$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/65735378631411F1A1ABE5607D47A888.roa File: 65735378631411F1A1ABE5607D47A888.roa (raw, json) Hash identifier: mA7bAbno8eCxBFSHk2mZ7wRMpGBwQ5uNOFxGCcgIxe4= Subject key identifier: 70:3A:F3:74:7D:78:37:60:22:92:D4:8B:39:2E:05:1A:15:09:E3:F8 Certificate issuer: /CN=A91EA23A/serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Certificate serial: 11 Authority key identifier: 0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/65735378631411F1A1ABE5607D47A888.roa Signing time: Mon 08 Jun 2026 08:31:08 +0000 ROA not before: Mon 08 Jun 2026 08:31:08 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 399138 IP address blocks: 203.21.69.0/24 maxlen: 24 203.21.70.0/23 maxlen: 23 203.25.204.0/23 maxlen: 23 203.25.226.0/24 maxlen: 24 203.55.124.0/22 maxlen: 22 203.55.130.0/24 maxlen: 24 203.56.122.0/24 maxlen: 24 203.56.170.0/24 maxlen: 24 203.56.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 08:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA23A, serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Validity Not Before: Jun 8 08:31:08 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a267dcc-a502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:08:32:48:ed:7c:bf:63:14:e9:9f:23:ba:08: 61:11:db:6e:0d:cd:51:03:90:74:05:1d:5b:04:18: 42:a7:4e:0d:b9:21:a8:f2:2d:c7:71:eb:e1:b2:99: dc:65:56:9b:2d:4a:79:93:3f:d2:53:d3:99:6f:43: d0:8a:99:6a:d0:b1:dd:30:7b:95:19:84:43:4c:b7: 29:40:30:09:42:c4:5e:09:78:f5:0a:89:70:f8:fa: 41:ec:fa:24:8a:6e:ad:00:29:16:92:37:dd:00:ae: e9:b7:2c:04:bc:76:3e:03:ed:60:79:1c:f0:cf:7a: b8:c4:1a:45:52:84:e4:b3:04:fb:3d:00:71:5a:0f: 31:f3:21:54:fd:12:63:9c:ff:e8:ab:0a:61:79:cd: a8:98:4c:6f:60:cb:86:fb:36:cb:44:43:22:45:79: a9:fe:1c:fb:1b:9f:fe:be:44:f5:59:1c:c0:67:9d: ec:ed:90:57:af:ce:6a:90:d9:68:a3:9e:fd:19:40: 40:53:9b:71:cd:b3:6e:d2:59:4e:55:ad:8b:93:e9: 18:f7:81:ee:cc:84:dd:41:2b:01:92:fe:f9:70:20: e5:77:85:2b:e4:91:1f:1a:f2:af:cc:85:8e:ba:08: 11:2c:94:3e:4f:86:36:ca:34:45:18:fa:e4:fa:42: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3A:F3:74:7D:78:37:60:22:92:D4:8B:39:2E:05:1A:15:09:E3:F8 X509v3 Authority Key Identifier: keyid:0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/65735378631411F1A1ABE5607D47A888.roa sbgp-ipAddrBlock: critical IPv4: 203.21.69.0-203.21.71.255 203.25.204.0/23 203.25.226.0/24 203.55.124.0/22 203.55.130.0/24 203.56.122.0/24 203.56.170.0/24 203.56.177.0/24 Signature Algorithm: sha256WithRSAEncryption 