$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/C0C268B8441C11EF9E110F1EC4F9AE02.roa File: C0C268B8441C11EF9E110F1EC4F9AE02.roa (raw, json) Hash identifier: v5FOCrkT7bwg0TVjJC2RnsG6lxQLJwnHry99/PwnEBQ= Subject key identifier: 7E:3C:D7:F8:15:3D:3D:B5:BB:31:DC:AC:F9:47:F1:60:6F:28:F0:86 Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 02BA Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/C0C268B8441C11EF9E110F1EC4F9AE02.roa Signing time: Tue 07 Jul 2026 03:28:32 +0000 ROA not before: Tue 07 Jul 2026 03:28:32 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 401254 IP address blocks: 103.251.236.0/24 maxlen: 24 103.251.237.0/24 maxlen: 24 103.251.238.0/24 maxlen: 24 103.251.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 03:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Jul 7 03:28:32 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4c725f-8c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:19:83:7c:e7:3c:27:f6:21:ec:96:f5:73: d7:a3:1d:86:4f:be:36:5b:b3:bb:96:fa:1f:7b:d8: 53:f8:0d:b6:07:9c:bc:0c:0d:df:f4:94:83:a9:a2: 4d:3e:9b:7a:20:f5:17:27:a5:f4:4d:d2:ce:7b:2e: 61:29:60:98:d6:31:5e:27:33:27:76:13:2e:4d:28: ea:73:7b:a0:68:71:78:6f:97:6b:6e:2c:06:fd:7e: de:35:a6:03:be:e3:6f:5b:08:c1:31:da:6e:15:b9: 44:70:ee:12:0d:fb:e9:d6:16:ae:a6:38:93:54:7e: a9:97:3c:fe:72:6f:07:a2:03:64:ab:1a:e8:11:b5: b7:c2:af:f7:d7:7c:2c:6a:a1:d9:c0:74:36:57:e6: 2d:62:d0:a8:70:24:9b:50:39:89:7e:f0:f6:bc:04: b4:d4:7e:99:89:22:e8:80:61:2c:48:0b:de:1f:62: 7d:9d:7a:3e:f5:67:57:48:88:7c:7f:83:02:b0:93: f2:01:39:0b:c4:7e:99:04:77:4d:a0:31:b1:a5:c4: bc:9a:1d:2d:36:26:0c:32:71:6a:14:eb:4a:71:14: 58:93:97:00:8e:1c:38:a8:6f:9f:aa:30:7a:cd:36: 36:e4:7a:d8:f4:57:84:c4:a7:59:5d:58:ed:e5:35: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3C:D7:F8:15:3D:3D:B5:BB:31:DC:AC:F9:47:F1:60:6F:28:F0:86 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/C0C268B8441C11EF9E110F1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.251.236.0/22 Signature Algorithm: sha256WithRSAEncryption c1:28:ad:e4:17:29:b8:5d:b4:cb:8b:ef:ff:25:8b:7d:d9:73: 40:99:bb:45:24:b9:c4:30:a5:77:08:08:2a:4a:f9:6c:32:c5: e8:03:c9:3d:5c:9d:38:52:c0:22:d4:3e:cc:79:bf:6c:e2:28: ff:d0:48:d6:24:83:ff:65:c1:a8:cb:b3:67:66:01:08:a9:fa: 0a:39:f2:17:69:89:22:15:77:d6:32:f7:38:eb:77:52:7f:2d: 1a:2b:db:c5:33:30:87:5a:59:fc:a7:99:43:15:5b:ec:60:e1: 41:aa:02:30:6e:6f:f2:ed:59:43:97:a5:8d:02:11:a6:77:fb: 81:06:2c:be:c3:75:5b:af:d7:c4:62:b0:3c:8d:9a:70:91:e4: 95:58:69:3a:82:a8:c7:21:c0:8e:68:ec:26:be:ce:f1:8a:3d: c3:aa:72:39:4e:7a:e2:99:b7:96:39:81:9f:09:c5:85:25:e4: c3:28:db:dd:1a:40:1c:94:19:4b:dc:0f:00:bf:7f:b4:ca:f0: eb:52:60:d5:32:ae:d4:2f:81:c5:73:63:9e:b8:d6:4d:6f:aa: 24:17:d7:72:a7:07:1f:52:f7:60:39:4e:ca:4f:27:b4:e4:df: e0:85:2c:57:cd:e7:80:6f:fc:16:00:a5:89:1b:9f:70:f4:65: 76:bc:df:5e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjYwNzA3MDMyODMyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjNzI1Zi04YzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRYZg3znPCf2IeyW9XPXox2GT742W7O7lvofe9hT+A22B5y8DA3f9JSDqaJN Ppt6IPUXJ6X0TdLOey5hKWCY1jFeJzMndhMuTSjqc3ugaHF4b5drbiwG/X7eNaYD vuNvWwjBMdpuFblEcO4SDfvp1haupjiTVH6plzz+cm8HogNkqxroEbW3wq/313ws aqHZwHQ2V+YtYtCocCSbUDmJfvD2vAS01H6ZiSLogGEsSAveH2J9nXo+9WdXSIh8 f4MCsJPyATkLxH6ZBHdNoDGxpcS8mh0tNiYMMnFqFOtKcRRYk5cAjhw4qG+fqjB6 zTY25HrY9FeExKdZXVjt5TXZuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH481/gV PT21uzHcrPlH8WBvKPCGMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwMTcvMTA1QUM4RkM5MEMzMTFFREJBMURDQzIzQzRGOUFFMDIvQzBDMjY4Qjg0 NDFDMTFFRjlFMTEwRjFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/vsMA0GCSqGSIb3DQEBCwUAA4IBAQDBKK3kFym4XbTLi+//JYt9 2XNAmbtFJLnEMKV3CAgqSvlsMsXoA8k9XJ04UsAi1D7Meb9s4ij/0EjWJIP/ZcGo y7NnZgEIqfoKOfIXaYkiFXfWMvc463dSfy0aK9vFMzCHWln8p5lDFVvsYOFBqgIw bm/y7VlDl6WNAhGmd/uBBiy+w3Vbr9fEYrA8jZpwkeSVWGk6gqjHIcCOaOwmvs7x ij3DqnI5TnrimbeWOYGfCcWFJeTDKNvdGkAclBlL3A8Av3+0yvDrUmDVMq7UL4HF c2OeuNZNb6okF9dypwcfUvdgOU7KTye05N/ghSxXzeeAb/wWAKWJG59w9GV2vN9e -----END CERTIFICATE-----Generated at Wed Jul 8 21:03:22 2026 by rpki-client