$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/F3862312575011EDA38B8A6DC4F9AE02.roa File: F3862312575011EDA38B8A6DC4F9AE02.roa (raw, json) Hash identifier: CmnYN9yEly42BY75eDXih8+zaGGaLfJD0AMCNFu2l4k= Subject key identifier: 61:F7:88:D4:F9:80:37:5E:AF:E6:D4:C8:B2:C8:D9:53:43:39:39:59 Certificate issuer: /CN=A916EDC4/serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E Certificate serial: 0355 Authority key identifier: C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/F3862312575011EDA38B8A6DC4F9AE02.roa Signing time: Wed 09 Sep 2026 01:50:49 +0000 ROA not before: Wed 09 Sep 2026 01:50:49 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 142278 IP address blocks: 103.108.178.0/23 maxlen: 23 103.108.178.0/24 maxlen: 24 103.108.179.0/24 maxlen: 24 2400:a020::/32 maxlen: 36 2400:a020:1000::/48 maxlen: 48 2400:a020:2000::/48 maxlen: 48 2400:a020:3000::/48 maxlen: 48 2400:a020:4000::/48 maxlen: 48 2400:a020:5000::/48 maxlen: 48 2400:a020:6000::/48 maxlen: 48 2400:a020:7000::/48 maxlen: 48 2400:a020:8000::/48 maxlen: 48 2400:a020:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.crl rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 01:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 853 (0x355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC4, serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E Validity Not Before: Sep 9 01:50:49 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa0bb79-a8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:79:bd:74:29:b0:44:42:ed:86:88:58:98: 48:9e:5c:c5:e0:37:cc:e6:30:17:72:c0:5f:a5:7b: a2:f8:9c:a1:6f:8b:34:ec:37:eb:b6:c7:60:ef:5c: 37:09:2d:e1:d3:a5:29:34:75:7b:17:eb:b0:d2:1e: 13:ff:72:a9:d9:72:cf:9c:e3:a9:3a:92:2e:93:4e: 0a:1a:c8:dd:54:cb:3e:9c:b2:06:1c:64:e2:f2:3f: 16:5e:82:81:c8:c6:f1:8b:8b:7e:e5:a7:6a:ba:16: 69:33:db:c5:3e:8e:de:1a:f9:09:27:08:d8:72:c4: 1e:51:b9:f2:b3:82:53:64:fe:18:12:d5:17:2b:5c: e7:b3:c6:d9:1c:b9:11:50:0b:9e:c2:13:09:3c:59: a6:45:fc:90:a5:41:6d:16:79:32:55:ad:10:7d:50: 6e:a6:05:02:cf:88:04:14:0e:45:4a:b8:fe:ae:b3: fc:dd:b4:73:46:db:bc:5a:9f:9a:54:c9:07:de:cf: 76:3c:4d:62:20:96:6c:32:b4:2c:63:ae:62:e2:8a: a2:aa:ce:c5:f8:02:a2:51:a1:4e:51:48:46:4f:38: 37:69:89:ff:27:31:6a:de:da:87:d4:f2:78:ea:f2: 71:dc:2c:8f:4a:b8:45:b5:9e:5f:f3:28:ad:d3:7a: a8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F7:88:D4:F9:80:37:5E:AF:E6:D4:C8:B2:C8:D9:53:43:39:39:59 X509v3 Authority Key Identifier: keyid:C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/F3862312575011EDA38B8A6DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.108.178.0/23 