$ rpki-client -vvf rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/F98F88FA7B4D11F1B405B1A597A30FBC.roa File: F98F88FA7B4D11F1B405B1A597A30FBC.roa (raw, json) Hash identifier: BpqLsVApY9HvMtOZTXGvPmVaZLx/kdyWheeXJkSjNHg= Subject key identifier: 5C:DB:6F:D4:50:A2:8B:0A:EB:74:33:C2:78:89:23:3D:2D:24:18:D0 Certificate issuer: /CN=A917D82E/serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57 Certificate serial: 56 Authority key identifier: FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/F98F88FA7B4D11F1B405B1A597A30FBC.roa Signing time: Thu 09 Jul 2026 04:23:46 +0000 ROA not before: Thu 09 Jul 2026 04:23:46 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 45570 IP address blocks: 103.1.204.0/22 maxlen: 22 113.212.96.0/22 maxlen: 22 113.212.96.0/24 maxlen: 24 113.212.97.0/24 maxlen: 24 113.212.98.0/23 maxlen: 24 163.47.117.0/24 maxlen: 24 163.47.118.0/24 maxlen: 24 163.47.119.0/24 maxlen: 24 203.0.155.0/24 maxlen: 24 2400:c400::/32 maxlen: 32 2400:c400::/33 maxlen: 33 2400:c400:8000::/35 maxlen: 35 2400:c400:a000::/48 maxlen: 48 2400:c400:a001::/48 maxlen: 48 2400:c400:a002::/47 maxlen: 47 2400:c400:a004::/46 maxlen: 46 2400:c400:a008::/45 maxlen: 45 2400:c400:a010::/44 maxlen: 44 2400:c400:a020::/43 maxlen: 43 2400:c400:a040::/42 maxlen: 42 2400:c400:a080::/41 maxlen: 41 2400:c400:a100::/40 maxlen: 40 2400:c400:a200::/39 maxlen: 39 2400:c400:a400::/38 maxlen: 38 2400:c400:a800::/37 maxlen: 37 2400:c400:b000::/36 maxlen: 36 2400:c400:c000::/34 maxlen: 34 2400:c401::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D82E, serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57 Validity Not Before: Jul 9 04:23:46 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a4f2252-e9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:7c:4a:f5:03:92:20:13:ce:a6:1e:b9:b1: 29:2d:1d:19:5c:e7:17:fd:01:6e:de:55:e5:35:54: 83:50:70:35:1b:a2:5f:9a:9d:2e:a6:b2:3c:be:3a: cf:3a:1b:b6:f7:e0:f2:82:9c:6d:7b:41:46:03:b0: 39:d6:7c:af:96:99:4a:de:f0:fb:a5:7d:e7:fc:51: 02:ce:3a:15:27:3b:f5:8f:d4:be:84:ca:f2:55:21: bc:d5:a1:3e:6a:c1:90:c9:c4:c0:97:d7:96:5c:78: a9:35:b5:6f:a3:be:4c:26:e6:67:4d:dd:71:9e:50: 3e:69:01:6e:aa:3c:dc:88:b4:71:fc:8d:d0:6a:db: b1:86:1a:72:98:0f:eb:3f:c5:58:41:a7:e0:77:52: 6d:70:69:62:13:24:e2:74:fc:73:40:b5:d0:a9:5b: f0:60:2e:4c:7d:09:e4:df:4c:bf:8b:4b:6b:a0:53: 73:27:f1:74:75:4d:62:3b:b9:48:a9:ef:13:a4:e1: b0:da:7d:8e:9e:ac:6a:b8:c7:2c:72:33:38:61:c5: 87:28:2d:9b:42:99:62:d4:50:ff:b3:52:d3:f1:d2: 0b:ef:05:56:3c:a5:0b:ef:ea:09:63:dd:d4:9f:65: 55:90:af:28:81:64:ef:47:90:39:c4:cd:2b:ef:92: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DB:6F:D4:50:A2:8B:0A:EB:74:33:C2:78:89:23:3D:2D:24:18:D0 X509v3 Authority Key Identifier: