$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/C0C6DAC87F6711F181B5257061A30FBC.roa File: C0C6DAC87F6711F181B5257061A30FBC.roa (raw, json) Hash identifier: OfIiAki8IW4fs926cKPoDrtf9KHpGa7Y2DwLDDbwHEE= Subject key identifier: 14:FB:2B:C4:22:62:22:B4:0F:8A:6A:E6:DB:A5:98:BF:21:43:B8:2E Certificate issuer: /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Certificate serial: 21EC Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/C0C6DAC87F6711F181B5257061A30FBC.roa Signing time: Tue 14 Jul 2026 16:24:35 +0000 ROA not before: Tue 14 Jul 2026 16:24:35 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 64072 IP address blocks: 103.25.120.0/22 maxlen: 24 2404:bc80::/32 maxlen: 34 2404:bc80:9000::/46 maxlen: 48 2404:bc80:9004::/46 maxlen: 48 2404:bc80:9008::/46 maxlen: 48 2404:bc80:900c::/46 maxlen: 48 2404:bc80:9010::/46 maxlen: 48 2404:bc80:9014::/46 maxlen: 48 2404:bc80:9018::/46 maxlen: 48 2404:bc80:901c::/46 maxlen: 48 2404:bc80:9020::/46 maxlen: 48 2404:bc80:9024::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 15:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8684 (0x21ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8534, serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Validity Not Before: Jul 14 16:24:35 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a5662c3-2573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:f9:6b:4c:86:54:68:8d:56:40:92:45:73: 88:c8:f9:9e:b0:76:a6:9a:6d:97:65:2d:a9:91:a6: ff:49:54:2b:a9:e9:7c:af:12:e1:95:e9:93:a5:41: c0:b3:fd:62:b7:be:b3:30:2b:08:93:72:3b:89:18: 85:7a:16:ae:a8:a5:0f:31:ee:69:96:b6:e9:db:b5: 61:67:be:30:d3:35:03:66:a9:27:ea:22:c9:53:9e: 24:50:44:d3:34:08:da:ca:8c:bd:b7:fd:67:71:12: c7:eb:0c:63:87:d1:21:51:de:33:f9:92:d2:19:3b: f4:7e:df:c6:c4:b1:78:2b:0c:93:b4:03:7d:6d:46: 80:a6:07:94:bd:96:7b:50:7c:aa:66:27:fd:e0:b4: aa:75:4e:3a:ec:15:a9:6d:d0:c1:32:92:12:17:ab: 0b:63:ab:36:90:96:0d:b3:1b:ac:88:86:ea:09:32: a5:8e:d9:ea:92:5e:01:78:7c:d9:d1:34:19:49:02: fd:89:1f:1e:bd:45:13:17:39:6f:3a:58:fb:0c:cf: 5e:37:fa:c5:78:93:63:57:fe:98:d5:4b:41:06:0e: 28:54:e6:c6:a5:1d:63:db:fd:ec:c2:83:e3:ef:44: 63:f7:93:dc:2c:f0:8b:f7:f2:c7:bd:bd:09:65:58: ea:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FB:2B:C4:22:62:22:B4:0F:8A:6A:E6:DB:A5:98:BF:21:43:B8:2E X509v3 Authority Key Identifier: keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/C0C6DAC87F6711F181B5257061A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.25.120.0/22 IPv6: 2404:bc80::/32 Signature Algorithm: