$ rpki-client -vvf rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/21FFC88285BB11F18D64891761A30FBC.roa File: 21FFC88285BB11F18D64891761A30FBC.roa (raw, json) Hash identifier: PC6qEPDsndTLYCHvOKo4WSESSfo2uGz9CI0DWNFOq5s= Subject key identifier: E4:E1:AD:1C:1A:4E:2F:69:ED:E4:46:25:1B:B5:1B:F0:7A:EB:59:6D Certificate issuer: /CN=A917E10B/serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F Certificate serial: 02 Authority key identifier: DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/21FFC88285BB11F18D64891761A30FBC.roa Signing time: Wed 22 Jul 2026 10:50:20 +0000 ROA not before: Wed 22 Jul 2026 10:50:20 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 44444 IP address blocks: 103.1.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E10B, serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F Validity Not Before: Jul 22 10:50:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a60a06c-77a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:99:97:8b:e6:aa:52:f0:fc:ea:c7:6f:99: 88:8c:9d:f8:3d:94:ab:f3:ed:9b:0c:fd:fc:d5:f2: c1:6d:a8:e4:e8:1c:38:5e:8e:73:48:dd:0e:45:34: b5:82:a7:b7:a4:bb:8d:3d:28:27:65:31:be:ef:11: 75:55:54:0e:68:4c:59:d3:5a:4d:1c:24:17:8d:02: ed:e1:5e:44:ef:6c:76:f6:f8:49:3d:d4:c0:7d:c2: 4f:c5:9c:ba:7e:b4:40:bb:b4:58:8e:5b:03:00:97: ba:45:b2:38:de:fc:16:b2:ad:b7:14:4a:42:ad:9e: 6e:6c:5f:89:4e:d6:e3:35:23:48:50:b4:a6:54:36: d7:da:fb:4c:64:06:98:02:17:6a:7c:08:c5:67:1b: 49:0d:7c:f2:53:fb:20:bc:8e:c4:08:97:f7:fe:f8: 9b:c2:9a:59:f4:86:ce:be:52:53:0c:c7:9d:e8:bb: 64:44:68:d0:7c:16:ad:44:b4:c7:8e:22:ae:02:4f: 0c:ef:39:f1:a9:90:32:c5:3c:3a:b0:06:6e:6c:2b: e8:e2:3d:b7:8c:c1:41:c3:6b:f1:d4:37:4c:0d:97: 23:83:82:11:03:72:37:07:a3:a0:ea:a0:6c:2c:a1: 43:18:24:29:7d:fb:de:a5:db:17:61:f8:44:58:68: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E1:AD:1C:1A:4E:2F:69:ED:E4:46:25:1B:B5:1B:F0:7A:EB:59:6D X509v3 Authority Key Identifier: keyid:DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/21FFC88285BB11F18D64891761A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.1.196.0/24 Signature Algorithm: sha256WithRSAEncryption 21:40:56:17:e3:dd:8f:ce:d2:3f:d6:2f:40:44:28:75:41:37: 6f:56:8d:8e:7d:f7:85:dd:5a:69:11:7a:e8:ee:b6:1f:e5:d8: 1e:b2:4d:a6:10:5d:c6:6c:35:a4:16:0b:b0:26:6d:9f:76:06: a2:8d:e3:8a:c9:7a:e6:fb:cf:ee:9f:3e:db:b6:60:f3:e1:2d: 01:46:b5:6e:14:27:2a:23:3e:09:a6:bb:b6:e4:38:8b:65:77: a8:01:de:c9:ed:2d:76:e0:d6:53:fc:1d:19:4f:2c:81:b4:8f: 4f:ed:5f:f5:d8:60:f7:1a:dd:ed:fc:de:6f:bc:3e:2b:b0:c3: df:07:a7:36:92:b2:fb:2e:49:e4:98:a0:d5:97:fc:da:79:da: b5:32:f4:54:12:b6:c7:1d:30:ce:2e:fd:fb:36:e6:24:18:a3: d0:c7:20:ee:93:c8:54:f1:15:d8:6d:4b:72:bd:db:79:0d:77: 1f:c2:4b:73:3b:0b:7e:d2:9a:80:07:8d:58:f5:c5:fa:0e:aa: 1c:f4:e1:f3:1c:58:86:a1:31:62:60:99:21:6e:41:bf:7a:af: ca:e5:66:94:87:fd:c3:6f:b3:a4:5b:f2:19:2c:84:32:5b:f0: 4f:d9:28:c5:2b:90:a6:73:39:4b:88:af:ac:13:85:ec:5f:88: a2:2f:1d:91 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTEwQjExMC8GA1UEBRMoRENDOUNFQzBGQ0I4Q0NCQ0FGN0IxQ0MxQzhCMjE1MjU2 REY3ODc4RjAeFw0yNjA3MjIxMDUwMjBaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNjBhMDZjLTc3YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrLJmXi+aqUvD86sdvmYiMnfg9lKvz7ZsM/fzV8sFtqOToHDhejnNI3Q5FNLWC p7eku409KCdlMb7vEXVVVA5oTFnTWk0cJBeNAu3hXkTvbHb2+Ek91MB9wk/FnLp+ tEC7tFiOWwMAl7pFsjje/BayrbcUSkKtnm5sX4lO1uM1I0hQtKZUNtfa+0xkBpgC F2p8CMVnG0kNfPJT+yC8jsQIl/f++JvCmln0hs6+UlMMx53ou2REaNB8Fq1EtMeO Iq4CTwzvOfGpkDLFPDqwBm5sK+jiPbeMwUHDa/HUN0wNlyODghEDcjcHo6DqoGws oUMYJCl9+96l2xdh+ERYaGS5AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU5OGtHBpO L2nt5EYlG7Ub8HrrWW0wHwYDVR0jBBgwFoAU3MnOwPy4zLyvexzByLIVJW33h48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMTBCLzFCNDBEMkIyODVC QTExRjFCNERCQkNBNDYwQTMwRkJDLzNNbk93UHk0ekx5dmV4ekJ5TElWSlczM2g0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM01uT3dQeTR6THl2ZXh6QnlMSVZKVzMzaDQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTEwQi8xQjQwRDJCMjg1QkExMUYxQjREQkJDQTQ2MEEzMEZCQy8yMUZGQzg4Mjg1 QkIxMUYxOEQ2NDg5MTc2MUEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABnAcQwDQYJKoZIhvcNAQELBQADggEBACFAVhfj3Y/O0j/WL0BEKHVB N29WjY5994XdWmkReujuth/l2B6yTaYQXcZsNaQWC7AmbZ92BqKN44rJeub7z+6f Ptu2YPPhLQFGtW4UJyojPgmmu7bkOItld6gB3sntLXbg1lP8HRlPLIG0j0/tX/XY YPca3e383m+8Piuww98HpzaSsvsuSeSYoNWX/Np52rUy9FQStscdMM4u/fs25iQY o9DHIO6TyFTxFdhtS3K923kNdx/CS3M7C37SmoAHjVj1xfoOqhz04fMcWIahMWJg mSFuQb96r8rlZpSH/cNvs6Rb8hkshDJb8E/ZKMUrkKZzOUuIr6wThexfiKIvHZE= -----END CERTIFICATE-----Generated at Thu Jul 23 23:58:00 2026 by rpki-client