$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/3D940BFAC1A711EFAFD15F46C4F9AE02.roa File: 3D940BFAC1A711EFAFD15F46C4F9AE02.roa (raw, json) Hash identifier: LjjKL8lntPPr/Zk54cMYydF3GT2tMt73oa4haHmG2Ik= Subject key identifier: F5:CB:E2:5B:13:36:27:85:0D:79:27:E6:94:36:94:C4:A5:12:B0:57 Certificate issuer: /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Certificate serial: 026F Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/3D940BFAC1A711EFAFD15F46C4F9AE02.roa Signing time: Fri 17 Jul 2026 03:28:49 +0000 ROA not before: Fri 17 Jul 2026 03:28:49 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 151396 IP address blocks: 103.134.216.0/24 maxlen: 24 103.134.217.0/24 maxlen: 24 103.134.218.0/24 maxlen: 24 103.134.219.0/24 maxlen: 24 103.146.218.0/23 maxlen: 24 103.214.0.0/23 maxlen: 24 2401:720::/36 maxlen: 36 2401:720:1000::/36 maxlen: 36 2401:720:2000::/36 maxlen: 36 2401:720:3000::/36 maxlen: 36 2401:720:4000::/36 maxlen: 36 2401:720:5000::/36 maxlen: 36 2401:720:6000::/36 maxlen: 36 2401:720:7000::/36 maxlen: 36 2401:720:8000::/36 maxlen: 36 2401:720:9000::/36 maxlen: 36 2401:720:a000::/36 maxlen: 36 2401:720:b000::/36 maxlen: 36 2401:720:c000::/36 maxlen: 36 2401:720:d000::/36 maxlen: 36 2401:720:e000::/36 maxlen: 36 2401:720:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B4C, serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Validity Not Before: Jul 17 03:28:49 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a59a171-2dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:ab:14:e1:47:52:a8:c0:09:74:87:27:36: e9:1c:23:9b:b1:76:bc:8f:10:cd:9f:2e:e8:ea:04: f5:4b:b7:8b:0f:82:ac:56:cf:03:e6:c5:ae:a6:c9: ce:a0:27:7a:34:86:ef:8f:4a:48:98:ed:22:46:b3: 43:df:37:40:01:2c:6c:a4:48:45:1d:4f:7c:97:6f: e9:d5:16:8b:7c:6f:aa:d1:7b:40:bf:39:a8:f4:6e: e5:a1:18:f2:fc:1d:8b:1d:3d:cb:2a:12:87:55:69: 99:aa:ef:43:8c:53:70:82:92:7a:13:8f:d5:e6:ce: ab:36:a8:54:9b:5e:bc:fc:27:14:0d:fb:a5:fe:59: 61:15:54:1e:b9:3a:73:2e:7d:30:d8:5f:3f:0d:45: 26:dc:5e:59:e4:0b:72:65:89:47:33:39:bb:ab:08: c0:1f:cc:76:01:01:40:6f:67:77:82:fa:b5:76:f0: 3f:dc:91:17:4a:12:42:7d:03:2e:d5:86:8d:b4:0e: e1:9c:18:c4:ea:bf:e4:aa:91:3f:9e:20:fa:49:e5: a7:9b:98:34:e5:7a:65:a8:aa:ca:f7:ca:8c:74:b3: b9:0e:77:5b:ea:2e:00:33:e5:06:e0:05:85:28:fa: 2e:fc:95:fc:e5:37:a0:f5:c1:1a:5f:04:fa:9a:66: ec:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CB:E2:5B:13:36:27:85:0D:79:27:E6:94:36:94:C4:A5:12:B0:57 X509v3 Authority Key Identifier: keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/3D940BFAC1A711EFAFD15F46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.216.0/22 