$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/AA99F49CFC3711EFA9688687C4F9AE02.roa File: AA99F49CFC3711EFA9688687C4F9AE02.roa (raw, json) Hash identifier: gfOD6URsp7SaHqbX7i3uTtfgx5nJhXl7AmIXZ2sSe24= Subject key identifier: 42:C7:8C:38:AF:A7:57:E9:ED:EE:68:5E:4F:EB:95:DD:5A:77:88:FA Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 0106 Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/AA99F49CFC3711EFA9688687C4F9AE02.roa Signing time: Tue 21 Jul 2026 08:33:45 +0000 ROA not before: Tue 21 Jul 2026 08:33:45 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 135027 IP address blocks: 103.219.62.0/23 maxlen: 24 103.251.134.0/24 maxlen: 24 103.251.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: Jul 21 08:33:45 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a5f2ee9-6444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:00:05:39:1b:16:d6:71:56:71:a1:17:1d: 33:74:2f:96:0d:a7:dd:65:eb:46:4a:6d:d5:be:bd: 54:c8:d3:be:6d:35:18:f1:9f:92:80:fe:06:fc:88: a4:ca:ee:d5:46:50:06:8c:53:84:3e:1e:76:c5:df: 23:69:d8:19:7a:d6:f0:1b:71:a9:5a:0c:4a:cf:fe: c8:63:c8:fe:bd:8c:b0:69:23:bb:07:18:5c:a5:d9: 60:0d:49:12:1d:4a:4a:fc:e9:53:71:03:b3:2f:df: 76:2e:da:02:8f:e0:32:ba:96:10:51:0d:1f:df:8d: e6:77:30:74:a4:7b:0f:62:e9:6e:13:9e:e7:0d:36: 3c:65:22:ae:e7:5d:4a:aa:f1:79:cd:e9:31:f6:cc: 7e:bc:91:c5:ff:8d:18:d8:c1:c7:02:45:76:df:92: 8f:32:ee:ab:f7:6e:f8:14:fa:13:4a:ce:0b:09:98: 8d:f7:58:84:92:b7:8f:71:a0:74:4e:a8:90:34:04: 65:6b:40:1c:dc:e0:11:a1:d4:47:4e:cd:0f:b2:64: a9:e0:72:06:af:27:8a:61:7a:7d:b8:36:39:1b:38: 1e:9a:3b:a4:93:87:70:c3:cd:b4:64:57:06:81:0a: 29:d1:0c:38:99:86:7b:06:73:61:b7:6c:77:0b:b8: 86:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C7:8C:38:AF:A7:57:E9:ED:EE:68:5E:4F:EB:95:DD:5A:77:88:FA X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/AA99F49CFC3711EFA9688687C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.219.62.0/23 103.251.134.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:54:18:53:5b:00:6e:30:fa:a1:8f:b4:9f:8f:1a:34:06:92: b9:9d:96:5c:be:2a:dc:b0:33:a8:41:a9:84:31:b9:ce:76:3a: 33:39:85:98:b1:d4:13:61:f3:06:1d:54:97:b1:6a:39:5e:57: c6:c5:55:ad:77:99:72:97:2e:4d:25:8e:43:18:71:17:74:4e: 6f:a6:bf:37:c2:38:ce:af:53:5b:71:b2:86:41:52:c1:65:44: eb:0f:3a:51:81:39:0c:6b:c3:e1:9f:cb:85:fa:7e:3b:a9:25: 93:17:4d:f6:68:51:ea:c3:5c:6d:a7:a2:84:b4:b7:77:34:2b: 27:6d:73:f9:05:9f:03:30:5c:aa:e8:9c:29:40:b1:cf:7e:5a: 4b:d9:dc:27:0a:71:b4:ff:6e:53:a6:3d:c1:ff:3b:2e:37:7e: b8:7b:c3:a7:65:83:93:5c:dd:67:2d:0e:dd:1e:a0:41:46:77: a2:9d:46:05:07:bd:29:89:65:05:a2:6f:4c:a5:c1:52:a4:b6: cf:3e:18:91:33:73:d8:0c:ba:f0:10:c8:90:09:3e:03:ea:25: 30:c9:e5:bf:21:dc:7b:10:89:1e:04:db:95:37:c5:1f:68:b4: 6a:69:f9:72:e4:e8:d5:57:ce:03:16:18:99:7f:f2:f9:4a:b8: d9:be:41:58 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdERTMxMTAvBgNVBAUTKEQ3OUZFMEIwOUNBNDRBODQ2NjkyODM4RkM0MkJDRjQz RDJBMzJBRDIwHhcNMjYwNzIxMDgzMzQ1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVmMmVlOS02NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHEABTkbFtZxVnGhFx0zdC+WDafdZetGSm3Vvr1UyNO+bTUY8Z+SgP4G/Iik yu7VRlAGjFOEPh52xd8jadgZetbwG3GpWgxKz/7IY8j+vYywaSO7BxhcpdlgDUkS HUpK/OlTcQOzL992LtoCj+AyupYQUQ0f343mdzB0pHsPYuluE57nDTY8ZSKu511K qvF5zekx9sx+vJHF/40Y2MHHAkV235KPMu6r9274FPoTSs4LCZiN91iEkrePcaB0 TqiQNARla0Ac3OARodRHTs0PsmSp4HIGryeKYXp9uDY5Gzgemjukk4dww820ZFcG gQop0Qw4mYZ7BnNht2x3C7iGmQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFELHjDiv p1fp7e5oXk/rld1ad4j6MB8GA1UdIwQYMBaAFNef4LCcpEqEZpKDj8Qrz0PSoyrS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0RFMy80RTFFRUFCQUZD MzcxMUVGQjFDMDcyODZDNEY5QUUwMi8xNV9nc0p5a1NvUm1rb09QeEN2UFE5S2pL dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdERTMvNEUxRUVBQkFGQzM3MTFFRkIxQzA3Mjg2QzRGOUFFMDIvQUE5OUY0OUNG QzM3MTFFRkE5Njg4Njg3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ9s+AwQBZ/uGMA0GCSqGSIb3DQEBCwUAA4IBAQB+VBhTWwBuMPqh j7Sfjxo0BpK5nZZcvircsDOoQamEMbnOdjozOYWYsdQTYfMGHVSXsWo5XlfGxVWt d5lyly5NJY5DGHEXdE5vpr83wjjOr1NbcbKGQVLBZUTrDzpRgTkMa8Phn8uF+n47 qSWTF032aFHqw1xtp6KEtLd3NCsnbXP5BZ8DMFyq6JwpQLHPflpL2dwnCnG0/25T pj3B/zsuN364e8OnZYOTXN1nLQ7dHqBBRneinUYFB70piWUFom9MpcFSpLbPPhiR M3PYDLrwEMiQCT4D6iUwyeW/Idx7EIkeBNuVN8UfaLRqafly5OjVV84DFhiZf/L5 SrjZvkFY -----END CERTIFICATE-----Generated at Fri Jul 24 07:44:39 2026 by rpki-client