$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CF2E434C011511F181A4535E456F56BC.roa File: CF2E434C011511F181A4535E456F56BC.roa (raw, json) Hash identifier: fFZUAC4qkgckMcGIPZbokxjIIVCE77oXT28ID9HeuYs= Subject key identifier: 49:46:70:26:D1:13:06:D4:D8:82:3C:9B:68:DD:47:3D:F6:67:BC:D0 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 2E1F Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CF2E434C011511F181A4535E456F56BC.roa Signing time: Thu 04 Jun 2026 20:26:18 +0000 ROA not before: Thu 04 Jun 2026 20:26:18 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 38547 IP address blocks: 103.151.27.0/24 maxlen: 24 115.167.72.0/24 maxlen: 24 115.167.74.0/24 maxlen: 24 115.167.75.0/24 maxlen: 24 202.92.16.0/24 maxlen: 24 202.92.17.0/24 maxlen: 24 202.92.18.0/24 maxlen: 24 202.92.19.0/24 maxlen: 24 202.92.23.0/24 maxlen: 24 202.92.24.0/24 maxlen: 24 202.92.24.32/27 maxlen: 27 202.92.25.0/24 maxlen: 24 202.92.27.0/24 maxlen: 24 202.92.28.0/24 maxlen: 24 202.92.29.0/24 maxlen: 24 202.92.30.0/24 maxlen: 24 202.92.31.0/24 maxlen: 24 2400:9560:1::/48 maxlen: 48 2400:9560:5::/48 maxlen: 48 2400:9560:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 20:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11807 (0x2e1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Jun 4 20:26:18 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a21df69-5680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:36:fc:ff:b2:14:67:99:3a:9d:ce:86:48: 61:96:28:31:8c:aa:75:ca:b6:4c:0e:e5:63:13:a1: a8:76:bc:60:30:09:6a:e6:9f:25:c7:c4:7c:8b:6a: 57:7d:41:28:8a:70:4e:d2:d7:df:6a:1a:0e:8f:94: 29:3e:a8:80:e8:aa:5f:fe:c6:de:d2:06:60:61:1c: cd:76:42:94:4e:9b:31:46:1e:cb:cb:24:69:e1:ed: 04:c3:ae:c8:f4:ca:4b:50:3f:ff:a1:d6:98:53:5e: 56:78:f8:05:15:6f:f4:a9:22:9d:fa:17:68:39:e0: 0f:13:68:da:b7:55:8f:c2:ff:78:59:d3:81:aa:c6: 05:07:64:5f:bb:e0:6b:59:2b:e4:4c:90:cf:c7:a8: 9f:aa:af:cd:94:ae:8d:ca:72:14:ed:70:67:4a:93: 3e:fd:31:ce:d3:45:de:a2:97:66:e0:1d:ea:1f:2b: 3a:7b:b4:11:da:29:9a:09:c0:02:00:fb:70:70:a9: 78:e6:b5:9d:98:33:be:f6:69:7d:19:d7:99:26:1a: a6:c5:d8:af:68:25:d0:90:98:76:47:d5:ed:55:ce: 20:81:cf:f9:8c:35:f9:e1:68:94:47:7a:8c:c0:b9: 84:41:17:a4:d3:4d:d5:a6:57:78:a0:e7:e1:f0:f1: 8e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:46:70:26:D1:13:06:D4:D8:82:3C:9B:68:DD:47:3D:F6:67:BC:D0 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CF2E434C011511F181A4535E456F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.151.27.0/24 