$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/208C7D2E066C11EDB31C2239C4F9AE02.roa File: 208C7D2E066C11EDB31C2239C4F9AE02.roa (raw, json) Hash identifier: ++TOpbIz4D1k0QpqFIUl2h1hNZQ4CZfs4q8RLlyTsbo= Subject key identifier: 13:5C:35:8D:8E:CC:2C:FB:90:CB:6A:4A:9C:5E:13:AA:7D:D6:57:AA Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355 Certificate serial: 0397 Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/208C7D2E066C11EDB31C2239C4F9AE02.roa Signing time: Tue 07 Jul 2026 02:27:26 +0000 ROA not before: Tue 07 Jul 2026 02:27:26 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 139285 IP address blocks: 103.28.0.0/22 maxlen: 24 103.140.236.0/23 maxlen: 23 103.140.236.0/24 maxlen: 24 103.140.237.0/24 maxlen: 24 103.148.228.0/23 maxlen: 23 103.148.228.0/24 maxlen: 24 103.148.229.0/24 maxlen: 24 103.227.172.0/22 maxlen: 22 103.227.172.0/23 maxlen: 23 103.227.172.0/24 maxlen: 24 103.227.173.0/24 maxlen: 24 103.227.174.0/23 maxlen: 23 103.227.174.0/24 maxlen: 24 103.227.175.0/24 maxlen: 24 114.134.190.0/23 maxlen: 23 114.134.190.0/24 maxlen: 24 114.134.191.0/24 maxlen: 24 116.214.26.0/23 maxlen: 23 116.214.26.0/24 maxlen: 24 116.214.27.0/24 maxlen: 24 116.214.28.0/23 maxlen: 23 116.214.28.0/24 maxlen: 24 116.214.29.0/24 maxlen: 24 2400:96a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355 Validity Not Before: Jul 7 02:27:26 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4c640d-c3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:26:14:02:57:d2:9d:67:3b:71:f9:2e:94: 81:89:23:4d:ac:97:af:fd:f9:6c:b7:52:30:ce:7d: 97:6a:a4:ed:04:21:1c:b9:8e:95:97:35:7a:e4:62: 23:40:ed:9e:42:3e:c9:0a:74:e4:b0:b4:d5:4b:cd: 2e:54:ac:95:4a:c5:44:a2:ce:50:fd:f8:53:cb:4e: 2c:42:11:e9:52:ce:f3:8f:f1:b7:57:35:25:da:db: 81:bc:23:b2:5e:ac:c4:95:a2:85:80:0a:56:87:d0: 70:7f:c9:7d:ab:5d:50:d6:be:59:cd:2d:62:2d:a5: c4:bc:44:dc:18:9e:7e:a4:58:1f:bb:60:38:79:ce: 42:92:7e:fe:26:8f:58:b4:47:c5:39:6a:c2:2c:ac: 4c:a5:82:33:50:e1:93:65:3b:5f:89:22:5c:05:55: 29:7d:0c:25:7b:c9:81:24:04:17:4f:e8:3e:eb:e4: 04:6e:f3:45:96:cc:8d:ab:52:f4:45:81:bb:51:88: 25:6a:c3:43:17:4d:32:25:cd:4f:47:9e:b6:02:a7: da:0a:0d:fb:e0:21:7f:29:90:ad:26:08:4b:d7:84: 28:ef:b1:63:43:20:e3:5c:6b:a5:2f:a6:35:b1:2b: c6:76:ee:c2:45:f9:ad:7a:dc:00:a8:df:4b:af:67: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5C:35:8D:8E:CC:2C:FB:90:CB:6A:4A:9C:5E:13:AA:7D:D6:57:AA X509v3 Authority Key Identifier: keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/208C7D2E066C11EDB31C2239C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.28.0.0/22 103.140.236.0/23 103.148.228.0/23 103.227.172.0/22 