$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/D39B04847C4B11EEB4EA3632C4F9AE02.roa File: D39B04847C4B11EEB4EA3632C4F9AE02.roa (raw, json) Hash identifier: yzSO4tM9nUI6xnt7Kh6rwJxk9dfi0T3Au+GC85D5PJE= Subject key identifier: 53:65:6D:5A:06:B4:01:34:05:AC:AD:DB:77:58:B7:B5:55:D2:76:FF Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 01C9 Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/D39B04847C4B11EEB4EA3632C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:09:13 +0000 ROA not before: Fri 29 Aug 2025 04:53:10 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 56038 IP address blocks: 103.247.184.0/24 maxlen: 24 103.247.185.0/24 maxlen: 24 103.247.186.0/24 maxlen: 24 103.247.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Validity Not Before: Aug 29 04:53:10 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a58bf9-2ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:97:70:a4:c7:2a:90:19:c5:d9:c3:02:a2: 8b:ee:30:03:50:fd:b0:f6:1b:86:c9:fe:51:0e:99: 71:1f:c1:1b:24:70:7d:c4:da:07:2d:f8:e4:b8:76: 8b:1a:60:6b:52:f7:85:38:74:a3:bd:8e:eb:11:f1: e3:78:56:1a:e1:7d:9d:e3:1e:68:86:0e:5d:5c:c6: 22:81:34:f0:32:d7:17:bf:90:6f:1a:c4:33:6e:2e: cf:b1:09:96:b8:3e:58:f4:c4:9e:ef:59:64:6a:04: 13:e7:b2:b5:af:ce:2c:d0:16:85:b3:e3:b1:8f:a9: c6:a9:7c:7a:5a:a8:82:09:fa:e5:c4:1f:6d:7e:23: d5:cd:33:d9:87:ba:20:e1:9a:53:bf:41:c0:e1:af: c4:e1:02:51:56:15:5a:57:71:7a:3d:8c:f0:42:de: 2b:81:5d:b4:71:8c:57:37:1c:11:bf:b0:6e:19:77: d7:3b:54:9d:6b:b1:61:97:03:21:82:39:31:d2:e3: b7:11:7c:b7:11:51:50:49:dc:af:5d:16:13:50:22: 40:90:a2:00:0a:3e:18:90:22:eb:10:75:43:75:76: 92:2f:5f:a5:db:bc:4b:c6:8b:c4:08:3f:f0:0b:66: 97:10:e2:8b:80:c8:fb:68:6d:d0:59:fb:7e:1d:22: f3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:65:6D:5A:06:B4:01:34:05:AC:AD:DB:77:58:B7:B5:55:D2:76:FF X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/D39B04847C4B11EEB4EA3632C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.247.184.0/22 Signature Algorithm: sha256WithRSAEncryption 66:80:7d:38:4c:86:d3:e6:85:94:6d:2f:2f:58:2f:6e:b5:6c: fd:92:aa:55:ac:21:8a:fa:e5:96:f9:fe:c1:c3:25:48:b7:13: d2:70:f6:21:28:9f:21:36:04:00:8e:35:4e:fe:f5:17:5a:e1: 8f:78:90:5a:e1:c7:3f:e8:f0:d9:31:cf:0e:82:9d:87:77:88: f2:88:0c:9c:e0:4d:7e:7a:59:3e:75:61:ed:60:bd:63:54:44: be:91:69:88:79:c7:57:50:8b:2e:ba:9b:f9:b5:75:85:fb:bf: 94:71:2c:23:2b:c1:b3:2d:c1:35:1f:2a:b5:6e:a5:e1:04:08: 3f:7a:3c:75:f5:ba:31:67:93:b3:3d:7e:65:bd:d7:ae:23:3d: 9f:24:14:bd:78:b7:ba:e4:a3:f3:0c:6d:b9:96:8a:a4:0a:85: c3:85:e3:41:90:72:f4:84:cd:5e:63:01:ce:d3:46:14:f3:b9: ad:ad:b4:e7:cc:e4:19:58:0f:f6:7b:2d:8c:68:77:35:ac:29: 21:7f:f2:ae:eb:2e:20:6e:84:96:04:ac:5c:66:89:c8:3f:7e: 4b:e1:50:d9:58:21:70:95:09:d5:cd:b8:ba:e9:bb:e3:3b:55: 62:1e:5e:bf:17:d8:a6:01:18:1d:1a:e5:a6:98:ab:35:2e:7f: 39:04:cd:87 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjUwODI5MDQ1MzEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGJmOS0yZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvaXcKTHKpAZxdnDAqKL7jADUP2w9huGyf5RDplxH8EbJHB9xNoHLfjkuHaL GmBrUveFOHSjvY7rEfHjeFYa4X2d4x5ohg5dXMYigTTwMtcXv5BvGsQzbi7PsQmW uD5Y9MSe71lkagQT57K1r84s0BaFs+Oxj6nGqXx6WqiCCfrlxB9tfiPVzTPZh7og 4ZpTv0HA4a/E4QJRVhVaV3F6PYzwQt4rgV20cYxXNxwRv7BuGXfXO1Sda7FhlwMh gjkx0uO3EXy3EVFQSdyvXRYTUCJAkKIACj4YkCLrEHVDdXaSL1+l27xLxovECD/w C2aXEOKLgMj7aG3QWft+HSLzOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFNlbVoG tAE0Bayt23dYt7VV0nb/MB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUU2NzgvN0FFRUQ4NjI3OTFBMTFFRUFDQTFBRDJCQzRGOUFFMDIvRDM5QjA0ODQ3 QzRCMTFFRUI0RUEzNjMyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/e4MA0GCSqGSIb3DQEBCwUAA4IBAQBmgH04TIbT5oWUbS8vWC9u tWz9kqpVrCGK+uWW+f7BwyVItxPScPYhKJ8hNgQAjjVO/vUXWuGPeJBa4cc/6PDZ Mc8Ogp2Hd4jyiAyc4E1+elk+dWHtYL1jVES+kWmIecdXUIsuupv5tXWF+7+UcSwj K8GzLcE1Hyq1bqXhBAg/ejx19boxZ5OzPX5lvdeuIz2fJBS9eLe65KPzDG25loqk CoXDheNBkHL0hM1eYwHO00YU87mtrbTnzOQZWA/2ey2MaHc1rCkhf/Ku6y4gboSW BKxcZonIP35L4VDZWCFwlQnVzbi66bvjO1ViHl6/F9imARgdGuWmmKs1Ln85BM2H -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:02 2026 by rpki-client