$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/D57EF608BC6C11F0894F2331C4F9AE02.roa File: D57EF608BC6C11F0894F2331C4F9AE02.roa (raw, json) Hash identifier: bxmtoo9Mi52T+qWLWPtmIQ+3oo8uoIe54/5a6/+rAEo= Subject key identifier: 59:4C:BF:FA:39:94:1C:0B:42:73:AD:0A:0F:A7:BD:A8:62:CE:BA:69 Certificate issuer: /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E Certificate serial: 0853 Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/D57EF608BC6C11F0894F2331C4F9AE02.roa Signing time: Wed 08 Jul 2026 14:08:24 +0000 ROA not before: Wed 08 Jul 2026 14:08:24 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 139029 IP address blocks: 103.138.170.0/24 maxlen: 24 103.138.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E Validity Not Before: Jul 8 14:08:24 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a4e59d8-b149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:8b:0c:17:1b:35:33:14:3e:6f:34:69:90: 40:de:b6:87:de:4f:d4:36:a5:b6:65:e2:12:61:7a: 5f:e1:36:09:c1:06:3e:c1:63:9a:92:6a:18:5f:3f: bc:e0:d8:c1:4d:90:33:6c:b3:5a:eb:cb:77:85:99: e2:e5:f6:a4:11:9c:c2:68:b5:8e:b2:81:c5:a3:e9: 83:38:f7:9f:24:bd:e0:64:33:0f:e6:50:ef:23:71: 84:be:ab:51:60:82:61:62:50:f4:86:e0:51:08:f2: f1:30:ae:8a:a4:77:bf:6a:e5:ea:06:1e:f8:d5:ab: 4b:aa:a2:01:78:db:ef:2e:16:fb:3d:f2:0a:99:ef: 0c:2c:24:4e:21:58:4c:03:fb:5b:c8:c0:24:87:89: 5f:40:af:b9:e6:06:f3:87:ff:d0:0a:27:9f:1d:c8: f5:44:50:4d:ec:57:8e:26:9b:5b:9b:7c:8a:63:a7: 44:71:ad:ba:66:1c:76:70:39:44:28:75:16:4e:8e: 30:4a:cd:9d:76:6a:2d:1e:e3:3e:61:8d:e4:72:d3: 9b:6f:fe:13:61:8a:54:92:a6:6c:c4:f4:2f:89:54: 90:7e:81:9d:7f:a4:6b:c5:8f:9a:c5:9c:b0:9d:70: ab:cb:24:9c:36:b4:98:bb:f3:7d:4f:3b:f9:6c:7d: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4C:BF:FA:39:94:1C:0B:42:73:AD:0A:0F:A7:BD:A8:62:CE:BA:69 X509v3 Authority Key Identifier: keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/D57EF608BC6C11F0894F2331C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.170.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:cf:2c:ee:de:ef:9e:42:80:08:de:c3:04:03:26:1a:f4:c3: fb:7d:02:10:7c:b7:08:23:8a:99:9f:6b:40:49:86:e7:41:37: 16:59:24:dc:b8:83:4b:75:b4:cd:58:3e:f1:20:79:54:23:48: d5:21:e2:a6:36:6b:eb:b8:aa:24:ac:70:63:56:58:8f:11:aa: 00:e1:20:3a:cb:b8:25:a3:bb:20:58:70:ed:e0:4b:48:09:8b: ef:2e:7c:cf:c6:f4:a8:b8:d7:43:d3:64:2c:2b:44:ed:e2:d7: 99:3a:3a:64:0d:94:8b:73:12:04:fc:e4:8f:8c:78:c4:b1:51: da:aa:c2:0b:34:bc:bb:54:55:15:86:e9:cd:f5:a3:5d:72:32: cb:50:5d:90:e7:31:03:6c:31:78:44:1c:af:e9:c8:13:00:a6: b5:33:7a:0c:a2:6b:4e:f8:c5:ef:e5:2d:03:48:d5:e5:f1:68: cf:a8:27:e3:6a:94:ce:61:88:72:1a:a9:20:93:7e:0b:dc:d3: 74:6f:19:1e:b8:2c:f9:91:5e:2c:58:24:b1:02:27:c9:7e:75: a8:de:a3:9c:68:0a:13:74:82:21:1f:0b:13:dd:ca:1a:ee:07: b6:4a:70:4a:ea:f2:60:7c:35:69:05:43:77:f4:07:01:a0:d4: 5e:4e:56:1d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3NUIxMTAvBgNVBAUTKEUyNjY1RUUzNjJFNUNDNThGN0Q2N0Y0QTZCNzYyMUFB NDYwQkQzOEUwHhcNMjYwNzA4MTQwODI0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTRlNTlkOC1iMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxOLDBcbNTMUPm80aZBA3raH3k/UNqW2ZeISYXpf4TYJwQY+wWOakmoYXz+8 4NjBTZAzbLNa68t3hZni5fakEZzCaLWOsoHFo+mDOPefJL3gZDMP5lDvI3GEvqtR YIJhYlD0huBRCPLxMK6KpHe/auXqBh741atLqqIBeNvvLhb7PfIKme8MLCROIVhM A/tbyMAkh4lfQK+55gbzh//QCiefHcj1RFBN7FeOJptbm3yKY6dEca26Zhx2cDlE KHUWTo4wSs2ddmotHuM+YY3kctObb/4TYYpUkqZsxPQviVSQfoGdf6RrxY+axZyw nXCryyScNrSYu/N9Tzv5bH3VrQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFlMv/o5 lBwLQnOtCg+nvahizrppMB8GA1UdIwQYMBaAFOJmXuNi5cxY99Z/Smt2IapGC9OO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc1Qi81Njc2OUEzMDFE QTQxMUVCQjQxNjNBNDVDNEY5QUUwMi80bVplNDJMbHpGajMxbjlLYTNZaHFrWUww NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtWmU0MkxsekZqMzFuOUthM1locWtZTDA0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjY3NUIvNTY3NjlBMzAxREE0MTFFQkI0MTYzQTQ1QzRGOUFFMDIvRDU3RUY2MDhC QzZDMTFGMDg5NEYyMzMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ4qqMA0GCSqGSIb3DQEBCwUAA4IBAQB+zyzu3u+eQoAI3sMEAyYa 9MP7fQIQfLcII4qZn2tASYbnQTcWWSTcuINLdbTNWD7xIHlUI0jVIeKmNmvruKok rHBjVliPEaoA4SA6y7glo7sgWHDt4EtICYvvLnzPxvSouNdD02QsK0Tt4teZOjpk DZSLcxIE/OSPjHjEsVHaqsILNLy7VFUVhunN9aNdcjLLUF2Q5zEDbDF4RByv6cgT AKa1M3oMomtO+MXv5S0DSNXl8WjPqCfjapTOYYhyGqkgk34L3NN0bxkeuCz5kV4s WCSxAifJfnWo3qOcaAoTdIIhHwsT3coa7ge2SnBK6vJgfDVpBUN39AcBoNReTlYd -----END CERTIFICATE-----Generated at Fri Jul 24 11:36:37 2026 by rpki-client