$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/41F88F22042111ED888BB024C4F9AE02.roa File: 41F88F22042111ED888BB024C4F9AE02.roa (raw, json) Hash identifier: aCy5PMuDzpryQuVwSt0E5y4Po7ZiB/Ss+uP5KTFzKkw= Subject key identifier: F3:BF:3C:54:31:90:A8:47:95:D5:30:0A:7F:82:42:27:C7:F1:16:F4 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 0373 Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/41F88F22042111ED888BB024C4F9AE02.roa Signing time: Fri 03 Jul 2026 01:27:23 +0000 ROA not before: Fri 03 Jul 2026 01:27:23 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 132730 IP address blocks: 103.240.112.0/22 maxlen: 22 103.240.112.0/24 maxlen: 24 103.240.113.0/24 maxlen: 24 103.240.114.0/24 maxlen: 24 103.240.115.0/24 maxlen: 24 120.136.24.0/21 maxlen: 21 120.136.24.0/24 maxlen: 24 120.136.25.0/24 maxlen: 24 120.136.26.0/24 maxlen: 24 120.136.27.0/24 maxlen: 24 120.136.28.0/24 maxlen: 24 120.136.29.0/24 maxlen: 24 120.136.30.0/24 maxlen: 24 120.136.31.0/24 maxlen: 24 124.108.48.0/21 maxlen: 21 124.108.48.0/24 maxlen: 24 124.108.49.0/24 maxlen: 24 124.108.50.0/24 maxlen: 24 124.108.51.0/24 maxlen: 24 124.108.52.0/23 maxlen: 24 124.108.54.0/24 maxlen: 24 124.108.55.0/24 maxlen: 24 183.81.184.0/21 maxlen: 21 183.81.184.0/24 maxlen: 24 183.81.185.0/24 maxlen: 24 183.81.186.0/24 maxlen: 24 183.81.187.0/24 maxlen: 24 183.81.188.0/24 maxlen: 24 183.81.189.0/24 maxlen: 24 183.81.190.0/24 maxlen: 24 183.81.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: Jul 3 01:27:23 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a470ffb-0dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:24:5e:95:05:f6:ec:91:63:14:4a:09:1c: 52:04:0d:c7:a3:12:a4:f1:be:84:73:b4:ed:f8:bd: e0:f6:8f:20:46:1b:f9:b5:07:3a:54:7f:be:1b:b0: 9d:5f:07:ee:a3:f2:28:91:54:32:a9:3d:2a:13:fa: 2e:19:75:37:e9:92:d3:4d:09:19:38:11:8c:b8:58: 41:54:71:0c:f2:bf:0b:90:77:f3:93:b3:81:99:48: 7f:3a:7f:d9:fc:d5:c8:66:d5:37:54:7d:e4:24:1e: 46:15:1a:52:06:f4:1e:fb:12:8a:32:98:60:70:35: 71:1a:49:47:1f:8c:d1:ad:6c:84:59:2e:9e:05:74: 2a:84:a5:36:7d:d1:87:29:59:d4:6c:cb:23:60:86: 0e:cc:c7:b0:a8:7a:67:3c:fb:ae:3c:10:74:ed:a3: 93:ec:3a:62:2b:97:2b:7b:ed:73:b5:1d:3f:f7:3c: ae:70:09:25:04:17:b0:fe:8a:fb:77:6e:2a:a4:bc: 72:3a:de:b6:0b:da:1f:7a:d2:ba:21:62:de:85:b3: cc:48:3e:59:10:fc:77:ce:1d:e9:92:16:35:44:56: ea:02:63:69:65:7c:e8:4e:ae:b5:5e:9e:fe:53:c6: a2:c3:3d:cb:3e:00:32:22:74:e9:e9:1b:c1:9a:01: 48:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BF:3C:54:31:90:A8:47:95:D5:30:0A:7F:82:42:27:C7:F1:16:F4 X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/41F88F22042111ED888BB024C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.240.112.0/22 120.136.24.0/21 124.108.48.0/21 183.81.184.