$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa File: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (raw, json) Hash identifier: nbXF9K4to2LuEPQSJW4J/x772YkxMatEHSBdH9bhwIo= Subject key identifier: 24:85:52:A8:97:97:0C:55:70:0B:01:DE:4E:99:32:E7:54:12:63:71 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0E5C Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa Signing time: Wed 22 Jul 2026 18:18:53 +0000 ROA not before: Wed 22 Jul 2026 18:18:53 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 24382 IP address blocks: 103.141.66.0/23 maxlen: 24 2001:df0:f380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3676 (0xe5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Jul 22 18:18:53 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a61098d-7958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:3a:46:cc:b0:46:a2:df:79:cd:cc:c9:cd: 13:df:51:ea:a5:b0:9c:6b:a7:07:81:e8:a3:08:e8: 24:21:94:16:24:74:3d:e4:69:eb:f8:fb:34:5b:93: e4:bf:dc:e3:d3:a1:08:80:c1:0c:7b:2a:df:af:44: 8a:60:08:8a:7c:2c:d2:f2:b3:7e:30:cc:dc:7b:ef: a4:1a:26:6d:a0:cb:92:58:f9:ca:06:30:3b:6d:51: 8f:0a:7d:77:f2:5f:d4:d7:25:3f:2e:e4:e4:ac:2a: 71:f2:b2:6a:0e:99:dc:c6:f9:8f:63:94:ac:1f:d1: f7:3e:7c:99:b1:8e:62:4a:80:be:00:10:28:8a:00: 57:0e:53:52:48:c8:fd:cc:38:1c:ba:e4:cc:76:83: e8:2f:4e:27:4c:8e:8e:91:f0:8d:09:3f:64:68:0d: e7:a1:02:c6:1c:71:ca:b2:6c:e9:81:ea:70:4a:f7: b2:d2:d6:64:1a:dc:1a:8f:48:d7:66:da:ad:81:25: ea:b3:e8:73:47:ca:92:43:35:78:0c:a6:78:c6:9d: 5c:d0:94:39:ba:dd:89:21:7a:8d:3e:ac:3d:62:e2: da:a0:05:ba:6c:12:42:43:86:c6:b7:40:ed:d5:db: f0:49:1d:14:65:d4:43:a4:bd:79:16:b3:86:74:e7: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:85:52:A8:97:97:0C:55:70:0B:01:DE:4E:99:32:E7:54:12:63:71 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.141.66.0/23 IPv6: 2001:df0:f380::/48 Signature Algorithm: sha256WithRSAEncryption b4:b4:42:5a:b5:fa:c2:e3:61:59:d2:8c:90:e6:0e:4f:02:85: 00:fd:5a:15:81:07:3d:38:59:c6:0e:76:02:a7:65:01:8b:a7: 77:04:cb:37:31:f7:8e:4a:d5:1d:4e:23:6c:89:73:ac:69:0c: 8a:4a:23:75:54:d9:31:88:18:b6:08:41:91:0a:b8:08:a9:55: c8:a2:68:34:32:d7:4b:f6:27:ed:8d:09:f4:d7:7b:39:4c:af: 07:45:d8:5b:37:b3:03:01:11:48:ea:59:0f:ae:37:c6:31:6d: 58:9e:ee:17:71:d3:e7:00:3a:54:c4:54:f3:e3:84:15:ed:2f: da:25:4b:c3:91:cd:05:74:8f:b1:b0:b3:61:83:e6:b3:d0:1a: 87:90:c8:bc:03:18:03:6b:95:21:4e:24:70:2c:b1:11:e3:ba: 52:8b:b2:a9:c0:95:e8:a8:85:2a:c1:4e:94:56:04:6e:4c:38: 29:18:1f:fe:07:b1:18:d9:d5:1c:cb:7b:c5:e2:3f:44:84:4d: a1:27:b6:c8:c5:05:ec:c0:0b:df:71:4e:ce:cf:dd:2a:0d:95: 86:88:08:cd:67:0a:9c:b9:3b:f3:a0:35:27:97:93:16:75:35: 2e:37:1a:cc:5a:6e:26:80:e3:ad:28:fd:ce:fd:4a:c2:92:d1: 91:a6:32:47 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjYwNzIyMTgxODUzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxMDk4ZC03OTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fw6RsywRqLfec3Myc0T31HqpbCca6cHgeijCOgkIZQWJHQ95Gnr+Ps0W5Pk v9zj06EIgMEMeyrfr0SKYAiKfCzS8rN+MMzce++kGiZtoMuSWPnKBjA7bVGPCn13 8l/U1yU/LuTkrCpx8rJqDpncxvmPY5SsH9H3PnyZsY5iSoC+ABAoigBXDlNSSMj9 zDgcuuTMdoPoL04nTI6OkfCNCT9kaA3noQLGHHHKsmzpgepwSvey0tZkGtwaj0jX ZtqtgSXqs+hzR8qSQzV4DKZ4xp1c0JQ5ut2JIXqNPqw9YuLaoAW6bBJCQ4bGt0Dt 1dvwSR0UZdRDpL15FrOGdOc3bQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCSFUqiX lwxVcAsB3k6ZMudUEmNxMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYxN0UvRTFBREI3NDZDOTk1MTFFOUJBQUFCMTc0QzRGOUFFMDIvREJEQUZGNkND OTk2MTFFOUE0MUJDRjc1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ41CMA8EAgACMAkDBwAgAQ3w84AwDQYJKoZIhvcNAQELBQADggEB ALS0Qlq1+sLjYVnSjJDmDk8ChQD9WhWBBz04WcYOdgKnZQGLp3cEyzcx945K1R1O I2yJc6xpDIpKI3VU2TGIGLYIQZEKuAipVciiaDQy10v2J+2NCfTXezlMrwdF2Fs3 swMBEUjqWQ+uN8YxbVie7hdx0+cAOlTEVPPjhBXtL9olS8ORzQV0j7Gws2GD5rPQ GoeQyLwDGANrlSFOJHAssRHjulKLsqnAleiohSrBTpRWBG5MOCkYH/4HsRjZ1RzL e8XiP0SETaEntsjFBezAC99xTs7P3SoNlYaICM1nCpy5O/OgNSeXkxZ1NS43Gsxa biaA460o/c79SsKS0ZGmMkc= -----END CERTIFICATE-----Generated at Fri Jul 24 00:22:13 2026 by rpki-client