$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/8F3586B40DF511F18DE23E02043D8C67.roa File: 8F3586B40DF511F18DE23E02043D8C67.roa (raw, json) Hash identifier: ncVMvzPJ7BKlb60UcgyZrrfn0WZQ6WrxuL1LEKNyyZU= Subject key identifier: 4A:DF:16:80:01:B0:74:D9:8B:FB:45:BC:A8:8A:B5:77:22:AE:88:01 Certificate issuer: /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Certificate serial: 97 Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/8F3586B40DF511F18DE23E02043D8C67.roa Signing time: Fri 08 May 2026 23:28:36 +0000 ROA not before: Fri 08 May 2026 23:28:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 103.111.80.0/24 maxlen: 24 103.111.81.0/24 maxlen: 24 103.111.82.0/24 maxlen: 24 103.111.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Validity Not Before: May 8 23:28:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69fe71a4-fb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:42:14:ed:8c:b8:f8:93:be:1c:ef:54:2b: 84:89:b3:72:02:2a:c1:ce:b6:35:06:37:60:d6:e6: 9d:c6:99:50:9e:1e:c2:05:14:a2:b1:12:b8:b2:44: 1d:6c:e6:fd:7c:04:27:de:d8:c2:85:fb:f6:86:0f: 35:9d:f8:04:0c:80:06:9d:e8:80:9c:4a:b8:8a:11: 24:4d:89:3e:06:7e:3d:e9:e9:1e:4e:16:0c:9b:35: e4:85:c4:a9:e6:b6:de:75:12:55:36:39:29:2b:6f: 56:66:0c:63:bc:21:27:fa:2c:4d:75:4c:22:56:6d: b2:a2:af:96:94:98:f1:2b:db:d1:ec:9d:1d:bd:48: 07:84:6e:2c:b4:37:ed:13:f0:0a:d9:4b:30:ad:0a: a2:c9:16:0d:7a:e0:4a:76:07:bc:d2:69:cc:b8:47: a3:ab:a6:34:61:b3:ae:70:fb:76:8f:fe:0a:3e:6d: 15:aa:24:f6:eb:a4:ac:e9:25:43:fd:38:7f:1c:99: 07:62:4d:c8:2e:2b:8b:51:74:5e:f9:09:f4:ad:c9: 30:8c:bf:e2:b6:65:c5:c6:fd:16:34:cc:60:46:24: b1:36:07:78:75:96:72:cc:ee:5c:b9:66:59:ac:30: f8:21:1b:3e:81:ea:24:44:cd:f0:7e:e7:1c:f8:b5: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DF:16:80:01:B0:74:D9:8B:FB:45:BC:A8:8A:B5:77:22:AE:88:01 X509v3 Authority Key Identifier: keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/8F3586B40DF511F18DE23E02043D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.111.80.0/22 Signature Algorithm: sha256WithRSAEncryption a8:63:17:27:45:60:94:a8:00:1b:6a:53:98:2c:e6:9e:19:37: 2a:76:d7:01:80:0c:0b:dc:b6:b3:57:1c:5c:01:ba:b5:37:2e: 94:19:02:57:9c:c0:51:a4:f7:d4:d8:43:e9:af:a9:c4:12:11: 08:46:91:2e:86:fa:6d:83:97:50:6c:dd:7e:30:e1:19:8c:8a: de:de:a8:98:5a:61:05:94:c8:2c:f3:40:2b:3e:c3:c8:bc:54: af:d5:bf:9a:41:51:5c:87:97:ec:f0:e1:79:b2:33:e3:b7:2f: 5f:6a:fa:05:0f:83:0e:2e:22:7f:7b:56:74:dd:f3:e5:24:19: 50:c6:80:2a:ac:11:d5:49:d4:5d:71:1a:f6:70:6b:74:92:68: d4:37:1e:23:da:03:a5:cd:56:fe:11:2b:86:2a:23:43:f5:5e: 30:33:ee:2d:ab:cd:72:13:60:f4:68:82:04:0a:f7:07:97:b6: 92:89:0c:8d:12:4c:69:8c:f2:22:d7:8d:b0:c6:49:7e:be:7a: 2f:48:54:bb:9c:41:d1:78:c9:fa:49:ec:0b:1d:9d:d4:9e:b3: 38:78:b5:0a:81:1a:5f:4c:d5:9d:77:57:8b:b8:09:a7:1f:b3: 64:03:53:a6:f0:76:02:aa:c5:7b:20:bd:e6:12:e9:f6:80:17: 4c:b5:db:aa -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUYxMTAvBgNVBAUTKDY4RUU4NUY0QzI3RDRCQTkzRTBENkI2QTNFOTI2NTlF MTBENjg5NUUwHhcNMjYwNTA4MjMyODM2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWZlNzFhNC1mYjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohFCFO2MuPiTvhzvVCuEibNyAirBzrY1Bjdg1uadxplQnh7CBRSisRK4skQd bOb9fAQn3tjChfv2hg81nfgEDIAGneiAnEq4ihEkTYk+Bn496ekeThYMmzXkhcSp 5rbedRJVNjkpK29WZgxjvCEn+ixNdUwiVm2yoq+WlJjxK9vR7J0dvUgHhG4stDft E/AK2UswrQqiyRYNeuBKdge80mnMuEejq6Y0YbOucPt2j/4KPm0VqiT266Ss6SVD /Th/HJkHYk3ILiuLUXRe+Qn0rckwjL/itmXFxv0WNMxgRiSxNgd4dZZyzO5cuWZZ rDD4IRs+geokRM3wfucc+LUicwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFErfFoAB sHTZi/tFvKiKtXcirogBMB8GA1UdIwQYMBaAFGjuhfTCfUupPg1raj6SZZ4Q1ole MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBRi9GRDY1QjREOEU0 QTYxMUVCQjk0QUE1NENDNEY5QUUwMi9hTzZGOU1KOVM2ay1EV3RxUHBKbG5oRFdp VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FPNkY5TUo5UzZrLURXdHFQcEpsbmhEV2lWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkEwQUYvRkQ2NUI0RDhFNEE2MTFFQkI5NEFBNTRDQzRGOUFFMDIvOEYzNTg2QjQw REY1MTFGMThERTIzRTAyMDQzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ29QMA0GCSqGSIb3DQEBCwUAA4IBAQCoYxcnRWCUqAAbalOYLOae GTcqdtcBgAwL3LazVxxcAbq1Ny6UGQJXnMBRpPfU2EPpr6nEEhEIRpEuhvptg5dQ bN1+MOEZjIre3qiYWmEFlMgs80ArPsPIvFSv1b+aQVFch5fs8OF5sjPjty9favoF D4MOLiJ/e1Z03fPlJBlQxoAqrBHVSdRdcRr2cGt0kmjUNx4j2gOlzVb+ESuGKiND 9V4wM+4tq81yE2D0aIIECvcHl7aSiQyNEkxpjPIi142wxkl+vnovSFS7nEHReMn6 SewLHZ3UnrM4eLUKgRpfTNWdd1eLuAmnH7NkA1Om8HYCqsV7IL3mEun2gBdMtduq -----END CERTIFICATE-----Generated at Wed May 13 08:22:42 2026 by rpki-client