sha256WithRSAEncryption 16:92:53:2d:8c:25:98:76:21:52:7d:c1:17:7b:78:cc:82:f3: ad:31:70:df:fb:88:fa:b4:05:ba:f6:45:2a:71:5d:36:77:12: 89:80:87:72:24:21:83:2b:e7:af:5d:32:68:ac:86:db:5b:67: f5:a3:d0:23:53:98:a6:02:e3:91:73:b3:46:b8:af:2e:77:e1: 55:cb:ee:3d:d5:1d:06:a0:89:21:62:e8:bc:14:de:11:e9:aa: af:cf:62:71:85:e3:31:9a:bf:fb:98:87:67:dc:a4:14:2b:39: ae:54:16:8d:39:f0:8c:03:7d:5a:b2:39:e2:84:1b:03:dc:9f: 57:62:e5:dc:3d:e2:b3:80:68:72:50:ab:b0:ad:d9:73:e6:f8: 53:df:71:22:ec:17:c6:4c:8e:01:15:02:b6:64:04:15:a4:bd: 50:ea:16:8d:39:04:66:e5:8a:f6:ba:d7:ed:bb:fb:ce:c3:6d: 98:31:1e:82:bb:a6:18:13:43:c4:3f:2c:90:b7:9b:3f:63:43: 30:99:2f:83:0f:3e:cd:18:d3:71:7f:d4:c1:20:fd:63:ec:a4: 24:08:da:ab:5f:b4:3a:13:9c:34:55:53:53:8f:14:a2:11:f4: 1e:cf:23:d2:09:f9:d9:79:69:6e:bd:98:0d:00:5a:bb:24:a3: d9:09:2e:f9 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICIewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1MzQxMTAvBgNVBAUTKEZFMUQ1QkY5MDJGQTkxMkQ3RTBCNUU5ODBDRjkxREJE RkQyQkI2NEYwHhcNMjYwNzE0MTYyNDM1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU2NjJjMy0yNTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIr5a0yGVGiNVkCSRXOIyPmesHammm2XZS2pkab/SVQrqel8rxLhlemTpUHA s/1it76zMCsIk3I7iRiFehauqKUPMe5plrbp27VhZ74w0zUDZqkn6iLJU54kUETT NAjayoy9t/1ncRLH6wxjh9EhUd4z+ZLSGTv0ft/GxLF4KwyTtAN9bUaApgeUvZZ7 UHyqZif94LSqdU467BWpbdDBMpISF6sLY6s2kJYNsxusiIbqCTKljtnqkl4BeHzZ 0TQZSQL9iR8evUUTFzlvOlj7DM9eN/rFeJNjV/6Y1UtBBg4oVObGpR1j2/3swoPj 70Rj95PcLPCL9/LHvb0JZVjq2QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBT7K8Qi YiK0D4pq5tulmL8hQ7guMB8GA1UdIwQYMBaAFP4dW/kC+pEtfgtemAz5Hb39K7ZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODUzNC82RTZBNDYyQ0ZF REQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtTMS1DMTZZRFBrZHZmMHJ0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19oMWItUUw2a1MxLUMxNllEUGtkdmYwcnRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg1MzQvNkU2QTQ2MkNGRUREMTFFNUI0OTA1RDdDQzRGOUFFMDIvQzBDNkRBQzg3 RjY3MTFGMTgxQjUyNTcwNjFBMzBGQkMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZxl4MA0EAgACMAcDBQAkBLyAMA0GCSqGSIb3DQEBCwUAA4IBAQAW klMtjCWYdiFSfcEXe3jMgvOtMXDf+4j6tAW69kUqcV02dxKJgIdyJCGDK+evXTJo rIbbW2f1o9AjU5imAuORc7NGuK8ud+FVy+491R0GoIkhYui8FN4R6aqvz2JxheMx mr/7mIdn3KQUKzmuVBaNOfCMA31asjnihBsD3J9XYuXcPeKzgGhyUKuwrdlz5vhT 33Ei7BfGTI4BFQK2ZAQVpL1Q6haNOQRm5Yr2utftu/vOw22YMR6Cu6YYE0PEPyyQ t5s/Y0MwmS+DDz7NGNNxf9TBIP1j7KQkCNqrX7Q6E5w0VVNTjxSiEfQezyPSCfnZ eWluvZgNAFq7JKPZCS75 -----END CERTIFICATE-----Generated at Sat Jul 18 06:08:40 2026 by rpki-client