$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/5DE13E6AAF1211EB8138312CC4F9AE02.roa File: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (raw, json) Hash identifier: ps3tktTEk2EDSAZPtq4icwHfRPp4LkgQtF5M4/9VUfg= Subject key identifier: 2B:64:A7:2C:0E:0E:4A:CB:D1:84:42:B1:A7:44:B0:82:7D:7B:4F:2F Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Certificate serial: 06F8 Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/5DE13E6AAF1211EB8138312CC4F9AE02.roa Signing time: Tue 14 Jul 2026 23:23:59 +0000 ROA not before: Tue 14 Jul 2026 23:23:59 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 138029 IP address blocks: 103.119.104.0/23 maxlen: 23 103.119.106.0/23 maxlen: 23 103.119.106.0/24 maxlen: 24 103.119.107.0/24 maxlen: 24 2403:4240::/32 maxlen: 32 2403:4240:a000::/36 maxlen: 36 2403:4240:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1784 (0x6f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Validity Not Before: Jul 14 23:23:59 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a56c50f-d71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:b7:d4:41:4d:dd:51:d3:11:a9:c8:11:99: 5d:91:f7:29:ac:3e:1d:c0:84:54:55:22:39:8a:81: 3f:ba:40:c8:69:4e:f0:45:6b:d5:67:40:15:16:f5: 4a:7d:71:52:92:b4:b4:d7:be:2e:3e:cc:a6:d5:fe: 4a:b3:4e:67:b0:36:3f:13:e4:0c:19:a5:57:9a:b9: 77:9c:0a:37:ac:9b:97:8e:81:cc:8e:01:58:57:00: e4:4f:12:31:10:dc:45:92:9f:55:c1:d8:31:4f:0e: eb:c8:04:15:fa:9c:98:b4:81:b3:0c:ba:4c:86:00: c0:0f:31:81:48:9e:74:e7:c7:90:05:ac:ce:e4:ad: d7:f9:72:47:7a:c3:c3:f0:db:35:b2:66:6a:8b:bf: cd:54:bc:7f:8c:e8:bc:e6:6e:ac:b3:8c:21:65:7c: 5b:8f:9f:56:45:97:91:91:02:36:0c:f5:12:2a:02: 2b:1c:d4:d9:59:df:1b:8b:e2:6a:36:e0:87:79:42: 08:02:d9:e9:e6:66:80:49:16:95:c9:9d:f4:ee:05: b2:fe:3b:3e:5a:93:7a:ab:33:3f:69:25:16:16:dd: a1:9e:4b:4a:20:aa:2a:f0:62:a2:88:91:d0:42:94: 77:e5:78:06:9e:35:62:1f:2e:a2:bd:a5:56:e5:f1: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:64:A7:2C:0E:0E:4A:CB:D1:84:42:B1:A7:44:B0:82:7D:7B:4F:2F X509v3 Authority Key Identifier: keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/5DE13E6AAF1211EB8138312CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.119.104.0/22 IPv6: 2403:4240::/32 Signature Algorithm: sha256WithRSAEncryption 16:6f:71:a3:c9:1d:d6:fb:3f:ca:f1:57:08:08:e0:29:0f:a0: 3b:2b:c6:8c:c4:17:b2:7a:2e:c1:ae:27:80:3f:a1:00:b9:a0: 16:87:51:86:fb:29:97:6c:c6:d5:14:b3:91:dd:a4:69:be:59: 12:26:dd:2a:64:fc:c3:d7:26:06:ba:72:f9:76:b4:9d:9a:95: 98:41:1b:c5:23:3f:25:48:f0:6f:ef:46:ae:23:e4:0e:df:8a: ed:31:5c:95:08:06:5b:91:1c:84:00:63:cd:1f:9e:ab:5c:e9: c8:2f:61:6f:ad:e1:67:b2:71:9b:f9:04:64:f0:1f:9b:61:aa: 09:c8:51:b1:1b:64:14:57:04:fe:ef:b9:d3:55:39:43:94:61: d3:cf:92:54:13:72:c7:65:2c:08:17:52:c4:cf:36:17:bb:e1: 11:80:f4:fd:f7:a7:42:31:7b:96:0e:bd:03:54:ff:a8:3f:88: 0d:21:6b:63:ac:85:f6:17:5d:c1:4e:17:6b:4b:d4:41:79:73: 3c:88:7a:72:f0:7c:c0:40:f9:41:f0:1e:4d:9e:9f:7c:75:69: 39:7a:d0:1b:5b:2c:04:f2:d6:3e:61:62:6e:a4:bf:ab:16:b9: 68:f0:1b:33:25:58:a1:5c:e4:0e:d1:54:26:0c:1e:49:f8:f1: f3:8c:36:c5 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD OTk3MDlCMjIwHhcNMjYwNzE0MjMyMzU5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU2YzUwZi1kNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRi31EFN3VHTEanIEZldkfcprD4dwIRUVSI5ioE/ukDIaU7wRWvVZ0AVFvVK fXFSkrS0174uPsym1f5Ks05nsDY/E+QMGaVXmrl3nAo3rJuXjoHMjgFYVwDkTxIx ENxFkp9VwdgxTw7ryAQV+pyYtIGzDLpMhgDADzGBSJ5058eQBazO5K3X+XJHesPD 8Ns1smZqi7/NVLx/jOi85m6ss4whZXxbj59WRZeRkQI2DPUSKgIrHNTZWd8bi+Jq NuCHeUIIAtnp5maASRaVyZ307gWy/js+WpN6qzM/aSUWFt2hnktKIKoq8GKiiJHQ QpR35XgGnjViHy6ivaVW5fHGXQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCtkpywO DkrL0YRCsadEsIJ9e08vMB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzlCNTAvQzZDMDQ5QjJBRUZFMTFFQjgwOTMyNjNFQzRGOUFFMDIvNURFMTNFNkFB RjEyMTFFQjgxMzgzMTJDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3doMA0EAgACMAcDBQAkA0JAMA0GCSqGSIb3DQEBCwUAA4IBAQAW b3GjyR3W+z/K8VcICOApD6A7K8aMxBeyei7BrieAP6EAuaAWh1GG+ymXbMbVFLOR 3aRpvlkSJt0qZPzD1yYGunL5drSdmpWYQRvFIz8lSPBv70auI+QO34rtMVyVCAZb kRyEAGPNH56rXOnIL2FvreFnsnGb+QRk8B+bYaoJyFGxG2QUVwT+77nTVTlDlGHT z5JUE3LHZSwIF1LEzzYXu+ERgPT996dCMXuWDr0DVP+oP4gNIWtjrIX2F13BThdr S9RBeXM8iHpy8HzAQPlB8B5Nnp98dWk5etAbWywE8tY+YWJupL+rFrlo8BszJVih XOQO0VQmDB5J+PHzjDbF -----END CERTIFICATE-----Generated at Fri Jul 24 19:02:33 2026 by rpki-client