$ rpki-client -vvf rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/2B21EC2EE4E111E981365C17C4F9AE02.roa File: 2B21EC2EE4E111E981365C17C4F9AE02.roa (raw, json) Hash identifier: +FtX4u1ywl3Za0uOAjmlzNV6TvaK9vCSzZiXDAXrbHI= Subject key identifier: 7D:05:5F:F8:22:5C:39:0C:56:70:FD:2E:28:DE:62:3B:C6:FE:80:01 Certificate issuer: /CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D Certificate serial: 0F27 Authority key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/2B21EC2EE4E111E981365C17C4F9AE02.roa Signing time: Wed 08 Jul 2026 18:18:44 +0000 ROA not before: Wed 08 Jul 2026 18:18:44 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 134356 IP address blocks: 103.140.10.0/23 maxlen: 24 2405:4c40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3879 (0xf27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C743, serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D Validity Not Before: Jul 8 18:18:44 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4e9484-b430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8a:d2:98:3c:a8:84:dd:41:4c:80:36:af:ba: f4:6e:ad:db:f3:b7:78:99:65:b9:c0:61:84:b7:0d: c0:a1:ec:0f:7a:db:49:58:0f:7c:fd:fc:f4:be:7c: 88:66:b2:20:17:f3:27:08:ce:c8:af:26:e8:c9:f8: f6:46:0f:ec:c6:ad:12:e3:8d:4a:84:9b:09:e7:52: ea:15:7c:b4:fc:ca:f1:07:98:0e:fe:8f:b7:cc:32: 31:51:75:ca:9a:13:d5:76:f9:2d:3f:11:4d:43:b6: 5c:54:6b:1a:c6:6a:cc:8f:ff:6c:52:63:5e:d0:be: ac:b7:95:7f:69:66:f6:7c:ca:e7:4b:d9:40:00:6b: 6e:fa:82:cf:08:66:49:73:f8:bb:8d:4e:c9:83:9b: b6:5e:b9:0b:ee:b8:e5:e2:82:30:3f:e2:ae:78:d8: 8f:66:11:1b:f0:a7:fc:52:7e:a7:6a:ea:a9:3c:b4: d1:fd:de:00:8a:89:3c:fc:81:0a:db:b5:91:2e:5a: 60:34:89:d3:70:54:6e:1f:59:a6:72:05:0c:f0:e7: ae:a8:10:6c:33:ec:45:d0:15:a4:d1:52:06:73:ce: e8:7e:af:02:ff:71:32:af:78:08:51:e6:c4:4a:6d: f2:e5:c6:65:19:ac:95:f1:8a:9c:66:69:f7:bf:a6: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:05:5F:F8:22:5C:39:0C:56:70:FD:2E:28:DE:62:3B:C6:FE:80:01 X509v3 Authority Key Identifier: keyid:84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/2B21EC2EE4E111E981365C17C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.10.0/23 IPv6: 2405:4c40::/32 Signature Algorithm: sha256WithRSAEncryption 8d:cf:c1:51:0d:40:c0:52:03:4a:33:47:17:6a:8e:d9:25:0b: 01:00:af:e3:8b:e3:49:05:e0:8d:e5:95:4d:99:92:06:19:af: 3f:6a:92:b8:19:55:da:fb:e3:6a:96:ae:2d:f7:02:44:0f:da: 9e:54:09:7e:7c:e2:e8:8c:b1:63:d8:3c:1a:a3:58:fe:95:d0: 11:6f:77:99:9c:e0:c6:a2:ea:7e:67:02:aa:b6:c8:f4:db:86: 44:7d:70:15:3d:48:c5:40:b3:94:99:3a:e9:8a:b8:62:84:d8: ce:ef:81:37:db:98:0c:5d:5d:92:32:7d:13:35:b2:f1:57:b0: 18:48:08:84:b5:04:e0:00:6b:0c:1e:7e:a0:45:92:be:f7:55: 65:e7:ae:c3:0b:51:dd:98:c1:46:e5:b8:2d:c6:72:e8:1b:fa: 58:3b:ac:c5:2b:47:7a:d9:3e:65:7e:88:b3:d5:1e:d7:c5:07: 56:75:93:f6:64:e1:9f:a8:06:ba:3a:e6:4e:9e:c9:cd:1a:93: b7:0f:0d:6b:54:94:ae:7c:b5:1a:29:fd:2d:0b:8b:ce:10:40: 6c:7e:a7:d7:5b:23:22:b3:e1:ad:69:75:15:23:e2:9d:c4:68: 98:39:bc:ef:c6:19:c0:26:aa:70:8d:f2:15:e9:ab:be:95:bd: 0e:c8:7e:31 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3NDMxMTAvBgNVBAUTKDg0RTRGRkI2OTI3Rjc3RjVDM0YwQTI1MjY4MkY3MURE QjM3N0IxMUQwHhcNMjYwNzA4MTgxODQ0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRlOTQ4NC1iNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YrSmDyohN1BTIA2r7r0bq3b87d4mWW5wGGEtw3AoewPettJWA98/fz0vnyI ZrIgF/MnCM7Iryboyfj2Rg/sxq0S441KhJsJ51LqFXy0/MrxB5gO/o+3zDIxUXXK mhPVdvktPxFNQ7ZcVGsaxmrMj/9sUmNe0L6st5V/aWb2fMrnS9lAAGtu+oLPCGZJ c/i7jU7Jg5u2XrkL7rjl4oIwP+KueNiPZhEb8Kf8Un6nauqpPLTR/d4Aiok8/IEK 27WRLlpgNInTcFRuH1mmcgUM8OeuqBBsM+xF0BWk0VIGc87ofq8C/3Eyr3gIUebE Sm3y5cZlGayV8YqcZmn3v6bzYwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFH0FX/gi XDkMVnD9LijeYjvG/oABMB8GA1UdIwQYMBaAFITk/7aSf3f1w/CiUmgvcd2zd7Ed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc0My9GOEFFMjg4MEEy MUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2RfWEQ4S0pTYUM5eDNiTjNz UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hPVF90cEpfZF9YRDhLSlNhQzl4M2JOM3NSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM3NDMvRjhBRTI4ODBBMjFEMTFFOTgyNDJBRDgxQzRGOUFFMDIvMkIyMUVDMkVF NEUxMTFFOTgxMzY1QzE3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4wKMA0EAgACMAcDBQAkBUxAMA0GCSqGSIb3DQEBCwUAA4IBAQCN z8FRDUDAUgNKM0cXao7ZJQsBAK/ji+NJBeCN5ZVNmZIGGa8/apK4GVXa++Nqlq4t 9wJED9qeVAl+fOLojLFj2Dwao1j+ldARb3eZnODGoup+ZwKqtsj024ZEfXAVPUjF QLOUmTrpirhihNjO74E325gMXV2SMn0TNbLxV7AYSAiEtQTgAGsMHn6gRZK+91Vl 567DC1HdmMFG5bgtxnLoG/pYO6zFK0d62T5lfoiz1R7XxQdWdZP2ZOGfqAa6OuZO nsnNGpO3Dw1rVJSufLUaKf0tC4vOEEBsfqfXWyMis+GtaXUVI+KdxGiYObzvxhnA JqpwjfIV6au+lb0OyH4x -----END CERTIFICATE-----Generated at Fri Jul 24 09:27:16 2026 by rpki-client