$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/2DDAE1EE81D511F1AEFB89D96BA30FBC.roa File: 2DDAE1EE81D511F1AEFB89D96BA30FBC.roa (raw, json) Hash identifier: aOcCIKwJEDtblzo1vvfFm3gzIMaKBHMiRAFEgVPjm1M= Subject key identifier: 0A:42:7E:5E:BD:99:31:6A:AF:86:61:7D:FF:57:5E:C2:72:69:A3:9D Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0D78 Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/2DDAE1EE81D511F1AEFB89D96BA30FBC.roa Signing time: Fri 17 Jul 2026 11:46:42 +0000 ROA not before: Fri 17 Jul 2026 11:46:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137515 IP address blocks: 103.111.120.0/22 maxlen: 24 2405:7e40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3448 (0xd78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: Jul 17 11:46:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a5a1622-bf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:90:24:38:a5:0f:81:4b:ce:74:08:cc:c6:ac: 2f:b5:cd:4b:66:72:d8:4e:c9:7f:fb:65:eb:cc:f2: 65:18:a8:e0:27:fe:b0:a2:0a:cc:7e:31:24:c2:16: 5e:bb:18:91:88:96:c2:ac:cd:e8:ad:7c:f4:7e:03: f6:d0:6c:6c:04:56:13:31:73:b9:d8:75:22:44:40: 0b:a5:85:84:01:30:7f:e3:0a:5d:9c:1e:4b:b3:dd: 2c:48:9c:12:c3:1c:b1:4e:f3:90:27:66:25:5e:c3: 84:68:29:3a:39:c7:a1:6d:06:3f:4f:7d:f5:f6:6a: 23:19:58:1c:97:34:97:4d:83:98:14:94:97:35:c3: 96:b4:87:82:d4:12:b0:5b:55:87:e0:97:fc:89:61: 40:32:69:86:cd:eb:98:6f:b7:65:2c:76:d9:a2:fd: 5b:8d:cc:80:ae:dc:97:a5:7a:14:71:8a:5d:9e:ab: 5e:3e:e0:99:42:69:76:f9:3b:bf:23:82:52:d4:cf: cf:8e:c7:3e:64:35:75:e4:3d:d4:cd:9a:9e:0b:83: 61:8f:e9:aa:60:71:59:c4:cc:10:fb:2d:2c:63:3d: 0d:54:97:3a:4c:61:ea:d1:ed:40:2d:64:90:3f:b1: f3:7f:8b:75:23:47:ff:17:47:a5:74:b9:74:b4:01: bc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:42:7E:5E:BD:99:31:6A:AF:86:61:7D:FF:57:5E:C2:72:69:A3:9D X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/2DDAE1EE81D511F1AEFB89D96BA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.111.120.0/22 IPv6: 2405:7e40::/32 Signature Algorithm: sha256WithRSAEncryption a3:f1:80:49:24:82:f4:98:25:55:52:61:8f:d9:94:69:dc:70: 32:d7:10:b3:91:7a:58:fd:93:79:96:a7:91:c0:6b:6d:df:65: 89:a8:d1:7a:6d:06:d3:f4:d4:b8:b9:df:ec:12:3f:54:af:33: 96:44:f4:b1:48:ac:2e:3d:b3:b8:e6:b7:60:4c:b0:e7:bf:5e: be:33:61:eb:71:b3:70:e1:58:11:bd:55:9e:a6:ca:bc:72:f5: cb:1a:dd:4a:b9:15:45:a8:8d:85:f5:de:82:94:8e:da:b3:bd: 3d:3b:24:05:b3:00:7f:46:b7:49:d0:a6:27:e2:c0:f4:d8:c7: c2:de:a8:ae:47:2e:d2:2d:9f:3f:19:6b:e2:6b:e2:eb:3e:06: 6f:02:be:a1:f5:fc:92:c4:5a:92:52:56:94:a1:84:13:c4:da: dc:10:c6:f6:67:d6:9a:09:56:4d:2c:f0:89:1e:85:19:d6:c5: 91:14:97:59:71:34:99:8f:08:d3:bd:5c:48:c3:f6:99:c5:20: 69:0b:c5:7a:32:ca:3a:e5:32:5c:9b:3f:09:94:7b:52:fc:74: 2d:f8:98:89:7c:83:f1:8b:eb:06:a9:77:3e:af:00:86:be:23: 93:3d:2c:13:9c:bd:24:50:e5:7b:53:57:fb:93:9b:3d:ea:23: 63:d2:92:71 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjYwNzE3MTE0NjQyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVhMTYyMi1iZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pAkOKUPgUvOdAjMxqwvtc1LZnLYTsl/+2XrzPJlGKjgJ/6wogrMfjEkwhZe uxiRiJbCrM3orXz0fgP20GxsBFYTMXO52HUiREALpYWEATB/4wpdnB5Ls90sSJwS wxyxTvOQJ2YlXsOEaCk6OcehbQY/T3319mojGVgclzSXTYOYFJSXNcOWtIeC1BKw W1WH4Jf8iWFAMmmGzeuYb7dlLHbZov1bjcyArtyXpXoUcYpdnqtePuCZQml2+Tu/ I4JS1M/Pjsc+ZDV15D3UzZqeC4Nhj+mqYHFZxMwQ+y0sYz0NVJc6TGHq0e1ALWSQ P7Hzf4t1I0f/F0eldLl0tAG8TQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFApCfl69 mTFqr4Zhff9XXsJyaaOdMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE2REMvNDRBN0U1RTgwOTVGMTFFQUEyODE2ODFEQzRGOUFFMDIvMkREQUUxRUU4 MUQ1MTFGMUFFRkI4OUQ5NkJBMzBGQkMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ294MA0EAgACMAcDBQAkBX5AMA0GCSqGSIb3DQEBCwUAA4IBAQCj 8YBJJIL0mCVVUmGP2ZRp3HAy1xCzkXpY/ZN5lqeRwGtt32WJqNF6bQbT9NS4ud/s Ej9UrzOWRPSxSKwuPbO45rdgTLDnv16+M2HrcbNw4VgRvVWepsq8cvXLGt1KuRVF qI2F9d6ClI7as709OyQFswB/RrdJ0KYn4sD02MfC3qiuRy7SLZ8/GWvia+LrPgZv Ar6h9fySxFqSUlaUoYQTxNrcEMb2Z9aaCVZNLPCJHoUZ1sWRFJdZcTSZjwjTvVxI w/aZxSBpC8V6Mso65TJcmz8JlHtS/HQt+JiJfIPxi+sGqXc+rwCGviOTPSwTnL0k UOV7U1f7k5s96iNj0pJx -----END CERTIFICATE-----Generated at Fri Jul 24 17:48:37 2026 by rpki-client