$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa File: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (raw, json) Hash identifier: Le90Ky/CyY2/lxicQeuuKZ6WHn3hpAB51ekv10DidwA= Subject key identifier: 0B:99:9E:40:E4:00:B7:39:49:AD:BB:E6:2B:83:1F:7E:3F:EC:0E:A2 Certificate issuer: /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Certificate serial: 0C72 Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa Signing time: Tue 28 Apr 2026 19:24:14 +0000 ROA not before: Tue 28 Apr 2026 19:24:14 +0000 ROA not after: Fri 28 Aug 2026 00:00:00 +0000 asID: 136400 IP address blocks: 103.86.124.0/24 maxlen: 24 103.86.125.0/24 maxlen: 24 103.86.126.0/24 maxlen: 24 103.86.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3186 (0xc72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F224, serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Validity Not Before: Apr 28 19:24:14 2026 GMT Not After : Aug 28 00:00:00 2026 GMT Subject: CN=69f1095e-9cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b7:de:4c:5b:7c:d5:07:5b:1e:54:22:c7:81: be:42:b7:4c:49:2b:da:cb:17:b4:45:fb:ea:fe:68: 64:0e:f2:09:8d:06:f2:07:12:22:73:23:be:7b:93: 9f:d5:db:de:bb:bd:eb:77:74:ba:48:18:a1:dc:40: 12:5a:9d:72:47:43:dc:ca:5d:95:75:39:c3:a1:cd: d0:e0:cc:b0:3e:59:b7:a1:63:db:fa:bf:2e:a8:ac: 7a:85:61:39:29:7a:80:b3:7e:7b:41:21:79:a8:ef: 8f:86:1a:06:e0:e9:c3:0e:9c:95:1d:45:94:e9:e7: 03:69:31:ff:ae:21:81:61:1e:32:ae:c3:3f:9f:3b: 6c:76:19:8e:d1:0c:d8:f0:71:7c:15:f3:a4:86:cb: 6c:b6:1c:11:07:49:fe:95:8b:f7:8b:c5:49:a0:b6: ec:bc:b0:24:aa:f6:de:45:b0:e7:70:7c:bb:c1:29: 35:25:f2:9a:25:7a:72:73:a7:3e:c8:d9:d6:e8:ac: e5:56:99:65:0c:3d:87:a7:84:b3:b1:1f:78:62:df: 36:5b:0a:a5:0c:73:be:69:04:6e:c9:58:c6:bd:01: 4f:dd:b5:bb:39:c3:89:77:94:ed:93:73:8a:4d:b4: 66:e4:46:ed:4b:4e:7a:9e:2b:60:ab:1e:40:a6:e9: 7d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:99:9E:40:E4:00:B7:39:49:AD:BB:E6:2B:83:1F:7E:3F:EC:0E:A2 X509v3 Authority Key Identifier: keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.124.0/22 Signature Algorithm: sha256WithRSAEncryption 47:b0:2a:7b:0f:0e:4f:3d:b4:55:de:89:eb:a4:9e:ba:90:3f: 05:1d:35:8a:04:0e:ae:26:8d:b9:0c:b9:c0:de:a4:3e:5a:9d: a7:3a:bc:04:d7:d5:66:d5:c8:d0:f9:08:8d:df:6a:12:38:2d: 5b:ea:56:b0:67:cd:e3:4b:2e:42:75:c3:96:c5:6b:c1:bc:34: b6:a4:47:4d:fc:b5:f9:ff:ab:95:d9:2b:f9:9e:bb:cf:36:46: b6:17:99:82:03:b6:63:dd:56:99:54:20:95:8e:c1:1a:cc:5a: 7b:9e:81:a8:73:56:ee:c8:28:91:73:c8:d2:d7:90:a2:6e:2d: dc:52:fe:4c:88:ae:58:6d:dd:d6:a9:d1:6c:10:3a:ab:b3:ff: 69:9a:20:d8:99:08:eb:fd:5d:ca:f0:9c:5c:3f:02:a0:f6:85: 50:55:8b:cd:18:de:f9:8a:c5:68:c0:e4:d5:c8:24:5e:c9:49: 19:7d:b7:e6:27:85:38:74:f7:51:6f:a8:1b:db:02:82:70:be: a5:6c:0a:bc:21:6c:2a:79:7e:14:57:7e:39:74:87:2a:7e:a2: 2f:e8:c0:10:97:ff:79:c4:e0:55:eb:a8:d7:d8:0b:25:29:a8: 86:4f:93:ec:09:04:2d:fa:f9:4d:4e:fe:48:c8:d7:a9:69:59: 64:ee:8b:fc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyMjQxMTAvBgNVBAUTKEJCNjVFMzRGNEZERUE5MkI1OUEzMjU0N0EzMzgyMDhB NjA4OTFFMDkwHhcNMjYwNDI4MTkyNDE0WhcNMjYwODI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWYxMDk1ZS05Y2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LfeTFt81QdbHlQix4G+QrdMSSvayxe0Rfvq/mhkDvIJjQbyBxIicyO+e5Of 1dveu73rd3S6SBih3EASWp1yR0Pcyl2VdTnDoc3Q4MywPlm3oWPb+r8uqKx6hWE5 KXqAs357QSF5qO+PhhoG4OnDDpyVHUWU6ecDaTH/riGBYR4yrsM/nztsdhmO0QzY 8HF8FfOkhststhwRB0n+lYv3i8VJoLbsvLAkqvbeRbDncHy7wSk1JfKaJXpyc6c+ yNnW6KzlVpllDD2Hp4SzsR94Yt82WwqlDHO+aQRuyVjGvQFP3bW7OcOJd5Ttk3OK TbRm5EbtS056nitgqx5Apul9JQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAuZnkDk ALc5Sa275iuDH34/7A6iMB8GA1UdIwQYMBaAFLtl409P3qkrWaMlR6M4IIpgiR4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjIyNC82RTlCQTQxQTIw NTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFTdFpveVZIb3pnZ2ltQ0pI Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UyWGpUMF9lcVN0Wm95VkhvemdnaW1DSkhnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YyMjQvNkU5QkE0MUEyMDU4MTFFQUI3MTc3MjFCQzRGOUFFMDIvQTQ2RTRFQUMy MDU5MTFFQUFCNkVDRjFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ1Z8MA0GCSqGSIb3DQEBCwUAA4IBAQBHsCp7Dw5PPbRV3onrpJ66 kD8FHTWKBA6uJo25DLnA3qQ+Wp2nOrwE19Vm1cjQ+QiN32oSOC1b6lawZ83jSy5C dcOWxWvBvDS2pEdN/LX5/6uV2Sv5nrvPNka2F5mCA7Zj3VaZVCCVjsEazFp7noGo c1buyCiRc8jS15Cibi3cUv5MiK5Ybd3WqdFsEDqrs/9pmiDYmQjr/V3K8JxcPwKg 9oVQVYvNGN75isVowOTVyCReyUkZfbfmJ4U4dPdRb6gb2wKCcL6lbAq8IWwqeX4U V345dIcqfqIv6MAQl/95xOBV66jX2AslKaiGT5PsCQQt+vlNTv5IyNepaVlk7ov8 -----END CERTIFICATE-----Generated at Wed May 13 13:52:09 2026 by rpki-client