$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/9D0BDA0AD09111F0847B8D52C4F9AE02.roa File: 9D0BDA0AD09111F0847B8D52C4F9AE02.roa (raw, json) Hash identifier: d2qnOMj+4aMvpadCEEalUtvRb5DNsG3YqUzCX2r+V1g= Subject key identifier: A5:C7:9F:67:37:19:F3:46:D3:10:A9:B5:AB:38:81:9E:92:52:22:7F Certificate issuer: /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Certificate serial: 3580 Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/9D0BDA0AD09111F0847B8D52C4F9AE02.roa Signing time: Sat 04 Jul 2026 15:10:27 +0000 ROA not before: Sat 04 Jul 2026 15:10:27 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 56089 IP address blocks: 103.24.112.0/22 maxlen: 22 114.69.176.0/20 maxlen: 20 175.158.128.0/18 maxlen: 18 202.22.128.0/19 maxlen: 19 202.166.176.0/21 maxlen: 21 203.104.48.0/20 maxlen: 20 2404:2a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13696 (0x3580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E742, serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Validity Not Before: Jul 4 15:10:27 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a492263-bf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:4b:16:32:d4:73:d2:69:44:2b:5f:cb:01: ae:48:5e:96:de:29:50:e2:24:7d:d7:b5:a8:3b:9f: ee:82:70:50:dc:77:7d:4d:0d:54:b1:42:25:c4:8b: cb:12:44:c4:31:46:dc:e4:b1:b2:28:7e:f4:63:bc: 68:1e:b9:99:55:7e:0a:af:70:68:75:91:17:11:8a: 48:53:93:4e:e9:34:34:6d:fa:d2:a0:59:83:48:5d: 33:41:9f:f3:72:9e:f7:0c:1a:ff:07:bd:52:71:ea: a4:2d:76:d2:3d:1d:45:40:b6:8f:17:23:87:67:6a: 90:3b:4d:79:eb:9f:2e:9d:9f:56:98:4b:8a:26:4b: 0d:22:b7:89:58:2f:f5:fa:af:89:0a:30:93:cb:7d: bc:57:c1:ec:2f:96:23:b1:19:09:98:8a:e4:14:ac: ee:4e:39:ca:4d:51:cb:88:29:f6:ff:af:00:e7:09: 76:74:00:a4:9c:22:eb:3c:98:23:0b:78:6c:65:c2: e5:b6:85:da:84:92:27:d1:2c:b1:f2:6f:6c:4a:05: 72:ce:0f:e5:a0:bc:a5:06:20:3b:f1:e6:d6:68:d6: c7:69:ba:b0:19:b0:93:f3:bb:1f:6b:60:7e:da:58: 00:fd:48:54:98:a1:41:a3:02:d8:13:e3:be:b8:fc: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C7:9F:67:37:19:F3:46:D3:10:A9:B5:AB:38:81:9E:92:52:22:7F X509v3 Authority Key Identifier: keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/9D0BDA0AD09111F0847B8D52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.112.0/22 114.69.176.0/20 175.158.128.0/18 202.22.128.0/19 202.166.176.0/21 203.104.48.0/20 IPv6: 2404:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 28:5a:cf:b2:a8:bb:f3:fa:dd:2b:4d:c0:e7:b9:08:c8:21:a2: 