$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/1457405286F111F19E006003A7EE528E.roa File: 1457405286F111F19E006003A7EE528E.roa (raw, json) Hash identifier: DXkAVdTqtVw+EnDto9iziagqv6cs1aZGrAT3bRD4kFw= Subject key identifier: B2:C6:8A:09:7F:93:B5:F1:35:1E:FA:DE:63:46:B8:36:E9:F6:60:A7 Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0D63 Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/1457405286F111F19E006003A7EE528E.roa Signing time: Thu 23 Jul 2026 23:49:01 +0000 ROA not before: Thu 23 Jul 2026 23:49:01 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 134970 IP address blocks: 103.251.244.0/22 maxlen: 24 220.247.128.0/22 maxlen: 24 2407:7380::/48 maxlen: 48 2407:7380:b::/48 maxlen: 48 2407:7380:c::/48 maxlen: 48 2407:7380:d::/48 maxlen: 48 2407:7380:1000::/48 maxlen: 48 2407:7380:2000::/48 maxlen: 48 2407:7380:3000::/48 maxlen: 48 2407:7380:4000::/48 maxlen: 48 2407:7380:5000::/48 maxlen: 48 2407:7380:6000::/48 maxlen: 48 2407:7380:7000::/48 maxlen: 48 2407:7380:8000::/48 maxlen: 48 2407:7380:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 01:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3427 (0xd63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Jul 23 23:49:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a62a86d-db07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:ab:68:72:2c:83:b2:71:bf:1c:72:0e:b6: e1:8e:94:44:0b:90:fb:37:50:40:6e:09:93:1b:a0: 89:b1:28:dd:1b:69:18:dc:e0:44:b1:e0:8b:45:cb: 36:d9:91:61:7a:df:4d:a8:e6:91:0c:26:8c:99:7d: 86:43:e7:a4:f9:13:94:19:b3:ab:bb:91:ee:7b:6f: a5:70:9a:20:c7:f6:d8:0d:bb:e6:09:5b:7a:02:e5: 9a:e8:ea:23:d2:ef:4f:ea:b1:38:dd:87:d6:3f:2f: 36:3c:72:80:d4:92:28:1b:12:49:34:2c:d3:b9:8d: 1f:9a:f8:77:9e:63:e9:60:6b:9c:93:cf:5c:94:d9: 36:cc:cf:3d:59:f7:c1:09:ad:d6:d5:39:89:20:08: f2:bc:bd:93:d6:db:03:17:73:98:d3:76:a9:e1:d9: 1c:3a:fe:e4:26:fb:0e:d0:39:8f:cc:28:0c:fe:92: eb:04:d1:54:f8:ca:d8:c7:34:b8:ae:12:32:88:65: 20:5e:6d:42:91:fe:05:18:50:f2:d8:84:f7:66:03: 2a:25:6c:e1:94:e2:fc:31:b8:5b:36:16:87:41:ba: 55:93:07:c5:9c:ad:9e:ce:52:da:16:ca:b2:aa:b3: b1:1f:50:9a:46:20:df:84:df:ff:b8:56:bc:21:a1: ae:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C6:8A:09:7F:93:B5:F1:35:1E:FA:DE:63:46:B8:36:E9:F6:60:A7 X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/1457405286F111F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.251.244.0/22 220.247.128.0/22 IPv6: 2407:7380::/48 2407:7380:b::-2407:7380:d:ffff:ffff:ffff:ffff:ffff 2407:7380:1000::/48 