$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa File: 26F1B59437A511ECB73C9852C4F9AE02.roa (raw, json) Hash identifier: bWBcHaEKUgQ7gyCf6hn1djUztS6Lgf7ZTFoCzaWijUM= Subject key identifier: DC:C6:28:A0:54:E3:98:E7:88:72:F1:A5:B8:31:9C:32:4F:3B:F5:3F Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 063D Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa Signing time: Thu 02 Jul 2026 23:24:46 +0000 ROA not before: Thu 02 Jul 2026 23:24:46 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 142424 IP address blocks: 103.168.38.0/23 maxlen: 23 103.168.38.0/24 maxlen: 24 103.168.39.0/24 maxlen: 24 2001:df6:ca80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 23:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Jul 2 23:24:46 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a46f33e-c1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:3c:46:ef:ae:61:86:57:06:c5:4e:30:31: 31:f1:11:72:ec:d3:b3:6a:82:4b:23:e7:dd:d3:53: 93:13:6a:74:74:f1:02:6e:e5:7c:6f:f3:6b:64:91: 22:df:57:81:24:6f:5b:a1:16:c7:8e:f3:5f:5d:be: 26:a7:8e:1f:2f:e2:17:10:ad:3e:ac:4f:38:0a:b0: 08:f2:69:2b:70:a7:52:9d:1b:75:7c:1f:92:a1:db: 50:6f:42:0a:fb:99:2f:5f:86:62:33:46:3d:8e:a6: ea:30:5a:3a:be:e0:98:4c:f5:2b:5e:e1:e2:4e:c9: 40:7f:d4:79:15:38:76:40:75:73:e8:a9:0c:25:45: b0:6e:e0:53:c7:5a:fa:df:77:0f:ea:d9:56:2c:a3: 4d:81:61:52:ca:10:61:91:8b:e5:12:e8:75:9e:0f: 20:66:e5:d1:fb:65:02:af:06:91:5b:70:ce:59:66: 34:06:e6:b7:01:d8:6d:b0:31:28:72:e3:80:83:59: ed:05:39:00:50:69:d8:41:90:0a:aa:9d:4c:83:97: 54:75:a7:43:ab:1e:3e:a0:6a:82:36:3e:e8:2c:33: 3f:ba:36:4b:3f:cb:8a:9a:7f:fe:da:83:dd:fb:25: fc:21:0a:26:3b:6a:17:eb:4e:4f:07:40:9a:7c:2f: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C6:28:A0:54:E3:98:E7:88:72:F1:A5:B8:31:9C:32:4F:3B:F5:3F X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.168.38.0/23 IPv6: 2001:df6:ca80::/48 Signature Algorithm: sha256WithRSAEncryption 24:e1:f4:d5:56:b0:43:b8:ce:64:c9:e1:8b:07:db:60:8e:86: b6:b6:11:92:14:1f:4f:61:0e:11:15:e4:02:aa:e8:cf:08:73: e4:fd:72:a9:60:c0:06:b7:6c:02:c0:57:dc:99:a0:f5:01:d2: a4:b8:02:82:72:49:a0:14:dd:44:4d:32:cb:3c:3c:ed:eb:72: 94:6a:ef:07:ba:94:72:ef:4a:14:67:28:89:52:ac:a5:3b:7a: 25:a2:ac:15:13:bf:e6:c4:ed:75:e4:f6:3b:79:18:fb:14:73: ae:a6:6c:61:a3:21:86:6f:8d:54:d1:66:bf:3e:9e:9c:61:61: cb:35:d6:ad:4d:ae:da:24:19:0f:29:0c:77:93:e9:97:de:23: bc:36:e3:6e:59:b4:e5:33:d1:72:cd:6b:6d:1e:ab:b0:41:f3: f4:d0:51:ac:ca:ae:2c:62:c0:40:bb:a5:97:7d:14:da:74:d3: f9:23:cb:ff:9f:c1:b3:e2:ea:47:8a:ec:8e:92:b3:8a:55:6f: d9:dc:97:83:22:59:3e:9d:80:0b:e5:e1:ee:7c:07:f0:d0:50: 0c:22:69:c1:8d:56:15:c9:fd:58:7b:2f:93:7b:49:b8:7c:75: f2:5b:a5:52:f6:85:5e:9d:b0:f2:1f:46:80:2a:9e:47:a3:b5: 77:29:35:f4 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjYwNzAyMjMyNDQ2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2ZjMzZS1jMWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdQ8Ru+uYYZXBsVOMDEx8RFy7NOzaoJLI+fd01OTE2p0dPECbuV8b/NrZJEi 31eBJG9boRbHjvNfXb4mp44fL+IXEK0+rE84CrAI8mkrcKdSnRt1fB+SodtQb0IK +5kvX4ZiM0Y9jqbqMFo6vuCYTPUrXuHiTslAf9R5FTh2QHVz6KkMJUWwbuBTx1r6 33cP6tlWLKNNgWFSyhBhkYvlEuh1ng8gZuXR+2UCrwaRW3DOWWY0Bua3AdhtsDEo cuOAg1ntBTkAUGnYQZAKqp1Mg5dUdadDqx4+oGqCNj7oLDM/ujZLP8uKmn/+2oPd +yX8IQomO2oX605PB0CafC86CwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNzGKKBU 45jniHLxpbgxnDJPO/U/MB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQwNDIvRUZDOThERTZFNTM2MTFFQjk5MjY1NTZCQzRGOUFFMDIvMjZGMUI1OTQz N0E1MTFFQ0I3M0M5ODUyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6gmMA8EAgACMAkDBwAgAQ32yoAwDQYJKoZIhvcNAQELBQADggEB ACTh9NVWsEO4zmTJ4YsH22COhra2EZIUH09hDhEV5AKq6M8Ic+T9cqlgwAa3bALA V9yZoPUB0qS4AoJySaAU3URNMss8PO3rcpRq7we6lHLvShRnKIlSrKU7eiWirBUT v+bE7XXk9jt5GPsUc66mbGGjIYZvjVTRZr8+npxhYcs11q1NrtokGQ8pDHeT6Zfe I7w2425ZtOUz0XLNa20eq7BB8/TQUazKrixiwEC7pZd9FNp00/kjy/+fwbPi6keK 7I6Ss4pVb9ncl4MiWT6dgAvl4e58B/DQUAwiacGNVhXJ/Vh7L5N7Sbh8dfJbpVL2 hV6dsPIfRoAqnkejtXcpNfQ= -----END CERTIFICATE-----Generated at Tue Jul 21 23:00:44 2026 by rpki-client