115.167.72.0/24 115.167.74.0/23 202.92.16.0/22 202.92.23.0-202.92.25.255 202.92.27.0-202.92.31.255 IPv6: 2400:9560:1::/48 2400:9560:5::/48 2400:9560:9::/48 Signature Algorithm: sha256WithRSAEncryption 51:cb:37:ff:0c:d9:f9:07:62:9d:14:2e:e3:0e:f6:08:a9:f5: a6:5c:57:cd:3c:6b:50:dc:1c:2d:26:dc:d5:87:ff:3c:52:2f: 75:f5:10:ab:45:d6:a9:17:f6:57:42:a7:d3:92:58:5a:c0:f8: 77:05:05:50:df:b0:d5:b4:f1:ec:f8:a0:24:bf:55:15:60:e6: 4b:a6:7c:06:1d:36:38:3d:c4:27:9b:86:0e:44:1f:43:ca:5f: ae:2e:2d:a8:d2:d2:f2:4b:37:1a:d1:6a:83:17:c2:59:09:28: ab:da:c4:b5:cf:3b:37:93:61:6c:07:93:bf:b7:42:7b:6c:1b: 56:6b:56:dc:a3:f0:4b:d4:e6:b3:67:5a:b4:42:01:9a:c1:25: 03:db:ab:80:3a:84:62:4b:13:46:75:df:99:c9:d3:30:6e:97: fb:f8:49:90:e0:57:37:a6:b5:5c:96:70:7d:ab:50:eb:74:e7: 8a:ef:71:e0:ce:72:4c:e9:2c:eb:62:a7:96:35:5d:f7:c7:5e: 08:e7:ba:58:51:73:eb:0a:db:b8:51:ee:47:58:4e:e4:61:75: 59:51:da:62:87:b2:40:a0:31:df:a2:40:42:b8:93:5d:78:8d: 55:8a:3d:3a:e1:df:2f:cf:17:b7:0a:85:ad:69:1b:7f:85:d6: 74:ec:17:46 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICLh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjYwNjA0MjAyNjE4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIxZGY2OS01NjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOo2/P+yFGeZOp3OhkhhligxjKp1yrZMDuVjE6GodrxgMAlq5p8lx8R8i2pX fUEoinBO0tffahoOj5QpPqiA6Kpf/sbe0gZgYRzNdkKUTpsxRh7LyyRp4e0Ew67I 9MpLUD//odaYU15WePgFFW/0qSKd+hdoOeAPE2jat1WPwv94WdOBqsYFB2Rfu+Br WSvkTJDPx6ifqq/NlK6NynIU7XBnSpM+/THO00Xeopdm4B3qHys6e7QR2imaCcAC APtwcKl45rWdmDO+9ml9GdeZJhqmxdivaCXQkJh2R9XtVc4ggc/5jDX54WiUR3qM wLmEQRek003Vpld4oOfh8PGOlQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFElGcCbR EwbU2II8m2jdRz32Z7zQMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQ0YyRTQzNEMw MTE1MTFGMTgxQTQ1MzVFNDU2RjU2QkMucm9hMHAGCCsGAQUFBwEHAQH/BGEwXzA6 BAIAATA0AwQAZ5cbAwQAc6dIAwQBc6dKAwQCylwQMAwDBADKXBcDBAHKXBgwDAME AMpcGwMEBcpcADAhBAIAAjAbAwcAJACVYAABAwcAJACVYAAFAwcAJACVYAAJMA0G CSqGSIb3DQEBCwUAA4IBAQBRyzf/DNn5B2KdFC7jDvYIqfWmXFfNPGtQ3BwtJtzV h/88Ui919RCrRdapF/ZXQqfTklhawPh3BQVQ37DVtPHs+KAkv1UVYOZLpnwGHTY4 PcQnm4YORB9Dyl+uLi2o0tLySzca0WqDF8JZCSir2sS1zzs3k2FsB5O/t0J7bBtW a1bco/BL1OazZ1q0QgGawSUD26uAOoRiSxNGdd+ZydMwbpf7+EmQ4Fc3prVclnB9 q1DrdOeK73HgznJM6SzrYqeWNV33x14I57pYUXPrCtu4Ue5HWE7kYXVZUdpih7JA oDHfokBCuJNdeI1Vij064d8vzxe3CoWtaRt/hdZ07BdG -----END CERTIFICATE-----Generated at Fri Jun 5 20:05:58 2026 by rpki-client