE+oy9 S5EW21ByevWB4+BDz4zbeyX+RQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBP4irXP 9qpzX4c89VMXFK6E8DrDMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0YyODUvRkQ2NEYwQjgzNDBDMTFFOTk2NkM1QTc2QzRGOUFFMDIvQUI3MzFCMDA0 QjJBMTFFRkFBRkNDOTJDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZxiEMA8EAgACMAkDBwAkBr8AAAAwDQYJKoZIhvcNAQELBQADggEB AB/YAvJuixLbGqmuO3HHrVq9rWxHn3QDVQ7ndjl4/wSF5j9YaCDVJz6r+g4CDq/l 0yws6bgsi4929F3DFZVLdnO4h3KuiL7jvBArv6VLh6YkhXFjq+oAVjronLeinHSY t+GaGSDTOellJn9l1oOifdwgydTNwo0gr5TC9hzjH3b/wuRcKRyCqD5X/FP7ltYa MCSg5GgvTiorqVkVgQzYUgKND4zyfUCl63xaiKh5nVdO/PPlkTCVMJXx89/eHRSb sY5VwrjrhaQ7TiOMrvhU2c8vSLrKbXzYbZk2DkT78ehPXZsX41UVc4+THi5G4qPd kxUmC7Mpsue2Um7HcU2VWsM= -----END CERTIFICATE-----Generated at Wed Jun 24 12:22:26 2026 by rpki-client