$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/12702794577711ECB7FD0C6FC4F9AE02.roa File: 12702794577711ECB7FD0C6FC4F9AE02.roa (raw, json) Hash identifier: eFNp4aobXGIYGnDarPOL+A4RcUOAoScq1t8b/UbPq6M= Subject key identifier: 46:C3:45:FF:CD:32:84:F6:0E:0C:06:68:96:B6:90:2F:94:BD:5E:54 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 052C Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/12702794577711ECB7FD0C6FC4F9AE02.roa Signing time: Thu 09 Jul 2026 01:27:04 +0000 ROA not before: Thu 09 Jul 2026 01:27:04 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 18196 IP address blocks: 103.115.21.0/24 maxlen: 24 103.123.27.0/24 maxlen: 24 103.123.36.0/23 maxlen: 23 103.123.36.0/24 maxlen: 24 103.123.37.0/24 maxlen: 24 2001:df5:1700::/48 maxlen: 48 2400:3c20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: Jul 9 01:27:04 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4ef8e8-da6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:1b:b1:d6:93:f3:0c:4c:4b:a9:12:0d:25: 34:99:4a:3e:e7:dd:14:20:5a:68:ba:16:35:14:39: 03:ac:fb:ae:2f:8f:33:36:87:64:b0:fa:33:fc:bd: 89:1a:10:8f:d8:8d:cf:df:16:c8:32:71:73:92:f9: 9e:c3:cb:c7:76:55:1d:af:4b:c9:20:f5:6e:c9:24: a1:2f:d1:b1:5c:7c:18:25:21:48:32:0a:3f:a3:e9: 1e:19:68:b2:56:dc:b8:d1:cb:f9:82:70:ed:bd:2d: 27:2a:b7:db:2c:77:5e:30:5f:60:ee:47:d5:47:c0: dc:4c:e0:41:f5:94:9d:26:7b:2a:42:dd:0c:98:a9: 22:3f:1a:b1:97:88:5c:6f:3b:b9:1f:e3:f2:98:c8: cf:17:87:20:34:a8:03:ee:02:13:9f:a3:da:e2:80: 08:2e:a5:78:88:ed:27:4a:5f:bc:f2:d7:4d:aa:ee: b8:a4:20:d3:8a:6c:7f:d8:61:82:8b:4b:a4:66:da: e3:29:b3:2a:81:bb:f4:bb:74:91:d3:a5:8a:04:1b: 07:85:0e:fa:ce:48:4a:8f:31:7e:0e:f2:3f:d0:a4: 5c:d2:fe:03:ca:c3:5e:a2:36:99:8c:fc:5c:56:84: ea:11:fa:25:46:47:2a:6c:64:67:0f:7d:70:db:0c: 6d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C3:45:FF:CD:32:84:F6:0E:0C:06:68:96:B6:90:2F:94:BD:5E:54 X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/12702794577711ECB7FD0C6FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.21.0/24 103.123.27.0/24 103.123.36.0/23 IPv6: 2001:df5:1700::/48 2400:3c20::/32 Signature Algorithm: sha256WithRSAEncryption 2e:3a:5c:1b:1d:33:cf:4c:c6:5c:52:3d:4a:27:52:e3:3b:f0: 1f:b1:f6:12:97:08:ba:24:0c:40:ee:ad:98:3e:d3:9e:16:4f: 05:1c:a6:57:0e:e9:d0:87:08:4d:88:6c:f7:d4:f7:1a:80:c4: e4:82:29:dc:5e:80:60:8f:04:8f:b7:c2:37:dd:58:7b:a0:ba: ae:79:a2:2b:0c:b1:e1:56:12:01:5b:1e:de:7a:af:9f:ea:7e: 84:dc:72:a4:e2:ee:b2:a3:36:72:9f:e6:ea:34:fa:94:8c:d8: ff:5d:07:02:12:35:cc:f9:91:ec:78:69:22:67:87:c6:ac:2f: a8:82:d0:81:fe:5c:4d:04:60:c0:c5:41:dc:9d:7b:c9:d7:5b: 8b:69:28:03:74:c5:91:0c:f2:56:75:91:fb:6b:bc:60:23:7a: cb:5e:cd:a3:36:97:ec:1a:91:73:e1:5f:be:ec:69:24:22:f3: 67:8f:fe:e0:29:8c:04:6d:cb:8c:b4:cd:75:75:90:9c:d1:03: 9d:d5:7b:ad:7a:24:9e:e6:40:4d:0b:4c:06:d7:05:3c:9c:55: c6:f4:19:81:ca:c5:62:02:56:38:7b:96:b5:88:10:d0:7d:67: 1e:f1:e3:91:d1:94:43:bf:b6:53:51:db:49:3c:08:0a:f8:81: e5:02:b2:52 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjYwNzA5MDEyNzA0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRlZjhlOC1kYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniEbsdaT8wxMS6kSDSU0mUo+590UIFpouhY1FDkDrPuuL48zNodksPoz/L2J GhCP2I3P3xbIMnFzkvmew8vHdlUdr0vJIPVuySShL9GxXHwYJSFIMgo/o+keGWiy Vty40cv5gnDtvS0nKrfbLHdeMF9g7kfVR8DcTOBB9ZSdJnsqQt0MmKkiPxqxl4hc bzu5H+PymMjPF4cgNKgD7gITn6Pa4oAILqV4iO0nSl+88tdNqu64pCDTimx/2GGC i0ukZtrjKbMqgbv0u3SR06WKBBsHhQ76zkhKjzF+DvI/0KRc0v4DysNeojaZjPxc VoTqEfolRkcqbGRnD31w2wxtmwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFEbDRf/N MoT2DgwGaJa2kC+UvV5UMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM5QTkvNTI1NDg2Qjg1NjYyMTFFQ0I4RUM3MzMxQzRGOUFFMDIvMTI3MDI3OTQ1 Nzc3MTFFQ0I3RkQwQzZGQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAY BAIAATASAwQAZ3MVAwQAZ3sbAwQBZ3skMBYEAgACMBADBwAgAQ31FwADBQAkADwg MA0GCSqGSIb3DQEBCwUAA4IBAQAuOlwbHTPPTMZcUj1KJ1LjO/AfsfYSlwi6JAxA 7q2YPtOeFk8FHKZXDunQhwhNiGz31PcagMTkgincXoBgjwSPt8I33Vh7oLqueaIr DLHhVhIBWx7eeq+f6n6E3HKk4u6yozZyn+bqNPqUjNj/XQcCEjXM+ZHseGkiZ4fG rC+ogtCB/lxNBGDAxUHcnXvJ11uLaSgDdMWRDPJWdZH7a7xgI3rLXs2jNpfsGpFz 4V++7GkkIvNnj/7gKYwEbcuMtM11dZCc0QOd1XuteiSe5kBNC0wG1wU8nFXG9BmB ysViAlY4e5a1iBDQfWce8eOR0ZRDv7ZTUdtJPAgK+IHlArJS -----END CERTIFICATE-----Generated at Tue Jul 21 18:17:16 2026 by rpki-client