$ rpki-client -vvf rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/AFB3319E5F0C11EC8C2C2820C4F9AE02.roa File: AFB3319E5F0C11EC8C2C2820C4F9AE02.roa (raw, json) Hash identifier: ecl0KEI04tKIx6Q9ASLg+gdoc5e4DbLalDemlWidKHU= Subject key identifier: 4E:3B:7C:50:60:D0:63:02:62:5C:77:54:35:51:01:B3:F9:D8:59:36 Certificate issuer: /CN=A915A921/serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54 Certificate serial: 0943 Authority key identifier: EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/AFB3319E5F0C11EC8C2C2820C4F9AE02.roa Signing time: Thu 02 Jul 2026 21:21:11 +0000 ROA not before: Thu 02 Jul 2026 21:21:11 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 140705 IP address blocks: 103.152.10.0/23 maxlen: 24 2001:df3:eb80::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2371 (0x943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A921, serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54 Validity Not Before: Jul 2 21:21:11 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a46d647-3180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:d7:e1:a4:84:c2:62:26:c1:5f:ad:95:d9: 15:8e:ca:43:33:a8:d2:0b:ea:7f:e2:4b:35:c4:24: 9b:5c:de:48:37:f9:b7:73:7d:29:30:5a:1e:77:eb: 98:b1:97:c7:9f:46:57:5f:7d:b6:31:81:db:18:32: ae:52:fb:2e:b0:44:d7:6a:7a:5b:4f:85:80:cf:64: 14:ac:d2:02:4c:b2:9f:b8:2d:cc:71:49:1b:34:3b: 6f:f5:76:22:c6:2d:18:9c:e4:d7:66:d0:b4:9c:e0: 2b:75:b6:cc:a4:58:c6:98:d0:cd:ed:5f:ea:e6:4d: 39:5c:76:ae:bd:30:d3:72:a0:a4:01:56:48:13:3e: 57:fe:e6:69:ce:61:eb:94:10:4b:52:93:69:8b:8b: dc:f2:3f:fd:99:98:69:b4:9c:61:dd:90:ef:fb:d3: 30:de:38:77:e3:a8:be:f5:5f:f5:ae:9a:76:c3:e4: d3:f3:47:fb:4e:db:9a:6a:34:e3:6c:1f:de:2d:6d: 5f:b9:a0:90:10:05:3b:8c:49:bd:5f:23:16:f1:5e: 98:24:e2:98:4b:75:5c:b6:1d:7a:fc:5a:45:7c:9b: c7:a3:e4:8b:c2:9f:5d:8f:1a:4a:fe:95:67:ff:28: 3e:b4:28:58:8f:66:6c:4a:9f:80:0d:23:f4:b5:46: 0e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3B:7C:50:60:D0:63:02:62:5C:77:54:35:51:01:B3:F9:D8:59:36 X509v3 Authority Key Identifier: keyid:EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/AFB3319E5F0C11EC8C2C2820C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.10.0/23 IPv6: 2001:df3:eb80::/48 Signature Algorithm: sha256WithRSAEncryption e3:42:b8:b7:3e:0f:78:2d:3b:a8:23:e5:ec:56:ce:7f:91:ff: 30:0d:30:c3:7e:0b:ad:db:5d:1b:ec:79:65:85:9c:ab:bd:f0: b1:51:6b:63:13:1a:d6:c1:ec:0f:59:55:35:02:9a:a1:aa:4c: 4b:7a:e2:21:79:44:e0:85:d4:be:60:6f:10:9d:6b:4c:35:4a: b9:c3:76:25:60:96:4d:cf:62:cd:f1:27:f5:7e:bc:9e:50:c6: cb:b0:bd:97:dc:4c:dc:19:6e:48:52:c6:21:94:34:e7:f4:5d: d5:19:8f:da:79:91:fe:89:bb:96:19:9d:bb:77:38:9f:ee:5e: 18:ac:06:92:a7:cc:b2:e4:fd:4d:6f:7b:63:38:12:01:92:c1: 9e:cf:f2:1e:b7:40:bc:0e:17:e8:30:30:b8:ba:69:0d:22:77: 9a:4c:f8:80:6a:0c:a4:e9:95:c3:05:64:0b:35:d6:3e:71:1f: fe:2a:be:8c:c1:b4:01:08:0b:2c:ac:f1:9a:45:20:d1:70:d4: c6:34:56:34:db:c4:3c:f5:d9:ab:b0:f1:1f:83:ba:c0:47:4f: e8:75:f4:98:c6:ae:1b:7c:6d:d3:fd:1c:eb:e1:87:17:7e:23: 11:55:ec:6d:b9:18:54:83:27:89:a6:d7:af:8b:73:fe:24:17: fb:6d:3a:fc -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE5MjExMTAvBgNVBAUTKEVGQTZDMUU2RUNGQUQxRTg4QTlGNDREMjgwMDJFRUQ2 MzlCMkJBNTQwHhcNMjYwNzAyMjEyMTExWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2ZDY0Ny0zMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut/X4aSEwmImwV+tldkVjspDM6jSC+p/4ks1xCSbXN5IN/m3c30pMFoed+uY sZfHn0ZXX322MYHbGDKuUvsusETXanpbT4WAz2QUrNICTLKfuC3McUkbNDtv9XYi xi0YnOTXZtC0nOArdbbMpFjGmNDN7V/q5k05XHauvTDTcqCkAVZIEz5X/uZpzmHr lBBLUpNpi4vc8j/9mZhptJxh3ZDv+9Mw3jh346i+9V/1rpp2w+TT80f7TtuaajTj bB/eLW1fuaCQEAU7jEm9XyMW8V6YJOKYS3Vcth16/FpFfJvHo+SLwp9djxpK/pVn /yg+tChYj2ZsSp+ADSP0tUYOeQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFE47fFBg 0GMCYlx3VDVRAbP52Fk2MB8GA1UdIwQYMBaAFO+mwebs+tHoip9E0oAC7tY5srpU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTkyMS9FMzhEMTgyRUM1 QjQxMUVBOTkyNkM4MURDNEY5QUUwMi83NmJCNXV6NjBlaUtuMFRTZ0FMdTFqbXl1 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc2YkI1dXo2MGVpS24wVFNnQUx1MWpteXVsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUE5MjEvRTM4RDE4MkVDNUI0MTFFQTk5MjZDODFEQzRGOUFFMDIvQUZCMzMxOUU1 RjBDMTFFQzhDMkMyODIwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5gKMA8EAgACMAkDBwAgAQ3z64AwDQYJKoZIhvcNAQELBQADggEB AONCuLc+D3gtO6gj5exWzn+R/zANMMN+C63bXRvseWWFnKu98LFRa2MTGtbB7A9Z VTUCmqGqTEt64iF5ROCF1L5gbxCda0w1SrnDdiVglk3PYs3xJ/V+vJ5QxsuwvZfc TNwZbkhSxiGUNOf0XdUZj9p5kf6Ju5YZnbt3OJ/uXhisBpKnzLLk/U1ve2M4EgGS wZ7P8h63QLwOF+gwMLi6aQ0id5pM+IBqDKTplcMFZAs11j5xH/4qvozBtAEICyys 8ZpFINFw1MY0VjTbxDz12auw8R+DusBHT+h19JjGrht8bdP9HOvhhxd+IxFV7G25 GFSDJ4mm16+Lc/4kF/ttOvw= -----END CERTIFICATE-----Generated at Fri Jul 24 14:27:01 2026 by rpki-client