$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/98FB9AA812EB11F1974F37D30E3D8C67.roa File: 98FB9AA812EB11F1974F37D30E3D8C67.roa (raw, json) Hash identifier: +43EWcQPQlSm8/TwDF0BrjdnQ7PM32bqPDOdiMbEwwI= Subject key identifier: 78:79:D1:DB:16:63:72:6F:5D:6D:F7:3B:2B:CA:B9:41:F7:0D:A4:D9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 149D Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/98FB9AA812EB11F1974F37D30E3D8C67.roa Signing time: Tue 30 Jun 2026 17:21:22 +0000 ROA not before: Tue 30 Jun 2026 17:21:22 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 215748 IP address blocks: 103.116.45.0/24 maxlen: 24 103.129.196.0/24 maxlen: 24 103.129.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5277 (0x149d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Jun 30 17:21:22 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a43fb12-0d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:bd:dc:82:80:f6:37:b4:3c:e5:f3:14:3d: c8:c5:37:04:37:4d:8d:48:4a:e3:71:11:6b:4a:14: 12:d5:fe:ca:35:5b:bb:e8:f7:33:68:d3:eb:44:9e: fa:5a:29:7a:7c:80:47:41:c2:00:63:84:a6:21:36: fb:4e:a6:d4:2e:3b:5c:fb:19:a1:69:92:cf:d3:e0: ac:b4:cc:58:aa:92:cf:97:c2:24:8f:31:ea:b4:ff: 35:ce:34:46:12:69:ad:e6:75:37:65:cf:7f:9b:fb: 6e:6f:31:e9:ca:ba:8d:d3:5f:73:30:44:19:4d:8f: 97:fd:75:d7:88:9b:83:95:01:f7:27:d1:e3:21:b1: 9f:c8:96:0b:e1:69:b0:94:4e:f0:a8:31:99:29:0e: 5c:13:2e:78:75:46:a9:de:6f:65:f1:53:83:7b:d1: c0:bb:01:a3:4b:48:b8:81:f7:46:3a:24:06:24:27: 4b:bc:76:c5:02:be:63:92:b5:87:91:e3:59:f5:21: e4:8d:d6:8c:a2:c6:71:0d:b4:6d:81:4a:3d:07:de: 43:4b:67:63:58:37:b3:23:c8:ed:14:50:70:0b:1f: a1:d2:c0:7f:2d:60:3a:05:5d:c3:12:51:63:20:ef: ff:d6:c3:2d:1b:28:45:45:a2:9d:bd:20:5f:8d:63: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:79:D1:DB:16:63:72:6F:5D:6D:F7:3B:2B:CA:B9:41:F7:0D:A4:D9 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/98FB9AA812EB11F1974F37D30E3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.116.45.0/24 103.129.196.0/24 103.129.198.0/24 Signature Algorithm: sha256WithRSAEncryption d7:f7:0b:89:1b:85:20:a4:7c:76:f3:f1:d9:23:79:4d:b6:68: 0d:6a:bd:5e:6f:cf:1a:9f:93:6c:4e:2d:27:d8:6b:a6:3a:f3: 2d:b2:70:6a:b3:4d:35:58:b2:70:17:52:cd:6f:62:20:34:67: 89:fd:cd:93:41:e7:7e:8d:26:ff:95:f7:f3:2d:67:af:76:8f: 8c:50:3b:ef:2d:02:47:17:fa:28:a0:9e:24:82:c4:af:3e:2d: 80:b5:3e:82:46:2d:f9:1e:38:d6:51:c3:b9:39:9d:86:fb:55: 8d:0f:18:74:43:ff:9d:9d:15:6e:67:49:10:32:19:42:c3:9f: 8f:77:2f:49:ff:26:3c:fa:62:5c:01:32:c1:4b:c6:5e:c5:45: a6:9e:c0:61:63:da:dc:21:b3:ab:d4:e3:9f:68:1c:db:f2:2b: d4:9d:b6:b7:b4:83:c6:80:22:2b:94:5e:2a:d3:4b:97:23:c1: f5:dc:e9:01:5b:92:11:55:63:b1:0b:a6:80:6c:e1:c2:d8:8f: 64:01:f9:7b:f1:9d:95:67:45:48:79:e0:81:2c:c5:ca:3f:90: ac:86:e8:b0:1d:20:bc:61:b7:dc:0c:00:10:ca:a7:a2:f6:03: 2f:2d:fe:d7:2f:04:3f:aa:74:ed:4a:f0:28:a5:39:0f:e7:4c: 9e:aa:46:e0 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICFJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjYwNjMwMTcyMTIyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQzZmIxMi0wZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2u93IKA9je0POXzFD3IxTcEN02NSErjcRFrShQS1f7KNVu76PczaNPrRJ76 Wil6fIBHQcIAY4SmITb7TqbULjtc+xmhaZLP0+CstMxYqpLPl8IkjzHqtP81zjRG Emmt5nU3Zc9/m/tubzHpyrqN019zMEQZTY+X/XXXiJuDlQH3J9HjIbGfyJYL4Wmw lE7wqDGZKQ5cEy54dUap3m9l8VODe9HAuwGjS0i4gfdGOiQGJCdLvHbFAr5jkrWH keNZ9SHkjdaMosZxDbRtgUo9B95DS2djWDezI8jtFFBwCx+h0sB/LWA6BV3DElFj IO//1sMtGyhFRaKdvSBfjWPp3QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHh50dsW Y3JvXW33OyvKuUH3DaTZMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBGMEQvMDhFQzJCMENBMzZFMTFFOEI4OTY2NjJCQzRGOUFFMDIvOThGQjlBQTgx MkVCMTFGMTk3NEYzN0QzMEUzRDhDNjcucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ3QtAwQAZ4HEAwQAZ4HGMA0GCSqGSIb3DQEBCwUAA4IBAQDX9wuJ G4UgpHx28/HZI3lNtmgNar1eb88an5NsTi0n2GumOvMtsnBqs001WLJwF1LNb2Ig NGeJ/c2TQed+jSb/lffzLWevdo+MUDvvLQJHF/oooJ4kgsSvPi2AtT6CRi35HjjW UcO5OZ2G+1WNDxh0Q/+dnRVuZ0kQMhlCw5+Pdy9J/yY8+mJcATLBS8ZexUWmnsBh Y9rcIbOr1OOfaBzb8ivUnba3tIPGgCIrlF4q00uXI8H13OkBW5IRVWOxC6aAbOHC 2I9kAfl78Z2VZ0VIeeCBLMXKP5CshuiwHSC8YbfcDAAQyqei9gMvLf7XLwQ/qnTt SvAopTkP50yeqkbg -----END CERTIFICATE-----Generated at Fri Jul 24 03:24:13 2026 by rpki-client