$ rpki-client -vvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/33F7340E68B911F18412045C8047A888.roa File: 33F7340E68B911F18412045C8047A888.roa (raw, json) Hash identifier: /S6dnrVbISIIfLq8fCDG57mUieFXiSOeYsxO+vbfNdY= Subject key identifier: B0:C3:4C:C7:57:06:F0:2F:94:D2:85:38:E1:71:78:F6:F7:06:8A:96 Certificate issuer: /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D Certificate serial: 0380 Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/33F7340E68B911F18412045C8047A888.roa Signing time: Wed 17 Jun 2026 08:53:10 +0000 ROA not before: Wed 17 Jun 2026 08:53:10 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150111 IP address blocks: 103.23.95.0/24 maxlen: 24 103.190.199.0/24 maxlen: 24 2001:df0:f1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D Validity Not Before: Jun 17 08:53:10 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a326076-d769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:86:b9:62:b8:c5:da:b4:c7:77:3e:6e:96: 4e:58:af:54:1a:9a:1b:a2:39:c6:42:94:69:cb:e6: ef:06:92:87:4d:f1:75:96:49:92:55:5c:e2:22:bd: 44:e8:04:b9:42:33:30:6a:38:74:ab:6d:a9:96:da: f2:d8:be:18:3d:f2:8b:7d:d8:91:d9:0e:b5:4d:8d: 40:5f:a9:6e:c0:49:30:4d:87:eb:01:96:fb:1a:63: 3a:f3:be:12:5c:6a:ff:5e:16:0a:dc:3e:7d:db:34: fc:3e:06:0d:a9:0b:44:27:08:87:17:46:d6:4e:7a: cc:82:40:29:5e:14:cd:d0:ed:9e:fd:6a:66:54:d0: 76:4b:aa:f5:7b:9e:61:81:27:75:d2:7a:86:23:4c: 4f:09:70:ad:7e:dc:ef:fe:3f:93:5d:68:21:aa:7c: ef:79:e3:3a:97:ea:b0:e7:21:17:d1:f0:9e:6f:e1: 29:97:71:d2:8f:32:77:0b:2b:59:b8:4e:dc:f7:23: 1b:5e:f3:f4:cb:6e:ca:f8:76:54:d0:7b:0e:fc:e0: 00:4e:67:69:53:0d:84:1f:12:14:1a:34:39:71:cf: 64:3d:ef:de:63:77:0c:54:e3:d0:28:24:5d:af:28: 58:c5:94:cf:97:e5:88:a9:c9:99:0a:eb:c2:db:47: f1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C3:4C:C7:57:06:F0:2F:94:D2:85:38:E1:71:78:F6:F7:06:8A:96 X509v3 Authority Key Identifier: keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/33F7340E68B911F18412045C8047A888.roa sbgp-ipAddrBlock: critical IPv4: 103.23.95.0/24 103.190.199.0/24 IPv6: 2001:df0:f1c0::/48 Signature Algorithm: sha256WithRSAEncryption 97:85:0d:6e:70:53:2e:ac:df:44:07:03:bc:82:3e:cf:c3:02: a7:a1:81:10:56:12:eb:8c:90:d9:91:ab:05:fe:62:a8:9b:0a: b2:7f:ce:ab:22:0e:4f:e9:80:a9:bf:eb:a9:05:d1:9c:45:8c: 05:dc:55:60:9c:35:58:ef:30:c5:b6:22:12:47:68:c2:80:1b: d0:80:ff:bc:62:2f:d5:54:49:a1:86:d5:9a:98:5c:c8:08:e2: 29:9f:0b:da:8f:01:51:6c:6c:38:f5:c9:d6:80:d2:09:4e:c0: 4f:0b:69:6e:f1:44:a7:26:a2:ff:7d:ca:f1:08:a1:3a:82:9c: bc:7f:ce:8c:fe:d0:08:b6:4e:90:5e:bd:75:66:49:e3:85:2e: e8:a9:8c:c9:92:49:8e:40:a0:c7:68:6d:98:fe:d4:19:c1:fc: 6b:fc:38:af:09:62:09:b4:56:77:f3:fd:18:5e:f8:69:f6:d1: b0:71:25:b2:cd:0c:58:fc:d1:cf:b2:48:b9:9f:0f:4d:7e:79: fa:7e:10:b9:f5:ab:45:d0:3c:70:2e:ad:14:6d:6d:a0:88:8a: ef:17:d4:ab:59:a9:d0:9d:18:bc:a7:e6:ce:ad:da:b2:1b:a2: 1c:db:39:a7:c0:6d:10:e8:0d:9d:eb:0d:46:b2:93:96:f1:ba: bf:26:6f:d5 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNEExMTAvBgNVBAUTKDI3MkNBRTVGMjFDOEJGNkI2QjQ5MTVBRjAwMDRDN0VG Q0ZDN0RCM0QwHhcNMjYwNjE3MDg1MzEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMyNjA3Ni1kNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoKGuWK4xdq0x3c+bpZOWK9UGpobojnGQpRpy+bvBpKHTfF1lkmSVVziIr1E 6AS5QjMwajh0q22pltry2L4YPfKLfdiR2Q61TY1AX6luwEkwTYfrAZb7GmM6874S XGr/XhYK3D592zT8PgYNqQtEJwiHF0bWTnrMgkApXhTN0O2e/WpmVNB2S6r1e55h gSd10nqGI0xPCXCtftzv/j+TXWghqnzveeM6l+qw5yEX0fCeb+Epl3HSjzJ3CytZ uE7c9yMbXvP0y27K+HZU0HsO/OAATmdpUw2EHxIUGjQ5cc9kPe/eY3cMVOPQKCRd ryhYxZTPl+WIqcmZCuvC20fxBwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFLDDTMdX BvAvlNKFOOFxePb3BoqWMB8GA1UdIwQYMBaAFCcsrl8hyL9ra0kVrwAEx+/Px9s9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE0QS81RUY4QTkxNjAw RUExMUVEOUMwQ0IzMzJDNEY5QUUwMi9KeXl1WHlISXYydHJTUld2QUFUSDc4X0gy ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p5eXVYeUhJdjJ0clNSV3ZBQVRINzhfSDJ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzMxNEEvNUVGOEE5MTYwMEVBMTFFRDlDMENCMzMyQzRGOUFFMDIvMzNGNzM0MEU2 OEI5MTFGMTg0MTIwNDVDODA0N0E4ODgucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZxdfAwQAZ77HMA8EAgACMAkDBwAgAQ3w8cAwDQYJKoZIhvcNAQEL BQADggEBAJeFDW5wUy6s30QHA7yCPs/DAqehgRBWEuuMkNmRqwX+YqibCrJ/zqsi Dk/pgKm/66kF0ZxFjAXcVWCcNVjvMMW2IhJHaMKAG9CA/7xiL9VUSaGG1ZqYXMgI 4imfC9qPAVFsbDj1ydaA0glOwE8LaW7xRKcmov99yvEIoTqCnLx/zoz+0Ai2TpBe vXVmSeOFLuipjMmSSY5AoMdobZj+1BnB/Gv8OK8JYgm0Vnfz/Rhe+Gn20bBxJbLN DFj80c+ySLmfD01+efp+ELn1q0XQPHAurRRtbaCIiu8X1KtZqdCdGLyn5s6t2rIb ohzbOafAbRDoDZ3rDUayk5bxur8mb9U= -----END CERTIFICATE-----Generated at Fri Jul 24 18:50:52 2026 by rpki-client