$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa File: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (raw, json) Hash identifier: vZAj9NjXjOPeL5GQysAVibay7KYfqb17AZh26Rch2sk= Subject key identifier: 51:19:FB:9D:1F:F5:B3:EF:CC:CF:BE:C4:87:06:93:5F:6C:4D:C5:C4 Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Certificate serial: 0257 Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa Signing time: Wed 29 Apr 2026 03:35:09 +0000 ROA not before: Wed 29 Apr 2026 03:35:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150808 IP address blocks: 103.111.4.0/23 maxlen: 23 103.111.4.0/24 maxlen: 24 103.111.5.0/24 maxlen: 24 2400:e9e0::/48 maxlen: 48 2400:e9e0:1::/48 maxlen: 48 2400:e9e0:2::/48 maxlen: 48 2400:e9e0:3::/48 maxlen: 48 2400:e9e0:5::/48 maxlen: 48 2400:e9e0:6::/48 maxlen: 48 2400:e9e0:7::/48 maxlen: 48 2400:e9e0:8::/48 maxlen: 48 2400:e9e0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146DAA, serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Validity Not Before: Apr 29 03:35:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f17c6d-7205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d9:f5:ee:b0:bc:c2:1f:0d:60:cb:c0:76:f7: 2d:57:b8:6c:36:5a:b4:0f:c7:50:db:f3:8a:76:35: 23:1e:05:29:fd:05:65:3c:c1:6f:d1:10:30:cb:d5: d5:01:90:9a:db:e0:47:5c:6d:63:e5:8f:1e:62:64: fc:6c:3b:5d:b6:ff:ef:28:df:01:1c:9f:c4:d7:7c: 93:10:fd:19:93:52:fa:a5:2d:5c:bd:01:18:39:9a: 0b:54:ba:54:c9:27:7e:6c:ca:8e:93:09:4c:48:4e: 53:2d:bf:64:cf:99:c8:a7:39:4b:ad:b6:29:62:15: 8d:b0:12:56:7a:65:d4:8f:fb:1d:df:35:7f:b8:29: 21:07:27:31:86:5a:9f:d3:45:cc:f3:01:1e:89:e2: e3:d2:02:6c:ac:a3:45:fc:f7:86:72:41:c2:25:44: 91:d9:e5:f4:75:fa:ec:c4:44:89:3c:20:73:0f:ee: 64:f0:2d:e0:03:8d:ca:d8:68:75:7a:cb:52:fb:45: 2a:60:fb:61:7c:51:37:94:24:8f:2a:5f:f0:7f:02: e8:2d:ba:c9:c8:b2:b0:76:43:ac:ef:3a:95:be:81: f9:f6:94:35:2c:e5:89:e4:28:1f:10:fa:32:5d:17: 61:36:bd:6b:28:0c:fd:fc:9f:f6:4e:a1:6b:6c:ae: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:19:FB:9D:1F:F5:B3:EF:CC:CF:BE:C4:87:06:93:5F:6C:4D:C5:C4 X509v3 Authority Key Identifier: keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.111.4.0/23 IPv6: 2400:e9e0::/46 2400:e9e0:5::-2400:e9e0:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 9a:61:03:8b:ed:fb:04:a7:13:2f:ec:5e:16:60:67:87:e0:5d: e9:e7:71:a7:fe:bd:d4:99:29:43:a4:af:bc:4e:b7:e4:ae:b9: 2a:02:c4:a3:b2:93:4b:bc:e4:73:39:0f:f5:0d:e9:15:1f:a0: 6c:5a:46:77:02:20:e6:ff:ed:b4:bf:05:b0:34:bb:79:0c:0d: d1:90:a2:47:24:18:97:de:e5:b0:e8:90:e4:d1:02:55:92:91: 51:3a:f2:9b:d4:16:08:74:f4:3e:26:44:6f:e4:47:82:bc:d6: 32:cd:03:08:ab:fd:71:2b:6f:16:95:63:23:69:5b:67:d0:30: 77:4e:7d:53:4c:7f:72:f2:09:22:d9:37:bb:7e:4b:ba:a8:9d: a6:f7:8a:e7:df:95:66:24:6e:ca:d5:c4:22:17:2c:de:3c:11: 74:28:e5:a7:bb:f1:c9:2d:45:24:f5:f4:bf:2c:16:e1:c8:2b: eb:d7:42:31:f1:be:da:97:8c:c0:5d:30:86:3e:c4:40:86:6e: 7f:0d:6b:e4:67:ad:1f:7b:7d:79:eb:2d:42:5e:75:64:6a:44: 81:95:fb:d7:aa:f5:49:62:24:12:3f:b5:ec:04:3c:f8:62:b9: c7:7f:2f:8f:76:25:53:90:09:e1:3e:aa:17:3d:f6:30:56:43: 82:22:e6:9f -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEQUExMTAvBgNVBAUTKDgyMEY3MDMwQkVBQzZENDlGMTA5QkE4RUMyNUE2NUJG MjM2OUFEMkYwHhcNMjYwNDI5MDMzNTA5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYxN2M2ZC03MjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtn17rC8wh8NYMvAdvctV7hsNlq0D8dQ2/OKdjUjHgUp/QVlPMFv0RAwy9XV AZCa2+BHXG1j5Y8eYmT8bDtdtv/vKN8BHJ/E13yTEP0Zk1L6pS1cvQEYOZoLVLpU ySd+bMqOkwlMSE5TLb9kz5nIpzlLrbYpYhWNsBJWemXUj/sd3zV/uCkhBycxhlqf 00XM8wEeieLj0gJsrKNF/PeGckHCJUSR2eX0dfrsxESJPCBzD+5k8C3gA43K2Gh1 estS+0UqYPthfFE3lCSPKl/wfwLoLbrJyLKwdkOs7zqVvoH59pQ1LOWJ5CgfEPoy XRdhNr1rKAz9/J/2TqFrbK6XqwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFFEZ+50f 9bPvzM++xIcGk19sTcXEMB8GA1UdIwQYMBaAFIIPcDC+rG1J8Qm6jsJaZb8jaa0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkRBQS83MUVCN0M1QUMx OTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JVbnhDYnFPd2xwbHZ5TnBy UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnOXdNTDZzYlVueENicU93bHBsdnlOcHJTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZEQUEvNzFFQjdDNUFDMTkzMTFFRDlCODY2QjBCQzRGOUFFMDIvMDhFNjcyNzBD MTk2MTFFREJERUVGRDBCQzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAM BAIAATAGAwQBZ28EMCMEAgACMB0DBwIkAOngAAAwEgMHACQA6eAABQMHASQA6eAA CDANBgkqhkiG9w0BAQsFAAOCAQEAmmEDi+37BKcTL+xeFmBnh+Bd6edxp/691Jkp Q6SvvE635K65KgLEo7KTS7zkczkP9Q3pFR+gbFpGdwIg5v/ttL8FsDS7eQwN0ZCi RyQYl97lsOiQ5NECVZKRUTrym9QWCHT0PiZEb+RHgrzWMs0DCKv9cStvFpVjI2lb Z9Awd059U0x/cvIJItk3u35LuqidpveK59+VZiRuytXEIhcs3jwRdCjlp7vxyS1F JPX0vywW4cgr69dCMfG+2peMwF0whj7EQIZufw1r5GetH3t9eestQl51ZGpEgZX7 16r1SWIkEj+17AQ8+GK5x38vj3YlU5AJ4T6qFz32MFZDgiLmnw== -----END CERTIFICATE-----Generated at Wed May 13 09:00:02 2026 by rpki-client