$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/960C9032C72711F0BD856955C4F9AE02.roa File: 960C9032C72711F0BD856955C4F9AE02.roa (raw, json) Hash identifier: qtYHDF7MGXV3CNn5trlAgoV0imEdai1To/X8YfcEDdc= Subject key identifier: 3D:27:F9:98:BA:DF:C7:CE:12:12:8C:B3:9A:5A:21:AA:9D:81:3C:62 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 025D Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/960C9032C72711F0BD856955C4F9AE02.roa Signing time: Sun 05 Jul 2026 03:29:05 +0000 ROA not before: Sun 05 Jul 2026 03:29:05 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 151354 IP address blocks: 103.208.67.0/24 maxlen: 24 103.254.214.0/24 maxlen: 24 2001:df2:7ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Jul 5 03:29:05 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a49cf81-27ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:59:f6:ac:bb:eb:69:54:34:d9:9c:a4:2f: e9:dd:8e:9f:f5:fa:37:81:f9:b6:21:44:b8:6a:26: 79:21:68:82:8e:13:c5:4a:f8:8b:eb:13:71:3b:84: 61:ab:0f:ed:a4:27:2d:7a:e3:4e:c7:a5:b0:3d:2c: 94:cc:28:dc:c2:ee:3a:db:32:db:02:11:80:84:f7: 21:b1:6b:74:6e:b8:4a:97:16:79:cf:5b:12:6d:43: 14:f4:f7:08:b9:31:d8:af:61:00:cf:c1:9f:df:71: 1d:6d:99:a5:d3:c0:a7:4a:de:a0:63:d3:fd:7d:e1: 04:4c:db:4c:84:c7:58:c7:59:46:a7:56:ee:57:78: ea:d0:dc:cd:ec:ff:2d:24:b8:fa:f1:2f:2d:80:c2: e7:1f:57:84:74:31:7e:b5:00:77:1f:f7:c2:2e:c9: 5c:f8:73:50:cd:d0:ca:c8:3c:8e:6d:2a:14:83:3c: dc:38:cc:8e:a8:e7:81:c3:b2:1c:be:d0:95:bf:a3: 5c:b9:b8:bc:82:ca:51:b2:14:e5:e1:1f:c6:49:d1: a8:46:f3:28:63:0d:06:eb:49:9e:5f:97:90:8a:86: 28:8b:af:ab:00:da:07:37:f7:82:d0:65:7e:12:ea: da:45:62:9d:bb:2d:83:e0:01:f3:37:88:63:86:8f: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:27:F9:98:BA:DF:C7:CE:12:12:8C:B3:9A:5A:21:AA:9D:81:3C:62 X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/960C9032C72711F0BD856955C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.208.67.0/24 103.254.214.0/24 IPv6: 2001:df2:7ec0::/48 Signature Algorithm: sha256WithRSAEncryption 96:28:f1:98:87:1b:70:36:3c:2a:f8:ea:d6:7b:82:af:76:be: 50:ea:54:9a:01:d2:d1:56:63:82:4c:49:ac:ff:5b:1b:2d:17: f0:ff:1e:17:32:1a:b4:03:84:2b:02:80:1b:43:ea:d3:cb:d6: e2:c0:ae:40:64:61:90:7b:d8:7d:a8:83:fc:cf:07:8b:74:d9: 86:7d:c4:10:84:78:9f:04:61:20:9b:94:22:ed:9b:f2:0d:97: c7:a0:26:18:ec:33:1e:b7:b1:b8:71:e2:78:8d:67:30:a6:1c: 3e:8f:57:fc:9a:70:e2:08:92:d1:16:2e:6f:91:71:f7:e2:51: 0e:21:ca:de:b2:74:c9:0d:b7:0e:ff:e4:91:1c:cf:38:5f:0d: 30:fd:87:82:96:fd:66:07:82:21:da:e4:96:0a:31:84:dc:d7: 3b:c2:77:61:2d:61:92:a6:e7:28:9e:12:2c:b8:e5:2d:5f:00: 62:20:60:3b:71:ea:28:76:68:db:c3:2b:b5:37:f3:f3:9d:e9: 72:6a:ff:7f:16:14:5b:72:e1:72:3a:15:1a:8f:c4:a6:3f:dd: 22:6e:c8:d3:14:fd:f7:d3:50:7d:6c:94:5f:0c:98:7c:fa:27: 67:a5:5e:7e:d5:d1:c3:e6:dd:97:ea:54:91:6d:b9:b4:ac:38: f0:48:8e:b4 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjYwNzA1MDMyOTA1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5Y2Y4MS0yN2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiNZ9qy762lUNNmcpC/p3Y6f9fo3gfm2IUS4aiZ5IWiCjhPFSviL6xNxO4Rh qw/tpCcteuNOx6WwPSyUzCjcwu462zLbAhGAhPchsWt0brhKlxZ5z1sSbUMU9PcI uTHYr2EAz8Gf33EdbZml08CnSt6gY9P9feEETNtMhMdYx1lGp1buV3jq0NzN7P8t JLj68S8tgMLnH1eEdDF+tQB3H/fCLslc+HNQzdDKyDyObSoUgzzcOMyOqOeBw7Ic vtCVv6Ncubi8gspRshTl4R/GSdGoRvMoYw0G60meX5eQioYoi6+rANoHN/eC0GV+ EuraRWKduy2D4AHzN4hjho/lfQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFD0n+Zi6 38fOEhKMs5paIaqdgTxiMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEM3RjgvRTI1MTBFMUMxMjk1MTFFRTg0QkFENzQ2QzRGOUFFMDIvOTYwQzkwMzJD NzI3MTFGMEJEODU2OTU1QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ9BDAwQAZ/7WMA8EAgACMAkDBwAgAQ3yfsAwDQYJKoZIhvcNAQEL BQADggEBAJYo8ZiHG3A2PCr46tZ7gq92vlDqVJoB0tFWY4JMSaz/WxstF/D/Hhcy GrQDhCsCgBtD6tPL1uLArkBkYZB72H2og/zPB4t02YZ9xBCEeJ8EYSCblCLtm/IN l8egJhjsMx63sbhx4niNZzCmHD6PV/yacOIIktEWLm+RcffiUQ4hyt6ydMkNtw7/ 5JEczzhfDTD9h4KW/WYHgiHa5JYKMYTc1zvCd2EtYZKm5yieEiy45S1fAGIgYDtx 6ih2aNvDK7U38/Od6XJq/38WFFty4XI6FRqPxKY/3SJuyNMU/ffTUH1slF8MmHz6 J2elXn7V0cPm3ZfqVJFtubSsOPBIjrQ= -----END CERTIFICATE-----Generated at Fri Jul 24 01:47:30 2026 by rpki-client