$ rpki-client -vvvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/F48207E6DB8711EAA446B360C4F9AE02.roa File: F48207E6DB8711EAA446B360C4F9AE02.roa (raw, json) Hash identifier: VsfrBB9VPyaLbl9a/gYidMNfDFISYDFfqKD3s9yLyQ4= Subject key identifier: B7:F3:D0:1E:27:4C:A6:8D:FD:84:85:A2:FB:8C:F1:98:2E:2A:7B:D9 Certificate issuer: /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Certificate serial: 08ED Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/F48207E6DB8711EAA446B360C4F9AE02.roa Signing time: Fri 24 Jul 2026 21:41:21 +0000 ROA not before: Fri 24 Jul 2026 21:41:21 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 134152 IP address blocks: 103.118.20.0/22 maxlen: 22 103.118.20.0/24 maxlen: 24 103.118.21.0/24 maxlen: 24 103.118.22.0/24 maxlen: 24 103.118.23.0/24 maxlen: 24 2403:2540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 20:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2285 (0x8ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ACF6, serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Validity Not Before: Jul 24 21:41:21 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a63dc01-ac55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:24:36:3c:95:a3:c5:d5:b6:78:d6:76:10: e9:53:bd:95:2a:79:d9:aa:16:2a:d5:18:c7:3b:6e: 59:be:37:94:c4:1c:5f:c0:7c:b5:48:20:bc:af:e3: 98:a4:f2:74:85:cd:02:e2:4d:62:e4:62:1e:7d:fa: 2c:a1:f1:a2:37:70:54:0b:00:e1:38:13:fc:68:b7: c0:09:88:72:75:22:72:9c:ba:ea:0e:29:f6:78:5c: 27:02:24:b3:41:73:4d:c7:d5:ce:81:22:d3:2f:01: 0a:66:c7:1d:92:e0:d8:4a:ca:02:3a:f6:aa:2a:7c: af:cb:c5:b2:3a:6e:92:b2:e1:48:c3:30:c2:63:1c: fd:71:d1:e1:0f:93:ba:1a:73:71:0b:77:5f:5b:42: 46:77:84:20:08:34:c7:cb:b4:e0:41:63:b5:12:23: 5f:3c:6d:7b:dc:c1:63:fb:c3:fb:da:89:3e:fe:e7: 07:42:f5:08:3e:8a:b0:d8:16:7c:e8:e6:5f:54:6b: 73:c8:ec:cd:e1:60:dc:b8:2c:10:35:52:5c:3b:ba: 64:0a:2e:06:7c:ed:e5:ea:da:4d:a4:13:2f:4d:1e: 63:8a:74:2f:5e:e7:0f:68:9e:dc:18:93:b2:5d:b2: 51:5e:69:3d:1c:1a:48:12:89:46:15:ed:90:22:9c: 22:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F3:D0:1E:27:4C:A6:8D:FD:84:85:A2:FB:8C:F1:98:2E:2A:7B:D9 X509v3 Authority Key Identifier: keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/F48207E6DB8711EAA446B360C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.118.20.0/22 IPv6: 2403:2540::/32 Signature Algorithm: sha256WithRSAEncryption 9e:9e:91:bd:65:0b:ee:e8:7d:30:9c:83:36:25:af:29:2d:00: fb:a8:14:c1:f5:aa:5a:2f:fe:52:4d:2a:45:a7:1f:0c:c5:2d: af:81:e8:cc:b3:44:dd:72:66:72:49:a1:e7:50:31:ac:84:f7: da:88:8a:a6:0e:2f:d8:55:4a:b7:b6:56:fe:7c:46:d0:a3:9b: 28:78:51:26:ed:f5:38:6d:a2:2a:d7:0a:f1:6e:dd:12:31:b7: 77:4e:cb:f7:72:5f:6c:f6:ed:93:7d:3f:83:05:be:29:f9:be: b5:23:65:85:15:f4:c4:e9:54:bf:42:0f:da:35:c9:9a:4e:fa: a4:8e:b2:03:7d:54:3a:8f:e3:bc:69:4f:33:31:d8:c2:1a:c1: 09:52:c8:1b:eb:45:00:97:3f:60:f5:0f:f8:62:10:20:8b:71: 0f:9a:60:05:9c:79:5b:90:33:54:20:8e:c6:8f:d3:72:f6:23: 94:20:6c:55:8e:a5:22:31:50:db:fb:8a:aa:a9:6c:89:e9:ee: 9a:93:59:c4:ae:bd:d5:db:6a:ac:12:44:0b:cd:28:de:d1:e0: 98:6c:38:83:00:b2:9c:a4:5c:e1:0a:91:0a:e2:1e:6a:d5:1d: 5c:85:0f:5d:46:84:fe:e2:cd:af:b8:b0:e5:c9:0b:59:c7:15: 49:bf:4e:b9 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDRjYxMTAvBgNVBAUTKEEzNTExNzE4QjQyOUEyQjA0M0U2NDVCRkIxNjUwRUU2 Nzc3RTQxNzIwHhcNMjYwNzI0MjE0MTIxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYzZGMwMS1hYzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2YkNjyVo8XVtnjWdhDpU72VKnnZqhYq1RjHO25ZvjeUxBxfwHy1SCC8r+OY pPJ0hc0C4k1i5GIeffosofGiN3BUCwDhOBP8aLfACYhydSJynLrqDin2eFwnAiSz QXNNx9XOgSLTLwEKZscdkuDYSsoCOvaqKnyvy8WyOm6SsuFIwzDCYxz9cdHhD5O6 GnNxC3dfW0JGd4QgCDTHy7TgQWO1EiNfPG173MFj+8P72ok+/ucHQvUIPoqw2BZ8 6OZfVGtzyOzN4WDcuCwQNVJcO7pkCi4GfO3l6tpNpBMvTR5jinQvXucPaJ7cGJOy XbJRXmk9HBpIEolGFe2QIpwiuQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLfz0B4n TKaN/YSFovuM8ZguKnvZMB8GA1UdIwQYMBaAFKNRFxi0KaKwQ+ZFv7FlDuZ3fkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUNGNi8zNDk3ODNFRURC ODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9yQkQ1a1dfc1dVTzVuZC1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRVhHTFFwb3JCRDVrV19zV1VPNW5kLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUFDRjYvMzQ5NzgzRUVEQjg2MTFFQTg1NTk0MjVFQzRGOUFFMDIvRjQ4MjA3RTZE Qjg3MTFFQUE0NDZCMzYwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3YUMA0EAgACMAcDBQAkAyVAMA0GCSqGSIb3DQEBCwUAA4IBAQCe npG9ZQvu6H0wnIM2Ja8pLQD7qBTB9apaL/5STSpFpx8MxS2vgejMs0TdcmZySaHn UDGshPfaiIqmDi/YVUq3tlb+fEbQo5soeFEm7fU4baIq1wrxbt0SMbd3Tsv3cl9s 9u2TfT+DBb4p+b61I2WFFfTE6VS/Qg/aNcmaTvqkjrIDfVQ6j+O8aU8zMdjCGsEJ Usgb60UAlz9g9Q/4YhAgi3EPmmAFnHlbkDNUII7Gj9Ny9iOUIGxVjqUiMVDb+4qq qWyJ6e6ak1nErr3V22qsEkQLzSje0eCYbDiDALKcpFzhCpEK4h5q1R1chQ9dRoT+ 4s2vuLDlyQtZxxVJv065 -----END CERTIFICATE-----Generated at Thu Oct 1 22:34:46 2026 by rpki-client