$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/3103D08881EE11F1BCCFB8F676A30FBC.roa File: 3103D08881EE11F1BCCFB8F676A30FBC.roa (raw, json) Hash identifier: 0F75vGJp7QEVxmzwvf+1elG3eEW1I0YdTbfCV7Eu7Ww= Subject key identifier: 30:BD:BA:AA:91:BA:3D:C9:45:3F:5C:AF:49:FC:AD:3E:39:3A:93:D7 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 10BF Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/3103D08881EE11F1BCCFB8F676A30FBC.roa Signing time: Fri 17 Jul 2026 14:45:45 +0000 ROA not before: Fri 17 Jul 2026 14:45:45 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133933 IP address blocks: 14.192.128.0/19 maxlen: 19 14.192.128.0/24 maxlen: 24 14.192.129.0/24 maxlen: 24 14.192.130.0/24 maxlen: 24 14.192.132.0/24 maxlen: 24 14.192.136.0/24 maxlen: 24 14.192.139.0/24 maxlen: 24 14.192.140.0/24 maxlen: 24 14.192.141.0/24 maxlen: 24 14.192.146.0/24 maxlen: 24 14.192.147.0/24 maxlen: 24 14.192.148.0/24 maxlen: 24 14.192.152.0/24 maxlen: 24 14.192.157.0/24 maxlen: 24 14.192.159.0/24 maxlen: 24 103.20.132.0/24 maxlen: 24 103.20.134.0/24 maxlen: 24 103.20.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4287 (0x10bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Jul 17 14:45:45 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6a5a4019-5d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:b3:72:28:fd:5c:86:6c:c7:98:59:c6:fa: 2f:49:d0:6f:f2:c2:fa:c7:32:db:8c:3b:32:48:77: 88:3a:b1:49:97:3b:84:48:74:3a:26:fb:59:19:e8: 12:30:9e:88:34:66:cf:6c:28:81:cc:c4:6d:7f:4a: eb:e2:da:b8:01:1b:c5:be:9f:b6:52:9c:3b:7c:83: b3:6f:60:40:6a:b1:b0:60:dc:30:89:bd:3b:8f:32: c5:f2:17:64:b4:63:93:64:a3:b0:20:ff:19:ca:c3: 5d:bf:a0:04:14:52:37:5a:37:b9:65:48:fc:40:a3: c1:dd:ed:f4:89:ee:2e:ae:5a:ca:e7:6c:f0:19:4c: 95:5a:31:e8:05:87:98:a8:e9:fd:37:d3:5c:33:b9: ad:52:17:6c:ff:e7:c6:60:2a:3d:ff:05:64:45:37: 43:a6:e7:4b:0e:6d:66:5c:f0:c9:ed:62:e2:83:f6: 9f:29:7f:a0:0a:c8:44:a3:33:f6:24:de:ec:3b:4a: 6f:3d:2e:42:0d:b5:b1:0b:b0:58:3a:3f:e0:f3:90: 15:14:b5:88:20:15:a6:40:3f:1a:c8:bc:ed:7b:7a: 1b:34:09:46:2d:a3:cb:f5:10:27:39:88:c4:74:9b: ab:49:1f:04:0a:fc:4b:cf:74:96:eb:a6:19:de:30: 2b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BD:BA:AA:91:BA:3D:C9:45:3F:5C:AF:49:FC:AD:3E:39:3A:93:D7 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/3103D08881EE11F1BCCFB8F676A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 14.192.128.0/19 103.20.132.0/24 103.20.134.0/23 Signature Algorithm: sha256WithRSAEncryption a3:a2:b6:66:35:da:af:06:3b:1b:9d:8c:a5:9f:63:37:3a:69: c8:fe:8f:e6:ee:19:36:fa:7c:3f:a5:3b:73:8a:47:19:f2:e0: 91:64:50:64:39:a9:b0:fd:0a:8b:05:71:de:c5:c0:d0:ad:5b: 1c:b8:2a:96:e1:eb:07:52:1a:49:22:a2:5a:6a:2e:e2:2a:4c: 61:2d:e4:eb:dc:0f:f2:6c:4e:88:b5:aa:91:79:cd:30:f1:00: 80:7a:03:49:a3:5c:42:b4:c8:2d:0c:21:e3:3f:8a:74:92:27: 2c:e4:1b:e7:c5:2d:7a:08:8c:ec:cd:26:af:3e:91:76:3e:f5: b3:cb:41:41:aa:35:aa:9d:97:52:bf:49:0a:b1:09:f4:79:25: f6:24:3d:4d:d1:b5:2b:f8:f4:69:f3:6d:34:91:f6:42:39:6d: ab:5b:e7:f7:3d:79:99:b6:fa:c6:df:25:0c:fd:93:0c:14:50: 01:e5:21:bf:58:00:d3:c8:e6:83:fb:3e:8b:95:c3:85:14:95: 35:e0:77:b5:a0:19:92:7a:30:8d:62:7d:de:d3:e7:8c:6d:3c: 92:e2:d1:45:7b:f7:68:d4:43:db:c7:29:63:7c:a5:3b:1f:cf: 22:12:85:7e:98:ec:ba:8b:6a:97:fe:52:0a:99:c9:22:b3:06: 82:0f:f7:09 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICEL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjYwNzE3MTQ0NTQ1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVhNDAxOS01ZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyWzcij9XIZsx5hZxvovSdBv8sL6xzLbjDsySHeIOrFJlzuESHQ6JvtZGegS MJ6INGbPbCiBzMRtf0rr4tq4ARvFvp+2Upw7fIOzb2BAarGwYNwwib07jzLF8hdk tGOTZKOwIP8ZysNdv6AEFFI3Wje5ZUj8QKPB3e30ie4urlrK52zwGUyVWjHoBYeY qOn9N9NcM7mtUhds/+fGYCo9/wVkRTdDpudLDm1mXPDJ7WLig/afKX+gCshEozP2 JN7sO0pvPS5CDbWxC7BYOj/g85AVFLWIIBWmQD8ayLzte3obNAlGLaPL9RAnOYjE dJurSR8ECvxLz3SW66YZ3jArGQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDC9uqqR uj3JRT9cr0n8rT45OpPXMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMzEwM0QwODg4 MUVFMTFGMUJDQ0ZCOEY2NzZBMzBGQkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQFDsCAAwQAZxSEAwQBZxSGMA0GCSqGSIb3DQEBCwUAA4IBAQCjorZm NdqvBjsbnYyln2M3OmnI/o/m7hk2+nw/pTtzikcZ8uCRZFBkOamw/QqLBXHexcDQ rVscuCqW4esHUhpJIqJaai7iKkxhLeTr3A/ybE6ItaqRec0w8QCAegNJo1xCtMgt DCHjP4p0kics5BvnxS16CIzszSavPpF2PvWzy0FBqjWqnZdSv0kKsQn0eSX2JD1N 0bUr+PRp8200kfZCOW2rW+f3PXmZtvrG3yUM/ZMMFFAB5SG/WADTyOaD+z6LlcOF FJU14He1oBmSejCNYn3e0+eMbTyS4tFFe/do1EPbxyljfKU7H88iEoV+mOy6i2qX /lIKmckiswaCD/cJ -----END CERTIFICATE-----Generated at Thu Jul 23 21:27:03 2026 by rpki-client