$ rpki-client -vvf rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/85613B4E8C8411EBB68DD829C4F9AE02.roa File: 85613B4E8C8411EBB68DD829C4F9AE02.roa (raw, json) Hash identifier: 20IQ5k6iGcflni7byHLtSc+KRh5svbsk0T1vVsQKJRo= Subject key identifier: E1:71:50:F7:C0:64:48:8F:00:51:E7:40:53:D6:00:0E:B3:53:8D:C7 Certificate issuer: /CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253 Certificate serial: 071A Authority key identifier: 40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/85613B4E8C8411EBB68DD829C4F9AE02.roa Signing time: Thu 18 Jun 2026 22:26:23 +0000 ROA not before: Thu 18 Jun 2026 22:26:23 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 136733 IP address blocks: 103.94.224.0/24 maxlen: 24 103.94.225.0/24 maxlen: 24 103.94.226.0/24 maxlen: 24 103.94.227.0/24 maxlen: 24 150.107.168.0/24 maxlen: 24 150.107.169.0/24 maxlen: 24 150.107.170.0/24 maxlen: 24 150.107.171.0/24 maxlen: 24 2001:df1:8900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CF44, serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253 Validity Not Before: Jun 18 22:26:23 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a34708f-e498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2d:56:f0:fb:a1:b5:aa:07:77:53:ca:fb:d6: 66:cb:17:73:01:af:40:ee:3a:50:23:e4:8e:8c:59: 1a:ae:a3:93:fa:83:8e:be:3a:97:29:3d:d9:b5:c8: d2:dd:52:91:93:3a:3e:e7:47:54:13:ff:dc:0c:e1: 15:2e:1a:4e:b2:6e:1a:3e:20:73:e5:e0:74:e9:ef: 17:58:ac:71:d4:1b:c0:e9:bb:be:b5:3e:be:c9:16: c0:6e:70:25:9e:ea:0a:bd:c7:80:e9:ea:d8:5c:e5: 41:6f:8b:e3:3a:05:71:60:23:2b:d6:cf:e3:08:70: 8c:6d:da:21:61:fc:a0:9b:be:0a:76:f5:0f:68:75: 0f:24:55:9f:1a:65:54:ee:76:0b:c1:4a:30:1e:5c: 26:29:e8:e9:e8:07:96:3d:1a:cc:6b:f2:92:b9:99: df:1f:b3:2d:06:14:6a:07:04:e8:63:e6:ba:4b:08: 8e:ec:80:db:92:dc:36:cf:b1:2c:9a:39:8d:f3:8a: 59:9c:68:d7:43:7e:8f:ff:36:1f:c5:ce:72:85:06: 91:b1:3f:9a:af:0c:65:46:30:ab:2b:70:78:b7:e5: 72:67:6e:50:1a:65:54:cb:86:99:d8:69:ea:60:68: 18:88:1a:26:21:30:05:5e:dc:8d:19:b9:29:b3:74: 5b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:71:50:F7:C0:64:48:8F:00:51:E7:40:53:D6:00:0E:B3:53:8D:C7 X509v3 Authority Key Identifier: keyid:40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/85613B4E8C8411EBB68DD829C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.94.224.0/22 150.107.168.0/22 IPv6: 2001:df1:8900::/48 Signature Algorithm: sha256WithRSAEncryption