50:15:39:d0:43:3f:fc:99:4b:df:eb:9b:9b:e6:0a:b8:25:c7: 0c:6f:80:a8:58:0f:e7:a6:fb:73:4c:e9:32:60:fe:5d:36:17: 9e:e5:0d:b9:b2:fd:1f:8e:74:3a:9f:93:5e:7f:fb:32:2c:24: d2:41:77:aa:a8:3b:23:aa:8c:99:4b:55:7a:97:84:a9:fe:81: 69:80:42:18:b4:0a:43:36:be:2e:91:91:bd:73:14:d2:5f:41: 77:f4:e5:c6:4d:eb:32:f8:74:6f:bc:14:96:fd:9a:d4:c2:29: 3b:a2:45:6a:36:da:74:8d:57:25:80:c6:26:9c:68:4e:87:09: 54:fd:6e:da:a0:62:cc:9d:84:c1:db:71:69:8f:65:f4:57:50: f3:c5:00:f6:65:d9:30:af:ed:51:d7:0d:9b:f3:80:35:cb:5c: 52:ba:5b:1c:74:74:97:58:c9:9e:4e:11:95:97:bc:24:2c:7e: d7:66:39:93:5b:f1:8e:2c:57:6e:64:3a:2d:ba:e2:ae:47:63: 92:0c:f3:b4:e6:4f:69:bf:6c:e2:12:65:a2:29:c5:d4:e6:15: 2f:36:c7:d3:c2:10:25:2d:17:a5:9d:f4:50:da:74:30:8e:53: 89:25:39:cd -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICNYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NDIxMTAvBgNVBAUTKDYwOTdCMzRENjc0MDEzMjgwNjI5Rjg4NUNBOTAzRkQ2 OUFCOTVCRTMwHhcNMjYwNzA0MTUxMDI3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5MjI2My1iZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApidLFjLUc9JpRCtfywGuSF6W3ilQ4iR917WoO5/ugnBQ3Hd9TQ1UsUIlxIvL EkTEMUbc5LGyKH70Y7xoHrmZVX4Kr3BodZEXEYpIU5NO6TQ0bfrSoFmDSF0zQZ/z cp73DBr/B71SceqkLXbSPR1FQLaPFyOHZ2qQO015658unZ9WmEuKJksNIreJWC/1 +q+JCjCTy328V8HsL5YjsRkJmIrkFKzuTjnKTVHLiCn2/68A5wl2dACknCLrPJgj C3hsZcLltoXahJIn0Syx8m9sSgVyzg/loLylBiA78ebWaNbHabqwGbCT87sfa2B+ 2lgA/UhUmKFBowLYE+O+uPyJowIDAQABo4ICjTCCAokwHQYDVR0OBBYEFKXHn2c3 GfNG0xCptas4gZ6SUiJ/MB8GA1UdIwQYMBaAFGCXs01nQBMoBin4hcqQP9aauVvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc0Mi8yRUQwRjVGQzFE ODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5Z0dLZmlGeXBBXzFwcTVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKZXpUV2RBRXlnR0tmaUZ5cEFfMXBxNVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUU3NDIvMkVEMEY1RkMxRDg1MTFFMkIwMzJBOURCMDhCMDJDRDIvOUQwQkRBMEFE MDkxMTFGMDg0N0I4RDUyQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQCZxhwAwQEckWwAwQGr56AAwQFyhaAAwQDyqawAwQEy2gwMA0EAgAC MAcDBQAkBCoAMA0GCSqGSIb3DQEBCwUAA4IBAQAoWs+yqLvz+t0rTcDnuQjIIaJQ FTnQQz/8mUvf65ub5gq4JccMb4CoWA/npvtzTOkyYP5dNhee5Q25sv0fjnQ6n5Ne f/syLCTSQXeqqDsjqoyZS1V6l4Sp/oFpgEIYtApDNr4ukZG9cxTSX0F39OXGTesy +HRvvBSW/ZrUwik7okVqNtp0jVclgMYmnGhOhwlU/W7aoGLMnYTB23Fpj2X0V1Dz xQD2Zdkwr+1R1w2b84A1y1xSulscdHSXWMmeThGVl7wkLH7XZjmTW/GOLFduZDot uuKuR2OSDPO05k9pv2ziEmWiKcXU5hUvNsfTwhAlLRelnfRQ2nQwjlOJJTnN -----END CERTIFICATE-----Generated at Fri Jul 24 16:13:09 2026 by rpki-client