$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa File: 4317395081E611EE9EFE132BC4F9AE02.roa (raw, json) Hash identifier: IUu7tuCQnOn20gjKX4EGAdKOaWEy3Jn4yItME/O1HD4= Subject key identifier: 22:72:07:20:E2:18:C9:E4:A8:31:79:8A:4A:2C:94:F4:B7:52:D4:FB Certificate issuer: /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Certificate serial: 0202 Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa Signing time: Wed 01 Jul 2026 05:29:56 +0000 ROA not before: Wed 01 Jul 2026 05:29:56 +0000 ROA not after: Fri 30 Oct 2026 00:00:00 +0000 asID: 20473 IP address blocks: 103.186.158.0/24 maxlen: 24 103.186.159.0/24 maxlen: 24 2400:72e0:9f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A7CA, serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Validity Not Before: Jul 1 05:29:56 2026 GMT Not After : Oct 30 00:00:00 2026 GMT Subject: CN=6a44a5d4-8ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2e:14:91:66:81:c6:77:fd:34:ab:b7:0f:e4: e0:24:fb:38:52:90:11:d4:3b:01:29:74:4c:aa:78: 20:ee:06:25:25:19:98:fa:14:7a:65:f7:69:2c:75: 68:d4:45:dc:63:74:f5:52:85:d8:27:c0:d7:7b:21: 65:64:8c:fe:d0:dd:9c:3c:a3:20:59:4d:e2:94:94: 03:d8:21:80:ab:fa:98:ab:7c:2c:94:b1:eb:23:2a: b9:36:a9:15:e6:93:00:c0:d5:69:3a:96:67:26:e6: 48:1d:a9:d8:47:c3:7d:6f:d0:a5:35:25:0a:01:02: 2b:d1:7b:e8:52:09:e7:d5:ca:7f:17:ed:9e:5d:0e: c3:20:1f:30:97:ed:eb:1d:ce:59:0a:76:d4:10:a7: 96:27:bb:98:22:c1:a8:9a:5a:da:b8:6f:36:73:56: 70:0a:e1:98:5f:16:73:a9:21:63:d1:08:f0:8e:b6: 46:1d:9c:1e:33:ad:e6:37:a8:9c:27:f5:2d:d7:0a: 84:30:1c:49:f1:66:e6:b3:a7:37:1f:8c:a7:f7:99: 0f:81:b7:90:7b:f8:c8:db:f8:b6:ef:87:c5:6b:05: 3a:2c:ec:8b:df:38:d3:71:9f:7f:11:21:6d:54:3e: 1d:44:09:2c:c6:ab:1d:29:1b:f5:39:cf:ad:00:a4: 3d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:72:07:20:E2:18:C9:E4:A8:31:79:8A:4A:2C:94:F4:B7:52:D4:FB X509v3 Authority Key Identifier: keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.186.158.0/23 IPv6: 2400:72e0:9f00::/40 Signature Algorithm: sha256WithRSAEncryption 22:69:4c:65:b4:a1:84:7a:12:73:c7:40:60:b4:6d:1f:7a:97: a0:cc:fc:0e:81:cc:1a:cc:2c:f8:c5:6a:bd:d2:dc:ee:eb:5d: 4a:bb:d7:78:4b:34:05:b4:d7:af:ec:6c:5c:0f:56:a1:f6:ff: 03:73:6e:9a:26:b2:d3:af:47:41:0a:30:53:55:27:88:9c:fe: d9:4d:5e:62:11:06:36:cf:6d:fb:a1:16:48:30:dd:ce:eb:19: fe:e3:95:5f:fd:ff:f0:b2:31:ac:5b:19:de:d5:49:97:25:34: b2:4f:54:c0:b8:0a:4b:60:e7:78:01:12:22:8f:b6:d7:e0:63: e4:35:38:22:0e:e7:64:62:f4:a6:84:54:64:ea:cf:ae:ce:57: 7a:4c:d0:07:7f:68:01:b7:ab:31:73:68:58:8d:26:47:88:aa: 3e:fb:ea:9b:f0:63:ea:95:cc:81:59:32:6d:53:69:99:a7:41: 14:7a:d7:d1:ce:dc:d4:b8:97:04:62:28:79:e7:e8:60:42:17: 59:93:74:5a:10:d1:a9:ad:d4:5f:e3:c9:83:95:88:bd:18:52: d9:6b:ce:aa:a2:78:12:03:14:6a:42:28:23:c5:d5:0d:56:64: c0:1a:95:d3:59:db:5e:c3:f5:9e:b7:b7:c0:71:98:3d:16:a5: 46:92:40:2b -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3Q0ExMTAvBgNVBAUTKERBMURCMkNEMzFGNDU0RjY5NTYxRDg2NjVEQzkzRUY4 MTJGMzk3QjAwHhcNMjYwNzAxMDUyOTU2WhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0YTVkNC04ZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2y4UkWaBxnf9NKu3D+TgJPs4UpAR1DsBKXRMqngg7gYlJRmY+hR6ZfdpLHVo 1EXcY3T1UoXYJ8DXeyFlZIz+0N2cPKMgWU3ilJQD2CGAq/qYq3wslLHrIyq5NqkV 5pMAwNVpOpZnJuZIHanYR8N9b9ClNSUKAQIr0XvoUgnn1cp/F+2eXQ7DIB8wl+3r Hc5ZCnbUEKeWJ7uYIsGomlrauG82c1ZwCuGYXxZzqSFj0QjwjrZGHZweM63mN6ic J/Ut1wqEMBxJ8Wbms6c3H4yn95kPgbeQe/jI2/i274fFawU6LOyL3zjTcZ9/ESFt VD4dRAksxqsdKRv1Oc+tAKQ9vwIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFCJyByDi GMnkqDF5ikoslPS3UtT7MB8GA1UdIwQYMBaAFNodss0x9FT2lWHYZl3JPvgS85ew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTdDQS80Q0Y3RjE1ODdF QjcxMUVFOTYyM0U5MUFDNEY5QUUwMi8yaDJ5elRIMFZQYVZZZGhtWGNrLS1CTHps N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJoMnl6VEgwVlBhVllkaG1YY2stLUJMemw3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3Q0EvNENGN0YxNTg3RUI3MTFFRTk2MjNFOTFBQzRGOUFFMDIvNDMxNzM5NTA4 MUU2MTFFRTlFRkUxMzJCQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQBZ7qeMA4EAgACMAgDBgAkAHLgnzANBgkqhkiG9w0BAQsFAAOCAQEA ImlMZbShhHoSc8dAYLRtH3qXoMz8DoHMGsws+MVqvdLc7utdSrvXeEs0BbTXr+xs XA9Wofb/A3Numiay069HQQowU1UniJz+2U1eYhEGNs9t+6EWSDDdzusZ/uOVX/3/ 8LIxrFsZ3tVJlyU0sk9UwLgKS2DneAESIo+21+Bj5DU4Ig7nZGL0poRUZOrPrs5X ekzQB39oAberMXNoWI0mR4iqPvvqm/Bj6pXMgVkybVNpmadBFHrX0c7c1LiXBGIo eefoYEIXWZN0WhDRqa3UX+PJg5WIvRhS2WvOqqJ4EgMUakIoI8XVDVZkwBqV01nb XsP1nre3wHGYPRalRpJAKw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:36:06 2026 by rpki-client