$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/F0B38A8A86EF11F19E006003A7EE528E.roa File: F0B38A8A86EF11F19E006003A7EE528E.roa (raw, json) Hash identifier: G3VxTx/jbbPR89QIwxZ1667QlQMt/4ZUfbWGMqQ8W9w= Subject key identifier: 9F:55:6A:E5:45:BC:19:82:9E:A1:F2:F8:3A:98:7E:DF:62:96:F6:7B Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Certificate serial: 1C02 Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/F0B38A8A86EF11F19E006003A7EE528E.roa Signing time: Thu 23 Jul 2026 23:40:52 +0000 ROA not before: Thu 23 Jul 2026 23:40:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45766 IP address blocks: 45.127.48.0/22 maxlen: 24 103.40.226.0/23 maxlen: 24 103.51.2.0/23 maxlen: 24 113.21.228.0/22 maxlen: 24 2400:f940::/32 maxlen: 34 2400:f940::/48 maxlen: 48 2400:f940:10::/48 maxlen: 48 2400:f940:11::/48 maxlen: 48 2400:f940:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 23:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7170 (0x1c02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Validity Not Before: Jul 23 23:40:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a62a684-619f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:47:1c:b0:c9:c5:16:c7:11:3f:28:84:0c:96: b4:49:9d:65:6f:e2:4a:7c:05:13:31:8a:b7:fc:ec: d0:06:5a:39:1a:00:8f:64:ef:9b:6a:b5:cd:78:03: eb:ab:af:53:94:dd:b4:bd:d0:41:b7:39:e6:f1:df: 59:06:3f:ce:04:93:2b:a4:b7:9f:da:a7:bb:eb:94: e3:d0:74:ab:09:bb:93:ac:fe:24:b4:3c:b3:d0:29: 99:38:14:64:47:3b:23:cd:ed:02:62:69:d5:20:f8: 60:19:1c:1a:6c:3e:de:28:7e:52:d9:1f:e0:f5:db: 86:38:90:c4:4e:db:15:19:1e:49:fd:5e:63:9b:e1: 83:19:c0:27:2c:0b:04:ec:2b:98:66:cc:30:96:c3: 20:26:c5:4c:08:29:ae:fc:7c:93:f3:e9:57:64:62: 75:fd:dd:5e:80:2a:0c:c2:f5:29:0d:91:61:97:41: 9c:8d:14:3d:6e:7f:69:95:57:f9:82:f9:21:a3:28: 94:d2:8d:9b:39:d0:af:a8:bd:ce:ba:ca:d0:e3:35: 08:a8:e1:c2:5d:02:a4:4f:c7:69:df:a6:c7:e2:4f: d8:3a:0e:0b:30:ff:41:72:d9:f5:63:dd:e6:6a:f8: 20:f4:f1:36:a8:99:9f:1c:cf:d5:9f:e1:5c:ae:cb: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:55:6A:E5:45:BC:19:82:9E:A1:F2:F8:3A:98:7E:DF:62:96:F6:7B X509v3 Authority Key Identifier: keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/F0B38A8A86EF11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 45.127.48.0/22 103.40.226.0/23 103.51.2.0/23 113.21.228.0/22 IPv6: 2400:f940::/32 Signature Algorithm: sha256WithRSAEncryption 28:2b:ce:4f:db:2e:65:c3:13:6a:dd:b3:c9:df:09:d2:fe:64: 