103.146.218.0/23 103.214.0.0/23 IPv6: 2401:720::/32 Signature Algorithm: sha256WithRSAEncryption 58:ca:64:84:6e:29:a9:77:36:a3:b1:e2:78:3d:01:ce:33:df: 3b:5b:cd:ab:bf:28:b3:d3:d9:1a:fb:b9:12:ab:fc:6c:fe:e1: 61:2d:9c:e1:06:a9:37:b7:4a:81:90:8e:a8:47:3f:1a:0e:a2: c3:0a:60:35:e3:95:35:23:f9:1b:86:5e:5b:28:a6:c9:50:2b: f2:92:9e:8c:68:98:7e:64:e6:5c:81:2e:1d:15:ea:b1:26:20: 77:2c:14:aa:d1:26:f7:7e:1e:0c:3b:ad:0b:59:d1:8f:aa:ec: cd:53:53:4d:a0:28:a5:65:98:09:c5:f2:93:e7:b0:71:26:30: 17:e7:c9:00:76:21:7d:02:6d:30:f9:7c:d9:fb:11:62:45:01: d9:46:9b:31:68:d1:0a:2a:24:81:27:59:8d:be:f9:97:76:6c: ce:f2:20:7e:31:87:57:d8:3e:ff:08:51:fe:77:50:17:de:c6: 44:0f:03:e9:75:36:4e:2b:38:73:45:3c:b2:bd:6a:2c:6b:9c: 57:31:10:64:8a:2d:d1:10:db:83:52:a7:45:3c:00:65:5f:f3: db:b9:41:23:a2:c8:7f:11:95:f0:ea:98:9b:1f:c5:76:a6:12: fa:b8:5e:03:d4:0f:1c:a0:4a:d8:0f:3b:9c:3f:b2:db:ea:4d: 65:0a:d8:11 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCNEMxMTAvBgNVBAUTKEUzODRBQTQwMjVBMTA2QjU0N0E3QzA4OUIxRERGRUVF NkNDQkEyMkYwHhcNMjYwNzE3MDMyODQ5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU5YTE3MS0yZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlTWrFOFHUqjACXSHJzbpHCObsXa8jxDNny7o6gT1S7eLD4KsVs8D5sWupsnO oCd6NIbvj0pImO0iRrND3zdAASxspEhFHU98l2/p1RaLfG+q0XtAvzmo9G7loRjy /B2LHT3LKhKHVWmZqu9DjFNwgpJ6E4/V5s6rNqhUm168/CcUDful/llhFVQeuTpz Ln0w2F8/DUUm3F5Z5AtyZYlHMzm7qwjAH8x2AQFAb2d3gvq1dvA/3JEXShJCfQMu 1YaNtA7hnBjE6r/kqpE/niD6SeWnm5g05XplqKrK98qMdLO5Dndb6i4AM+UG4AWF KPou/JX85Teg9cEaXwT6mmbsFQIDAQABo4ICezCCAncwHQYDVR0OBBYEFPXL4lsT NieFDXkn5pQ2lMSlErBXMB8GA1UdIwQYMBaAFOOEqkAloQa1R6fAibHd/u5sy6Iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUI0Qy8yOTc5OTE1MjA0 MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJyVkhwOENKc2QzLTdtekxv aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0U3FRQ1doQnJWSHA4Q0pzZDMtN216TG9pOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFCNEMvMjk3OTkxNTIwNDMwMTFFRUIzNzMyQzVCQzRGOUFFMDIvM0Q5NDBCRkFD MUE3MTFFRkFGRDE1RjQ2QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ4bYAwQBZ5LaAwQBZ9YAMA0EAgACMAcDBQAkAQcgMA0GCSqGSIb3 DQEBCwUAA4IBAQBYymSEbimpdzajseJ4PQHOM987W82rvyiz09ka+7kSq/xs/uFh LZzhBqk3t0qBkI6oRz8aDqLDCmA145U1I/kbhl5bKKbJUCvykp6MaJh+ZOZcgS4d FeqxJiB3LBSq0Sb3fh4MO60LWdGPquzNU1NNoCilZZgJxfKT57BxJjAX58kAdiF9 Am0w+XzZ+xFiRQHZRpsxaNEKKiSBJ1mNvvmXdmzO8iB+MYdX2D7/CFH+d1AX3sZE DwPpdTZOKzhzRTyyvWosa5xXMRBkii3RENuDUqdFPABlX/PbuUEjosh/EZXw6pib H8V2phL6uF4D1A8coErYDzucP7Lb6k1lCtgR -----END CERTIFICATE-----Generated at Fri Jul 24 01:50:57 2026 by rpki-client