b1:9d:4f:19:90:f5:bb:3f:7a:e7:ee:3f:6e:c4:22:08:92:00: 22:7e:17:4b:6b:c1:74:3d:11:27:29:6b:cc:4b:58:75:b3:e1: 52:93:81:b0:52:19:0d:77:14:f2:5b:68:d8:4a:2a:49:30:cb: 60:87:24:7c:f8:4d:f3:0c:0d:8e:d5:81:35:21:2d:ba:ba:25: 4e:50:d2:df:4a:03:f9:bd:a3:a5:82:0e:76:d8:00:c9:10:d1: d1:6d:af:57:b9:af:df:f2:82:80:58:0f:c3:35:12:5d:55:77: 14:09:25:92:44:24:76:c7:b5:06:70:6d:39:c8:d2:82:61:a0: d8:42:9d:3f:6d:b6:58:0c:e5:04:00:c7:f1:ad:cd:29:77:bf: 0b:a4:b9:dd:5d:d5:ba:2f:a1:fd:f9:70:61:df:90:7a:31:50: 59:9f:65:b5:e7:d1:f4:e2:c9:d0:78:a5:f8:43:1a:4e:54:ae: ef:d1:cc:36:e2:3a:6e:37:57:1f:49:3f:00:83:5e:0d:33:ca: 02:cc:b4:28:7b:e6:80:12:82:96:0c:1a:53:99:9a:6d:4c:1a: 13:2b:db:d2:ca:10:9e:90:41:1f:9c:3b:3b:0d:04:cd:52:4e: 52:76:ff:11:3d:53:f6:da:28:6f:5a:41:95:82:c7:32:c0:07: 84:ca:3d:c5 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNGNDQxMTAvBgNVBAUTKDQwREQ2NjJCNkY2RTk3QjM0RDNCNzVBODAwN0RFNTM4 OEQ5MjcyNTMwHhcNMjYwNjE4MjIyNjIzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM0NzA4Zi1lNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4y1W8PuhtaoHd1PK+9ZmyxdzAa9A7jpQI+SOjFkarqOT+oOOvjqXKT3ZtcjS 3VKRkzo+50dUE//cDOEVLhpOsm4aPiBz5eB06e8XWKxx1BvA6bu+tT6+yRbAbnAl nuoKvceA6erYXOVBb4vjOgVxYCMr1s/jCHCMbdohYfygm74KdvUPaHUPJFWfGmVU 7nYLwUowHlwmKejp6AeWPRrMa/KSuZnfH7MtBhRqBwToY+a6SwiO7IDbktw2z7Es mjmN84pZnGjXQ36P/zYfxc5yhQaRsT+arwxlRjCrK3B4t+VyZ25QGmVUy4aZ2Gnq YGgYiBomITAFXtyNGbkps3Rb3wIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFOFxUPfA ZEiPAFHnQFPWAA6zU43HMB8GA1UdIwQYMBaAFEDdZitvbpezTTt1qAB95TiNknJT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0Y0NC82Njc3QkVCNjhD ODMxMUVCODQ5RTYxMjlDNEY5QUUwMi9RTjFtSzI5dWw3Tk5PM1dvQUgzbE9JMlNj bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOMW1LMjl1bDdOTk8zV29BSDNsT0kyU2NsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNGNDQvNjY3N0JFQjY4QzgzMTFFQjg0OUU2MTI5QzRGOUFFMDIvODU2MTNCNEU4 Qzg0MTFFQkI2OEREODI5QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCZ17gAwQClmuoMA8EAgACMAkDBwAgAQ3xiQAwDQYJKoZIhvcNAQEL BQADggEBALGdTxmQ9bs/eufuP27EIgiSACJ+F0trwXQ9EScpa8xLWHWz4VKTgbBS GQ13FPJbaNhKKkkwy2CHJHz4TfMMDY7VgTUhLbq6JU5Q0t9KA/m9o6WCDnbYAMkQ 0dFtr1e5r9/ygoBYD8M1El1VdxQJJZJEJHbHtQZwbTnI0oJhoNhCnT9ttlgM5QQA x/GtzSl3vwukud1d1bovof35cGHfkHoxUFmfZbXn0fTiydB4pfhDGk5Uru/RzDbi Om43Vx9JPwCDXg0zygLMtCh75oASgpYMGlOZmm1MGhMr29LKEJ6QQR+cOzsNBM1S TlJ2/xE9U/baKG9aQZWCxzLAB4TKPcU= -----END CERTIFICATE-----Generated at Fri Jul 24 13:22:07 2026 by rpki-client