IPv6: 2400:a020::/32 Signature Algorithm: sha256WithRSAEncryption 2b:36:f4:61:8e:32:14:24:90:4d:41:f7:b1:6c:b7:2b:83:f5: 33:48:5a:a8:3e:8b:a2:6a:1f:e4:b3:2e:c4:c3:f4:de:59:fa: 65:71:52:38:e8:fc:0c:53:a1:19:e3:5d:4d:cd:5c:ac:84:1f: 3c:a2:08:04:16:c0:de:31:97:91:4f:f3:00:c7:07:a8:68:d7: 2d:09:37:7c:31:aa:9e:b3:f3:6a:b3:4f:9d:ce:e9:5a:67:b2: fd:51:a6:f6:cb:0b:d0:77:db:db:3a:98:45:51:10:b0:a7:37: 81:d7:c6:6f:33:94:06:92:77:a2:f8:db:2a:75:c8:1b:b8:e4: 6e:48:bd:72:c7:fc:37:ec:c4:55:a9:f8:29:2f:b8:3e:1a:ce: e8:ec:f0:e9:47:0d:7d:70:05:ca:5b:05:b5:25:ad:a6:c3:fa: 63:2b:67:6d:21:3d:dd:70:53:b4:95:3a:e0:39:a3:1b:44:4b: d0:c7:ef:09:60:77:45:58:a8:a6:43:93:a9:db:da:83:6c:68: f0:88:eb:95:70:a4:1f:36:15:3d:df:f6:8e:37:bb:d1:0e:a4: 00:bc:9d:02:f0:21:f5:75:34:23:47:68:08:ee:0d:92:65:c6: 03:44:00:de:f8:d8:29:e6:6d:af:69:b1:d2:16:07:0d:fc:81: b0:9f:d4:a1 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzQxMTAvBgNVBAUTKEMwREU5RDg0NkIyMTdDNzhERDY0ODU1QTlFRDc5QUMz RDI3MTEwOEUwHhcNMjYwOTA5MDE1MDQ5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwYmI3OS1hOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5l5vXQpsERC7YaIWJhInlzF4DfM5jAXcsBfpXui+Jyhb4s07Dfrtsdg71w3 CS3h06UpNHV7F+uw0h4T/3Kp2XLPnOOpOpIuk04KGsjdVMs+nLIGHGTi8j8WXoKB yMbxi4t+5adquhZpM9vFPo7eGvkJJwjYcsQeUbnys4JTZP4YEtUXK1zns8bZHLkR UAuewhMJPFmmRfyQpUFtFnkyVa0QfVBupgUCz4gEFA5FSrj+rrP83bRzRtu8Wp+a VMkH3s92PE1iIJZsMrQsY65i4oqiqs7F+AKiUaFOUUhGTzg3aYn/JzFq3tqH1PJ4 6vJx3CyPSrhFtZ5f8yit03qoVwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGH3iNT5 gDder+bUyLLI2VNDOTlZMB8GA1UdIwQYMBaAFMDenYRrIXx43WSFWp7XmsPScRCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDNC8wQjIyQTZGODFC QUIxMUVEOUMzNjJGNzhDNEY5QUUwMi93TjZkaEdzaGZIamRaSVZhbnRlYXc5SnhF STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dONmRoR3NoZkhqZFpJVmFudGVhdzlKeEVJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVEQzQvMEIyMkE2RjgxQkFCMTFFRDlDMzYyRjc4QzRGOUFFMDIvRjM4NjIzMTI1 NzUwMTFFREEzOEI4QTZEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ2yyMA0EAgACMAcDBQAkAKAgMA0GCSqGSIb3DQEBCwUAA4IBAQAr NvRhjjIUJJBNQfexbLcrg/UzSFqoPouiah/ksy7Ew/TeWfplcVI46PwMU6EZ411N zVyshB88oggEFsDeMZeRT/MAxweoaNctCTd8Maqes/Nqs0+dzulaZ7L9Uab2ywvQ d9vbOphFURCwpzeB18ZvM5QGknei+NsqdcgbuORuSL1yx/w37MRVqfgpL7g+Gs7o 7PDpRw19cAXKWwW1Ja2mw/pjK2dtIT3dcFO0lTrgOaMbREvQx+8JYHdFWKimQ5Op 29qDbGjwiOuVcKQfNhU93/aON7vRDqQAvJ0C8CH1dTQjR2gI7g2SZcYDRADe+Ngp 5m2vabHSFgcN/IGwn9Sh -----END CERTIFICATE-----Generated at Tue Sep 29 15:15:26 2026 by rpki-client