$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa File: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (raw, json) Hash identifier: tGvR4Lvw2xcnvZAi3tVX941d13zG0cbdG6STnkMarY0= Subject key identifier: 12:B6:84:B8:A8:BC:0C:85:9B:8A:19:1D:FD:95:53:E5:CC:07:5A:FC Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Certificate serial: 09AB Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa Signing time: Wed 08 Jul 2026 21:22:16 +0000 ROA not before: Wed 08 Jul 2026 21:22:16 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 29066 IP address blocks: 103.66.180.0/22 maxlen: 24 103.244.112.0/22 maxlen: 24 2406:f380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Validity Not Before: Jul 8 21:22:16 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4ebf87-4eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:5e:a0:70:27:fc:a6:ab:27:4a:07:4c:e3: d1:fa:05:4b:aa:c1:e3:ee:dd:fc:db:86:88:3c:be: a5:b5:2a:48:93:e2:d2:d8:42:27:2c:21:c3:5b:a7: b6:6c:cc:18:de:1b:d5:f2:19:e8:f2:d3:d4:84:53: 4a:20:4b:66:16:d8:22:de:24:c2:7c:28:57:0d:91: d3:5a:66:e5:28:5e:81:fe:8c:f1:15:c5:59:aa:36: d7:bb:00:d4:48:da:1d:93:bd:d7:d7:a3:ed:8d:2b: e0:b3:2b:e0:d8:d2:fb:a6:73:cc:34:e3:8b:97:c4: 70:36:6e:47:80:01:11:f5:db:27:ba:08:09:48:75: c2:81:2d:2e:dd:88:50:f1:67:f1:57:df:42:37:86: f6:27:9e:b1:5e:4a:84:0f:01:ef:fe:65:bb:5e:9a: f5:6f:cd:ac:a2:aa:cb:d2:3f:47:38:14:71:9b:69: cf:12:36:93:99:ff:89:38:f3:1a:03:01:e4:c0:86: 3a:4e:58:5c:6b:ff:d7:e2:c5:82:31:2d:ca:f4:18: 7f:ad:85:26:6f:c3:d6:5d:76:45:7f:f5:4d:66:76: 7c:e3:12:17:35:c7:78:5f:9c:29:42:43:87:06:2c: eb:53:4b:05:0e:eb:35:94:c8:b9:d9:b7:58:a2:bd: d1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B6:84:B8:A8:BC:0C:85:9B:8A:19:1D:FD:95:53:E5:CC:07:5A:FC X509v3 Authority Key Identifier: keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.66.180.0/22 103.244.112.0/22 IPv6: 2406:f380::/32 Signature Algorithm: sha256WithRSAEncryption 56:ca:e3:68:be:f7:17:7a:5e:45:95:72:4a:76:ce:2e:a0:c1: 39:8f:df:bf:56:2d:90:53:c5:35:67:47:00:6d:f3:db:4e:aa: d1:c9:04:0a:fc:59:8c:62:87:a3:24:64:87:2d:48:91:a6:c0: ec:e2:ca:81:9a:ee:12:07:e9:18:64:1d:6a:99:97:2b:04:aa: a5:89:db:0e:44:d6:d3:a3:a6:bb:c4:67:2c:31:47:e3:eb:9a: ca:04:38:6a:8f:d2:f1:5a:d8:5e:05:91:37:91:fe:39:ba:2b: f3:26:0b:20:e6:e7:14:db:ef:5c:7d:d0:bb:56:2e:c0:4e:78: 37:67:3c:71:13:91:62:31:22:71:f6:b7:37:93:23:76:46:4d: 5e:6f:73:82:18:45:1f:4e:0b:46:1c:cd:98:fc:91:aa:fd:d5: 81:7c:4b:49:ef:0b:9f:49:78:91:8d:1c:bb:4b:09:5d:aa:28: 5b:df:b8:a6:74:d2:17:1e:f9:34:18:2d:c6:a6:18:71:25:3b: 88:09:a8:00:f1:48:d4:78:58:28:3e:4f:be:53:a6:a0:4c:b0: 3a:c8:b7:95:8c:77:0b:da:ab:05:0d:26:de:e9:9b:54:5b:37: 5b:84:cd:a9:1d:2b:ed:28:64:43:11:af:c6:f6:75:01:1b:19: 51:12:e6:85 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG MzlEQkM4NjYwHhcNMjYwNzA4MjEyMjE2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRlYmY4Ny00ZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiteoHAn/KarJ0oHTOPR+gVLqsHj7t3824aIPL6ltSpIk+LS2EInLCHDW6e2 bMwY3hvV8hno8tPUhFNKIEtmFtgi3iTCfChXDZHTWmblKF6B/ozxFcVZqjbXuwDU SNodk73X16PtjSvgsyvg2NL7pnPMNOOLl8RwNm5HgAER9dsnuggJSHXCgS0u3YhQ 8WfxV99CN4b2J56xXkqEDwHv/mW7Xpr1b82soqrL0j9HOBRxm2nPEjaTmf+JOPMa AwHkwIY6Tlhca//X4sWCMS3K9Bh/rYUmb8PWXXZFf/VNZnZ84xIXNcd4X5wpQkOH BizrU0sFDus1lMi52bdYor3RwQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFBK2hLio vAyFm4oZHf2VU+XMB1r8MB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5 RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdDNEMvQ0NCMjAzNTRCOUUyMTFFQUJDNTU0QjgzQzRGOUFFMDIvOUZCOTZFMTY5 MjlBMTFFRThDQzVEMDMzQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ0K0AwQCZ/RwMA0EAgACMAcDBQAkBvOAMA0GCSqGSIb3DQEBCwUA A4IBAQBWyuNovvcXel5FlXJKds4uoME5j9+/Vi2QU8U1Z0cAbfPbTqrRyQQK/FmM YoejJGSHLUiRpsDs4sqBmu4SB+kYZB1qmZcrBKqlidsORNbTo6a7xGcsMUfj65rK BDhqj9LxWtheBZE3kf45uivzJgsg5ucU2+9cfdC7Vi7ATng3ZzxxE5FiMSJx9rc3 kyN2Rk1eb3OCGEUfTgtGHM2Y/JGq/dWBfEtJ7wufSXiRjRy7Swldqihb37imdNIX Hvk0GC3GphhxJTuICagA8UjUeFgoPk++U6agTLA6yLeVjHcL2qsFDSbe6ZtUWzdb hM2pHSvtKGRDEa/G9nUBGxlREuaF -----END CERTIFICATE-----Generated at Fri Jul 24 00:27:38 2026 by rpki-client