$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/20F1E6906B8C11F0A612561BC4F9AE02.roa File: 20F1E6906B8C11F0A612561BC4F9AE02.roa (raw, json) Hash identifier: ZU1zBpAfTGCrjm2xsGHreVQj4RFT5bNxMFoo9IRDAv0= Subject key identifier: CE:6D:79:E7:3E:EE:67:1A:3E:BF:4B:CA:8C:7A:98:35:00:F6:D0:95 Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Certificate serial: 0D27 Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/20F1E6906B8C11F0A612561BC4F9AE02.roa Signing time: Mon 20 Jul 2026 19:19:33 +0000 ROA not before: Mon 20 Jul 2026 19:19:33 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 63969 IP address blocks: 103.115.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3367 (0xd27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Validity Not Before: Jul 20 19:19:33 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a5e74c5-104e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:06:22:fa:c4:8d:67:b7:ef:02:62:c4:da: dd:75:0d:81:c7:96:6e:51:c0:aa:eb:37:00:9b:14: 74:c9:72:71:d2:5d:0b:f0:ca:4f:8e:ed:14:3c:cd: a4:c6:34:b3:19:53:90:03:11:87:94:a1:82:8c:0b: fb:b9:b7:9e:49:c0:c1:ce:40:e5:03:fb:a2:c6:73: ff:a4:57:42:ef:b3:04:e3:b7:22:8d:cf:10:52:70: 95:78:3a:66:c6:d6:fb:3c:fc:fb:00:5c:f1:5d:2d: 85:17:b7:18:64:a8:7f:49:63:41:1e:89:f5:05:bd: 5a:ca:eb:a9:76:a5:51:83:bd:3b:62:ee:c8:aa:d4: 17:99:a7:a5:37:76:44:76:fe:e7:c3:d7:85:7f:0b: fc:d2:49:80:20:be:bb:46:37:5d:62:4e:c3:7f:96: 92:35:9c:d5:b6:a3:0b:03:dc:dd:29:d9:24:91:7f: e3:cb:16:f3:18:fe:05:f2:45:ff:6d:fd:35:9a:1b: c5:b6:b8:29:33:be:ad:c8:bd:24:83:7b:32:07:61: de:b1:ed:b5:12:c4:69:b7:0f:7e:71:b9:9e:49:59: be:12:49:f6:47:95:c4:ac:78:39:a5:01:5a:d6:cf: 8d:10:7f:3e:ee:7b:cc:92:3f:e3:e4:7d:c8:ba:1b: 9b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6D:79:E7:3E:EE:67:1A:3E:BF:4B:CA:8C:7A:98:35:00:F6:D0:95 X509v3 Authority Key Identifier: keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/20F1E6906B8C11F0A612561BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.117.0/24 Signature Algorithm: sha256WithRSAEncryption 86:96:b7:9e:15:e3:2d:7f:7d:aa:50:2c:e5:5e:65:f1:16:2e: d0:01:7c:fd:9d:d3:77:3f:d4:d4:05:ba:93:9b:86:e5:04:73: 10:b3:11:71:fc:b4:fa:da:42:db:1c:17:1b:29:58:be:ca:c8: 95:0f:48:28:b5:a6:19:84:4c:74:b7:8d:38:f8:8b:90:05:ed: d4:b4:82:1b:37:60:15:0d:95:ac:12:fa:c4:41:ef:07:ee:17: bb:f5:bd:21:23:1f:65:08:8e:cc:96:cc:35:c5:07:dd:e1:b6: 18:0d:0c:57:64:a1:8e:16:49:f0:03:67:95:e3:f5:3e:50:4b: a3:55:0a:2c:77:3d:b4:3c:38:f6:68:82:d9:af:3d:b4:21:4d: 43:6f:ba:d6:82:84:7e:26:ed:3b:88:f2:17:2b:5b:49:d0:01: 42:10:ac:87:ee:60:86:ea:eb:d5:da:90:fa:80:96:47:ad:40: 22:7f:a9:3c:35:49:b7:05:e2:01:f9:ce:65:20:c3:e9:61:47: 36:9e:14:46:1d:b8:3f:ef:de:85:42:92:f2:69:01:e9:fd:f6: b1:97:b1:6c:15:8f:00:23:69:d8:4e:9c:ff:97:e4:2c:3e:fb: a9:ac:a0:1a:30:ac:c8:95:2c:a9:15:b4:15:56:fe:c0:5a:eb: b9:da:8d:d0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx QTZBREIwNUIwHhcNMjYwNzIwMTkxOTMzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlNzRjNS0xMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVEGIvrEjWe37wJixNrddQ2Bx5ZuUcCq6zcAmxR0yXJx0l0L8MpPju0UPM2k xjSzGVOQAxGHlKGCjAv7ubeeScDBzkDlA/uixnP/pFdC77ME47cijc8QUnCVeDpm xtb7PPz7AFzxXS2FF7cYZKh/SWNBHon1Bb1ayuupdqVRg707Yu7IqtQXmaelN3ZE dv7nw9eFfwv80kmAIL67RjddYk7Df5aSNZzVtqMLA9zdKdkkkX/jyxbzGP4F8kX/ bf01mhvFtrgpM76tyL0kg3syB2Hese21EsRptw9+cbmeSVm+Ekn2R5XErHg5pQFa 1s+NEH8+7nvMkj/j5H3IuhubOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM5teec+ 7mcaPr9Lyox6mDUA9tCVMB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjZFMkIvMjdFN0NBQTYwQzJEMTFFQUIwMjlEQjUzQzRGOUFFMDIvMjBGMUU2OTA2 QjhDMTFGMEE2MTI1NjFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ3N1MA0GCSqGSIb3DQEBCwUAA4IBAQCGlreeFeMtf32qUCzlXmXx Fi7QAXz9ndN3P9TUBbqTm4blBHMQsxFx/LT62kLbHBcbKVi+ysiVD0gotaYZhEx0 t404+IuQBe3UtIIbN2AVDZWsEvrEQe8H7he79b0hIx9lCI7Mlsw1xQfd4bYYDQxX ZKGOFknwA2eV4/U+UEujVQosdz20PDj2aILZrz20IU1Db7rWgoR+Ju07iPIXK1tJ 0AFCEKyH7mCG6uvV2pD6gJZHrUAif6k8NUm3BeIB+c5lIMPpYUc2nhRGHbg/796F QpLyaQHp/faxl7FsFY8AI2nYTpz/l+QsPvuprKAaMKzIlSypFbQVVv7AWuu52o3Q -----END CERTIFICATE-----Generated at Fri Jul 24 04:40:22 2026 by rpki-client