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:fe:3a:a7:76:d0:c1:4a:89:d0:b8:c4:25:4c:34:c2:08:35: 47:05:0e:ab:fe:b8:b9:51:30:dd:76:55:57:c4:ca:fb:b9:a4: 7b:a6:46:81:8f:79:e6:d6:5a:41:4f:f8:98:bf:4e:16:2e:f5: 61:79:b3:81:52:58:68:20:59:80:af:4e:d3:2a:f7:35:70:a5: f0:67:01:a8:ad:5c:a5:5b:35:60:75:01:fd:91:1b:e0:d2:b0: be:78:c9:f6:dd:5c:2a:28:5e:04:8d:31:35:ab:63:e3:de:80: a6:be:6b:14:ae:dc:c9:b8:28:10:72:71:97:df:0b:a6:44:63: 9c:43:4c:87:87:f7:e0:f8:a2:19:e6:e4:5f:30:93:c2:86:2d: 43:ae:5f:bf:b8:89:cc:1c:e3:49:0f:a1:ad:77:d5:5a:98:1d: a8:86:aa:f3:4b:c0:45:ad:98:19:7b:d3:81:86:ed:e1:61:f8: bc:22:f9:e2:ca:9d:14:c0:0d:97:e3:eb:4e:16:e7:00:e7:f4: 23:06:13:fe:bc:5c:da:bf:79:c4:25:38:00:f6:6c:6c:f0:51: de:4f:b6:d2:0a:8a:40:36:06:58:37:09:af:af:f7:b6:06:76: 44:bb:15:d0:38:53:10:7e:9e:50:84:3a:0f:39:cd:55:aa:96: 41:a1:43:6c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjYwNzAzMDEyNzIzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3MGZmYi0wZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTkkXpUF9uyRYxRKCRxSBA3HoxKk8b6Ec7Tt+L3g9o8gRhv5tQc6VH++G7Cd Xwfuo/IokVQyqT0qE/ouGXU36ZLTTQkZOBGMuFhBVHEM8r8LkHfzk7OBmUh/On/Z /NXIZtU3VH3kJB5GFRpSBvQe+xKKMphgcDVxGklHH4zRrWyEWS6eBXQqhKU2fdGH KVnUbMsjYIYOzMewqHpnPPuuPBB07aOT7DpiK5cre+1ztR0/9zyucAklBBew/or7 d24qpLxyOt62C9ofetK6IWLehbPMSD5ZEPx3zh3pkhY1RFbqAmNpZXzoTq61Xp7+ U8aiwz3LPgAyInTp6RvBmgFIJQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFPO/PFQx kKhHldUwCn+CQifH8Rb0MB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJGNEYvQzVFMkQ3MUUwNDE5MTFFRDkxNTc2NTI4QzRGOUFFMDIvNDFGODhGMjIw NDIxMTFFRDg4OEJCMDI0QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCZ/BwAwQDeIgYAwQDfGwwAwQDt1G4MA0GCSqGSIb3DQEBCwUAA4IB AQA7/jqndtDBSonQuMQlTDTCCDVHBQ6r/ri5UTDddlVXxMr7uaR7pkaBj3nm1lpB T/iYv04WLvVhebOBUlhoIFmAr07TKvc1cKXwZwGorVylWzVgdQH9kRvg0rC+eMn2 3VwqKF4EjTE1q2Pj3oCmvmsUrtzJuCgQcnGX3wumRGOcQ0yHh/fg+KIZ5uRfMJPC hi1Drl+/uInMHONJD6Gtd9VamB2ohqrzS8BFrZgZe9OBhu3hYfi8Ivniyp0UwA2X 4+tOFucA5/QjBhP+vFzav3nEJTgA9mxs8FHeT7bSCopANgZYNwmvr/e2BnZEuxXQ OFMQfp5QhDoPOc1VqpZBoUNs -----END CERTIFICATE-----Generated at Fri Jul 24 11:20:11 2026 by rpki-client