$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa File: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (raw, json) Hash identifier: P7HUOGJdCQCZrbLvbeaHfTB6gQvyFKH/g1HFqHakvJs= Subject key identifier: AA:52:0F:0B:0C:90:A8:45:05:A7:C8:5B:58:0B:81:BF:D4:C3:F3:F4 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0246 Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa Signing time: Wed 15 Jul 2026 04:29:00 +0000 ROA not before: Wed 15 Jul 2026 04:29:00 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 132366 IP address blocks: 103.242.8.0/24 maxlen: 24 2401:1d20::/48 maxlen: 48 2401:1d20:4::/48 maxlen: 48 2401:1d20:5::/48 maxlen: 48 2401:1d20:6::/48 maxlen: 48 2401:1d20:7::/48 maxlen: 48 2401:1d20:8::/48 maxlen: 48 2401:1d20:9::/48 maxlen: 48 2401:1d20:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Jul 15 04:29:00 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a570c8c-5249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:8b:34:4f:1e:dd:4d:2d:05:e4:02:b4:78: 38:97:ff:38:92:5a:a8:8b:23:1e:6f:5c:23:81:ce: 8d:80:00:05:a0:c1:16:66:54:84:2a:04:4b:7b:8a: bc:fd:5e:c6:91:f6:ad:37:ea:9d:78:89:83:c4:9f: 14:93:38:32:79:81:36:bc:07:3e:7b:38:ff:1f:b0: 66:1f:f1:4e:7d:0e:dc:e1:e7:c2:27:19:da:85:93: 17:2a:d7:20:50:96:87:f4:e6:42:ab:42:9b:01:bb: 8e:f0:29:ff:3e:e4:72:72:cc:35:51:a6:73:38:19: e2:45:6b:a2:fe:a1:c5:9f:fd:c1:40:a3:46:e6:4e: cd:1c:46:ab:27:bf:08:3e:63:9e:45:f7:5d:c3:45: eb:4e:25:b4:a7:db:b0:50:35:18:11:cd:dd:6a:3b: 56:f1:01:89:0b:ca:9c:09:9b:a7:52:74:2b:ac:b4: 58:65:02:32:12:1b:d9:56:34:99:4d:d8:62:d4:a7: 54:ec:12:6d:de:be:f6:29:4b:ac:95:ec:30:ca:71: 37:2c:aa:0f:2e:68:3d:a6:d2:5d:7a:49:9e:0f:35: 27:4d:10:52:54:6e:7c:20:48:1b:13:f4:81:16:63: 55:73:d1:48:25:ce:86:06:10:9c:4e:14:68:a6:b4: 41:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:52:0F:0B:0C:90:A8:45:05:A7:C8:5B:58:0B:81:BF:D4:C3:F3:F4 X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.242.8.0/24 IPv6: 2401:1d20::/48 2401:1d20:4::-2401:1d20:9:ffff:ffff:ffff:ffff:ffff 2401:1d20:b::/48 Signature Algorithm: sha256WithRSAEncryption 41:56:5e:5a:37:dd:9f:b0:74:51:ca:bd:b1:cd:1c:f9:60:32: a6:84:ba:84:1c:0a:6c:ac:0a:78:5b:b2:cf:0e:2a:9e:13:4d: 5a:f2:fa:92:95:d5:d8:81:1d:c4:7a:fb:c9:b3:09:4f:d1:c6: 3e:42:3e:fd:b2:07:12:be:07:b0:31:a1:07:f8:87:52:a8:23: c4:0b:56:9e:c9:8f:56:f4:5c:bb:bf:d1:5b:6c:11:0f:14:f4: 0b:b4:a0:09:6b:e6:9c:50:d1:c0:76:67:3f:d4:ac:bf:8f:af: f8:68:0c:19:f5:fe:b7:04:de:6c:18:d4:21:9e:a1:de:e8:0c: 67:98:bf:78:94:c0:88:ec:34:a2:74:ac:e4:86:cc:4d:55:82: 7f:91:8f:d3:e7:b1:ce:21:ce:29:b9:13:12:14:e3:2a:a1:59: b7:c7:a5:0d:b8:11:28:99:41:d6:be:3e:2e:f7:57:82:cd:af: 8c:c5:8c:c9:e8:de:aa:c1:2a:67:19:ad:1d:66:18:57:32:3c: 7d:8c:4e:08:fa:21:b3:55:8f:17:c4:bb:86:ea:99:98:91:71: f1:19:48:db:62:7c:d7:5f:3c:82:27:9b:1a:08:56:83:0e:ed: bc:e2:22:38:2a:b9:6d:9a:64:fa:49:71:67:5b:15:25:5e:e5: 06:db:e7:40 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjYwNzE1MDQyOTAwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU3MGM4Yy01MjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppaLNE8e3U0tBeQCtHg4l/84klqoiyMeb1wjgc6NgAAFoMEWZlSEKgRLe4q8 /V7GkfatN+qdeImDxJ8UkzgyeYE2vAc+ezj/H7BmH/FOfQ7c4efCJxnahZMXKtcg UJaH9OZCq0KbAbuO8Cn/PuRycsw1UaZzOBniRWui/qHFn/3BQKNG5k7NHEarJ78I PmOeRfddw0XrTiW0p9uwUDUYEc3dajtW8QGJC8qcCZunUnQrrLRYZQIyEhvZVjSZ Tdhi1KdU7BJt3r72KUuslewwynE3LKoPLmg9ptJdekmeDzUnTRBSVG58IEgbE/SB FmNVc9FIJc6GBhCcThRoprRB7QIDAQABo4ICjjCCAoowHQYDVR0OBBYEFKpSDwsM kKhFBafIW1gLgb/Uw/P0MB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIwMTcvREU3NUYyMjIyQTEzMTFFRTk1RDU4QTY2QzRGOUFFMDIvMUQxMUZGRDQz NTJEMTFFRTk1NDNCNTJGQzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDAM BAIAATAGAwQAZ/IIMCwEAgACMCYDBwAkAR0gAAAwEgMHAiQBHSAABAMHASQBHSAA CAMHACQBHSAACzANBgkqhkiG9w0BAQsFAAOCAQEAQVZeWjfdn7B0Ucq9sc0c+WAy poS6hBwKbKwKeFuyzw4qnhNNWvL6kpXV2IEdxHr7ybMJT9HGPkI+/bIHEr4HsDGh B/iHUqgjxAtWnsmPVvRcu7/RW2wRDxT0C7SgCWvmnFDRwHZnP9Ssv4+v+GgMGfX+ twTebBjUIZ6h3ugMZ5i/eJTAiOw0onSs5IbMTVWCf5GP0+exziHOKbkTEhTjKqFZ t8elDbgRKJlB1r4+LvdXgs2vjMWMyejeqsEqZxmtHWYYVzI8fYxOCPohs1WPF8S7 huqZmJFx8RlI22J81188giebGghWgw7tvOIiOCq5bZpk+klxZ1sVJV7lBtvnQA== -----END CERTIFICATE-----Generated at Fri Jul 24 10:52:55 2026 by rpki-client