$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/D94C07CAF5B211EFBD3CA23FC4F9AE02.roa File: D94C07CAF5B211EFBD3CA23FC4F9AE02.roa (raw, json) Hash identifier: mmhJOgJGH0p/EXPKugGpKlEEotFbKYBiFQkdKPR9puI= Subject key identifier: A2:04:EB:40:B9:6C:82:D7:66:88:74:1D:EF:E1:8C:03:0F:A1:DA:C5 Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 0B65 Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/D94C07CAF5B211EFBD3CA23FC4F9AE02.roa Signing time: Thu 30 Apr 2026 19:24:13 +0000 ROA not before: Thu 30 Apr 2026 19:24:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8888 IP address blocks: 103.149.46.0/24 maxlen: 24 203.55.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2917 (0xb65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Apr 30 19:24:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f3ac5d-1f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:e7:58:3c:3a:08:8a:8c:13:0f:03:c4:60: 5c:f0:18:de:95:62:ee:3f:3c:e9:a8:4c:fe:02:fe: 2e:71:e0:25:f0:7b:10:be:d7:4a:b0:d5:12:4e:57: f5:d4:7d:52:29:20:dd:00:be:64:b4:9a:52:65:f5: f4:74:9e:35:f8:8f:d5:9c:d5:f1:30:e1:bc:91:bd: 01:47:15:7d:af:22:20:1f:4d:24:ce:b4:36:87:ad: 20:8f:e1:c5:ca:13:b7:27:c1:1a:8f:82:b5:d9:fe: b3:ae:c6:d2:c9:7d:64:10:73:d3:ea:d7:3e:c1:d3: 3c:5b:46:a0:c1:07:e0:50:b5:bc:27:c4:c8:3b:90: 4b:70:ad:3d:bc:f9:36:60:99:24:0d:22:01:df:c1: dc:07:84:71:55:69:96:b6:b4:aa:11:8b:fd:82:55: cb:4f:05:91:ba:d3:9f:72:72:69:11:be:cd:a9:f5: 03:cb:4a:bf:10:83:d9:f7:ee:ed:07:02:ac:47:51: 6d:6c:78:cc:e9:da:0d:9f:6e:87:43:f7:d0:30:54: 18:5b:35:03:76:c3:41:b7:f9:45:9a:a6:b4:7d:de: 47:bb:b6:c3:95:f8:b3:89:a2:c6:47:cd:2e:ca:72: e3:76:a8:82:36:cc:cc:53:00:10:02:4b:5e:4b:18: 3e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:04:EB:40:B9:6C:82:D7:66:88:74:1D:EF:E1:8C:03:0F:A1:DA:C5 X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/D94C07CAF5B211EFBD3CA23FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.46.0/24 203.55.176.0/24 Signature Algorithm: sha256WithRSAEncryption 39:9a:d2:10:ab:e9:eb:98:b0:f0:13:8b:81:e6:71:51:0c:02: 42:71:89:0a:fd:86:12:1c:1a:ed:e7:ec:5d:05:e1:18:8c:a6: 71:9c:33:52:9f:d8:12:8a:cf:35:7a:a4:3f:5f:96:b7:b0:1a: 89:97:55:06:ac:70:3d:69:f8:16:77:6d:63:12:b6:51:66:0c: 49:fe:c7:6a:cd:ad:68:f6:cf:05:7e:bd:3c:80:d4:ff:ec:9a: cb:1b:70:b3:f1:f6:ea:43:95:d6:42:48:a2:e6:91:9a:d2:25: bf:ef:0a:96:69:67:59:b0:25:7a:32:ce:3f:34:93:68:47:e3: 5d:41:d6:d9:24:ee:0c:87:ec:a9:af:91:8f:dd:56:e2:f3:0d: ca:f7:ff:5d:d6:76:a5:94:21:e3:89:85:dc:1e:be:3f:3f:38: f6:7b:6a:ab:b5:1b:15:17:81:ee:b3:33:09:9a:44:12:a1:64: 82:81:11:75:30:e3:ab:e8:d4:03:ea:e2:68:6d:4e:18:a8:d4: 7f:d1:c3:6a:92:54:3b:38:66:b7:d0:f7:bd:24:a7:3c:98:ec: cc:1d:6c:3c:9c:02:4b:4a:66:02:6a:3d:ff:7b:c2:81:39:21: dc:76:49:e0:34:d5:ab:40:fb:54:3b:a7:ae:09:dd:36:e8:c8: 5c:a9:a8:07 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjYwNDMwMTkyNDEzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYzYWM1ZC0xZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLznWDw6CIqMEw8DxGBc8BjelWLuPzzpqEz+Av4uceAl8HsQvtdKsNUSTlf1 1H1SKSDdAL5ktJpSZfX0dJ41+I/VnNXxMOG8kb0BRxV9ryIgH00kzrQ2h60gj+HF yhO3J8Eaj4K12f6zrsbSyX1kEHPT6tc+wdM8W0agwQfgULW8J8TIO5BLcK09vPk2 YJkkDSIB38HcB4RxVWmWtrSqEYv9glXLTwWRutOfcnJpEb7NqfUDy0q/EIPZ9+7t BwKsR1FtbHjM6doNn26HQ/fQMFQYWzUDdsNBt/lFmqa0fd5Hu7bDlfiziaLGR80u ynLjdqiCNszMUwAQAkteSxg++QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKIE60C5 bILXZoh0He/hjAMPodrFMB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwQTgvQTA1OUFGOEE2NDBEMTFFQUI2Mzk1NTcxQzRGOUFFMDIvRDk0QzA3Q0FG NUIyMTFFRkJEM0NBMjNGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ5UuAwQAyzewMA0GCSqGSIb3DQEBCwUAA4IBAQA5mtIQq+nrmLDw E4uB5nFRDAJCcYkK/YYSHBrt5+xdBeEYjKZxnDNSn9gSis81eqQ/X5a3sBqJl1UG rHA9afgWd21jErZRZgxJ/sdqza1o9s8Ffr08gNT/7JrLG3Cz8fbqQ5XWQkii5pGa 0iW/7wqWaWdZsCV6Ms4/NJNoR+NdQdbZJO4Mh+ypr5GP3Vbi8w3K9/9d1nallCHj iYXcHr4/Pzj2e2qrtRsVF4HuszMJmkQSoWSCgRF1MOOr6NQD6uJobU4YqNR/0cNq klQ7OGa30Pe9JKc8mOzMHWw8nAJLSmYCaj3/e8KBOSHcdkngNNWrQPtUO6euCd02 6MhcqagH -----END CERTIFICATE-----Generated at Wed May 13 12:23:45 2026 by rpki-client