$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/A33B03A2F07911ECBDB1BC4BC4F9AE02.roa File: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (raw, json) Hash identifier: wubF49eAoF9HZ7KRE24UNHtpS4tGrniQyZh1XIMV5HI= Subject key identifier: A1:50:1E:53:80:A5:28:3F:BD:69:6B:64:D4:B7:24:D8:5D:72:05:CC Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Certificate serial: 03BE Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/A33B03A2F07911ECBDB1BC4BC4F9AE02.roa Signing time: Sat 29 Aug 2026 00:50:01 +0000 ROA not before: Sat 29 Aug 2026 00:50:01 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 135126 IP address blocks: 103.120.8.0/22 maxlen: 22 103.120.8.0/24 maxlen: 24 103.120.9.0/24 maxlen: 24 103.120.10.0/24 maxlen: 24 103.120.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Validity Not Before: Aug 29 00:50:01 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a922cb9-cad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:e2:12:b8:86:5a:93:a4:4b:20:24:be:c6: f0:bd:b1:9a:3e:23:74:4b:bb:52:97:78:e2:ed:9c: 66:10:01:8f:93:9d:a2:e0:b2:70:4c:1c:e6:c9:ca: d9:dc:d6:fd:92:b6:cf:9e:4f:79:5a:0d:a3:0b:e3: 26:94:94:75:f1:ca:cf:44:b8:1a:86:97:5a:f0:87: 10:f2:c2:66:fb:2f:9e:32:45:2c:f6:d5:35:20:96: 9b:cc:ba:cf:46:79:dc:50:dd:4b:8c:8f:73:66:11: 59:2e:a4:b3:9f:57:3d:df:a8:ef:37:f2:98:a2:69: bf:df:71:84:a6:76:a7:ef:74:5e:e1:20:1c:14:b9: 29:37:b6:d4:e7:a0:04:eb:6b:51:35:6a:fe:c6:4e: 7f:9d:67:34:78:67:8b:69:51:1c:5e:b0:66:24:02: b9:b0:9d:94:31:2e:00:ba:d0:dd:c2:c5:88:b7:30: e8:cd:be:dc:33:76:89:24:e8:7a:be:5f:59:13:a3: 7d:dd:77:ac:fb:f4:b0:8a:5a:63:c9:e3:91:a7:d2: c1:4e:42:fd:3d:f1:58:38:7a:64:8d:0f:55:59:25: 01:b2:83:3c:cf:d6:97:66:59:d5:49:54:91:5f:3b: 8e:88:e5:e9:ab:14:9f:00:0e:1d:39:c5:58:e5:ff: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:50:1E:53:80:A5:28:3F:BD:69:6B:64:D4:B7:24:D8:5D:72:05:CC X509v3 Authority Key Identifier: keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/A33B03A2F07911ECBDB1BC4BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.8.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:55:9c:98:60:16:4e:11:8c:5e:92:7f:a3:db:9b:e6:1b:3d: e0:42:1f:fd:3b:f5:80:b6:b3:d9:2f:20:01:d9:1d:52:03:63: 8e:57:0c:4f:53:e4:fd:74:5b:66:1a:6c:dd:89:b6:cd:12:2a: 10:74:5a:e1:6a:9e:fa:e2:3e:8f:b6:11:c0:07:8d:7f:6b:81: 41:f0:96:a1:60:80:9c:14:36:48:f2:8a:66:41:c9:80:32:6b: c7:84:04:20:93:cc:8d:3c:4f:43:f6:45:fa:35:fb:7a:49:b2: e5:a0:e3:82:09:de:6d:75:d9:ec:c4:49:ca:42:05:c4:fc:6d: f5:06:b0:83:d8:3c:00:59:74:00:79:7f:06:28:96:65:b7:53: 07:4d:2c:1e:63:51:ed:e0:b0:2a:63:51:80:da:05:a0:b8:9d: e0:ad:b5:b3:e2:a8:1c:64:b1:e5:77:b0:94:27:00:a6:b7:12: ab:c6:80:4e:2c:ee:4a:4b:be:4d:1f:f8:9c:bb:47:62:b6:38: 09:e3:f4:a3:93:ed:2c:10:f4:10:d3:69:03:ba:6a:fb:8e:05: e9:2f:42:88:69:c2:be:e5:d0:de:59:cc:46:70:7f:11:a6:fc: 15:53:da:bf:5d:6f:b5:7b:2b:f3:66:96:44:bd:c6:43:01:5a: 25:2a:12:a2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD RUJDREYzQ0IwHhcNMjYwODI5MDA1MDAxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkyMmNiOS1jYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+LiEriGWpOkSyAkvsbwvbGaPiN0S7tSl3ji7ZxmEAGPk52i4LJwTBzmycrZ 3Nb9krbPnk95Wg2jC+MmlJR18crPRLgahpda8IcQ8sJm+y+eMkUs9tU1IJabzLrP RnncUN1LjI9zZhFZLqSzn1c936jvN/KYomm/33GEpnan73Re4SAcFLkpN7bU56AE 62tRNWr+xk5/nWc0eGeLaVEcXrBmJAK5sJ2UMS4AutDdwsWItzDozb7cM3aJJOh6 vl9ZE6N93Xes+/SwilpjyeORp9LBTkL9PfFYOHpkjQ9VWSUBsoM8z9aXZlnVSVSR XzuOiOXpqxSfAA4dOcVY5f/QZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKFQHlOA pSg/vWlrZNS3JNhdcgXMMB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44 OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIyNDEvQjY0OUNBOTZGMDc0MTFFQzlBNTFENTQ4QzRGOUFFMDIvQTMzQjAzQTJG MDc5MTFFQ0JEQjFCQzRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3gIMA0GCSqGSIb3DQEBCwUAA4IBAQCLVZyYYBZOEYxekn+j25vm Gz3gQh/9O/WAtrPZLyAB2R1SA2OOVwxPU+T9dFtmGmzdibbNEioQdFrhap764j6P thHAB41/a4FB8JahYICcFDZI8opmQcmAMmvHhAQgk8yNPE9D9kX6Nft6SbLloOOC Cd5tddnsxEnKQgXE/G31BrCD2DwAWXQAeX8GKJZlt1MHTSweY1Ht4LAqY1GA2gWg uJ3grbWz4qgcZLHld7CUJwCmtxKrxoBOLO5KS75NH/icu0ditjgJ4/Sjk+0sEPQQ 02kDumr7jgXpL0KIacK+5dDeWcxGcH8RpvwVU9q/XW+1eyvzZpZEvcZDAVolKhKi -----END CERTIFICATE-----Generated at Sun Sep 27 21:37:06 2026 by rpki-client