$ rpki-client -vvf rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/F70C0B5E4A8C11F18179024696EE528E.roa File: F70C0B5E4A8C11F18179024696EE528E.roa (raw, json) Hash identifier: BcPA+kBAWewJTEaX67GywprKBkDhJopRXac8MDudoCg= Subject key identifier: 4B:92:92:A4:C9:DE:99:B7:5B:79:60:A9:B5:23:2D:36:1D:DC:2E:3B Certificate issuer: /CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Certificate serial: 0E88 Authority key identifier: 29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/F70C0B5E4A8C11F18179024696EE528E.roa Signing time: Sat 06 Jun 2026 18:21:21 +0000 ROA not before: Sat 06 Jun 2026 18:21:21 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 137843 IP address blocks: 103.104.242.0/23 maxlen: 24 2001:df7:540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3720 (0xe88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F521, serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Validity Not Before: Jun 6 18:21:21 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a246521-fca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:29:d4:d7:f5:9e:0f:2e:97:0d:df:a6:3b: aa:ab:af:18:f8:aa:9b:5a:cd:5a:55:db:be:4b:ee: e9:ee:df:8c:a0:09:92:d6:14:41:7c:ee:38:02:b2: 76:e6:ac:4e:4c:e3:60:95:db:71:09:2f:95:23:64: a5:35:88:8b:21:76:dd:cd:91:d3:96:94:d7:91:e1: 0d:f7:b3:48:27:fa:49:13:04:f4:5e:77:ab:b1:0b: 9d:00:f9:15:68:83:c3:a9:1b:e8:52:00:11:82:c0: d1:2b:8d:51:a8:b3:83:9d:f5:37:b2:be:a1:7f:8f: 35:c1:5a:cd:dd:a1:26:ce:d3:25:17:c5:cd:ca:0d: e2:29:c2:8e:45:c9:e3:aa:a0:f0:14:7c:22:d9:0d: a0:77:10:ed:d2:3c:ad:38:30:ba:d0:07:13:04:c6: d1:ec:f8:c9:98:b8:aa:f5:75:f1:3e:cb:dc:d4:b4: 0e:67:3c:b5:f4:27:88:dc:5b:a5:da:94:0f:3f:2c: c7:12:78:fa:ff:5c:9d:67:2b:26:b3:b5:dd:5b:05: b6:67:42:06:82:11:49:c1:59:53:0f:41:4c:8e:c3: 7d:ea:9d:81:4e:3b:85:6f:88:3f:73:e4:55:b0:eb: 57:41:9a:11:d3:f7:d6:58:70:aa:1a:9b:dc:5f:e2: 68:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:92:92:A4:C9:DE:99:B7:5B:79:60:A9:B5:23:2D:36:1D:DC:2E:3B X509v3 Authority Key Identifier: keyid:29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/F70C0B5E4A8C11F18179024696EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.104.242.0/23 IPv6: 2001:df7:540::/48 Signature Algorithm: sha256WithRSAEncryption 73:a3:49:e4:ba:3f:c4:e9:d2:ab:c0:dc:aa:4b:ed:e8:35:e4: 56:5d:0a:9b:47:69:04:71:e0:ec:7e:85:fd:cd:ce:ec:ce:0c: d4:b3:1e:b4:fc:a2:d3:b0:bf:e5:9b:bb:59:84:b2:0c:d3:d2: 40:15:98:24:6f:50:61:75:47:56:e4:30:7f:76:9a:30:3e:6d: bb:bf:31:b0:52:89:74:e4:0a:fa:56:be:bd:67:cf:3e:cc:d3: 15:e9:94:f0:b1:f1:81:74:97:c5:d6:e3:db:ab:85:a8:67:8e: f4:ba:02:26:54:30:7c:ff:2d:99:9f:6f:f6:cc:46:fa:96:c7: 4e:e6:62:32:60:29:2f:04:91:87:21:90:e7:e8:7a:cd:39:87: 3f:94:53:39:33:53:f8:58:8e:df:97:9a:e6:55:b0:e5:11:a4: 80:f0:68:ff:fe:82:09:fb:f4:1e:f1:c6:16:1b:5a:d6:f6:10: 54:fd:83:55:a8:ee:b2:7f:fd:01:6a:d0:74:6e:aa:5b:bb:7d: 82:e7:b5:f5:72:4d:e2:68:e6:a0:f4:4e:83:ff:10:de:d2:dc: 2f:a1:9f:c1:7e:f9:18:f2:1e:8b:f8:6e:41:64:47:fd:3f:b2: 34:c3:83:68:31:86:37:54:71:99:7c:91:28:6a:29:a1:fe:4d: fd:7d:cd:4f -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY1MjExMTAvBgNVBAUTKDI5NzY4NzY3NTNENjU1NjJBN0NBODVFM0U5RThERjc1 MDc5N0M5NDgwHhcNMjYwNjA2MTgyMTIxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTI0NjUyMS1mY2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17op1Nf1ng8ulw3fpjuqq68Y+KqbWs1aVdu+S+7p7t+MoAmS1hRBfO44ArJ2 5qxOTONgldtxCS+VI2SlNYiLIXbdzZHTlpTXkeEN97NIJ/pJEwT0XnersQudAPkV aIPDqRvoUgARgsDRK41RqLODnfU3sr6hf481wVrN3aEmztMlF8XNyg3iKcKORcnj qqDwFHwi2Q2gdxDt0jytODC60AcTBMbR7PjJmLiq9XXxPsvc1LQOZzy19CeI3Ful 2pQPPyzHEnj6/1ydZysms7XdWwW2Z0IGghFJwVlTD0FMjsN96p2BTjuFb4g/c+RV sOtXQZoR0/fWWHCqGpvcX+JofQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEuSkqTJ 3pm3W3lgqbUjLTYd3C47MB8GA1UdIwQYMBaAFCl2h2dT1lVip8qF4+no33UHl8lI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjUyMS8yMTY1ODgyMEM2 N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZXS255b1hqNmVqZmRRZVh5 VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tYYUhaMVBXVldLbnlvWGo2ZWpmZFFlWHlVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEY1MjEvMjE2NTg4MjBDNjdFMTFFOUFGM0JBNzY1QzRGOUFFMDIvRjcwQzBCNUU0 QThDMTFGMTgxNzkwMjQ2OTZFRTUyOEUucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ2jyMA8EAgACMAkDBwAgAQ33BUAwDQYJKoZIhvcNAQELBQADggEB AHOjSeS6P8Tp0qvA3KpL7eg15FZdCptHaQRx4Ox+hf3NzuzODNSzHrT8otOwv+Wb u1mEsgzT0kAVmCRvUGF1R1bkMH92mjA+bbu/MbBSiXTkCvpWvr1nzz7M0xXplPCx 8YF0l8XW49urhahnjvS6AiZUMHz/LZmfb/bMRvqWx07mYjJgKS8EkYchkOfoes05 hz+UUzkzU/hYjt+XmuZVsOURpIDwaP/+ggn79B7xxhYbWtb2EFT9g1Wo7rJ//QFq 0HRuqlu7fYLntfVyTeJo5qD0ToP/EN7S3C+hn8F++RjyHov4bkFkR/0/sjTDg2gx hjdUcZl8kShqKaH+Tf19zU8= -----END CERTIFICATE-----Generated at Fri Jul 24 17:48:30 2026 by rpki-client