$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DFBF8CDC6AF911F08AB48F35C4F9AE02.roa File: DFBF8CDC6AF911F08AB48F35C4F9AE02.roa (raw, json) Hash identifier: HqpWvOqH1rT1tI76V+VGFSF3BD9o+eyoT9fpq42OKAs= Subject key identifier: A6:2C:BB:24:F4:A6:A9:2A:8F:59:5F:AF:F4:A4:47:E5:75:EE:F1:DB Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 07A5 Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DFBF8CDC6AF911F08AB48F35C4F9AE02.roa Signing time: Tue 28 Jul 2026 22:44:06 +0000 ROA not before: Tue 28 Jul 2026 22:44:06 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 135377 IP address blocks: 36.255.220.0/24 maxlen: 24 36.255.221.0/24 maxlen: 24 36.255.222.0/24 maxlen: 24 36.255.223.0/24 maxlen: 24 103.14.33.0/24 maxlen: 24 103.14.34.0/24 maxlen: 24 103.14.35.0/24 maxlen: 24 103.72.144.0/24 maxlen: 24 103.72.145.0/24 maxlen: 24 103.72.146.0/24 maxlen: 24 103.72.147.0/24 maxlen: 24 103.210.20.0/24 maxlen: 24 103.210.21.0/24 maxlen: 24 103.210.22.0/24 maxlen: 24 103.210.23.0/24 maxlen: 24 122.10.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Jul 28 22:44:06 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6930b6-2925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:11:4b:6e:ac:cc:b6:c3:40:dd:cc:e2:00: 54:76:18:8a:4e:7d:71:5f:01:b4:aa:10:a8:26:d3: 56:b5:01:24:6d:da:2d:81:e1:12:1c:1c:54:e7:dd: 76:9d:89:7b:c6:d5:2a:12:ad:53:76:d3:b5:a5:0d: 59:75:87:d2:48:64:ba:6a:5b:b9:fa:5d:e5:06:0b: 69:b7:b3:75:24:d6:6f:11:17:b0:ec:6f:f9:53:a7: ed:eb:99:77:cd:88:c3:a7:30:30:0f:9a:8e:d8:fc: c4:f7:cf:44:af:77:1f:f4:9f:4a:22:b2:11:41:85: c2:8d:d4:60:ea:70:7a:cb:0f:5e:dc:12:00:1d:75: a9:7e:19:30:77:4f:7f:04:ad:a2:f2:a8:6a:91:1a: e6:68:77:90:ff:48:54:8f:f8:cc:f0:65:1e:50:e7: 25:4d:1d:5c:54:a9:6a:ae:89:6f:d6:20:42:28:ca: a3:df:96:42:7b:fb:ea:44:e0:f7:b7:bd:d9:e2:22: 2b:45:8e:c1:75:c2:cd:07:75:1c:df:28:a8:dd:7c: bf:d6:8a:31:31:fa:a2:9e:99:fa:c1:29:13:db:13: 36:58:51:f4:81:64:29:5f:1c:e9:ab:ee:11:9d:7f: e3:25:9f:f0:44:41:b9:0d:41:e6:df:f2:c6:1b:8a: dd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2C:BB:24:F4:A6:A9:2A:8F:59:5F:AF:F4:A4:47:E5:75:EE:F1:DB X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DFBF8CDC6AF911F08AB48F35C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.220.0/22 103.14.33.0-103.14.35.255 103.72.144.0/22 103.210.20.0/22 122.10.161.0/24 Signature Algorithm: sha256WithRSAEncryption 92:13:ca:a6:36:39:f6:b0:6d:01:89:81:b7:45:14:83:15:af: e0:53:51:1b:4c:70:9a:31:1c:5b:e6:9c:e4:07:84:fb:5d:7c: be:8d:20:ea:9a:62:0d:7e:82:63:0c:c7:2f:7d:d1:24:a3:5a: 63:a8:71:51:0d:3b:44:42:7b:c6:bc:d1:2f:fe:06:4b:b3:42: ab:f9:92:c9:0a:3e:05:ac:7e:4c:6d:8f:5f:f4:eb:24:c8:aa: cb:50:75:d6:a2:2b:a1:09:90:a3:b1:ea:15:82:6a:70:41:55: d5:a5:55:de:19:31:42:6a:23:39:fb:b0:67:e4:9a:8a:8c:c7: c2:ce:89:31:60:f8:53:30:e6:ab:cb:69:c9:4c:53:64:80:c0: 9c:d9:3f:03:d8:d4:e7:26:3a:ec:ef:d8:15:75:a2:77:b9:ff: 64:86:bd:ca:c9:5d:a6:20:2f:ab:d9:46:d8:09:b8:49:20:62: c9:a8:c5:d7:95:6a:20:00:ab:ad:8c:5b:3c:66:62:67:00:a2: e9:0f:08:4e:02:dd:39:ba:c4:71:39:bc:50:99:24:98:60:bb: 89:47:89:72:97:64:8f:49:4e:9f:ac:ab:33:cb:4d:bf:42:fd: 22:20:54:14:78:fe:e6:f6:a3:f3:2e:90:93:a4:df:d9:dc:53: 1d:a3:22:f9 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjYwNzI4MjI0NDA2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MzBiNi0yOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlO8RS26szLbDQN3M4gBUdhiKTn1xXwG0qhCoJtNWtQEkbdotgeESHBxU5912 nYl7xtUqEq1TdtO1pQ1ZdYfSSGS6alu5+l3lBgtpt7N1JNZvERew7G/5U6ft65l3 zYjDpzAwD5qO2PzE989Er3cf9J9KIrIRQYXCjdRg6nB6yw9e3BIAHXWpfhkwd09/ BK2i8qhqkRrmaHeQ/0hUj/jM8GUeUOclTR1cVKlqrolv1iBCKMqj35ZCe/vqROD3 t73Z4iIrRY7BdcLNB3Uc3yio3Xy/1ooxMfqinpn6wSkT2xM2WFH0gWQpXxzpq+4R nX/jJZ/wREG5DUHm3/LGG4rdwwIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFKYsuyT0 pqkqj1lfr/SkR+V17vHbMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNTc2NDczN0E3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvREZCRjhDREM2 QUY5MTFGMDhBQjQ4RjM1QzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQCJP/cMAwDBABnDiEDBAJnDiADBAJnSJADBAJn0hQDBAB6CqEwDQYJ KoZIhvcNAQELBQADggEBAJITyqY2OfawbQGJgbdFFIMVr+BTURtMcJoxHFvmnOQH hPtdfL6NIOqaYg1+gmMMxy990SSjWmOocVENO0RCe8a80S/+BkuzQqv5kskKPgWs fkxtj1/06yTIqstQddaiK6EJkKOx6hWCanBBVdWlVd4ZMUJqIzn7sGfkmoqMx8LO iTFg+FMw5qvLaclMU2SAwJzZPwPY1OcmOuzv2BV1one5/2SGvcrJXaYgL6vZRtgJ uEkgYsmoxdeVaiAAq62MWzxmYmcAoukPCE4C3Tm6xHE5vFCZJJhgu4lHiXKXZI9J Tp+sqzPLTb9C/SIgVBR4/ub2o/MukJOk39ncUx2jIvk= -----END CERTIFICATE-----Generated at Sat Sep 5 02:33:25 2026 by rpki-client