$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa File: 5042B970E25B11EA9E988045C4F9AE02.roa (raw, json) Hash identifier: vM0V/shhUOo/yI8LQ9Ql73pjesyven5lDiLBb4Vn1tU= Subject key identifier: 1A:40:2C:65:4C:D2:66:E1:7C:5B:3B:5F:0F:1D:80:8B:EC:B7:00:21 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 08E8 Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa Signing time: Wed 22 Jul 2026 10:00:13 +0000 ROA not before: Wed 22 Jul 2026 10:00:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137532 IP address blocks: 103.112.64.0/23 maxlen: 23 103.112.64.0/24 maxlen: 24 103.112.65.0/24 maxlen: 24 2405:e6c0::/32 maxlen: 40 2405:e6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2280 (0x8e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: Jul 22 10:00:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a6094ad-02dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:7b:55:d9:a3:7e:4a:41:1e:51:50:a6:32: 76:6e:56:df:56:e7:41:8d:74:f0:f2:9d:3e:9b:a6: fc:3d:c9:68:f1:5d:9d:d9:d0:27:1d:18:9e:33:6c: ea:26:07:65:61:90:fa:cb:09:0b:aa:f8:39:8e:37: f7:66:32:fd:94:47:13:52:37:58:38:40:94:1d:6b: 4c:eb:ba:9b:aa:1c:69:78:2b:4e:af:e3:15:27:a5: 07:6b:b5:7f:58:2f:ba:07:5a:21:1f:f1:49:4b:3a: 1e:64:1e:ad:dc:2f:3a:fa:10:8d:95:0f:9e:4d:c5: 81:ba:39:65:2e:d6:05:d6:c8:61:f5:08:13:c3:4f: 6e:a6:b9:8d:b6:43:32:ff:2c:07:cf:b5:e1:e6:ac: 3e:e3:90:e5:9b:17:78:48:ae:26:86:81:99:91:1b: 02:f9:55:f3:90:2c:73:94:4b:a8:f6:c6:ca:57:e0: 0a:af:12:4e:53:37:30:96:4b:e5:eb:88:ec:e6:b8: e9:cb:bf:6a:0b:3c:99:87:9a:fe:6e:24:93:10:df: 6b:df:af:df:12:17:11:1b:d3:97:81:df:93:b3:c1: 50:e1:4c:b8:5a:2b:71:a9:17:a2:cf:f8:44:7e:b7: 7c:26:6b:aa:ac:5a:1d:a4:3f:84:e7:fb:b0:57:b8: ce:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:40:2C:65:4C:D2:66:E1:7C:5B:3B:5F:0F:1D:80:8B:EC:B7:00:21 X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.112.64.0/23 IPv6: 2405:e6c0::/32 Signature Algorithm: sha256WithRSAEncryption 1d:5b:9a:2d:fb:f7:e0:64:51:b8:73:15:5a:95:6d:f7:80:ee: 53:c4:7c:0f:1b:da:a1:a8:c7:47:3f:3f:2f:7c:10:2c:61:f1: 6a:ff:49:1a:12:43:05:28:7c:f2:19:3f:0e:a5:3d:9d:ac:54: 83:a6:5f:e2:89:85:41:45:6b:3b:ea:dd:66:95:eb:68:79:0d: 09:a6:73:8d:2e:78:b0:77:b8:2d:99:17:98:55:c6:2e:70:69: e0:43:b1:09:3a:f3:81:57:59:65:3f:43:7a:bd:dd:d5:06:f1: 83:3e:70:75:d8:a2:fd:c5:ae:28:3b:83:c4:ab:cd:95:79:d5: a8:46:a7:0b:9a:bd:25:de:67:59:88:c7:c2:6d:91:be:21:6a: b7:d5:da:a5:d8:3b:b1:47:07:4b:e7:18:00:4f:1a:b9:17:35: 96:51:cf:c6:51:4d:44:65:c3:35:5c:8b:a5:91:b2:ec:25:17: dd:5d:52:47:2a:5d:c5:e1:dd:82:f5:15:ec:3c:3e:69:0d:fa: 2f:6c:fa:3a:d9:f2:4d:18:9b:60:6c:89:02:db:d9:6b:09:2d: 5a:05:d7:a5:5b:af:13:8a:33:d6:e8:33:cd:c5:cf:38:5a:d5: 7c:d5:bc:b8:82:1e:b0:4b:61:fb:5f:23:71:2c:14:a3:32:ee: 38:0b:47:c6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjYwNzIyMTAwMDEzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYwOTRhZC0wMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueh7VdmjfkpBHlFQpjJ2blbfVudBjXTw8p0+m6b8Pclo8V2d2dAnHRieM2zq JgdlYZD6ywkLqvg5jjf3ZjL9lEcTUjdYOECUHWtM67qbqhxpeCtOr+MVJ6UHa7V/ WC+6B1ohH/FJSzoeZB6t3C86+hCNlQ+eTcWBujllLtYF1shh9QgTw09uprmNtkMy /ywHz7Xh5qw+45Dlmxd4SK4mhoGZkRsC+VXzkCxzlEuo9sbKV+AKrxJOUzcwlkvl 64js5rjpy79qCzyZh5r+biSTEN9r36/fEhcRG9OXgd+Ts8FQ4Uy4WitxqReiz/hE frd8JmuqrFodpD+E5/uwV7jOnwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBpALGVM 0mbhfFs7Xw8dgIvstwAhMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVCNDEvQTFFRENGRkU2Nzk5MTFFQUI2N0IzNDg0QzRGOUFFMDIvNTA0MkI5NzBF MjVCMTFFQTlFOTg4MDQ1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ3BAMA0EAgACMAcDBQAkBebAMA0GCSqGSIb3DQEBCwUAA4IBAQAd W5ot+/fgZFG4cxValW33gO5TxHwPG9qhqMdHPz8vfBAsYfFq/0kaEkMFKHzyGT8O pT2drFSDpl/iiYVBRWs76t1mletoeQ0JpnONLniwd7gtmReYVcYucGngQ7EJOvOB V1llP0N6vd3VBvGDPnB12KL9xa4oO4PEq82VedWoRqcLmr0l3mdZiMfCbZG+IWq3 1dql2DuxRwdL5xgATxq5FzWWUc/GUU1EZcM1XIulkbLsJRfdXVJHKl3F4d2C9RXs PD5pDfovbPo62fJNGJtgbIkC29lrCS1aBdelW68TijPW6DPNxc84WtV81by4gh6w S2H7XyNxLBSjMu44C0fG -----END CERTIFICATE-----Generated at Fri Jul 24 11:05:24 2026 by rpki-client