$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/C4662D3A5FD311EDAE56DD7FC4F9AE02.roa File: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (raw, json) Hash identifier: 6CI5SC55Jio94/KfoS9G/a4W782wVeKHBLf24nIGCPM= Subject key identifier: 60:61:0D:14:5B:62:33:6F:E9:63:A1:8B:1D:24:F3:AF:28:BD:FD:F9 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 080C Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/C4662D3A5FD311EDAE56DD7FC4F9AE02.roa Signing time: Mon 10 Aug 2026 07:43:31 +0000 ROA not before: Mon 10 Aug 2026 07:43:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10101 IP address blocks: 103.42.208.0/22 maxlen: 22 202.152.64.0/19 maxlen: 19 202.152.64.0/24 maxlen: 24 202.152.65.0/24 maxlen: 24 202.152.66.0/24 maxlen: 24 202.152.67.0/24 maxlen: 24 202.152.68.0/24 maxlen: 24 202.152.69.0/24 maxlen: 24 202.152.70.0/24 maxlen: 24 202.152.71.0/24 maxlen: 24 202.152.72.0/24 maxlen: 24 202.152.73.0/24 maxlen: 24 202.152.76.0/22 maxlen: 22 202.152.76.0/24 maxlen: 24 202.152.77.0/24 maxlen: 24 202.152.78.0/24 maxlen: 24 202.152.79.0/24 maxlen: 24 202.152.80.0/24 maxlen: 24 202.152.81.0/24 maxlen: 24 202.152.82.0/24 maxlen: 24 202.152.83.0/24 maxlen: 24 202.152.84.0/24 maxlen: 24 202.152.85.0/24 maxlen: 24 202.152.86.0/24 maxlen: 24 202.152.87.0/24 maxlen: 24 202.152.88.0/22 maxlen: 22 202.152.92.0/24 maxlen: 24 202.152.93.0/24 maxlen: 24 202.152.94.0/24 maxlen: 24 202.152.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Aug 10 07:43:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a798123-92a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5c:5d:ca:23:99:75:04:b6:eb:2d:87:e6:e5: d2:50:e9:44:d4:c8:3b:ad:ab:11:f5:97:ce:07:35: 55:19:19:c9:9d:31:eb:18:cd:90:71:d5:07:20:29: 9e:12:a9:22:9c:da:fa:1f:11:f0:9c:25:83:5b:68: f4:a7:78:88:79:50:7a:2d:bf:5c:5e:fd:03:09:da: 5b:b2:7c:13:8f:f0:9e:d0:05:c4:83:da:ac:12:39: f8:ce:b8:d7:ec:40:cb:d7:4e:12:d9:eb:b7:bb:5f: 8b:99:2e:95:7a:e0:0a:d6:79:ee:52:38:58:45:a0: 3e:64:90:48:1b:30:ea:14:65:a0:8b:aa:3a:cb:82: 06:94:92:00:78:3c:d0:31:0f:1e:55:db:d0:dc:14: 89:46:1a:14:41:0b:8d:90:df:82:02:9d:0d:e3:04: 18:42:64:eb:3c:91:7f:74:67:07:f5:ab:f5:22:b7: 02:b9:6e:49:ef:b4:10:fe:64:1b:cc:7a:86:5d:67: e9:e9:29:fa:d2:e5:12:6f:9e:63:b6:9f:dc:ec:bc: 8e:ef:89:43:88:6a:04:2f:b2:13:5c:ba:55:69:49: 29:65:80:73:4d:5d:ff:31:e2:da:26:0e:a5:63:6c: cf:9a:f3:91:64:bf:49:d7:f3:33:a1:a9:fc:3d:6a: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:61:0D:14:5B:62:33:6F:E9:63:A1:8B:1D:24:F3:AF:28:BD:FD:F9 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/C4662D3A5FD311EDAE56DD7FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.42.208.0/22 202.152.64.0/19 Signature Algorithm: sha256WithRSAEncryption b3:e1:92:d1:66:87:52:1f:20:6e:af:da:64:0a:a6:8f:e4:03: ff:37:ae:c2:6f:d5:34:ca:9b:1f:22:d0:5c:c9:50:86:6a:c6: f9:01:82:38:c4:1d:d3:5d:95:af:0d:8b:68:a2:43:72:4c:6a: 0a:7a:94:67:e7:df:ab:6c:b1:2f:c7:8d:ed:82:02:45:bd:f7: 61:39:1b:53:dd:9f:46:b7:ae:64:57:8a:c8:dc:11:ef:47:b6: 1f:14:e2:24:1e:8f:60:ab:84:10:f5:0c:1e:d2:f7:d4:f4:b0: d2:dd:b4:55:1f:36:09:ef:d6:e0:89:22:db:98:68:67:04:60: f6:92:f9:cc:9d:4e:6d:df:49:ad:ff:bf:d4:8a:00:d2:06:44: 08:a5:e9:39:20:01:29:65:d9:d9:6e:10:a0:1a:40:5c:0b:28: e9:3c:50:0c:df:9b:28:ee:1f:8d:ce:e7:65:d5:e3:3d:dd:f8: 39:0b:41:1e:27:3b:63:6a:78:8e:d1:55:08:cc:bc:bc:b0:c0: 60:40:89:6f:be:b6:d0:19:d9:3b:be:9b:4d:f4:9e:40:4b:1c: 6e:af:dc:d8:36:cc:a1:93:44:29:aa:63:32:1d:23:bf:d4:ba: d0:00:df:f5:f0:c1:92:5f:3e:87:7c:df:b2:d1:14:46:63:8f: 89:cb:df:b7 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjYwODEwMDc0MzMxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc5ODEyMy05MmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1xdyiOZdQS26y2H5uXSUOlE1Mg7rasR9ZfOBzVVGRnJnTHrGM2QcdUHICme EqkinNr6HxHwnCWDW2j0p3iIeVB6Lb9cXv0DCdpbsnwTj/Ce0AXEg9qsEjn4zrjX 7EDL104S2eu3u1+LmS6VeuAK1nnuUjhYRaA+ZJBIGzDqFGWgi6o6y4IGlJIAeDzQ MQ8eVdvQ3BSJRhoUQQuNkN+CAp0N4wQYQmTrPJF/dGcH9av1IrcCuW5J77QQ/mQb zHqGXWfp6Sn60uUSb55jtp/c7LyO74lDiGoEL7ITXLpVaUkpZYBzTV3/MeLaJg6l Y2zPmvORZL9J1/Mzoan8PWpPQwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGBhDRRb YjNv6WOhix0k868ovf35MB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhBNDEvNTU0MTQwREU4N0JDMTFFQkIzQzA4MjcyQzRGOUFFMDIvQzQ2NjJEM0E1 RkQzMTFFREFFNTZERDdGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZyrQAwQFyphAMA0GCSqGSIb3DQEBCwUAA4IBAQCz4ZLRZodSHyBu r9pkCqaP5AP/N67Cb9U0ypsfItBcyVCGasb5AYI4xB3TXZWvDYtookNyTGoKepRn 59+rbLEvx43tggJFvfdhORtT3Z9Gt65kV4rI3BHvR7YfFOIkHo9gq4QQ9Qwe0vfU 9LDS3bRVHzYJ79bgiSLbmGhnBGD2kvnMnU5t30mt/7/UigDSBkQIpek5IAEpZdnZ bhCgGkBcCyjpPFAM35so7h+Nzudl1eM93fg5C0EeJztjaniO0VUIzLy8sMBgQIlv vrbQGdk7vptN9J5ASxxur9zYNsyhk0QpqmMyHSO/1LrQAN/18MGSXz6HfN+y0RRG Y4+Jy9+3 -----END CERTIFICATE-----Generated at Sat Aug 22 00:04:20 2026 by rpki-client