keyid:FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/F98F88FA7B4D11F1B405B1A597A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.1.204.0/22 113.212.96.0/22 163.47.117.0-163.47.119.255 203.0.155.0/24 IPv6: 2400:c400::/31 Signature Algorithm: sha256WithRSAEncryption 53:fe:14:c7:06:34:85:af:f0:e4:ae:c4:df:32:39:50:79:4e: ed:d1:7e:b5:bd:5f:7e:22:10:44:cb:0e:52:ed:ff:3d:bd:81: 0d:88:ee:a0:8a:0a:09:6a:fc:a3:e3:36:72:a2:93:6e:31:d8: 55:e0:e8:eb:89:cf:21:d6:62:86:96:3e:7b:db:19:e8:09:c5: a2:fb:da:ec:11:96:19:72:79:e2:bd:c4:1d:c1:e6:ed:a1:49: ce:5d:a6:97:66:cb:b2:8e:8b:d2:ac:18:ac:3c:b1:b1:88:59: 27:54:d8:bd:c7:e4:fb:2c:93:bc:ed:43:b4:31:74:48:42:75: 91:4c:51:df:50:ed:b6:e1:7b:a2:5c:34:37:3f:46:cb:44:bd: 85:46:62:20:f1:5a:65:14:bc:b1:e4:8e:32:7b:a8:33:8c:b5: 58:85:fa:34:a9:07:2c:be:67:46:73:30:be:dd:7b:1c:02:1c: 6b:a5:92:b8:bd:06:22:5a:ac:7d:d2:d6:19:d4:81:d8:33:95: 6e:3d:8a:e6:8b:e7:78:7d:81:99:e8:ae:32:59:8c:a8:bf:4a: e0:57:8f:fd:85:e6:a1:1f:eb:54:1d:1f:29:12:13:0f:8d:ee: 41:95:4f:d3:37:3c:37:ab:0a:7d:21:87:50:6c:a6:9f:bc:78: 0c:93:c7:05 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDgyRTExMC8GA1UEBRMoRkY5MkVDOEJEODBERkFCREQzNkU2M0M5QUY0Q0E3QTg2 RERFNkE1NzAeFw0yNjA3MDkwNDIzNDZaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNGYyMjUyLWU5ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwWHxK9QOSIBPOph65sSktHRlc5xf9AW7eVeU1VINQcDUbol+anS6msjy+Os86 G7b34PKCnG17QUYDsDnWfK+WmUre8Pulfef8UQLOOhUnO/WP1L6EyvJVIbzVoT5q wZDJxMCX15ZceKk1tW+jvkwm5mdN3XGeUD5pAW6qPNyItHH8jdBq27GGGnKYD+s/ xVhBp+B3Um1waWITJOJ0/HNAtdCpW/BgLkx9CeTfTL+LS2ugU3Mn8XR1TWI7uUip 7xOk4bDafY6erGq4xyxyMzhhxYcoLZtCmWLUUP+zUtPx0gvvBVY8pQvv6glj3dSf ZVWQryiBZO9HkDnEzSvvktnnAgMBAAGjggKJMIIChTAdBgNVHQ4EFgQUXNtv1FCi iwrrdDPCeIkjPS0kGNAwHwYDVR0jBBgwFoAU/5Lsi9gN+r3TbmPJr0ynqG3ealcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEODJFL0U3MzEzMjI4MEIy MDExRjFBMkVGQzkzRjNFM0Q4QzY3L181THNpOWdOLXIzVGJtUEpyMHlucUczZWFs Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzVMc2k5Z04tcjNUYm1QSnIweW5xRzNlYWxjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDgyRS9FNzMxMzIyODBCMjAxMUYxQTJFRkM5M0YzRTNEOEM2Ny9GOThGODhGQTdC NEQxMUYxQjQwNUIxQTU5N0EzMEZCQy5yb2EwSAYIKwYBBQUHAQcBAf8EOTA3MCYE AgABMCADBAJnAcwDBAJx1GAwDAMEAKMvdQMEA6MvcAMEAMsAmzANBAIAAjAHAwUB JADEADANBgkqhkiG9w0BAQsFAAOCAQEAU/4UxwY0ha/w5K7E3zI5UHlO7dF+tb1f fiIQRMsOUu3/Pb2BDYjuoIoKCWr8o+M2cqKTbjHYVeDo64nPIdZihpY+e9sZ6AnF ovva7BGWGXJ54r3EHcHm7aFJzl2ml2bLso6L0qwYrDyxsYhZJ1TYvcfk+yyTvO1D tDF0SEJ1kUxR31DttuF7olw0Nz9Gy0S9hUZiIPFaZRS8seSOMnuoM4y1WIX6NKkH LL5nRnMwvt17HAIca6WSuL0GIlqsfdLWGdSB2DOVbj2K5ovneH2BmeiuMlmMqL9K 4FeP/YXmoR/rVB0fKRITD43uQZVP0zc8N6sKfSGHUGymn7x4DJPHBQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:28:50 2026 by rpki-client