$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/C6766086579811EAA245BE5EC4F9AE02.roa File: C6766086579811EAA245BE5EC4F9AE02.roa (raw, json) Hash identifier: 6McwifOEsChy78SbBd4r2bAdhC4Hhk5/bZNr5Apkj8E= Subject key identifier: BD:E9:13:92:88:39:61:AF:A1:B3:5C:02:BD:96:13:12:A6:5D:3F:9E Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Certificate serial: 0B6B Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/C6766086579811EAA245BE5EC4F9AE02.roa Signing time: Tue 14 Apr 2026 19:24:07 +0000 ROA not before: Tue 14 Apr 2026 19:24:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136431 IP address blocks: 103.87.208.0/23 maxlen: 24 103.87.210.0/23 maxlen: 24 203.96.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2923 (0xb6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Validity Not Before: Apr 14 19:24:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69de9457-e179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:99:a8:e5:bb:93:1f:52:d6:58:a0:0a:a9: ac:b3:c2:b7:b6:cc:1d:e4:84:16:99:44:56:29:a2: ad:76:91:aa:73:29:18:b7:c1:cc:a5:63:fe:e8:ec: af:e1:d4:fc:16:66:e3:5b:3a:01:86:13:53:4f:a5: 6d:a7:7e:5e:93:93:ff:06:24:16:f6:d7:2d:f3:5a: 46:b2:a5:da:d6:80:66:2e:02:b3:2f:59:fe:87:70: fa:c2:8c:20:49:18:53:d6:80:66:04:4c:65:e3:55: 86:eb:df:2a:78:3e:7b:0b:90:a6:e2:38:31:be:92: d7:70:53:1a:15:17:fa:37:83:fb:79:b3:b7:6c:60: c0:e9:f4:6e:c2:ac:79:b5:fd:8c:83:66:ca:46:4d: e7:54:43:9c:53:72:7e:79:79:d7:b8:37:25:9c:50: ae:53:6e:43:81:96:21:ba:c9:84:c0:75:03:41:60: d2:73:9c:1b:27:16:2d:22:ac:47:67:6b:fa:ff:0b: 41:a1:3e:60:80:51:37:c5:ef:16:58:48:94:fc:df: 4f:c3:bf:cf:a3:66:48:16:47:5a:dc:33:6e:ad:8d: 33:c6:0b:25:83:db:84:98:ae:ec:40:3d:96:e2:d2: 02:57:e8:b9:3d:bc:7b:04:f3:80:ed:87:06:b9:19: ff:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E9:13:92:88:39:61:AF:A1:B3:5C:02:BD:96:13:12:A6:5D:3F:9E X509v3 Authority Key Identifier: keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/C6766086579811EAA245BE5EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.87.208.0/22 203.96.172.0/22 Signature Algorithm: sha256WithRSAEncryption 54:cd:b0:83:77:eb:fa:62:ff:c1:dd:80:e7:2e:79:b1:f5:05: 3a:4d:51:0d:37:dd:19:f9:e3:38:9a:99:3b:56:07:8f:a0:89: 83:bf:26:df:77:78:77:58:ea:45:6d:1e:48:e7:06:b7:39:57: ab:84:a7:01:4c:51:eb:c1:e5:66:6f:78:ad:c3:eb:96:e6:f0: ff:5f:8c:27:e3:fc:75:45:c1:18:17:40:00:ca:e1:d7:66:bf: 85:b6:09:ce:f8:eb:29:8a:f8:d4:61:24:ef:1b:fe:87:ee:06: b5:aa:fb:34:3f:ea:0f:45:e1:c9:46:a0:67:e6:09:62:c6:58: c2:40:86:e3:ce:88:49:5b:84:d1:f3:89:fe:c1:fa:da:7b:3b: c0:7b:c2:d5:f2:79:3b:ba:6f:fb:24:21:f2:17:e4:a4:3e:00: b6:9f:49:f8:16:96:ba:41:ad:e4:eb:34:f6:c7:8e:b5:18:98: 00:b7:18:ae:09:23:95:f0:db:aa:e5:23:7b:c8:d9:86:6f:10: eb:6f:5e:39:5a:aa:97:7e:90:08:31:a7:aa:18:5d:67:99:4b: 83:7d:a0:78:af:9e:5f:00:40:b8:45:fa:48:db:5f:df:73:3d: dc:79:c5:06:8d:bc:56:37:cb:64:ed:99:b0:58:21:bf:21:3d: 51:d6:19:a0 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICC2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE MEMzOTYyRTcwHhcNMjYwNDE0MTkyNDA3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWRlOTQ1Ny1lMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0OZqOW7kx9S1ligCqmss8K3tswd5IQWmURWKaKtdpGqcykYt8HMpWP+6Oyv 4dT8FmbjWzoBhhNTT6Vtp35ek5P/BiQW9tct81pGsqXa1oBmLgKzL1n+h3D6wowg SRhT1oBmBExl41WG698qeD57C5Cm4jgxvpLXcFMaFRf6N4P7ebO3bGDA6fRuwqx5 tf2Mg2bKRk3nVEOcU3J+eXnXuDclnFCuU25DgZYhusmEwHUDQWDSc5wbJxYtIqxH Z2v6/wtBoT5ggFE3xe8WWEiU/N9Pw7/Po2ZIFkda3DNurY0zxgslg9uEmK7sQD2W 4tICV+i5Pbx7BPOA7YcGuRn/eQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFL3pE5KI OWGvobNcAr2WExKmXT+eMB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2 OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzJGQTUvQUJENDcxMDg1NjkxMTFFQUI1QzVDNzBGQzRGOUFFMDIvQzY3NjYwODY1 Nzk4MTFFQUEyNDVCRTVFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ1fQAwQCy2CsMA0GCSqGSIb3DQEBCwUAA4IBAQBUzbCDd+v6Yv/B 3YDnLnmx9QU6TVENN90Z+eM4mpk7VgePoImDvybfd3h3WOpFbR5I5wa3OVerhKcB TFHrweVmb3itw+uW5vD/X4wn4/x1RcEYF0AAyuHXZr+FtgnO+OspivjUYSTvG/6H 7ga1qvs0P+oPReHJRqBn5glixljCQIbjzohJW4TR84n+wfraezvAe8LV8nk7um/7 JCHyF+SkPgC2n0n4Fpa6Qa3k6zT2x461GJgAtxiuCSOV8Nuq5SN7yNmGbxDrb145 WqqXfpAIMaeqGF1nmUuDfaB4r55fAEC4RfpI21/fcz3cecUGjbxWN8tk7ZmwWCG/ IT1R1hmg -----END CERTIFICATE-----Generated at Fri Apr 17 09:53:30 2026 by rpki-client