$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/0A16B10E8EE011F09A1AE72BC4F9AE02.roa File: 0A16B10E8EE011F09A1AE72BC4F9AE02.roa (raw, json) Hash identifier: 61ipbLIz+I5JBb+kwozvMx9Usvv22ZYLA1pmuD/JkSg= Subject key identifier: CB:21:09:62:A0:B6:2F:90:C7:42:A5:BB:B8:23:90:3D:DC:11:4D:A6 Certificate issuer: /CN=A91D3037/serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Certificate serial: BF Authority key identifier: B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/0A16B10E8EE011F09A1AE72BC4F9AE02.roa Signing time: Mon 17 Aug 2026 03:33:34 +0000 ROA not before: Mon 17 Aug 2026 03:33:33 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 55843 IP address blocks: 49.128.8.0/22 maxlen: 22 49.128.8.0/23 maxlen: 23 49.128.8.0/24 maxlen: 24 49.128.9.0/24 maxlen: 24 49.128.10.0/23 maxlen: 23 49.128.10.0/24 maxlen: 24 49.128.11.0/24 maxlen: 24 103.13.128.0/22 maxlen: 22 103.13.128.0/23 maxlen: 23 103.13.128.0/24 maxlen: 24 103.13.129.0/24 maxlen: 24 103.13.130.0/23 maxlen: 23 103.13.130.0/24 maxlen: 24 103.13.131.0/24 maxlen: 24 103.29.108.0/22 maxlen: 22 103.29.108.0/23 maxlen: 23 103.29.108.0/24 maxlen: 24 103.29.109.0/24 maxlen: 24 103.29.110.0/23 maxlen: 23 103.29.110.0/24 maxlen: 24 103.29.111.0/24 maxlen: 24 2402:7b00::/32 maxlen: 32 2402:7b00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3037, serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Validity Not Before: Aug 17 03:33:33 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a82810d-b18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:2c:bf:20:79:30:c2:99:ff:c9:32:c5:40: d5:5f:32:33:6e:b1:19:17:0c:b0:a1:89:00:0f:d7: f7:32:e0:4b:eb:0b:7f:a2:3e:80:4e:51:e5:52:c8: be:6e:65:b5:1f:1d:d8:db:58:57:b9:dc:7c:29:4e: c8:1b:4b:de:80:26:60:99:7e:30:28:fa:e1:91:00: 8a:53:a6:57:c2:ec:ed:1b:7c:4e:9c:2a:fc:6d:3d: 4f:4d:84:8a:4e:0b:49:9b:58:2e:b7:2b:8d:1f:f7: 3a:da:b7:20:a8:b2:01:6b:ab:1a:ce:7c:83:59:fc: 0a:75:7c:6f:05:7e:9d:f0:f0:af:c6:8a:b9:79:d2: 19:85:70:36:8c:d4:c4:69:f6:8b:69:dc:49:22:c7: 1e:3c:54:4e:a3:c8:f1:80:e1:a4:75:ac:37:66:43: 34:ce:ff:02:e0:0b:3b:ca:4e:d9:88:34:c0:35:f3: 49:e2:76:69:11:21:83:c9:d8:06:8d:b9:93:15:30: 30:2d:ed:ef:65:7d:eb:cb:fa:f6:4e:a4:37:c3:17: aa:13:85:06:d0:91:1e:e5:a1:f3:cc:0c:6a:83:e0: d1:56:ce:63:26:59:1e:a9:05:ae:cf:ef:0f:44:4f: c0:dd:ea:01:ff:1d:7e:7e:eb:ff:8b:03:70:77:f6: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:21:09:62:A0:B6:2F:90:C7:42:A5:BB:B8:23:90:3D:DC:11:4D:A6 X509v3 Authority Key Identifier: keyid:B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/0A16B10E8EE011F09A1AE72BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.128.8.0/22 