$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/673C2B68A8BA11F096079D46C4F9AE02.roa File: 673C2B68A8BA11F096079D46C4F9AE02.roa (raw, json) Hash identifier: lnnL+su9O1+tyTc7UZqdIqQQ4ZWtCaqAPlr6TpKkWjo= Subject key identifier: 71:E0:59:A6:90:E1:E0:1E:9B:04:4E:EE:AF:ED:63:F2:78:65:4A:02 Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355 Certificate serial: 0396 Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/673C2B68A8BA11F096079D46C4F9AE02.roa Signing time: Tue 07 Jul 2026 02:27:23 +0000 ROA not before: Tue 07 Jul 2026 02:27:23 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 132098 IP address blocks: 103.28.0.0/22 maxlen: 22 103.28.0.0/24 maxlen: 24 103.28.1.0/24 maxlen: 24 103.28.2.0/24 maxlen: 24 103.28.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355 Validity Not Before: Jul 7 02:27:23 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4c640a-a191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:be:71:1f:22:73:04:79:fb:3a:07:e9:66: 37:0d:04:76:c3:8f:61:9d:e6:de:9f:16:1d:38:14: 0d:ed:d3:ca:e1:a4:0c:dd:5d:c7:2c:c2:c2:8f:d9: 13:ed:d9:69:17:f1:c3:02:49:ed:5c:ec:42:62:78: 79:ad:e0:d8:3a:c2:b0:7f:3c:e5:9d:66:cc:f4:fb: 38:14:c3:21:bd:3d:11:12:7d:f1:01:51:93:15:be: 57:fe:57:02:31:57:94:bf:49:6a:2a:38:ce:b1:77: bb:4d:5b:54:11:70:17:61:9d:5e:f7:42:22:2c:31: c6:e5:8a:57:7f:08:56:3e:00:d4:1a:0e:1a:8e:ff: d3:6a:9d:82:17:0c:93:2a:29:fc:fc:a3:98:ad:fe: 86:9a:32:16:2f:24:5f:cd:c1:ba:ee:45:9f:49:3c: 68:95:cc:55:17:81:9c:9d:72:1d:58:c1:e9:49:75: ab:ea:dc:53:d6:9e:1b:d5:64:24:a1:db:20:3b:a4: ab:99:9c:38:ba:ec:3d:ca:a9:97:23:6c:49:24:c5: c1:1e:84:65:61:8a:3e:af:81:1a:9c:ba:1b:cf:e0: ea:ff:60:93:46:ad:0b:5a:ae:1d:dc:52:b9:ef:32: 43:20:b0:86:9a:37:dc:66:fc:27:69:8f:55:d3:f9: 9a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E0:59:A6:90:E1:E0:1E:9B:04:4E:EE:AF:ED:63:F2:78:65:4A:02 X509v3 Authority Key Identifier: keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/673C2B68A8BA11F096079D46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.28.0.0/22 Signature Algorithm: sha256WithRSAEncryption 29:a2:5c:7f:ca:37:e9:87:9e:c3:73:18:c2:69:2f:e7:8f:54: 98:31:a9:c8:19:84:e8:da:35:93:f6:09:f7:53:e7:4c:f3:b8: 84:84:30:27:b1:17:b8:7a:a2:52:29:3c:1e:05:a2:40:1a:e3: 31:21:d7:60:af:2e:4a:c1:b5:46:45:a6:64:07:f8:64:23:cf: 5a:c9:54:f1:2e:68:96:be:2f:b6:66:19:0e:06:04:79:cc:68: ea:f8:2e:7c:a5:68:fb:90:2a:19:67:e4:53:7b:16:ff:bf:8c: 1f:da:5a:66:e3:69:e0:80:ef:e6:51:06:5f:2e:15:14:e8:2b: 6e:89:90:9f:24:14:7b:50:f8:4d:65:22:11:5a:83:33:53:ce: 6c:91:da:01:40:37:54:e7:96:fb:cc:b5:ec:b9:c2:6e:37:b8: 1e:67:45:57:f8:4a:23:aa:05:1c:24:75:b6:16:07:b1:dc:dd: 5c:a0:41:fc:0d:24:db:6e:4e:79:11:a2:dc:39:a2:85:b0:1f: 1b:f2:74:de:db:f0:dc:77:22:bd:24:bc:1a:4c:6e:b1:0d:11: 68:2d:b8:82:92:2b:54:a6:1e:e6:11:0b:f5:c1:5a:36:57:72: f5:73:d3:da:2c:01:dd:65:e2:63:a5:91:47:8f:10:36:ee:1a: 6a:34:ca:89 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFQjIxMTAvBgNVBAUTKDg2MDNBMEFDQTcyMDRCMEVGRUQ2NERCNzBERTUxQzc1 QkEwMzkzNTUwHhcNMjYwNzA3MDIyNzIzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjNjQwYS1hMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7q+cR8icwR5+zoH6WY3DQR2w49hnebenxYdOBQN7dPK4aQM3V3HLMLCj9kT 7dlpF/HDAkntXOxCYnh5reDYOsKwfzzlnWbM9Ps4FMMhvT0REn3xAVGTFb5X/lcC MVeUv0lqKjjOsXe7TVtUEXAXYZ1e90IiLDHG5YpXfwhWPgDUGg4ajv/Tap2CFwyT Kin8/KOYrf6GmjIWLyRfzcG67kWfSTxolcxVF4GcnXIdWMHpSXWr6txT1p4b1WQk odsgO6SrmZw4uuw9yqmXI2xJJMXBHoRlYYo+r4EanLobz+Dq/2CTRq0LWq4d3FK5 7zJDILCGmjfcZvwnaY9V0/mafQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHHgWaaQ 4eAemwRO7q/tY/J4ZUoCMB8GA1UdIwQYMBaAFIYDoKynIEsO/tZNtw3lHHW6A5NV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVCMi83QUM3NjdERTA2 NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3Ny0xazIzRGVVY2Rib0Rr MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnT2dyS2NnU3c3LTFrMjNEZVVjZGJvRGsxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MThFQjIvN0FDNzY3REUwNjY5MTFFREIwQUU4RTM3QzRGOUFFMDIvNjczQzJCNjhB OEJBMTFGMDk2MDc5RDQ2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxwAMA0GCSqGSIb3DQEBCwUAA4IBAQApolx/yjfph57DcxjCaS/n j1SYManIGYTo2jWT9gn3U+dM87iEhDAnsRe4eqJSKTweBaJAGuMxIddgry5KwbVG RaZkB/hkI89ayVTxLmiWvi+2ZhkOBgR5zGjq+C58pWj7kCoZZ+RTexb/v4wf2lpm 42nggO/mUQZfLhUU6CtuiZCfJBR7UPhNZSIRWoMzU85skdoBQDdU55b7zLXsucJu N7geZ0VX+EojqgUcJHW2Fgex3N1coEH8DSTbbk55EaLcOaKFsB8b8nTe2/DcdyK9 JLwaTG6xDRFoLbiCkitUph7mEQv1wVo2V3L1c9PaLAHdZeJjpZFHjxA27hpqNMqJ -----END CERTIFICATE-----Generated at Thu Jul 23 22:58:48 2026 by rpki-client