2407:7380:2000::/48 2407:7380:3000::/48 2407:7380:4000::/48 2407:7380:5000::/48 2407:7380:6000::/48 2407:7380:7000::/48 2407:7380:8000::/48 2407:7380:9000::/48 Signature Algorithm: sha256WithRSAEncryption 67:53:37:6c:9f:6a:78:04:3b:0e:c5:b3:07:f3:66:10:a0:9c: 3b:b5:13:29:99:1b:44:68:e5:ea:e2:88:48:43:a8:0a:0f:44: d7:33:df:e3:60:50:26:a2:4f:6f:5a:ee:95:30:c8:20:03:71: 8e:21:05:24:13:12:6e:ce:4e:08:7b:5e:66:a0:04:dd:87:d8: 09:6f:1f:33:12:d6:e1:b6:ce:76:73:51:7e:48:d5:78:c1:6e: 1f:e4:28:d0:29:81:c6:b6:ae:ae:21:25:0a:78:43:03:cb:91: a7:83:6a:e4:93:b9:98:11:4b:fc:ed:af:f2:38:a5:73:4d:b0: cc:8c:4f:15:42:43:a8:32:a8:b8:f5:72:42:6c:29:a1:af:42: 78:4b:55:2e:f8:85:47:50:d1:96:dd:10:05:ea:f8:77:10:7e: a0:d6:6b:3c:56:db:32:a0:e2:48:24:73:99:8e:0e:28:34:01: 20:65:ee:c5:2a:0c:d7:41:d0:d0:4d:8b:5e:2e:cf:22:57:26: fa:fd:45:ca:aa:cc:39:e5:90:88:99:13:27:b3:d8:67:31:9b: 8e:18:c6:97:ee:aa:80:a9:a7:b3:e9:02:38:b4:33:47:98:bf: 45:db:7b:79:c3:b8:21:56:70:ed:00:03:e6:50:18:11:50:8c: d1:02:d6:92 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgICDWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjYwNzIzMjM0OTAxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTg2ZC1kYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8yraHIsg7JxvxxyDrbhjpREC5D7N1BAbgmTG6CJsSjdG2kY3OBEseCLRcs2 2ZFhet9NqOaRDCaMmX2GQ+ek+ROUGbOru5Hue2+lcJogx/bYDbvmCVt6AuWa6Ooj 0u9P6rE43YfWPy82PHKA1JIoGxJJNCzTuY0fmvh3nmPpYGuck89clNk2zM89WffB Ca3W1TmJIAjyvL2T1tsDF3OY03ap4dkcOv7kJvsO0DmPzCgM/pLrBNFU+MrYxzS4 rhIyiGUgXm1Ckf4FGFDy2IT3ZgMqJWzhlOL8MbhbNhaHQbpVkwfFnK2ezlLaFsqy qrOxH1CaRiDfhN//uFa8IaGuiwIDAQABo4IC3zCCAtswHQYDVR0OBBYEFLLGigl/ k7XxNR763mNGuDbp9mCnMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUMzQkUvOTQ3QjM1MDYwOTM4MTFFQTk1Q0EzMTI5QzRGOUFFMDIvMTQ1NzQwNTI4 NkYxMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMIGdBggrBgEFBQcBBwEB/wSBjTCB ijASBAIAATAMAwQCZ/v0AwQC3PeAMHQEAgACMG4DBwAkB3OAAAAwEgMHACQHc4AA CwMHASQHc4AADAMHACQHc4AQAAMHACQHc4AgAAMHACQHc4AwAAMHACQHc4BAAAMH ACQHc4BQAAMHACQHc4BgAAMHACQHc4BwAAMHACQHc4CAAAMHACQHc4CQADANBgkq hkiG9w0BAQsFAAOCAQEAZ1M3bJ9qeAQ7DsWzB/NmEKCcO7UTKZkbRGjl6uKISEOo Cg9E1zPf42BQJqJPb1rulTDIIANxjiEFJBMSbs5OCHteZqAE3YfYCW8fMxLW4bbO dnNRfkjVeMFuH+Qo0CmBxrauriElCnhDA8uRp4Nq5JO5mBFL/O2v8jilc02wzIxP FUJDqDKouPVyQmwpoa9CeEtVLviFR1DRlt0QBer4dxB+oNZrPFbbMqDiSCRzmY4O KDQBIGXuxSoM10HQ0E2LXi7PIlcm+v1FyqrMOeWQiJkTJ7PYZzGbjhjGl+6qgKmn s+kCOLQzR5i/Rdt7ecO4IVZw7QAD5lAYEVCM0QLWkg== -----END CERTIFICATE-----Generated at Fri Jul 24 10:31:04 2026 by rpki-client