103.13.128.0/22 103.29.108.0/22 IPv6: 2402:7b00::/32 Signature Algorithm: sha256WithRSAEncryption b8:e6:35:4c:df:aa:60:b2:95:37:0e:02:56:cd:0c:aa:dd:52: 94:8f:98:87:90:f3:57:bb:03:5d:3e:d9:3d:aa:02:ec:20:de: 13:fe:3d:68:aa:14:c6:09:63:90:ec:b3:36:69:84:2b:55:f6: 86:b8:b2:53:d1:bb:8e:4b:4c:2e:de:40:65:a3:2a:31:b6:f5: 48:46:13:88:94:dc:e1:0e:79:36:6b:5b:bd:64:1a:30:cc:c5: 41:59:24:50:67:2c:8a:e2:17:bd:51:51:ea:22:85:43:d1:fa: bf:ee:72:6e:46:0e:e6:a6:d7:8b:1a:23:f8:82:d5:e7:3e:25: 1c:67:7d:e4:0a:b5:89:12:c8:40:a5:ae:23:fb:54:a1:10:cb: 33:0d:58:dd:00:c7:3d:0f:5d:47:40:f1:92:c3:43:7c:68:66: 29:c4:df:4c:86:5e:51:e6:4f:38:af:2e:5f:45:8b:3d:2a:09: bf:bc:47:d9:8d:ed:01:83:07:41:31:01:e5:12:38:d7:c9:9b: cd:36:30:e6:85:9c:fa:58:a7:f2:37:28:32:0c:56:a3:3d:fa: 8e:9b:a8:89:2e:76:fb:7c:70:a2:9d:d3:c2:d5:ff:8b:2d:a7: 8d:6f:d1:94:a9:2d:e3:f2:50:58:4a:5f:5b:67:31:cf:3c:14: 88:91:2b:b5 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwMzcxMTAvBgNVBAUTKEI2NEI4MTA0MkFCNDExNjA3RDg2MDc2RkVGQzlFNTk2 MjZCQjg4MTYwHhcNMjYwODE3MDMzMzMzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgyODEwZC1iMThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubYsvyB5MMKZ/8kyxUDVXzIzbrEZFwywoYkAD9f3MuBL6wt/oj6ATlHlUsi+ bmW1Hx3Y21hXudx8KU7IG0vegCZgmX4wKPrhkQCKU6ZXwuztG3xOnCr8bT1PTYSK TgtJm1gutyuNH/c62rcgqLIBa6saznyDWfwKdXxvBX6d8PCvxoq5edIZhXA2jNTE afaLadxJIscePFROo8jxgOGkdaw3ZkM0zv8C4As7yk7ZiDTANfNJ4nZpESGDydgG jbmTFTAwLe3vZX3ry/r2TqQ3wxeqE4UG0JEe5aHzzAxqg+DRVs5jJlkeqQWuz+8P RE/A3eoB/x1+fuv/iwNwd/bzNwIDAQABo4ICezCCAncwHQYDVR0OBBYEFMshCWKg ti+Qx0Klu7gjkD3cEU2mMB8GA1UdIwQYMBaAFLZLgQQqtBFgfYYHb+/J5ZYmu4gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzAzNy84QjhERTI3RThF REMxMUYwOTg4MEM0NzhDNEY5QUUwMi90a3VCQkNxMEVXQjloZ2R2NzhubGxpYTdp QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrdUJCQ3EwRVdCOWhnZHY3OG5sbGlhN2lCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMwMzcvOEI4REUyN0U4RURDMTFGMDk4ODBDNDc4QzRGOUFFMDIvMEExNkIxMEU4 RUUwMTFGMDlBMUFFNzJCQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCMYAIAwQCZw2AAwQCZx1sMA0EAgACMAcDBQAkAnsAMA0GCSqGSIb3 DQEBCwUAA4IBAQC45jVM36pgspU3DgJWzQyq3VKUj5iHkPNXuwNdPtk9qgLsIN4T /j1oqhTGCWOQ7LM2aYQrVfaGuLJT0buOS0wu3kBloyoxtvVIRhOIlNzhDnk2a1u9 ZBowzMVBWSRQZyyK4he9UVHqIoVD0fq/7nJuRg7mpteLGiP4gtXnPiUcZ33kCrWJ EshApa4j+1ShEMszDVjdAMc9D11HQPGSw0N8aGYpxN9Mhl5R5k84ry5fRYs9Kgm/ vEfZje0BgwdBMQHlEjjXyZvNNjDmhZz6WKfyNygyDFajPfqOm6iJLnb7fHCindPC 1f+LLaeNb9GUqS3j8lBYSl9bZzHPPBSIkSu1 -----END CERTIFICATE-----Generated at Wed Aug 19 14:31:45 2026 by rpki-client