$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/3D88426C974511E982D6FD1BC4F9AE02.roa File: 3D88426C974511E982D6FD1BC4F9AE02.roa (raw, json) Hash identifier: sV8U/i5WwH4Av3oNKS40QbsIgmPaWLmxx7jFy6MYKac= Subject key identifier: 1F:57:8C:C4:89:E6:70:10:33:89:11:EF:E0:1A:3D:D5:B2:DC:45:39 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0F3B Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/3D88426C974511E982D6FD1BC4F9AE02.roa Signing time: Tue 16 Jun 2026 18:20:45 +0000 ROA not before: Tue 16 Jun 2026 18:20:45 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 139236 IP address blocks: 103.140.64.0/23 maxlen: 24 2001:df0:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 17:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3899 (0xf3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: Jun 16 18:20:45 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3193fd-b19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b1:4d:a0:1f:22:a1:6b:7c:75:1f:76:81:0b: da:2b:62:fa:03:03:12:40:d3:e0:39:89:98:13:3d: ed:65:f3:12:47:4f:42:4d:8f:0e:c1:d1:16:d6:d2: 77:1a:c3:3c:36:de:20:b5:05:73:57:33:fc:af:81: 62:94:58:44:a4:13:15:3a:4f:0e:d2:a1:cb:15:63: 01:e4:d7:e9:e5:26:5a:40:4f:66:ea:82:93:02:51: 57:68:51:c5:c9:c8:2d:73:e2:b8:bb:33:6d:bd:b7: 5f:7e:c2:c7:f6:f0:b6:08:92:d4:e4:ae:51:26:8f: ef:11:42:4f:43:47:ee:3a:1c:ea:cc:a8:48:ed:27: e8:18:1e:fe:c2:f2:5f:2f:09:a4:ae:ba:04:46:0c: a3:72:b6:da:bb:f9:75:06:68:22:b8:cc:c3:29:ff: ee:07:dd:fc:16:e2:a7:d3:af:5d:db:c9:0c:94:91: 12:3a:20:2b:3b:4f:30:a9:eb:f4:66:a0:92:66:19: b7:8e:f7:77:cf:a3:8d:c3:6a:21:03:49:a6:5c:5f: 14:ef:8b:01:c8:76:e8:15:9d:1f:d6:d7:1a:84:d8: 83:f2:46:a8:68:cc:35:60:4b:71:7a:19:64:1d:6f: 10:41:41:a7:22:e0:68:3e:5a:84:7f:fc:a8:0d:2d: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:57:8C:C4:89:E6:70:10:33:89:11:EF:E0:1A:3D:D5:B2:DC:45:39 X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/3D88426C974511E982D6FD1BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.64.0/23 IPv6: 2001:df0:b080::/48 Signature Algorithm: sha256WithRSAEncryption 4f:2d:9a:c0:48:20:90:f6:b0:5a:b9:82:14:b5:87:f4:df:98: 87:a3:30:8d:76:ee:e0:86:b1:f3:c4:19:d7:75:ad:48:54:4c: 2b:00:5c:4a:22:b4:2a:70:6a:47:16:ec:a1:dc:47:41:e7:35: b9:dc:ba:6d:d3:ad:c9:b7:f4:78:77:8b:aa:b7:0d:9f:fd:f0: 99:7d:00:98:5a:fb:16:94:42:43:c8:20:e6:62:2b:01:f9:cf: c0:e4:fa:34:f4:ae:43:ad:15:b7:aa:3b:c5:4b:67:97:d7:5f: 06:a9:0b:b4:8b:11:45:a6:50:26:3d:b4:18:4f:2d:bc:28:88: d9:ec:8c:05:45:23:3b:8a:b4:0d:03:da:f3:1a:a4:fc:32:d3: 59:a4:e7:fc:bf:29:b2:26:68:9e:37:77:3c:b4:3a:c7:24:a7: 70:15:8f:d2:80:72:00:c4:2d:54:2f:9c:64:7b:b4:b5:4d:7e: 9f:3c:b7:c3:7f:00:9d:81:0f:c5:1b:d2:ac:c2:63:46:bc:0e: c6:e2:d9:52:b5:06:6c:08:47:46:57:0f:df:f5:dd:88:09:32: 7d:67:96:fe:a5:0c:4c:ce:28:59:24:82:a9:f9:d3:64:37:de: 3a:2f:b1:b6:60:1b:33:08:cf:76:d8:a1:de:bb:a2:2a:b3:8d: b7:e9:e9:58 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjYwNjE2MTgyMDQ1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMxOTNmZC1iMTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7bFNoB8ioWt8dR92gQvaK2L6AwMSQNPgOYmYEz3tZfMSR09CTY8OwdEW1tJ3 GsM8Nt4gtQVzVzP8r4FilFhEpBMVOk8O0qHLFWMB5Nfp5SZaQE9m6oKTAlFXaFHF ycgtc+K4uzNtvbdffsLH9vC2CJLU5K5RJo/vEUJPQ0fuOhzqzKhI7SfoGB7+wvJf LwmkrroERgyjcrbau/l1BmgiuMzDKf/uB938FuKn069d28kMlJESOiArO08wqev0 ZqCSZhm3jvd3z6ONw2ohA0mmXF8U74sByHboFZ0f1tcahNiD8kaoaMw1YEtxehlk HW8QQUGnIuBoPlqEf/yoDS3f+wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFB9XjMSJ 5nAQM4kR7+AaPdWy3EU5MB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkU2MzcvOUJBRUExM0E5NzQzMTFFOUJGRDhFNTE5QzRGOUFFMDIvM0Q4ODQyNkM5 NzQ1MTFFOTgyRDZGRDFCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4xAMA8EAgACMAkDBwAgAQ3wsIAwDQYJKoZIhvcNAQELBQADggEB AE8tmsBIIJD2sFq5ghS1h/TfmIejMI127uCGsfPEGdd1rUhUTCsAXEoitCpwakcW 7KHcR0HnNbncum3Trcm39Hh3i6q3DZ/98Jl9AJha+xaUQkPIIOZiKwH5z8Dk+jT0 rkOtFbeqO8VLZ5fXXwapC7SLEUWmUCY9tBhPLbwoiNnsjAVFIzuKtA0D2vMapPwy 01mk5/y/KbImaJ43dzy0Osckp3AVj9KAcgDELVQvnGR7tLVNfp88t8N/AJ2BD8Ub 0qzCY0a8Dsbi2VK1BmwIR0ZXD9/13YgJMn1nlv6lDEzOKFkkgqn502Q33jovsbZg GzMIz3bYod67oiqzjbfp6Vg= -----END CERTIFICATE-----Generated at Wed Jun 24 12:28:50 2026 by rpki-client