6f:fe:36:d3:04:d8:95:b1:1a:6d:93:04:43:3e:0a:90:93:8e: bd:19:31:33:50:b0:3d:6d:cc:5d:98:5e:f6:9a:2e:c2:af:74: 95:7b:7b:b6:f9:13:1b:4f:30:b0:c4:da:5d:0a:ea:1e:52:b9: fc:bc:7d:ba:15:eb:fb:f1:17:d4:dd:bd:53:ca:8b:f6:dd:d4: f8:02:3e:10:4c:d2:be:a2:10:46:5c:8f:1b:14:2e:db:30:b4: 2d:52:05:4a:9c:4d:f9:41:1f:53:da:b3:59:0e:18:18:5d:74: 11:b5:95:fa:56:e0:70:bd:09:f0:0b:90:24:0d:58:06:c1:6a: a3:2c:9d:a9:16:81:57:23:91:bc:71:8e:c8:ab:a7:79:03:3a: 3b:54:57:5f:3e:94:7d:7e:14:09:10:79:9c:06:c0:d0:45:dd: 1a:a0:f3:41:8a:fd:3f:c9:0e:87:65:7e:18:1e:bc:a9:04:3d: e7:7a:5d:fd:7e:0f:b3:86:43:92:67:de:74:7e:60:f8:2f:e7: d4:4e:e5:d1:89:3c:ba:2a:fd:7c:d9:9a:22:38:ac:c3:7d:11: 5d:2e:e5:a5:51:58:46:aa:e6:6e:59:1e:df:7a:62:dc:3f:f2: 5d:ba:a9:60 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICHAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4Q0IxMTAvBgNVBAUTKEZGMzI3OEEzQUQ1OEIxOEE1NDZFM0ZFRENENTM3ODQw NTI3NzY3QTgwHhcNMjYwNzIzMjM0MDUyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTY4NC02MTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EccsMnFFscRPyiEDJa0SZ1lb+JKfAUTMYq3/OzQBlo5GgCPZO+barXNeAPr q69TlN20vdBBtznm8d9ZBj/OBJMrpLef2qe765Tj0HSrCbuTrP4ktDyz0CmZOBRk Rzsjze0CYmnVIPhgGRwabD7eKH5S2R/g9duGOJDETtsVGR5J/V5jm+GDGcAnLAsE 7CuYZswwlsMgJsVMCCmu/HyT8+lXZGJ1/d1egCoMwvUpDZFhl0GcjRQ9bn9plVf5 gvkhoyiU0o2bOdCvqL3OusrQ4zUIqOHCXQKkT8dp36bH4k/YOg4LMP9Bctn1Y93m avgg9PE2qJmfHM/Vn+Fcrst47wIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFJ9VauVF vBmCnqHy+DqYft9ilvZ7MB8GA1UdIwQYMBaAFP8yeKOtWLGKVG4/7c1TeEBSd2eo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QThDQi9DOEIwRjRGMjIx QzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZcFVial90elZONFFGSjNa NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196SjRvNjFZc1lwVWJqX3R6Vk40UUZKM1o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEE4Q0IvQzhCMEY0RjIyMUMxMTFFNzk1NEU4NzE3QzRGOUFFMDIvRjBCMzhBOEE4 NkVGMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCLX8wAwQBZyjiAwQBZzMCAwQCcRXkMA0EAgACMAcDBQAkAPlAMA0G CSqGSIb3DQEBCwUAA4IBAQAoK85P2y5lwxNq3bPJ3wnS/mRv/jbTBNiVsRptkwRD PgqQk469GTEzULA9bcxdmF72mi7Cr3SVe3u2+RMbTzCwxNpdCuoeUrn8vH26Fev7 8RfU3b1Tyov23dT4Aj4QTNK+ohBGXI8bFC7bMLQtUgVKnE35QR9T2rNZDhgYXXQR tZX6VuBwvQnwC5AkDVgGwWqjLJ2pFoFXI5G8cY7Iq6d5Azo7VFdfPpR9fhQJEHmc BsDQRd0aoPNBiv0/yQ6HZX4YHrypBD3nel39fg+zhkOSZ950fmD4L+fUTuXRiTy6 Kv182ZoiOKzDfRFdLuWlUVhGquZuWR7femLcP/Jduqlg -----END CERTIFICATE-----Generated at Fri Jul 24 09:14:58 2026 by rpki-client