$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/0DA7E9A84E5E11F18A6201F7A4833773.roa File: 0DA7E9A84E5E11F18A6201F7A4833773.roa (raw, json) Hash identifier: RfB9xkFiIdCV5oVAdDDP61O6abiPBSL2qkBmqr65dgQ= Subject key identifier: E1:58:1E:4E:6A:90:6A:A9:E6:00:8D:4E:82:63:E5:DD:22:21:42:4D Certificate issuer: /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B Certificate serial: 05D5 Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/0DA7E9A84E5E11F18A6201F7A4833773.roa Signing time: Wed 13 May 2026 00:22:30 +0000 ROA not before: Wed 13 May 2026 00:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64098 IP address blocks: 103.116.170.0/23 maxlen: 24 103.227.234.0/24 maxlen: 24 103.227.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1493 (0x5d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B Validity Not Before: May 13 00:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a03c446-3922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:da:a0:2b:13:98:d4:f2:fa:d1:b1:a6:f7:7a: 70:fa:40:7d:68:68:90:71:ae:98:16:85:84:82:39: ce:1b:40:ab:4b:3d:de:0c:fc:48:14:7a:fb:83:b1: 29:7e:14:2e:35:4a:55:d9:b2:5e:7e:61:5a:97:ce: 55:71:73:be:42:07:93:fd:1c:b8:13:4e:79:6c:90: df:db:45:84:7f:c4:5a:b7:d4:49:8f:3f:6f:72:01: 0f:d2:9a:90:27:ce:b1:28:2d:37:9f:0d:d9:82:e7: 0e:f6:ad:4a:41:cc:9a:2c:b1:82:3e:5b:ef:f8:b2: 25:45:fb:8c:b4:22:2e:a3:b5:49:ad:50:ec:58:22: 64:21:10:20:33:ef:12:38:91:d1:bf:3a:75:e3:8c: a7:74:f1:3c:96:11:ff:a7:b7:72:c2:11:62:95:c8: 8e:ca:4c:cf:00:4a:07:0c:8e:b0:f0:4e:5d:bd:b7: 0c:dd:35:0d:4b:c1:ce:82:c8:86:e8:ad:44:53:80: cc:e5:50:bf:d0:58:0d:2f:17:d6:43:33:88:df:e2: e9:cf:cd:93:07:db:c1:ae:63:93:3a:80:87:23:5f: ec:23:c7:cd:03:45:8a:de:43:2a:0e:bd:c4:c0:8c: 04:28:15:05:50:60:ed:84:6d:b2:53:c1:0b:55:b0: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:58:1E:4E:6A:90:6A:A9:E6:00:8D:4E:82:63:E5:DD:22:21:42:4D X509v3 Authority Key Identifier: keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/0DA7E9A84E5E11F18A6201F7A4833773.roa sbgp-ipAddrBlock: critical IPv4: 103.116.170.0/23 103.227.234.0/23 Signature Algorithm: sha256WithRSAEncryption b4:51:ac:1b:57:38:dd:b6:9a:93:5b:59:b6:92:88:85:ab:78: a6:39:3c:b5:2a:44:52:77:b3:f5:78:26:f5:d2:42:7c:42:21: e4:ff:5b:90:42:d9:64:6f:51:e6:2d:cf:8d:64:38:d0:0d:ff: b9:7d:c3:0f:bc:cf:21:25:56:a8:1d:82:0a:21:1e:85:c7:71: 9a:b2:9f:1c:aa:a8:64:27:78:c9:97:75:9e:59:b4:29:fe:81: ba:b0:8a:3a:df:a2:30:91:59:9c:76:af:60:a3:ec:93:c9:c3: 5f:2f:cd:50:27:a3:bc:da:ca:83:5f:77:df:51:3b:c9:7c:31: 51:90:ca:6a:02:e0:4d:7b:f4:12:e4:d8:9a:4d:1f:37:d8:26: 6e:16:73:4f:68:eb:4b:aa:b5:fd:89:69:be:9b:a1:52:ee:26: 76:42:b3:54:5e:72:a3:a5:21:80:82:57:70:65:30:98:c4:a3: 60:37:44:38:0a:de:d1:08:69:9f:2a:bc:42:a8:63:a8:63:50: 05:d3:e0:ff:c2:11:78:f4:1e:a5:a8:0a:2d:87:e3:71:15:15: e2:48:9d:ce:a5:af:d4:93:d2:c8:bf:63:32:e3:fe:27:59:38: f1:d2:b6:d2:5d:98:27:db:1b:1d:da:2b:5a:c8:3b:2b:50:f0: 0a:ad:54:c5 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1QUUxMTAvBgNVBAUTKDAxREY2MTU3MjQ3N0EyMzBFNzlGOEYyOENGREQ2RDI4 Mzc3RjIyMkIwHhcNMjYwNTEzMDAyMjMwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTAzYzQ0Ni0zOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj9qgKxOY1PL60bGm93pw+kB9aGiQca6YFoWEgjnOG0CrSz3eDPxIFHr7g7Ep fhQuNUpV2bJefmFal85VcXO+QgeT/Ry4E055bJDf20WEf8Rat9RJjz9vcgEP0pqQ J86xKC03nw3ZgucO9q1KQcyaLLGCPlvv+LIlRfuMtCIuo7VJrVDsWCJkIRAgM+8S OJHRvzp144yndPE8lhH/p7dywhFilciOykzPAEoHDI6w8E5dvbcM3TUNS8HOgsiG 6K1EU4DM5VC/0FgNLxfWQzOI3+Lpz82TB9vBrmOTOoCHI1/sI8fNA0WK3kMqDr3E wIwEKBUFUGDthG2yU8ELVbB0uQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOFYHk5q kGqp5gCNToJj5d0iIUJNMB8GA1UdIwQYMBaAFAHfYVckd6Iw55+PKM/dbSg3fyIr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVBRS80NkQ0MjJGMDA3 RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29qRG5uNDhvejkxdEtEZF9J aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkOWhWeVIzb2pEbm40OG96OTF0S0RkX0lpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU1QUUvNDZENDIyRjAwN0QyMTFFQ0FBODJCNjExQzRGOUFFMDIvMERBN0U5QTg0 RTVFMTFGMThBNjIwMUY3QTQ4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ3SqAwQBZ+PqMA0GCSqGSIb3DQEBCwUAA4IBAQC0UawbVzjdtpqT W1m2koiFq3imOTy1KkRSd7P1eCb10kJ8QiHk/1uQQtlkb1HmLc+NZDjQDf+5fcMP vM8hJVaoHYIKIR6Fx3Gasp8cqqhkJ3jJl3WeWbQp/oG6sIo636IwkVmcdq9go+yT ycNfL81QJ6O82sqDX3ffUTvJfDFRkMpqAuBNe/QS5NiaTR832CZuFnNPaOtLqrX9 iWm+m6FS7iZ2QrNUXnKjpSGAgldwZTCYxKNgN0Q4Ct7RCGmfKrxCqGOoY1AF0+D/ whF49B6lqAoth+NxFRXiSJ3Opa/Uk9LIv2My4/4nWTjx0rbSXZgn2xsd2itayDsr UPAKrVTF -----END CERTIFICATE-----Generated at Wed May 13 03:55:58 2026 by rpki-client