$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/5A775F7A7B6811F1AA1BD1A85FA30FBC.roa File: 5A775F7A7B6811F1AA1BD1A85FA30FBC.roa (raw, json) Hash identifier: ojwUPCe0RkTv08DQXptDfXTUMvfz2oNhHNRY4L9yTk8= Subject key identifier: 1F:F8:8B:3B:0C:31:F1:3C:3C:5A:34:E8:F1:F3:3D:11:CE:F3:5B:BC Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 0849 Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/5A775F7A7B6811F1AA1BD1A85FA30FBC.roa Signing time: Thu 09 Jul 2026 07:32:35 +0000 ROA not before: Thu 09 Jul 2026 07:32:35 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139325 IP address blocks: 103.158.158.0/23 maxlen: 23 103.158.158.0/24 maxlen: 24 103.158.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2121 (0x849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Jul 9 07:32:35 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a4f4e93-08ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:3a:b2:78:63:aa:ff:9c:a2:9b:1f:2d:c1: cf:02:54:ee:24:9b:af:70:73:79:f5:9c:1b:c3:d4: e1:97:cd:c2:92:ab:19:52:c2:37:ca:42:7d:97:a8: 4b:63:f5:27:0e:b7:ff:24:16:f6:21:8b:69:34:52: b7:0b:6b:72:df:c3:9e:aa:24:17:25:ae:8e:82:98: 04:56:cf:bf:02:da:0d:ad:54:9c:0a:a4:00:6c:11: 4d:db:60:58:80:82:81:3f:b7:23:df:16:62:e1:08: 18:d7:ca:f3:8f:b8:2f:ca:bf:28:c1:bf:71:dc:22: de:a9:6b:5a:33:0a:96:c8:25:f7:73:42:e0:14:73: f1:c4:a3:c4:ab:20:fb:2e:24:e8:35:b6:ec:d6:58: d4:89:40:fe:71:1d:e5:09:2b:22:9b:18:4f:b1:63: 65:17:ab:dd:51:68:f1:49:b0:ac:a2:4e:63:e5:3e: 72:82:18:4f:38:88:03:0c:02:63:0c:a6:58:32:1f: 67:96:b8:90:09:33:b3:5c:57:fb:a1:9a:db:92:0d: a0:08:b9:5d:6a:92:8a:f1:56:9b:4a:7a:fd:4a:95: 7a:42:b4:2b:32:9e:4f:e4:33:d5:33:9f:7a:f2:cf: 74:4c:26:0c:a8:e3:6f:b2:17:aa:47:7c:91:bd:32: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F8:8B:3B:0C:31:F1:3C:3C:5A:34:E8:F1:F3:3D:11:CE:F3:5B:BC X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/5A775F7A7B6811F1AA1BD1A85FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.158.158.0/23 Signature Algorithm: sha256WithRSAEncryption 62:c5:f1:36:cd:f2:ac:aa:df:99:76:d6:0f:63:1e:a3:6f:ff: 16:b0:52:d3:b5:57:d5:6e:ac:49:41:92:c2:de:9c:4d:c5:8d: a3:5b:65:02:15:03:8f:9d:77:32:73:71:9d:d6:a8:d7:e3:54: 93:22:e3:22:5f:aa:ea:5a:84:37:f7:0b:fc:3f:70:44:d1:b1: f6:bc:73:33:3c:99:33:e9:cc:78:95:bb:cb:9e:6c:b4:4d:c4: b5:2e:19:0c:d2:c3:bf:8f:ba:3d:68:e4:ea:26:51:78:be:00: 32:83:35:a3:44:d4:06:b4:ae:54:80:b6:61:69:7c:c3:4d:d9: c7:ea:2d:15:c5:d6:09:b9:f4:e6:5b:23:fc:07:ea:a8:70:94: 1c:27:df:7e:65:02:8e:0a:a6:ef:40:7c:62:01:48:16:e1:5c: 26:7d:f7:9d:20:84:6a:09:f9:4e:10:c1:34:46:cf:09:01:5d: e8:7f:df:29:08:a4:e9:da:11:da:39:e1:43:27:b9:c1:90:79: 4d:9e:74:8b:17:9b:bf:a9:1b:90:60:03:34:64:31:68:22:3e: 1e:c4:95:a8:91:01:3b:84:c9:fe:4c:2a:92:9a:3b:12:da:43: 32:72:f4:83:4b:57:02:61:14:cb:64:48:6b:31:45:72:19:5d: e7:57:d0:b0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjYwNzA5MDczMjM1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmNGU5My0wOGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhQ6snhjqv+copsfLcHPAlTuJJuvcHN59Zwbw9Thl83CkqsZUsI3ykJ9l6hL Y/UnDrf/JBb2IYtpNFK3C2ty38OeqiQXJa6OgpgEVs+/AtoNrVScCqQAbBFN22BY gIKBP7cj3xZi4QgY18rzj7gvyr8owb9x3CLeqWtaMwqWyCX3c0LgFHPxxKPEqyD7 LiToNbbs1ljUiUD+cR3lCSsimxhPsWNlF6vdUWjxSbCsok5j5T5yghhPOIgDDAJj DKZYMh9nlriQCTOzXFf7oZrbkg2gCLldapKK8VabSnr9SpV6QrQrMp5P5DPVM596 8s90TCYMqONvsheqR3yRvTLEqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB/4izsM MfE8PFo06PHzPRHO81u8MB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQzOEYvQzc1OTBCRDYyNUFFMTFFQjhFRUMyMjBBQzRGOUFFMDIvNUE3NzVGN0E3 QjY4MTFGMUFBMUJEMUE4NUZBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ56eMA0GCSqGSIb3DQEBCwUAA4IBAQBixfE2zfKsqt+ZdtYPYx6j b/8WsFLTtVfVbqxJQZLC3pxNxY2jW2UCFQOPnXcyc3Gd1qjX41STIuMiX6rqWoQ3 9wv8P3BE0bH2vHMzPJkz6cx4lbvLnmy0TcS1LhkM0sO/j7o9aOTqJlF4vgAygzWj RNQGtK5UgLZhaXzDTdnH6i0VxdYJufTmWyP8B+qocJQcJ99+ZQKOCqbvQHxiAUgW 4VwmffedIIRqCflOEME0Rs8JAV3of98pCKTp2hHaOeFDJ7nBkHlNnnSLF5u/qRuQ YAM0ZDFoIj4exJWokQE7hMn+TCqSmjsS2kMycvSDS1cCYRTLZEhrMUVyGV3nV9Cw -----END CERTIFICATE-----Generated at Fri Jul 24 10:25:25 2026 by rpki-client