$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/D4EFA44673CD11EA8BE69127C4F9AE02.roa File: D4EFA44673CD11EA8BE69127C4F9AE02.roa (raw, json) Hash identifier: EJ0yALTK4BtZ12yVPRxK0huZzO9WF6oYQ/1FbxvX6i0= Subject key identifier: A0:15:39:D4:CA:A1:01:53:C9:D3:54:6F:DE:3C:04:01:30:19:6F:D8 Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 0B62 Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/D4EFA44673CD11EA8BE69127C4F9AE02.roa Signing time: Thu 30 Apr 2026 19:24:07 +0000 ROA not before: Thu 30 Apr 2026 19:24:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4785 IP address blocks: 103.150.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Apr 30 19:24:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f3ac57-64a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:8e:68:e6:69:37:32:e0:03:5a:ca:24:46: a0:fd:c2:33:66:05:c8:5a:57:10:f2:df:23:b7:e6: 94:20:ff:29:01:2b:c2:dc:71:77:71:88:89:93:69: 6c:96:c9:36:91:8f:b9:f3:cd:a1:07:c6:20:99:48: 99:0b:4a:aa:65:fc:8c:da:82:8e:95:fa:54:08:60: 06:58:56:52:82:b4:a6:9c:c3:c1:4f:fb:a6:2d:93: fd:43:9c:11:83:e3:39:58:9e:ed:d3:a3:1d:1a:34: 41:1b:05:23:73:b7:46:08:8c:0e:0b:e6:28:9c:cc: 38:40:17:10:e4:1f:84:17:48:13:9f:30:bf:82:da: e6:99:1b:9e:ec:fa:f9:28:05:d3:65:13:fc:0d:34: 81:be:24:80:7c:63:0b:17:58:22:43:77:ee:23:df: b9:b3:b3:95:b9:45:81:ef:a6:24:c5:71:93:68:79: c6:36:4c:62:57:36:59:05:30:56:98:aa:0d:64:8d: 4d:b9:ad:b7:b2:9b:90:93:a5:ae:c0:9a:a9:8e:7f: 04:91:c6:e6:84:b0:54:74:f1:b3:95:ef:90:35:e2: 23:91:49:f1:ba:2d:a8:b8:03:b9:59:df:ef:6c:51: 2b:8f:5a:00:8f:3d:2a:46:3c:3f:4f:7f:5e:ea:18: dd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:15:39:D4:CA:A1:01:53:C9:D3:54:6F:DE:3C:04:01:30:19:6F:D8 X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/D4EFA44673CD11EA8BE69127C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.150.8.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:52:c8:fa:b3:c2:90:71:73:30:d7:c2:ef:96:d7:46:b5:4e: 6e:7e:6e:b5:b4:db:02:eb:c9:f6:7d:d9:07:c1:8d:e4:76:78: 89:78:2f:f6:2c:5b:81:43:63:7a:93:37:34:b9:77:05:cf:cc: 65:db:14:1c:33:b8:4d:df:b1:13:8a:26:d6:08:70:5e:37:d0: fe:88:f0:a6:82:4e:dd:6c:61:f1:90:e8:2d:63:05:ba:6d:99: 64:ea:bc:c5:6a:64:47:18:fd:82:f6:bd:ca:63:72:0f:f7:a6: 10:de:2e:ba:4c:16:a2:20:1e:33:d4:ad:80:c1:d5:d6:0a:58: 53:f5:65:04:62:82:c5:f2:83:d4:6d:0e:c4:ed:e1:97:1d:9c: 50:6c:d8:01:32:ea:28:56:6b:1a:5d:19:60:3a:0e:5e:14:ed: b8:7d:4e:b2:57:b7:5c:5d:ec:12:16:ca:ae:6e:94:35:6f:6b: a5:9f:12:89:9b:0f:8a:1e:0f:5c:d7:d5:0c:ef:e0:57:38:d5: 66:4d:ec:aa:b1:f7:4c:c7:ac:6c:e0:13:4f:06:ef:ba:49:ab: 12:f3:84:17:e6:84:0d:1a:d9:99:4c:0f:1a:f2:9f:3b:4a:d5: 2c:2b:4b:03:b3:f7:59:15:8b:c8:5e:73:8b:58:99:5e:07:2f: ea:ac:a0:4c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjYwNDMwMTkyNDA3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYzYWM1Ny02NGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjsCOaOZpNzLgA1rKJEag/cIzZgXIWlcQ8t8jt+aUIP8pASvC3HF3cYiJk2ls lsk2kY+5882hB8YgmUiZC0qqZfyM2oKOlfpUCGAGWFZSgrSmnMPBT/umLZP9Q5wR g+M5WJ7t06MdGjRBGwUjc7dGCIwOC+YonMw4QBcQ5B+EF0gTnzC/gtrmmRue7Pr5 KAXTZRP8DTSBviSAfGMLF1giQ3fuI9+5s7OVuUWB76YkxXGTaHnGNkxiVzZZBTBW mKoNZI1Nua23spuQk6WuwJqpjn8EkcbmhLBUdPGzle+QNeIjkUnxui2ouAO5Wd/v bFErj1oAjz0qRjw/T39e6hjdGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKAVOdTK oQFTydNUb948BAEwGW/YMB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwQTgvQTA1OUFGOEE2NDBEMTFFQUI2Mzk1NTcxQzRGOUFFMDIvRDRFRkE0NDY3 M0NEMTFFQThCRTY5MTI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ5YIMA0GCSqGSIb3DQEBCwUAA4IBAQBtUsj6s8KQcXMw18LvltdG tU5ufm61tNsC68n2fdkHwY3kdniJeC/2LFuBQ2N6kzc0uXcFz8xl2xQcM7hN37ET iibWCHBeN9D+iPCmgk7dbGHxkOgtYwW6bZlk6rzFamRHGP2C9r3KY3IP96YQ3i66 TBaiIB4z1K2AwdXWClhT9WUEYoLF8oPUbQ7E7eGXHZxQbNgBMuooVmsaXRlgOg5e FO24fU6yV7dcXewSFsqubpQ1b2ulnxKJmw+KHg9c19UM7+BXONVmTeyqsfdMx6xs 4BNPBu+6SasS84QX5oQNGtmZTA8a8p87StUsK0sDs/dZFYvIXnOLWJleBy/qrKBM -----END CERTIFICATE-----Generated at Wed May 13 12:49:07 2026 by rpki-client