$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/991B38BC44E811F0968D8B30C4F9AE02.roa File: 991B38BC44E811F0968D8B30C4F9AE02.roa (raw, json) Hash identifier: Nn8FuzHCJ3Kb1KY54UhaGmsGZwgPU9BdYg6OfrPAV1Q= Subject key identifier: E9:7B:40:23:B1:E1:CB:5C:E2:36:E4:9B:BA:03:3B:3F:DA:7B:F1:BA Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 355B Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/991B38BC44E811F0968D8B30C4F9AE02.roa Signing time: Fri 22 May 2026 15:13:03 +0000 ROA not before: Fri 22 May 2026 15:13:03 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 45754 IP address blocks: 27.109.64.0/19 maxlen: 24 103.67.228.0/22 maxlen: 24 110.93.64.0/19 maxlen: 24 2402:fe00::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 14:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13659 (0x355b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: May 22 15:13:03 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a10727f-fd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:dd:80:53:23:22:83:4d:46:ee:6f:8b:f7: 8b:f7:dd:a8:1a:66:1c:11:33:72:9b:aa:c9:8e:7f: 02:bf:4d:24:17:ad:fb:10:a8:c0:5c:fd:1d:68:4c: f1:85:31:2e:79:e6:38:6a:86:9b:49:4d:fe:1e:7f: f1:23:c2:2c:56:73:1f:08:f0:8a:cf:16:e6:f8:d5: b1:c0:50:cd:10:10:0d:36:e7:f3:6f:94:87:3e:25: 93:84:af:2e:63:6d:75:d6:05:15:f2:e0:04:a1:39: 30:f3:3f:c0:d5:c0:81:2b:6f:84:07:05:73:be:a4: 11:f2:11:fc:5a:70:91:49:75:26:86:62:ec:10:bf: 27:0b:6c:9b:88:f5:f1:3d:10:d0:fd:90:01:02:a8: 74:ee:9c:0a:6f:5f:9e:15:12:e2:5e:80:94:eb:cf: 46:b5:71:76:37:fe:75:85:ec:bc:4c:74:db:08:dd: 35:d3:16:23:e2:48:2a:a3:60:10:65:4b:86:e7:5a: 6b:0c:16:3e:23:18:08:55:b4:54:79:18:0c:a5:09: 7c:64:d7:3f:65:bb:7d:ba:25:ac:8f:28:4b:f1:08: c7:73:8b:31:c3:aa:19:28:10:72:3f:a6:9e:d8:48: 63:8a:07:c8:9e:bb:6a:a2:e2:25:a2:7b:35:08:c7: 7d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7B:40:23:B1:E1:CB:5C:E2:36:E4:9B:BA:03:3B:3F:DA:7B:F1:BA X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/991B38BC44E811F0968D8B30C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.109.64.0/19 103.67.228.0/22 110.93.64.0/19 IPv6: 2402:fe00::/32 Signature Algorithm: sha256WithRSAEncryption 5b:3d:b9:51:9f:f1:dd:13:43:ec:3d:26:5f:e2:20:86:d7:40: 3e:e6:53:83:70:a8:f5:39:6c:73:4b:9b:f6:c3:ac:d6:2e:3d: ea:f4:1d:ab:eb:11:4c:bc:b2:ab:f6:a0:1e:45:53:3c:b4:0f: be:2b:ed:99:b0:ad:c0:2b:d9:09:5f:09:4b:a9:20:90:33:6f: 6b:25:23:1b:f4:fa:fd:f1:e6:95:fa:2c:e1:00:53:c0:6e:ee: dd:f5:d1:34:3f:da:5b:e9:9d:58:7a:45:0a:12:d6:08:31:6f: f1:2b:d8:fe:d6:00:66:92:79:63:89:8c:94:7b:45:8e:6d:4d: 63:df:d6:6a:00:1b:db:76:59:0f:78:7b:75:50:a7:cb:91:b7: e7:5f:37:34:be:fd:a5:62:5b:d3:8e:c6:2c:8a:ad:cd:27:58: 31:37:2a:df:30:c0:d0:c2:99:7b:68:5b:b7:aa:d3:47:31:8c: f6:8c:7c:e6:7e:0b:9e:84:d6:34:84:98:0f:f9:cc:7c:cc:29: 48:70:c0:c7:e6:50:a8:d9:77:af:de:e2:bf:00:c3:ad:56:b6: a4:6e:a8:69:37:fe:0e:9b:45:f4:79:e5:d8:b4:d5:b2:8c:78: f5:0b:43:63:d2:30:f9:fa:fa:c6:26:54:cb:ec:3b:d5:c0:53: 02:13:7f:43 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICNVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjYwNTIyMTUxMzAzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTEwNzI3Zi1mZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2PdgFMjIoNNRu5vi/eL992oGmYcETNym6rJjn8Cv00kF637EKjAXP0daEzx hTEueeY4aoabSU3+Hn/xI8IsVnMfCPCKzxbm+NWxwFDNEBANNufzb5SHPiWThK8u Y2111gUV8uAEoTkw8z/A1cCBK2+EBwVzvqQR8hH8WnCRSXUmhmLsEL8nC2ybiPXx PRDQ/ZABAqh07pwKb1+eFRLiXoCU689GtXF2N/51hey8THTbCN010xYj4kgqo2AQ ZUuG51prDBY+IxgIVbRUeRgMpQl8ZNc/Zbt9uiWsjyhL8QjHc4sxw6oZKBByP6ae 2EhjigfInrtqouIlons1CMd9swIDAQABo4ICezCCAncwHQYDVR0OBBYEFOl7QCOx 4ctc4jbkm7oDOz/ae/G6MB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REUyQjIvNTNDQTQ2MkExRDlEMTFFMkFGNDU2RDhDMDhCMDJDRDIvOTkxQjM4QkM0 NEU4MTFGMDk2OEQ4QjMwQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQFG21AAwQCZ0PkAwQFbl1AMA0EAgACMAcDBQAkAv4AMA0GCSqGSIb3 DQEBCwUAA4IBAQBbPblRn/HdE0PsPSZf4iCG10A+5lODcKj1OWxzS5v2w6zWLj3q 9B2r6xFMvLKr9qAeRVM8tA++K+2ZsK3AK9kJXwlLqSCQM29rJSMb9Pr98eaV+izh AFPAbu7d9dE0P9pb6Z1YekUKEtYIMW/xK9j+1gBmknljiYyUe0WObU1j39ZqABvb dlkPeHt1UKfLkbfnXzc0vv2lYlvTjsYsiq3NJ1gxNyrfMMDQwpl7aFu3qtNHMYz2 jHzmfguehNY0hJgP+cx8zClIcMDH5lCo2Xev3uK/AMOtVrakbqhpN/4Om0X0eeXY tNWyjHj1C0Nj0jD5+vrGJlTL7DvVwFMCE39D -----END CERTIFICATE-----Generated at Wed Jun 24 12:29:58 2026 by rpki-client