$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa File: 743770A0C06011EE882BC34AC4F9AE02.roa (raw, json) Hash identifier: BQsuQrikdwhD5Mc0XBMqkQHD0Ua6D0EyN+F6ar++uGw= Subject key identifier: CE:B6:F9:A7:9A:E6:1F:BC:8A:F4:FD:8A:6E:7C:85:0A:8F:9C:08:3D Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1601 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa Signing time: Fri 10 Jul 2026 17:17:48 +0000 ROA not before: Fri 10 Jul 2026 17:17:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9541 IP address blocks: 103.209.125.0/24 maxlen: 24 103.209.126.0/24 maxlen: 24 103.209.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5633 (0x1601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Jul 10 17:17:48 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a51293c-30cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:88:57:38:e3:0a:b6:cf:ca:6b:ff:5d:1a: 76:16:54:bb:96:bd:03:67:33:ed:71:79:e7:3a:9e: af:01:4d:fa:99:40:28:19:7a:81:5d:75:5e:64:38: 11:b5:be:95:2d:65:9b:20:1c:5e:3e:0c:15:be:ee: 60:a5:4e:aa:03:5d:e5:fd:e7:ed:81:58:68:0e:83: 2c:80:e7:c1:1c:2e:70:3e:ee:8c:e4:10:6f:cf:a3: 46:43:2e:75:98:99:c4:1f:d4:b3:49:c6:fc:e6:ad: d3:f2:4b:29:49:e1:b1:95:b2:a7:ad:e8:d1:0f:24: 04:44:79:27:e3:a4:7a:1b:e2:51:02:6c:90:f1:5e: 18:cd:66:20:eb:89:59:c1:33:38:58:93:a0:b7:f2: 3b:45:fb:3a:d0:26:0a:4a:cc:67:5d:65:83:5e:88: 1c:9e:64:4c:89:62:fe:13:42:63:0d:39:16:e5:bb: a0:db:51:cd:c9:81:ea:49:d8:5a:c4:19:11:bf:08: e2:c0:ba:c1:50:bc:7b:02:dc:4e:be:e7:1c:82:1f: 7e:ed:2c:1d:ea:f7:60:6a:45:7b:1e:a3:4f:a0:86: 72:11:49:6d:ab:8a:1e:51:3e:c2:c4:7a:7f:0a:fd: 44:f0:a8:94:6a:e6:ce:d1:5b:ac:64:af:3a:ae:9f: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B6:F9:A7:9A:E6:1F:BC:8A:F4:FD:8A:6E:7C:85:0A:8F:9C:08:3D X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.209.125.0-103.209.127.255 Signature Algorithm: sha256WithRSAEncryption a2:40:89:f2:af:63:3f:dc:19:2f:89:24:a0:d3:44:0a:98:1f: e5:b6:8d:ab:5d:36:13:9b:6b:17:e3:ae:f0:76:09:7d:e2:de: a3:88:65:e0:f5:ca:e6:87:cb:1a:c9:89:2b:26:51:76:5a:e5: a9:54:db:f0:fc:90:66:89:64:af:e3:67:74:3f:cb:32:6c:92: 39:27:aa:bb:2c:d2:80:64:28:2d:34:d2:d4:4e:69:94:35:65: 9a:af:5d:e4:d2:b5:4a:cd:7a:2b:f3:a5:7d:c5:42:63:6c:88: 72:a5:93:9a:0a:bd:70:76:97:ba:9f:e1:98:5f:1a:a3:50:db: 63:7e:c5:f0:a7:00:a3:6b:e3:e8:33:d4:b2:22:42:f2:54:b2: 36:40:e7:a3:3a:a7:a5:36:81:13:a8:ec:60:b4:36:30:16:de: 12:f3:58:74:84:a9:84:f0:1b:75:e2:0e:a1:87:0f:7b:93:00: 40:8d:15:72:f2:88:f6:db:ff:3c:75:81:64:04:35:6a:88:7f: 7e:27:0b:dd:dd:53:27:4a:f7:9c:c3:1a:9d:96:e9:eb:b6:fd: d8:bc:3a:70:af:7f:52:6e:64:34:79:68:4d:45:ac:45:c4:4e: fd:b8:08:04:8a:54:2a:23:0f:e8:89:dd:a0:0b:46:22:01:49: 83:d9:4a:17 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICFgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjYwNzEwMTcxNzQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTUxMjkzYy0zMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2imIVzjjCrbPymv/XRp2FlS7lr0DZzPtcXnnOp6vAU36mUAoGXqBXXVeZDgR tb6VLWWbIBxePgwVvu5gpU6qA13l/eftgVhoDoMsgOfBHC5wPu6M5BBvz6NGQy51 mJnEH9SzScb85q3T8kspSeGxlbKnrejRDyQERHkn46R6G+JRAmyQ8V4YzWYg64lZ wTM4WJOgt/I7Rfs60CYKSsxnXWWDXogcnmRMiWL+E0JjDTkW5bug21HNyYHqSdha xBkRvwjiwLrBULx7AtxOvuccgh9+7Swd6vdgakV7HqNPoIZyEUltq4oeUT7CxHp/ Cv1E8KiUaubO0VusZK86rp+oFQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFM62+aea 5h+8ivT9im58hQqPnAg9MB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAxRDUvRDRCRTAwRDQ2M0U1MTFFOEI1Q0ZFNDFBQzRGOUFFMDIvNzQzNzcwQTBD MDYwMTFFRTg4MkJDMzRBQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBABn0X0DBAdn0QAwDQYJKoZIhvcNAQELBQADggEBAKJAifKvYz/c GS+JJKDTRAqYH+W2jatdNhObaxfjrvB2CX3i3qOIZeD1yuaHyxrJiSsmUXZa5alU 2/D8kGaJZK/jZ3Q/yzJskjknqrss0oBkKC000tROaZQ1ZZqvXeTStUrNeivzpX3F QmNsiHKlk5oKvXB2l7qf4ZhfGqNQ22N+xfCnAKNr4+gz1LIiQvJUsjZA56M6p6U2 gROo7GC0NjAW3hLzWHSEqYTwG3XiDqGHD3uTAECNFXLyiPbb/zx1gWQENWqIf34n C93dUydK95zDGp2W6eu2/di8OnCvf1JuZDR5aE1FrEXETv24CASKVCojD+iJ3aAL RiIBSYPZShc= -----END CERTIFICATE-----Generated at Fri Jul 24 03:00:23 2026 by rpki-client