$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/9B31D1A6345C11F1B54BE2329F833773.roa File: 9B31D1A6345C11F1B54BE2329F833773.roa (raw, json) Hash identifier: jMikS9RGpUmqgmd/SaqqBD3rRwu2SOtrAx+BMNj4gVA= Subject key identifier: 89:DA:5F:C8:1C:E4:A6:82:E0:FA:83:2A:A5:EE:8B:A9:22:EC:9D:20 Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 0701 Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/9B31D1A6345C11F1B54BE2329F833773.roa Signing time: Sun 21 Jun 2026 23:15:44 +0000 ROA not before: Sun 21 Jun 2026 23:15:44 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 35916 IP address blocks: 45.125.126.0/24 maxlen: 24 103.7.136.0/22 maxlen: 24 103.11.76.0/22 maxlen: 24 103.194.5.0/24 maxlen: 24 103.194.6.0/24 maxlen: 24 103.194.7.0/24 maxlen: 24 103.232.92.0/22 maxlen: 24 103.233.74.0/23 maxlen: 24 113.20.0.0/20 maxlen: 24 117.55.224.0/20 maxlen: 24 163.47.40.0/22 maxlen: 24 163.47.132.0/22 maxlen: 24 182.255.80.0/20 maxlen: 24 202.93.4.0/23 maxlen: 24 203.24.88.0/23 maxlen: 24 203.31.198.0/23 maxlen: 24 203.88.112.0/21 maxlen: 24 203.88.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: Jun 21 23:15:44 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a3870a0-967e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ea:27:07:43:fb:28:84:2d:bb:f5:dc:e8:a0: b9:c2:81:ac:1c:80:72:cf:49:3f:1c:a2:c6:14:9f: 4e:8e:78:64:84:ba:32:a6:df:bd:99:dc:0a:01:a5: 5e:53:bc:dd:ed:0c:a6:2a:99:34:16:40:33:b7:ad: 8d:a5:5c:10:44:7b:98:21:69:a1:1c:ca:ce:83:2d: c5:6f:59:d9:a2:2a:ce:91:84:0f:95:f3:0b:ab:f8: 9d:be:ba:ed:60:35:6d:eb:be:40:f8:b3:f1:97:48: 01:3f:aa:46:98:7a:be:ff:7a:99:26:94:fc:59:5c: 9c:bc:af:f6:86:b2:d6:e3:02:50:ed:74:b0:1b:91: 47:d9:26:ed:e0:58:de:1e:be:b6:6b:e2:49:76:5e: e2:ce:23:e3:7e:f6:aa:4f:c0:5e:13:5b:1c:ee:57: ae:ca:f2:6f:b0:98:2a:f3:44:29:b6:1f:72:71:c9: 69:78:96:bb:17:8b:05:19:90:12:3c:34:a6:50:35: 2d:6a:b7:1c:18:77:ee:22:a3:50:56:7f:13:66:f9: 64:94:85:1d:f9:7b:41:d8:65:98:21:34:46:52:f6: 64:ce:da:95:95:ed:60:96:e7:7c:0a:ec:3a:44:c5: aa:a5:a6:f4:3a:da:1a:a4:2b:7e:11:fe:be:ae:64: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DA:5F:C8:1C:E4:A6:82:E0:FA:83:2A:A5:EE:8B:A9:22:EC:9D:20 X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/9B31D1A6345C11F1B54BE2329F833773.roa sbgp-ipAddrBlock: critical IPv4: 45.125.126.0/24 103.7.136.0/22 103.11.76.0/22 103.194.5.0-103.194.7.255 103.232.92.0/22 103.233.74.0/23 