$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa File: 52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (raw, json) Hash identifier: zoNpdO8cH1LGRIRk5aUATD7kg2miBiY8+3FdRZJCOZs= Subject key identifier: 5D:7C:A5:1B:85:AB:92:6E:06:58:D4:FA:AB:07:E4:5E:83:7D:22:1F Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Certificate serial: 0254 Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa Signing time: Fri 03 Jul 2026 03:29:50 +0000 ROA not before: Fri 03 Jul 2026 03:29:50 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 142631 IP address blocks: 103.208.66.0/24 maxlen: 24 103.229.232.0/24 maxlen: 24 2401:c0a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163B62, serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Validity Not Before: Jul 3 03:29:50 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a472cae-3bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:28:ea:63:55:6f:e6:bf:cc:e1:77:25:50: dc:26:ad:e2:b0:6c:44:02:41:ec:8d:1e:c6:e1:32: 36:b3:d4:4d:ee:39:45:8b:70:46:32:90:96:1c:61: ed:8a:b6:c2:91:c8:42:b8:65:6f:83:97:67:44:d9: b9:85:0d:a8:8b:1e:62:61:c8:44:ff:bb:e8:7e:7b: 73:37:0c:a4:0b:f9:ed:8b:69:ea:da:3d:47:f2:66: 02:4a:e5:77:e0:b4:d5:06:ab:41:a0:49:9d:5b:5e: 46:14:37:b7:aa:7f:a7:e8:0d:83:a8:2f:39:f8:a1: 2a:c1:a4:58:11:4c:08:98:ff:de:f3:f2:35:d2:c4: 73:ad:43:34:2b:ab:bb:2b:0b:70:7d:67:db:e8:68: bc:8b:c4:ac:68:c2:e3:d1:54:fb:d7:5f:97:a5:19: ab:c4:d6:ee:53:35:c2:67:21:b4:2c:c8:88:d0:80: 82:78:d8:e0:8d:a3:1f:df:77:04:b6:5e:90:4b:42: ca:13:b6:83:1b:d0:3f:88:8b:32:f6:35:fe:6d:93: c0:e5:02:61:4c:2d:37:50:06:d9:5f:d6:73:6a:40: 78:ba:74:10:f0:1c:31:f5:d5:39:09:10:c9:ff:e9: 20:d0:44:e4:f6:7e:18:85:c2:10:2a:d1:91:79:30: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7C:A5:1B:85:AB:92:6E:06:58:D4:FA:AB:07:E4:5E:83:7D:22:1F X509v3 Authority Key Identifier: keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.208.66.0/24 103.229.232.0/24 IPv6: 2401:c0a0::/32 Signature Algorithm: sha256WithRSAEncryption 2d:11:3d:0f:bc:d0:4e:b9:19:30:97:81:0e:85:88:fc:a8:c1: f0:9d:64:2a:83:ad:a9:97:43:c4:32:e9:eb:5d:29:7a:5e:cd: 39:13:3c:d2:14:ce:4f:c8:a8:8e:e4:0c:16:3b:c7:aa:a6:19: 65:b8:60:f8:4c:e8:1e:30:91:80:5a:9d:58:28:44:01:6b:b1: d6:a7:5f:88:2e:6e:14:12:72:bd:75:26:f0:18:ec:b5:d5:7a: f0:6e:53:52:66:94:35:ad:48:12:04:ae:4a:2e:6f:26:ae:16: d5:4c:7b:48:52:30:0b:75:09:fb:1e:26:8b:c3:19:ed:bb:ac: ca:e2:cd:a8:ab:13:ed:1a:ab:6d:5c:b4:8c:6f:48:ec:b6:e5: 46:e2:26:3c:f3:75:f3:36:4e:e7:b0:f6:bd:1b:7b:38:0d:88: c4:17:02:96:97:92:87:58:c7:bb:a0:7f:8e:b4:c7:08:99:42: 7b:92:17:9e:0a:b2:31:2b:3e:f7:e3:d5:40:61:08:4b:d0:3a: ee:d3:81:7d:d2:77:f0:84:2b:8a:0f:29:5f:97:30:a8:cb:ed: 9c:91:47:cf:77:40:37:76:b1:ea:4d:4d:42:c8:09:7e:dc:7c: 37:cc:1f:91:d0:d9:73:86:7e:29:e4:d0:74:c4:fe:f1:9c:c9: 4f:29:7c:9e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCNjIxMTAvBgNVBAUTKEQzQUU2MjY0NDlDM0E5REQwRTc3OThCQ0U4QkNCQjM5 NjYyQTI3RkYwHhcNMjYwNzAzMDMyOTUwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3MmNhZS0zYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/go6mNVb+a/zOF3JVDcJq3isGxEAkHsjR7G4TI2s9RN7jlFi3BGMpCWHGHt irbCkchCuGVvg5dnRNm5hQ2oix5iYchE/7vofntzNwykC/nti2nq2j1H8mYCSuV3 4LTVBqtBoEmdW15GFDe3qn+n6A2DqC85+KEqwaRYEUwImP/e8/I10sRzrUM0K6u7 KwtwfWfb6Gi8i8SsaMLj0VT711+XpRmrxNbuUzXCZyG0LMiI0ICCeNjgjaMf33cE tl6QS0LKE7aDG9A/iIsy9jX+bZPA5QJhTC03UAbZX9ZzakB4unQQ8Bwx9dU5CRDJ /+kg0ETk9n4YhcIQKtGReTBDtQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFF18pRuF q5JuBljU+qsH5F6DfSIfMB8GA1UdIwQYMBaAFNOuYmRJw6ndDneYvOi8uzlmKif/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0I2Mi80RTlCNzZEMkZC RDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFkME9kNWk4Nkx5N09XWXFK XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA2NWlaRW5EcWQwT2Q1aTg2THk3T1dZcUpfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjNCNjIvNEU5Qjc2RDJGQkQyMTFFREEwODY0MzQ1QzRGOUFFMDIvNTJDQTVGQTRG QkRBMTFFREJDNUMyQjUxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQAZ9BCAwQAZ+XoMA0EAgACMAcDBQAkAcCgMA0GCSqGSIb3DQEBCwUA A4IBAQAtET0PvNBOuRkwl4EOhYj8qMHwnWQqg62pl0PEMunrXSl6Xs05EzzSFM5P yKiO5AwWO8eqphlluGD4TOgeMJGAWp1YKEQBa7HWp1+ILm4UEnK9dSbwGOy11Xrw blNSZpQ1rUgSBK5KLm8mrhbVTHtIUjALdQn7HiaLwxntu6zK4s2oqxPtGqttXLSM b0jstuVG4iY883XzNk7nsPa9G3s4DYjEFwKWl5KHWMe7oH+OtMcImUJ7kheeCrIx Kz7349VAYQhL0Dru04F90nfwhCuKDylflzCoy+2ckUfPd0A3drHqTU1CyAl+3Hw3 zB+R0Nlzhn4p5NB0xP7xnMlPKXye -----END CERTIFICATE-----Generated at Fri Jul 24 07:44:05 2026 by rpki-client