114.134.190.0/23 116.214.26.0-116.214.29.255 IPv6: 2400:96a0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:3a:ef:53:97:bd:c2:89:d4:6c:80:d7:78:e1:ef:b2:e9:6c: da:1c:71:0d:46:45:d6:d6:4d:ef:bb:83:76:cc:05:b8:a8:ca: 34:27:4a:2f:41:7c:80:6e:ba:24:97:89:36:f6:38:68:6c:c5: 71:81:ff:0b:ca:55:3f:b9:2c:46:7e:dd:39:d6:b2:c7:0c:34: e1:48:10:ab:23:bb:d2:0d:2e:13:a8:26:ab:a3:ec:09:7f:4b: bc:aa:11:35:69:42:74:89:c8:79:28:54:17:4b:db:c0:00:0e: 05:dc:b2:b9:44:a2:f3:55:29:a7:72:53:d0:ff:fb:bd:58:dc: b9:d3:4b:0a:06:97:d0:43:67:00:2c:0a:86:89:d7:9c:fb:a6: bc:cc:3e:b2:fd:ed:a2:bb:c1:fd:b9:8c:a0:29:1f:ef:b6:1e: 79:76:b2:ab:45:b2:35:eb:1c:be:33:34:2c:cb:63:dd:1d:7f: 52:09:b9:f6:36:a5:8e:82:b2:83:b8:a1:01:0e:fe:5b:16:f2: fa:e5:17:6e:31:03:65:8e:dc:68:a0:de:86:68:46:fc:88:fe: 13:2d:40:39:5a:ff:34:a7:44:b6:34:e3:69:5d:11:b9:08:26: a6:f8:d3:f7:13:5e:28:39:9a:37:37:87:0d:6a:43:55:76:3a: cd:df:dc:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFQjIxMTAvBgNVBAUTKDg2MDNBMEFDQTcyMDRCMEVGRUQ2NERCNzBERTUxQzc1 QkEwMzkzNTUwHhcNMjYwNzA3MDIyNzI2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjNjQwZC1jM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiomFAJX0p1nO3H5LpSBiSNNrJev/flst1Iwzn2XaqTtBCEcuY6VlzV65GIj QO2eQj7JCnTksLTVS80uVKyVSsVEos5Q/fhTy04sQhHpUs7zj/G3VzUl2tuBvCOy XqzElaKFgApWh9Bwf8l9q11Q1r5ZzS1iLaXEvETcGJ5+pFgfu2A4ec5Ckn7+Jo9Y tEfFOWrCLKxMpYIzUOGTZTtfiSJcBVUpfQwle8mBJAQXT+g+6+QEbvNFlsyNq1L0 RYG7UYglasNDF00yJc1PR562AqfaCg374CF/KZCtJghL14Qo77FjQyDjXGulL6Y1 sSvGdu7CRfmtetwAqN9Lr2evcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBNcNY2O zCz7kMtqSpxeE6p91leqMB8GA1UdIwQYMBaAFIYDoKynIEsO/tZNtw3lHHW6A5NV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVCMi83QUM3NjdERTA2 NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3Ny0xazIzRGVVY2Rib0Rr MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnT2dyS2NnU3c3LTFrMjNEZVVjZGJvRGsxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MThFQjIvN0FDNzY3REUwNjY5MTFFREIwQUU4RTM3QzRGOUFFMDIvMjA4QzdEMkUw NjZDMTFFREIzMUMyMjM5QzRGOUFFMDIucm9hMFQGCCsGAQUFBwEHAQH/BEUwQzAy BAIAATAsAwQCZxwAAwQBZ4zsAwQBZ5TkAwQCZ+OsAwQBcoa+MAwDBAF01hoDBAF0 1hwwDQQCAAIwBwMFACQAlqAwDQYJKoZIhvcNAQELBQADggEBACo671OXvcKJ1GyA 13jh77LpbNoccQ1GRdbWTe+7g3bMBbioyjQnSi9BfIBuuiSXiTb2OGhsxXGB/wvK VT+5LEZ+3TnWsscMNOFIEKsju9INLhOoJquj7Al/S7yqETVpQnSJyHkoVBdL28AA DgXcsrlEovNVKadyU9D/+71Y3LnTSwoGl9BDZwAsCoaJ15z7przMPrL97aK7wf25 jKApH++2Hnl2sqtFsjXrHL4zNCzLY90df1IJufY2pY6CsoO4oQEO/lsW8vrlF24x A2WO3Gig3oZoRvyI/hMtQDla/zSnRLY042ldEbkIJqb40/cTXig5mjc3hw1qQ1V2 Os3f3Ow= -----END CERTIFICATE-----Generated at Fri Jul 24 00:27:59 2026 by rpki-client