$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/63DC5AA6C67611EEB1126C70C4F9AE02.roa File: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (raw, json) Hash identifier: tzLUCAxcW3rpxPK1kY7IUqcMJWiwQOOzumNiMYyBy+Y= Subject key identifier: A4:66:DC:7A:C7:34:F9:7A:14:21:5A:80:A6:26:57:59:0D:CC:C1:61 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 0262 Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/63DC5AA6C67611EEB1126C70C4F9AE02.roa Signing time: Wed 29 Apr 2026 10:39:56 +0000 ROA not before: Wed 29 Apr 2026 10:39:55 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 4851 IP address blocks: 103.74.217.0/24 maxlen: 24 103.74.218.0/23 maxlen: 23 103.77.144.0/22 maxlen: 23 103.194.229.0/24 maxlen: 24 103.206.187.0/24 maxlen: 24 2407:3280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: Apr 29 10:39:55 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69f1dffb-de6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:0e:bc:9c:5b:38:f3:54:a6:db:c5:cd:37: 00:f6:30:72:90:f9:af:e2:19:c8:29:bf:5a:da:a0: 06:14:57:75:b6:67:cc:11:bd:a2:18:8d:a5:4b:41: 09:d8:0f:b1:47:7c:a6:06:56:a6:b8:6c:56:f8:06: 63:a7:43:6a:90:03:8a:21:81:27:73:1f:d0:96:9b: 9f:4a:84:cb:3b:a5:2e:b0:4c:24:2c:99:b5:c6:19: c4:64:1f:14:77:93:ac:5e:d2:8d:3d:86:01:15:74: b7:5c:41:30:aa:da:7a:8a:16:c0:f1:3e:ba:17:19: 3d:3a:b4:45:d1:c2:85:9c:20:4c:e1:15:70:d7:36: 41:fb:58:30:60:c9:9e:ea:ee:72:1f:0d:05:c3:39: 06:9e:89:63:95:c1:57:53:e8:ec:36:8a:f7:b3:0a: ba:74:a5:8e:c4:9b:2b:53:8f:ae:5e:4b:f9:e4:52: 29:95:6c:c1:93:78:07:43:60:f4:5c:3e:07:03:cd: 1b:23:3d:b7:27:40:6b:d8:f0:e6:e2:aa:a9:d9:f4: b6:83:1f:76:a0:2c:53:6a:62:39:28:7d:62:74:dc: 46:65:73:a9:42:ff:50:0a:f4:39:cd:c4:02:78:07: e6:9d:25:78:bc:23:8e:2d:2d:46:70:e3:b2:85:b9: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:66:DC:7A:C7:34:F9:7A:14:21:5A:80:A6:26:57:59:0D:CC:C1:61 X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/63DC5AA6C67611EEB1126C70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.74.217.0-103.74.219.255 103.77.144.0/22 103.194.229.0/24 103.206.187.0/24 IPv6: 2407:3280::/32 Signature Algorithm: sha256WithRSAEncryption a4:bf:96:c3:a7:31:39:36:62:7c:d2:54:0c:46:d8:2b:d1:0b: c6:a7:bc:a9:6f:d8:7c:68:7b:cd:f3:23:82:b6:ae:73:8b:b8: 1f:12:c6:05:81:2a:94:f8:28:04:2f:5c:04:b2:23:21:87:6a: a2:a4:1a:54:30:d3:b0:52:43:dc:e9:cc:be:a4:8f:41:b6:9a: 4e:9b:24:48:a8:66:3a:9d:6a:53:b1:12:7a:1e:48:e4:6d:a3: 34:ef:55:42:2e:38:f7:7e:df:b3:4c:3f:c9:4f:96:62:d6:9c: 30:38:05:fa:2c:f4:98:0e:b7:22:5e:10:3c:c0:bb:89:36:0b: 32:b8:5e:65:0c:c6:8d:91:c6:17:cc:19:d4:38:f7:ce:a8:3c: b3:6c:91:62:f7:c2:a2:ea:dd:cf:04:42:05:72:13:81:a7:ac: 42:cd:a4:8a:79:19:d5:17:0c:8d:a2:b7:eb:53:fd:a6:88:74: 1b:8f:08:53:52:25:5c:77:42:55:13:7c:78:64:f4:e4:ef:ad: 24:4f:72:e4:d0:32:00:b9:8e:8d:aa:6b:21:ac:28:20:cf:f1: f5:2a:99:3c:df:33:ca:09:6a:4d:04:ed:8d:16:6a:2f:26:d9: d9:bf:52:dc:b4:5d:c8:96:92:73:cb:6a:74:38:a5:f2:8c:37: bd:01:6f:ee -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjYwNDI5MTAzOTU1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYxZGZmYi1kZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCQOvJxbOPNUptvFzTcA9jBykPmv4hnIKb9a2qAGFFd1tmfMEb2iGI2lS0EJ 2A+xR3ymBlamuGxW+AZjp0NqkAOKIYEncx/QlpufSoTLO6UusEwkLJm1xhnEZB8U d5OsXtKNPYYBFXS3XEEwqtp6ihbA8T66Fxk9OrRF0cKFnCBM4RVw1zZB+1gwYMme 6u5yHw0FwzkGnoljlcFXU+jsNor3swq6dKWOxJsrU4+uXkv55FIplWzBk3gHQ2D0 XD4HA80bIz23J0Br2PDm4qqp2fS2gx92oCxTamI5KH1idNxGZXOpQv9QCvQ5zcQC eAfmnSV4vCOOLS1GcOOyhblkMQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFKRm3HrH NPl6FCFagKYmV1kNzMFhMB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE4MzYvRjFEQjFENDRGNEZCMTFFRDkzOEY5NDQ3QzRGOUFFMDIvNjNEQzVBQTZD Njc2MTFFRUIxMTI2QzcwQzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAm BAIAATAgMAwDBABnStkDBAJnStgDBAJnTZADBABnwuUDBABnzrswDQQCAAIwBwMF ACQHMoAwDQYJKoZIhvcNAQELBQADggEBAKS/lsOnMTk2YnzSVAxG2CvRC8anvKlv 2Hxoe83zI4K2rnOLuB8SxgWBKpT4KAQvXASyIyGHaqKkGlQw07BSQ9zpzL6kj0G2 mk6bJEioZjqdalOxEnoeSORtozTvVUIuOPd+37NMP8lPlmLWnDA4Bfos9JgOtyJe EDzAu4k2CzK4XmUMxo2RxhfMGdQ4986oPLNskWL3wqLq3c8EQgVyE4GnrELNpIp5 GdUXDI2it+tT/aaIdBuPCFNSJVx3QlUTfHhk9OTvrSRPcuTQMgC5jo2qayGsKCDP 8fUqmTzfM8oJak0E7Y0Wai8m2dm/Uty0XciWknPLanQ4pfKMN70Bb+4= -----END CERTIFICATE-----Generated at Wed May 13 08:44:40 2026 by rpki-client