$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa File: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (raw, json) Hash identifier: DhWrSSSIb3yMa22B1M5gCqAEgOoCIxcBBwKz1msoORA= Subject key identifier: 57:62:6B:DD:23:27:C6:C6:BC:95:72:57:5D:70:0B:66:89:30:9A:32 Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Certificate serial: 0393 Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa Signing time: Tue 07 Jul 2026 07:33:43 +0000 ROA not before: Tue 07 Jul 2026 07:33:43 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 150001 IP address blocks: 103.143.88.0/23 maxlen: 23 103.143.88.0/24 maxlen: 24 103.143.89.0/24 maxlen: 24 103.190.132.0/23 maxlen: 23 103.190.132.0/24 maxlen: 24 103.190.133.0/24 maxlen: 24 2400:90a0::/32 maxlen: 32 2400:90a0::/36 maxlen: 36 2400:90a0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Validity Not Before: Jul 7 07:33:43 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6a4cabd7-a66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:73:a1:b9:01:53:43:1a:2c:d8:34:d2:2f: 2b:32:e7:3d:5e:04:10:1d:20:26:fb:c7:4b:73:c5: 13:4b:d4:70:1f:0f:ed:88:a2:7b:4c:b1:37:f7:80: 74:23:b8:ae:d9:61:e5:97:86:9c:7f:e8:85:11:64: 54:44:d6:47:28:01:c3:4f:6c:86:de:44:0d:06:98: 23:4d:68:08:ff:10:71:6a:6e:65:85:65:5e:77:db: fa:d7:35:67:a1:d4:7c:7a:00:58:dc:f8:94:20:69: 27:ee:34:93:b0:ee:c9:20:c7:dd:a1:11:f2:c9:ec: 25:de:75:16:7f:9e:cd:0e:55:2e:00:d3:5a:c5:e9: f1:7d:ec:15:83:e6:d4:e0:28:86:0b:d6:17:a5:25: 3a:7f:04:d7:45:f1:6c:2b:0f:02:eb:27:b0:35:08: a0:7b:4d:98:cc:34:76:00:e1:5d:88:a8:bd:9f:e9: c3:61:f8:17:71:37:de:f7:49:ae:03:4e:52:fc:71: 30:ff:28:a2:8b:be:f0:c1:98:c7:ea:ae:c0:53:44: 75:8c:28:4f:0f:d4:e3:b4:5e:90:0c:f2:90:50:68: 19:a7:8c:39:b4:8f:0a:36:e1:39:9d:5d:35:6f:45: bc:a8:ec:95:af:a8:90:a7:7c:9e:75:0d:9b:3b:d2: c7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:62:6B:DD:23:27:C6:C6:BC:95:72:57:5D:70:0B:66:89:30:9A:32 X509v3 Authority Key Identifier: keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.88.0/23 103.190.132.0/23 IPv6: 2400:90a0::/32 Signature Algorithm: sha256WithRSAEncryption 55:c8:f0:04:c5:db:4d:82:a7:1e:e5:03:8b:2e:ad:74:3c:f0: 60:86:77:ea:29:c5:36:29:95:41:f6:49:e5:3f:54:92:89:43: 87:38:09:cf:4e:5c:43:0d:39:e7:81:c0:01:f9:39:87:80:38: 7a:dd:62:57:08:a2:ad:d3:77:bf:73:c2:22:40:7e:32:01:11: d8:8c:67:aa:6f:4b:bd:a2:e5:34:83:19:8a:53:dc:50:0d:3f: 7b:0e:63:29:0b:c6:c0:59:7e:9b:cc:25:69:e1:bc:95:36:c6: 24:bb:3f:2b:d1:2d:21:e9:bd:89:83:a2:57:ea:84:fc:59:20: 08:6a:bd:d1:7d:77:71:4f:b2:2d:6a:cb:38:bb:5e:aa:bd:9d: b9:4c:9b:7b:9f:78:4d:c4:68:76:f6:a5:90:09:67:aa:e0:31: aa:ba:74:a1:22:b1:85:2e:f2:cb:64:aa:5b:20:d2:dd:26:b5: 09:28:dd:9d:a4:c7:3d:8d:cf:ce:14:12:b8:cb:3a:03:31:9b: 7d:ab:a3:8d:88:33:00:31:47:ff:6b:44:c9:c8:62:d7:78:af: 51:8b:6a:53:ce:e1:88:c9:44:1d:3c:dc:60:d1:bb:a0:fc:2c: 2c:ff:5e:26:25:3b:1a:7c:0b:af:b3:fe:4b:d4:82:d7:3e:2f: 77:0e:5a:9d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz NTUxQTREQTMwHhcNMjYwNzA3MDczMzQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjYWJkNy1hNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyshzobkBU0MaLNg00i8rMuc9XgQQHSAm+8dLc8UTS9RwHw/tiKJ7TLE394B0 I7iu2WHll4acf+iFEWRURNZHKAHDT2yG3kQNBpgjTWgI/xBxam5lhWVed9v61zVn odR8egBY3PiUIGkn7jSTsO7JIMfdoRHyyewl3nUWf57NDlUuANNaxenxfewVg+bU 4CiGC9YXpSU6fwTXRfFsKw8C6yewNQige02YzDR2AOFdiKi9n+nDYfgXcTfe90mu A05S/HEw/yiii77wwZjH6q7AU0R1jChPD9TjtF6QDPKQUGgZp4w5tI8KNuE5nV01 b0W8qOyVr6iQp3yedQ2bO9LHSwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFdia90j J8bGvJVyV11wC2aJMJoyMB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI3QjIvMEU2MzIxOTRGQjdCMTFFQ0E4N0E4NzJFQzRGOUFFMDIvMkE0RUExMEVG QjdGMTFFQzhGQjU4RTRBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ49YAwQBZ76EMA0EAgACMAcDBQAkAJCgMA0GCSqGSIb3DQEBCwUA A4IBAQBVyPAExdtNgqce5QOLLq10PPBghnfqKcU2KZVB9knlP1SSiUOHOAnPTlxD DTnngcAB+TmHgDh63WJXCKKt03e/c8IiQH4yARHYjGeqb0u9ouU0gxmKU9xQDT97 DmMpC8bAWX6bzCVp4byVNsYkuz8r0S0h6b2Jg6JX6oT8WSAIar3RfXdxT7Itass4 u16qvZ25TJt7n3hNxGh29qWQCWeq4DGqunShIrGFLvLLZKpbINLdJrUJKN2dpMc9 jc/OFBK4yzoDMZt9q6ONiDMAMUf/a0TJyGLXeK9Ri2pTzuGIyUQdPNxg0bug/Cws /14mJTsafAuvs/5L1ILXPi93Dlqd -----END CERTIFICATE-----Generated at Thu Jul 23 19:09:31 2026 by rpki-client