$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/CB04F4409BE611EF8AFF947CC4F9AE02.roa File: CB04F4409BE611EF8AFF947CC4F9AE02.roa (raw, json) Hash identifier: be575fG+iblag7YB0IV4I9E1dYSZltWkgSJOsEAQvSA= Subject key identifier: 65:DD:60:3B:3D:4D:41:44:E1:60:90:C2:5F:16:B4:95:2D:CC:FC:F9 Certificate issuer: /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Certificate serial: 0143 Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/CB04F4409BE611EF8AFF947CC4F9AE02.roa Signing time: Sat 20 Jun 2026 19:22:45 +0000 ROA not before: Sat 20 Jun 2026 19:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139025 IP address blocks: 103.138.155.0/24 maxlen: 24 103.160.158.0/24 maxlen: 24 2001:df2:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Validity Not Before: Jun 20 19:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a36e885-8d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b2:32:fb:79:a0:32:43:3e:c5:2d:64:94:21: fc:b5:b3:12:c5:b5:a3:f1:7a:50:64:8f:0a:ae:38: 04:31:d2:48:d6:1e:63:62:6b:7c:9d:ed:bb:38:a1: a3:4d:7b:ac:6e:d4:d2:3e:2e:1e:6e:2d:7c:f5:21: 78:65:a5:2a:9c:c4:36:4d:f5:43:b3:ec:37:27:37: 10:a0:88:46:f1:08:d0:eb:56:91:b4:05:33:41:e9: 92:39:d9:32:67:99:ef:f6:69:63:ab:b4:6f:02:dd: 89:68:c8:c3:eb:bb:44:bf:8c:e8:01:b2:82:50:a9: 5a:58:26:28:8b:9b:84:dc:c6:44:e2:38:95:d9:af: 66:7c:05:0b:32:75:a7:7b:ea:c8:da:a6:38:10:d6: 19:a0:b6:bb:4b:02:d2:51:13:fc:7f:0a:f6:5b:22: b8:f1:52:e3:21:b0:b8:19:b6:f7:f5:88:79:e0:d0: 1e:32:82:fa:a2:ea:e1:6e:ef:36:9b:b1:48:8a:00: b1:25:1d:7e:37:62:fe:46:e6:e0:e6:fc:f8:96:3a: 29:8c:17:5d:d3:1d:57:03:98:af:e5:0c:41:4f:cf: d8:18:02:f3:12:3b:e6:56:b0:4a:ec:b5:73:f3:d4: 6c:61:25:ce:ea:99:10:33:74:b3:59:14:e7:50:8f: e1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DD:60:3B:3D:4D:41:44:E1:60:90:C2:5F:16:B4:95:2D:CC:FC:F9 X509v3 Authority Key Identifier: keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/CB04F4409BE611EF8AFF947CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.155.0/24 103.160.158.0/24 IPv6: 2001:df2:c080::/48 Signature Algorithm: sha256WithRSAEncryption 2d:78:97:22:22:8c:d2:ad:77:1a:61:af:b5:73:5c:02:5f:13: c6:0b:a6:15:2f:99:45:7f:13:56:e0:75:0d:70:48:c1:e4:bc: 5d:79:45:93:39:ba:e6:19:b8:e2:c2:7c:47:e5:16:30:99:6a: f2:c5:c9:ca:04:2b:06:99:e1:0a:47:1b:89:1e:31:37:4f:ad: bf:fa:63:96:62:10:c8:2b:70:b6:a0:21:92:b8:c5:d2:12:31: f9:31:b0:99:27:16:cd:26:2a:13:48:0f:f7:dc:96:ab:e5:7d: 19:38:a3:2a:3e:7a:45:3b:e5:ff:f0:59:61:92:f9:16:65:21: c7:55:c7:9d:5b:19:55:7f:a0:a6:3b:bb:ae:f8:76:50:c5:62: 8e:b3:ed:3a:1e:91:e4:41:a0:b7:e7:b1:b7:39:ac:4c:bb:89: 7a:65:b8:6e:2d:20:2b:0d:25:73:43:f8:80:9a:f2:e9:a2:e6: 20:89:03:67:52:db:25:5d:f4:1c:c3:ab:ce:98:44:a7:d8:de: a1:9d:73:80:eb:3c:30:16:f3:19:4e:d5:60:45:75:c5:9d:e5: f1:0d:d0:b0:fd:58:20:9a:b5:bc:ee:82:7b:24:ea:c4:92:9e: d7:5d:b8:f3:f6:1e:f7:8c:06:5e:dc:ad:74:24:cc:2a:d4:09: 5c:b0:4b:65 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDBDRkNDQzU5ODBGNTdFNkJDODRERjExQjRDNTcxOTM1 RDI1REFDQ0EwHhcNMjYwNjIwMTkyMjQ1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM2ZTg4NS04ZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLIy+3mgMkM+xS1klCH8tbMSxbWj8XpQZI8KrjgEMdJI1h5jYmt8ne27OKGj TXusbtTSPi4ebi189SF4ZaUqnMQ2TfVDs+w3JzcQoIhG8QjQ61aRtAUzQemSOdky Z5nv9mljq7RvAt2JaMjD67tEv4zoAbKCUKlaWCYoi5uE3MZE4jiV2a9mfAULMnWn e+rI2qY4ENYZoLa7SwLSURP8fwr2WyK48VLjIbC4Gbb39Yh54NAeMoL6ourhbu82 m7FIigCxJR1+N2L+Rubg5vz4ljopjBdd0x1XA5iv5QxBT8/YGALzEjvmVrBK7LVz 89RsYSXO6pkQM3SzWRTnUI/h+wIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFGXdYDs9 TUFE4WCQwl8WtJUtzPz5MB8GA1UdIwQYMBaAFAz8zFmA9X5ryE3xG0xXGTXSXazK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9EUHpNV1lEMWZtdklUZkViVEZjWk5kSmRy TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RQek1XWUQxZm12SVRmRWJURmNaTmRKZHJNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE1QUEvM0VGQTI0MTQ2MkUwMTFFQUE2RDU5QTJDQzRGOUFFMDIvQ0IwNEY0NDA5 QkU2MTFFRjhBRkY5NDdDQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ4qbAwQAZ6CeMA8EAgACMAkDBwAgAQ3ywIAwDQYJKoZIhvcNAQEL BQADggEBAC14lyIijNKtdxphr7VzXAJfE8YLphUvmUV/E1bgdQ1wSMHkvF15RZM5 uuYZuOLCfEflFjCZavLFycoEKwaZ4QpHG4keMTdPrb/6Y5ZiEMgrcLagIZK4xdIS MfkxsJknFs0mKhNID/fclqvlfRk4oyo+ekU75f/wWWGS+RZlIcdVx51bGVV/oKY7 u674dlDFYo6z7ToekeRBoLfnsbc5rEy7iXpluG4tICsNJXND+ICa8umi5iCJA2dS 2yVd9BzDq86YRKfY3qGdc4DrPDAW8xlO1WBFdcWd5fEN0LD9WCCatbzugnsk6sSS ntdduPP2HveMBl7crXQkzCrUCVywS2U= -----END CERTIFICATE-----Generated at Fri Jul 24 18:03:26 2026 by rpki-client