113.20.0.0/20 117.55.224.0/20 163.47.40.0/22 163.47.132.0/22 182.255.80.0/20 202.93.4.0/23 203.24.88.0/23 203.31.198.0/23 203.88.112.0/20 Signature Algorithm: sha256WithRSAEncryption b0:7f:7e:0c:dd:5a:f3:66:21:b6:db:5b:92:22:bc:7c:33:8c: 66:75:78:10:13:b0:63:75:2c:2a:df:97:a9:a0:eb:82:85:78: a0:24:84:af:41:8f:30:b5:dd:d9:a3:aa:3f:53:0a:78:3a:4a: c3:66:d1:b3:20:53:36:bd:bb:6e:3e:3a:ef:70:64:08:88:fd: 11:f0:84:17:89:e7:03:25:3b:be:fe:48:56:52:a9:c4:90:18: d5:70:7d:95:17:a1:96:99:a1:d8:4c:a8:b8:7b:68:ef:d2:b5: 58:84:94:cb:1c:ef:63:1c:b9:a0:e4:a5:db:78:ac:20:e5:95: ef:97:39:5e:8c:af:51:87:76:d9:f2:a7:5d:cd:33:56:21:8f: 8d:6e:44:26:8a:88:04:c7:29:38:42:a9:b7:83:72:57:cf:bd: e6:5a:3f:21:9c:74:2e:8a:e6:31:1d:96:52:28:20:f5:ae:03: 2d:a6:61:80:c6:b5:04:7f:33:ff:01:e6:4e:f3:56:0e:7e:27: 4d:80:1a:d5:40:5b:90:8f:47:10:e8:77:c1:ab:f5:21:41:51: 7f:16:eb:3e:e9:65:69:af:0c:dc:22:05:1a:78:cd:38:85:89: d6:ad:d1:b8:20:76:a3:7f:16:6a:61:d1:ec:43:2b:7a:d1:cc: c1:e6:2b:58 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjYwNjIxMjMxNTQ0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM4NzBhMC05NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+onB0P7KIQtu/Xc6KC5woGsHIByz0k/HKLGFJ9OjnhkhLoypt+9mdwKAaVe U7zd7QymKpk0FkAzt62NpVwQRHuYIWmhHMrOgy3Fb1nZoirOkYQPlfMLq/idvrrt YDVt675A+LPxl0gBP6pGmHq+/3qZJpT8WVycvK/2hrLW4wJQ7XSwG5FH2Sbt4Fje Hr62a+JJdl7iziPjfvaqT8BeE1sc7leuyvJvsJgq80Qpth9ycclpeJa7F4sFGZAS PDSmUDUtarccGHfuIqNQVn8TZvlklIUd+XtB2GWYITRGUvZkztqVle1glud8Cuw6 RMWqpab0OtoapCt+Ef6+rmSTzQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFInaX8gc 5KaC4PqDKqXui6ki7J0gMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQzRjMvQjI1NDQ4MUFDQTM0MTFFQjhDOTBEOTQxQzRGOUFFMDIvOUIzMUQxQTYz NDVDMTFGMUI1NEJFMjMyOUY4MzM3NzMucm9hMHsGCCsGAQUFBwEHAQH/BGwwajBo BAIAATBiAwQALX1+AwQCZweIAwQCZwtMMAwDBABnwgUDBANnwgADBAJn6FwDBAFn 6UoDBARxFAADBAR1N+ADBAKjLygDBAKjL4QDBAS2/1ADBAHKXQQDBAHLGFgDBAHL H8YDBATLWHAwDQYJKoZIhvcNAQELBQADggEBALB/fgzdWvNmIbbbW5IivHwzjGZ1 eBATsGN1LCrfl6mg64KFeKAkhK9BjzC13dmjqj9TCng6SsNm0bMgUza9u24+Ou9w ZAiI/RHwhBeJ5wMlO77+SFZSqcSQGNVwfZUXoZaZodhMqLh7aO/StViElMsc72Mc uaDkpdt4rCDlle+XOV6Mr1GHdtnyp13NM1Yhj41uRCaKiATHKThCqbeDclfPveZa PyGcdC6K5jEdllIoIPWuAy2mYYDGtQR/M/8B5k7zVg5+J02AGtVAW5CPRxDod8Gr 9SFBUX8W6z7pZWmvDNwiBRp4zTiFidat0bggdqN/Fmph0exDK3rRzMHmK1g= -----END CERTIFICATE-----Generated at Fri Jul 24 09:34:20 2026 by rpki-client