$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/07FF4ABC5A1011EAA8B1B456C4F9AE02.roa File: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (raw, json) Hash identifier: GDAnZb/56NjHKOSDOXY9bNI/CfCE20/WA0Nzn9nbjnU= Subject key identifier: CC:1C:35:76:36:E2:C0:FD:94:23:A1:29:69:D2:86:ED:0D:D9:7A:E3 Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Certificate serial: 10EA Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/07FF4ABC5A1011EAA8B1B456C4F9AE02.roa Signing time: Wed 22 Jul 2026 18:17:57 +0000 ROA not before: Wed 22 Jul 2026 18:17:57 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 132298 IP address blocks: 103.237.36.0/22 maxlen: 24 160.202.144.0/22 maxlen: 24 2401:e7c0::/32 maxlen: 36 2401:e7c0::/48 maxlen: 48 2401:e7c0:3::/48 maxlen: 48 2401:e7c0:4::/48 maxlen: 48 2401:e7c0:f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4330 (0x10ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Validity Not Before: Jul 22 18:17:57 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a610955-dcf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:7f:3b:0b:68:6d:57:e7:7e:00:69:4a:37: 9a:e1:60:d0:71:24:41:1c:85:5d:bf:b2:f2:64:98: f1:a6:ca:5d:b6:da:1e:96:7f:4f:59:19:d8:f2:e9: e2:28:9c:d4:d4:c5:4c:14:27:35:01:5c:f5:b9:3e: c3:c4:a7:72:54:48:24:97:8a:8a:7e:e1:21:75:ca: f2:63:24:0a:97:94:67:61:fd:56:41:ee:f5:84:f5: cc:aa:b1:5f:4c:bf:72:b5:d9:2e:f5:2e:ac:16:c3: 89:61:ff:79:6a:38:60:66:fe:c2:36:84:d7:ab:48: f4:3e:e9:4d:c8:68:f8:3a:ac:82:9c:10:48:d2:3c: c4:f6:fa:6f:a8:50:1f:d0:9d:fe:5b:d3:57:c3:3b: b6:d4:eb:41:8a:a0:f8:d4:65:d9:50:ad:7e:0c:8f: 13:3b:db:bc:ec:86:8f:b6:c8:17:38:f5:66:b0:8c: 36:6e:2e:6d:13:03:b5:67:8f:5b:c3:7e:dc:27:58: c1:bf:c3:58:90:92:67:da:be:57:d6:ea:b3:cf:e1: 8b:f1:95:e6:a8:82:69:3a:c6:02:52:a2:3e:30:4b: 9e:e4:67:36:67:70:48:d5:67:15:1d:42:01:f3:79: 2a:71:23:10:12:cf:8e:ce:7b:68:ba:37:da:f8:a5: 73:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1C:35:76:36:E2:C0:FD:94:23:A1:29:69:D2:86:ED:0D:D9:7A:E3 X509v3 Authority Key Identifier: keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/07FF4ABC5A1011EAA8B1B456C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.237.36.0/22 160.202.144.0/22 IPv6: 2401:e7c0::/32 Signature Algorithm: sha256WithRSAEncryption 1a:6c:fb:7c:fa:99:cb:ea:ce:04:97:a8:cf:36:42:62:6d:58: a7:d7:f9:bd:7a:cc:29:ad:17:8b:e0:0f:a2:a5:5c:37:8e:aa: 0d:d6:b1:8d:d7:92:0a:10:36:39:cf:c7:b2:eb:4d:d3:8e:43: 8b:b7:d6:91:ef:4b:09:11:64:e7:e5:13:a0:58:fb:fb:45:ee: 66:d9:70:f2:28:d0:f7:84:9a:8d:ff:42:b8:41:0d:53:b9:a7: f6:ca:14:9f:0a:ab:cf:4f:8b:85:3f:59:4d:ac:82:d4:82:23: 89:44:b8:31:8d:c0:e3:c0:1d:ce:4d:79:af:b1:ba:45:8e:a9: a9:72:ae:3e:6d:75:03:96:47:5f:ba:ec:7e:93:8e:b2:f0:6b: 06:f9:00:85:dd:b4:e4:bb:09:b9:76:76:97:be:2c:e0:69:1b: 39:bf:6e:8a:b9:e4:b0:8b:34:7f:22:f1:e4:1d:8f:ef:40:1a: 76:c0:04:a7:f3:8f:ac:5d:c4:30:66:0a:01:b5:e3:12:39:c1: 59:22:ae:2d:87:57:74:00:3f:7c:3a:ed:fa:21:17:b4:79:15: 28:68:fd:92:e8:85:eb:70:35:6c:13:20:a8:2c:68:be:27:07: 45:ed:3f:00:ec:d8:be:bf:9a:ca:62:81:8e:e9:8c:1d:8e:81: aa:45:2b:cd -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICEOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz QjE0MEZGNkUwHhcNMjYwNzIyMTgxNzU3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxMDk1NS1kY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyh/OwtobVfnfgBpSjea4WDQcSRBHIVdv7LyZJjxpspdttoeln9PWRnY8uni KJzU1MVMFCc1AVz1uT7DxKdyVEgkl4qKfuEhdcryYyQKl5RnYf1WQe71hPXMqrFf TL9ytdku9S6sFsOJYf95ajhgZv7CNoTXq0j0PulNyGj4OqyCnBBI0jzE9vpvqFAf 0J3+W9NXwzu21OtBiqD41GXZUK1+DI8TO9u87IaPtsgXOPVmsIw2bi5tEwO1Z49b w37cJ1jBv8NYkJJn2r5X1uqzz+GL8ZXmqIJpOsYCUqI+MEue5Gc2Z3BI1WcVHUIB 83kqcSMQEs+Ozntoujfa+KVzxwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMwcNXY2 4sD9lCOhKWnShu0N2XrjMB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCNkEvMDg3NUY0OTY0Qzc0MTFFOTk3OTAwRjU1QzRGOUFFMDIvMDdGRjRBQkM1 QTEwMTFFQUE4QjFCNDU2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ+0kAwQCoMqQMA0EAgACMAcDBQAkAefAMA0GCSqGSIb3DQEBCwUA A4IBAQAabPt8+pnL6s4El6jPNkJibVin1/m9eswprReL4A+ipVw3jqoN1rGN15IK EDY5z8ey603TjkOLt9aR70sJEWTn5ROgWPv7Re5m2XDyKND3hJqN/0K4QQ1Tuaf2 yhSfCqvPT4uFP1lNrILUgiOJRLgxjcDjwB3OTXmvsbpFjqmpcq4+bXUDlkdfuux+ k46y8GsG+QCF3bTkuwm5dnaXvizgaRs5v26KueSwizR/IvHkHY/vQBp2wASn84+s XcQwZgoBteMSOcFZIq4th1d0AD98Ou36IRe0eRUoaP2S6IXrcDVsEyCoLGi+JwdF 7T8A7Ni+v5rKYoGO6YwdjoGqRSvN -----END CERTIFICATE-----Generated at Fri Jul 24 10:39:07 2026 by rpki-client