$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/9343CE6EE07211E7995BD42EC4F9AE02.roa File: 9343CE6EE07211E7995BD42EC4F9AE02.roa (raw, json) Hash identifier: WWsnDwU0xQ2vlm4IMeT2SoYmxtKS066yOj3K2RIAPYk= Subject key identifier: 77:4A:E7:48:1D:B6:F5:21:13:F4:BC:74:39:0C:69:16:53:09:FE:9C Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 35AA Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/9343CE6EE07211E7995BD42EC4F9AE02.roa Signing time: Fri 10 Jul 2026 15:13:27 +0000 ROA not before: Fri 10 Jul 2026 15:13:27 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 45437 IP address blocks: 14.1.16.0/22 maxlen: 22 14.1.16.0/24 maxlen: 24 45.116.108.0/22 maxlen: 24 103.16.96.0/22 maxlen: 24 103.210.76.0/22 maxlen: 24 103.228.213.0/24 maxlen: 24 103.228.214.0/24 maxlen: 24 103.228.215.0/24 maxlen: 24 114.141.96.0/20 maxlen: 24 203.170.88.0/23 maxlen: 23 2406:4d40::/32 maxlen: 32 2406:a800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13738 (0x35aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Jul 10 15:13:27 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a510c17-d41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:84:36:f5:44:9f:76:19:71:7a:a2:21:06: 3d:2a:cb:80:8b:81:5f:f2:21:88:00:d6:2f:63:74: f6:12:d6:15:d4:05:3c:08:7e:2d:50:72:8b:cf:70: 7d:6d:05:41:83:b5:4b:21:3c:b6:06:11:e2:9f:37: a1:d2:2a:6b:7f:c0:01:64:fd:f7:4e:82:47:d2:2c: 72:14:0e:af:de:2c:16:b5:b5:43:b5:cf:3e:27:ab: 62:df:fa:03:d1:6d:04:5d:3d:c1:a9:ac:c1:12:52: c5:6f:27:8a:0d:7d:d6:5e:75:44:07:58:7c:3e:d4: 70:f0:67:cc:35:13:2b:a8:06:c9:1e:e4:9f:ca:42: 04:e4:24:c1:93:f2:97:18:c2:45:6f:22:92:ad:70: b4:d7:7b:42:14:fa:07:a8:96:06:07:4f:3f:78:63: a0:fc:b3:df:30:b1:82:46:f6:ae:72:1c:cf:9f:0b: 87:42:93:65:c2:fa:ee:8f:e0:07:f7:d7:7a:c4:96: d8:25:8e:f8:d8:25:53:1c:9d:0d:ca:ee:1f:9e:fd: 0f:e9:f0:d9:43:9c:8f:a0:81:e8:75:93:aa:13:53: bb:c3:be:0d:48:bd:37:0b:f1:d2:54:fb:fa:92:4b: 2a:2a:c2:de:73:33:f5:cc:68:35:27:12:c3:1c:c2: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4A:E7:48:1D:B6:F5:21:13:F4:BC:74:39:0C:69:16:53:09:FE:9C X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/9343CE6EE07211E7995BD42EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.1.16.0/22 45.116.108.0/22 103.16.96.0/22 103.210.76.0/22 103.228.213.0-103.228.215.255 114.141.96.0/20 203.170.88.0/23 IPv6: 2406:4d40::/32 2406:a800::/32 Signature Algorithm: sha256WithRSAEncryption 84:f1:db:2e:6d:2f:ad:be:3a:0d:a6:c9:7a:76:31:a1:37:28: f9:eb:d8:15:c9:a2:a9:4a:0b:d1:b4:a2:cb:d5:24:c1:48:76: dd:d5:24:03:f0:55:30:c3:f9:a4:f1:6c:1a:b8:91:87:ce:c2: 2a:1e:04:4b:97:12:12:3c:ac:d8:f1:e5:96:00:7d:1b:ca:95: 84:dc:a3:c3:31:a5:6a:f6:8b:39:48:4c:c6:f4:13:19:a0:dd: f1:a4:49:38:15:1e:e5:1a:dc:ea:04:ed:a9:43:ff:4a:bb:f8: 69:3f:25:db:c2:89:e1:05:22:bb:4f:29:59:1c:99:20:19:7d: 54:9e:dd:62:65:4b:9c:d2:a9:48:e3:e2:87:0e:3c:6f:c1:7f: 88:1e:1e:2d:c8:f2:77:a5:05:7c:b5:0a:56:93:de:4a:38:47: 4e:13:cb:a4:5e:44:48:c5:08:de:24:70:1f:3d:19:85:da:c2: a9:f9:20:3b:03:e4:3b:1b:00:b8:0a:70:a5:e9:46:04:d3:68: 64:42:67:81:45:26:bd:55:e9:70:0a:ea:75:ee:b1:a1:08:fb: 20:7e:bb:d9:c6:4b:26:27:c3:d8:36:37:8f:1a:2d:93:22:f0: 96:6c:91:ac:3e:d4:af:00:9c:06:35:f5:ec:66:5c:4c:8f:22: 77:cc:9a:a0 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICNaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjYwNzEwMTUxMzI3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTUxMGMxNy1kNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXqENvVEn3YZcXqiIQY9KsuAi4Ff8iGIANYvY3T2EtYV1AU8CH4tUHKLz3B9 bQVBg7VLITy2BhHinzeh0iprf8ABZP33ToJH0ixyFA6v3iwWtbVDtc8+J6ti3/oD 0W0EXT3BqazBElLFbyeKDX3WXnVEB1h8PtRw8GfMNRMrqAbJHuSfykIE5CTBk/KX GMJFbyKSrXC013tCFPoHqJYGB08/eGOg/LPfMLGCRvauchzPnwuHQpNlwvruj+AH 99d6xJbYJY742CVTHJ0Nyu4fnv0P6fDZQ5yPoIHodZOqE1O7w74NSL03C/HSVPv6 kksqKsLeczP1zGg1JxLDHMK/xQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHdK50gd tvUhE/S8dDkMaRZTCf6cMB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUI2M0MvQjdBQ0MyNkMxRDk4MTFFMjhGMTBGMDgyMDhCMDJDRDIvOTM0M0NFNkVF MDcyMTFFNzk5NUJENDJFQzRGOUFFMDIucm9hMGEGCCsGAQUFBwEHAQH/BFIwUDA4 BAIAATAyAwQCDgEQAwQCLXRsAwQCZxBgAwQCZ9JMMAwDBABn5NUDBANn5NADBARy jWADBAHLqlgwFAQCAAIwDgMFACQGTUADBQAkBqgAMA0GCSqGSIb3DQEBCwUAA4IB AQCE8dsubS+tvjoNpsl6djGhNyj569gVyaKpSgvRtKLL1STBSHbd1SQD8FUww/mk 8WwauJGHzsIqHgRLlxISPKzY8eWWAH0bypWE3KPDMaVq9os5SEzG9BMZoN3xpEk4 FR7lGtzqBO2pQ/9Ku/hpPyXbwonhBSK7TylZHJkgGX1Unt1iZUuc0qlI4+KHDjxv wX+IHh4tyPJ3pQV8tQpWk95KOEdOE8ukXkRIxQjeJHAfPRmF2sKp+SA7A+Q7GwC4 CnCl6UYE02hkQmeBRSa9VelwCup17rGhCPsgfrvZxksmJ8PYNjePGi2TIvCWbJGs PtSvAJwGNfXsZlxMjyJ3zJqg -----END CERTIFICATE-----Generated at Fri Jul 24 08:18:28 2026 by rpki-client