06:86:35:6c:e2:bb:d1:bf:90:35:b1:4d:43:07:b3:d0:46:e3: 56:b9:30:1f:5a:20:ed:b7:c4:73:a3:1c:b5:6e:56:7b:74:40: 79:4b:09:0e:95:94:d8:94:79:a2:30:76:30:eb:fa:5d:b9:ea: 44:3b:4c:93:f3:47:66:b4:c2:6d:07:b9:70:9b:16:4e:f4:e2: 50:01:cc:48:4d:0a:83:24:99:16:bc:ab:1e:f4:b4:51:2f:50: 4c:66:bd:d8:e3:d1:e5:30:9b:8a:af:6b:87:79:e3:fd:31:fb: b9:93:f7:04:3d:19:91:c8:42:b1:da:03:e6:d0:ca:92:47:cc: 60:d0:ee:c5:d8:bc:65:06:d3:81:b6:84:f6:34:40:01:c1:c6: 34:9a:5b:27:17:4e:1a:a4:5d:a0:d9:5b:62:2a:39:07:15:29: ab:0f:45:49:d1:a7:83:77:59:68:1a:97:d3:cf:52:e8:ba:ec: fe:92:62:86:bd:7d:5d:ac:6e:e4:5b:9b:e3:f8:17:97:19:8d: 7b:df:d3:22:6f:6a:48:53:ea:54:17:95:1b:af:7b:eb:ae:29: b1:c6:ee:28:50:6f:88:60:20:7d:cd:c5:38:5a:73:51:fa:02: d3:5f:23:82:e8:a7:c3:7d:9c:e4:9c:1f:90:b5:a1:13:3f:40: 40:67:ed:cd -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTIzQTExMC8GA1UEBRMoMEEyNUQxRjMyMUU1MEEwQkNBQzdDMUQwN0YzMTkzOTdB MzkxMDEzRjAeFw0yNjA2MDgwODMxMDhaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMjY3ZGNjLWE1MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeCDJI7Xy/YxTpnyO6CGER224NzVEDkHQFHVsEGEKnTg25IajyLcdx6+Gymdxl VpstSnmTP9JT05lvQ9CKmWrQsd0we5UZhENMtylAMAlCxF4JePUKiXD4+kHs+iSK bq0AKRaSN90Arum3LAS8dj4D7WB5HPDPerjEGkVShOSzBPs9AHFaDzHzIVT9EmOc /+irCmF5zaiYTG9gy4b7NstEQyJFean+HPsbn/6+RPVZHMBnneztkFevzmqQ2Wij nv0ZQEBTm3HNs27SWU5VrYuT6Rj3ge7MhN1BKwGS/vlwIOV3hSvkkR8a8q/MhY66 CBEslD5PhjbKNEUY+uT6QhIBAgMBAAGjggKSMIICjjAdBgNVHQ4EFgQUcDrzdH14 N2AiktSLOS4FGhUJ4/gwHwYDVR0jBBgwFoAUCiXR8yHlCgvKx8HQfzGTl6ORAT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMjNBLzhENTlBMkU0NTgy MzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2S3g4SFFmekdUbDZPUkFU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lYUjh5SGxDZ3ZLeDhIUWZ6R1RsNk9SQVQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTIzQS84RDU5QTJFNDU4MjMxMUYxOEQ3RjJDOUVBNzgzMzc3My82NTczNTM3ODYz MTQxMUYxQTFBQkU1NjA3RDQ3QTg4OC5yb2EwUQYIKwYBBQUHAQcBAf8EQjBAMD4E AgABMDgwDAMEAMsVRQMEA8sVQAMEAcsZzAMEAMsZ4gMEAss3fAMEAMs3ggMEAMs4 egMEAMs4qgMEAMs4sTANBgkqhkiG9w0BAQsFAAOCAQEABoY1bOK70b+QNbFNQwez 0EbjVrkwH1og7bfEc6MctW5We3RAeUsJDpWU2JR5ojB2MOv6XbnqRDtMk/NHZrTC bQe5cJsWTvTiUAHMSE0KgySZFryrHvS0US9QTGa92OPR5TCbiq9rh3nj/TH7uZP3 BD0ZkchCsdoD5tDKkkfMYNDuxdi8ZQbTgbaE9jRAAcHGNJpbJxdOGqRdoNlbYio5 BxUpqw9FSdGng3dZaBqX089S6Lrs/pJihr19Xaxu5Fub4/gXlxmNe9/TIm9qSFPq VBeVG697664pscbuKFBviGAgfc3FOFpzUfoC018jguinw32c5JwfkLWhEz9AQGft zQ== -----END CERTIFICATE-----Generated at Mon Jun 8 22:47:38 2026 by rpki-client