$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa File: 2E809260BFC511EBAD79ED25C4F9AE02.roa (raw, json) Hash identifier: 811Z1g54y4Z/UfPbGxGT424xJSU5NgJDVtIxZb4N/e4= Subject key identifier: 94:2A:24:83:0C:35:B5:09:4E:13:2A:49:A8:EE:28:3C:77:E5:D3:4D Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 06B1 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa Signing time: Tue 30 Jun 2026 23:28:31 +0000 ROA not before: Tue 30 Jun 2026 23:28:31 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 135345 IP address blocks: 103.166.248.0/24 maxlen: 24 103.166.249.0/24 maxlen: 24 2407:5dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 23:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1713 (0x6b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: Jun 30 23:28:31 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a44511f-5c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:e6:8e:96:f6:f0:90:11:e1:d8:7c:f4:b7: e9:91:39:cc:c6:fe:35:55:65:bd:8b:ec:eb:45:54: ad:c3:87:3e:a6:50:4c:8b:83:93:28:74:5c:aa:9b: fc:38:9b:e8:7c:01:54:84:23:c1:e3:4d:50:46:93: 94:c3:e8:be:c4:36:bf:56:d3:cc:0c:99:44:1e:ca: fd:05:51:da:31:99:90:52:78:c1:09:08:c9:96:93: ac:85:1b:2a:e9:3f:b6:7d:40:95:69:47:16:25:fc: c8:93:1e:ff:0e:c3:9e:24:8d:f5:65:a7:bc:c8:8c: 66:db:13:07:05:8c:0e:15:85:5f:55:c3:99:8e:bc: 16:8e:1b:52:7a:a7:2f:44:29:82:85:fc:3c:03:0c: 45:03:cf:68:64:65:34:6d:44:3f:d4:03:b6:ad:ac: 18:54:20:16:34:9a:67:c7:18:70:92:d0:61:ff:15: bc:7e:07:be:79:1e:92:28:1e:1b:98:9e:5e:9c:26: 56:37:11:94:ed:3f:4e:97:06:d4:2b:06:ef:73:03: f2:14:8d:ae:e1:9d:b0:3e:a2:75:06:77:f7:e2:78: 40:d4:89:91:91:44:0c:02:08:e8:60:00:60:b6:51: 0e:df:63:aa:79:d5:1a:e0:67:d5:3e:a3:ec:73:e7: f0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2A:24:83:0C:35:B5:09:4E:13:2A:49:A8:EE:28:3C:77:E5:D3:4D X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.166.248.0/23 IPv6: 2407:5dc0::/32 Signature Algorithm: sha256WithRSAEncryption 65:61:95:74:59:f9:0a:81:6f:32:4c:67:f9:d8:8b:dd:3c:03: 65:c9:cd:27:d9:89:40:7b:59:af:c2:26:16:4f:95:3a:43:3f: 46:d5:1d:00:fa:f8:7d:e1:63:d4:17:c8:9c:3b:7c:9a:1f:2a: 1c:72:7d:23:27:a8:eb:46:59:44:c6:d2:b5:a4:01:5e:1d:65: 20:96:cf:78:19:65:29:9a:db:8b:46:67:49:2b:89:40:47:eb: 4a:c7:ca:f2:95:f7:a5:ca:bd:07:0a:03:39:4d:90:64:69:f7: b8:40:c8:ad:f5:82:fd:87:89:9c:43:bb:21:1c:57:09:89:0c: c6:31:ad:85:dc:00:90:06:2b:bf:6a:44:bb:1a:41:cd:36:bb: ce:f8:d8:1d:cb:9a:fe:2d:19:c5:29:1f:d6:d4:f0:6c:be:01: 33:7a:6c:51:10:ea:9d:34:0a:08:ea:8d:f3:99:eb:ef:7d:1b: 17:bd:a1:2a:0b:a6:04:ca:0b:53:4f:70:68:8d:d8:89:3f:38: f1:be:dc:e9:18:d7:06:b2:7a:b2:0a:c0:cc:aa:50:be:8b:5d: 7d:81:a4:f3:05:35:35:92:75:ef:1d:d2:1b:52:69:d7:2b:c5: b1:e5:c3:f9:1b:6c:1f:98:c3:4f:7e:cb:1f:81:c9:79:7c:1a: 14:90:b8:18 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjYwNjMwMjMyODMxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0NTExZi01YzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPnmjpb28JAR4dh89LfpkTnMxv41VWW9i+zrRVStw4c+plBMi4OTKHRcqpv8 OJvofAFUhCPB401QRpOUw+i+xDa/VtPMDJlEHsr9BVHaMZmQUnjBCQjJlpOshRsq 6T+2fUCVaUcWJfzIkx7/DsOeJI31Zae8yIxm2xMHBYwOFYVfVcOZjrwWjhtSeqcv RCmChfw8AwxFA89oZGU0bUQ/1AO2rawYVCAWNJpnxxhwktBh/xW8fge+eR6SKB4b mJ5enCZWNxGU7T9OlwbUKwbvcwPyFI2u4Z2wPqJ1Bnf34nhA1ImRkUQMAgjoYABg tlEO32OqedUa4GfVPqPsc+fw7QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJQqJIMM NbUJThMqSajuKDx35dNNMB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjYwQTcvNEUwMEZFOUFCRDFEMTFFQjlBRDg1RDQ1QzRGOUFFMDIvMkU4MDkyNjBC RkM1MTFFQkFENzlFRDI1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6b4MA0EAgACMAcDBQAkB13AMA0GCSqGSIb3DQEBCwUAA4IBAQBl YZV0WfkKgW8yTGf52IvdPANlyc0n2YlAe1mvwiYWT5U6Qz9G1R0A+vh94WPUF8ic O3yaHyoccn0jJ6jrRllExtK1pAFeHWUgls94GWUpmtuLRmdJK4lAR+tKx8rylfel yr0HCgM5TZBkafe4QMit9YL9h4mcQ7shHFcJiQzGMa2F3ACQBiu/akS7GkHNNrvO +Ngdy5r+LRnFKR/W1PBsvgEzemxREOqdNAoI6o3zmevvfRsXvaEqC6YEygtTT3Bo jdiJPzjxvtzpGNcGsnqyCsDMqlC+i119gaTzBTU1knXvHdIbUmnXK8Wx5cP5G2wf mMNPfssfgcl5fBoUkLgY -----END CERTIFICATE-----Generated at Wed Jul 22 03:04:42 2026 by rpki-client