$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/B1921BE21D1C11F19ECA08BE103D8C67.roa File: B1921BE21D1C11F19ECA08BE103D8C67.roa (raw, json) Hash identifier: OZLEAf2GlkPiBHJVIkEjy99lBk4lg8JxOM/56bdCYlo= Subject key identifier: 7D:9E:C5:CE:E4:12:21:36:3E:A6:41:C9:C6:64:F3:96:23:D5:4A:ED Certificate issuer: /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B Certificate serial: 60 Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/B1921BE21D1C11F19ECA08BE103D8C67.roa Signing time: Wed 27 May 2026 08:41:22 +0000 ROA not before: Wed 27 May 2026 08:41:22 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 43.243.108.0/22 maxlen: 24 103.231.28.0/22 maxlen: 24 2405:fc40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B Validity Not Before: May 27 08:41:22 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a16ae32-a461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:70:f7:a4:33:3f:f8:7c:5f:53:2c:c4:0c: e4:58:cf:34:18:3f:9a:f8:42:a3:23:b6:db:6d:0a: 00:9c:2b:93:5c:72:f6:67:64:37:6d:7d:c7:70:f5: 3a:9d:85:bf:4d:a3:3e:15:e4:68:42:fb:ec:9a:61: a4:c7:27:56:1f:77:4c:05:bc:6e:9a:21:65:be:85: 01:3f:cc:9a:53:4b:1e:ab:1b:67:a6:e8:a1:73:f4: 3e:ba:95:da:cf:f4:2c:02:c9:62:88:25:0b:ff:c9: d2:13:47:0c:0d:5f:de:84:0d:2e:f7:fe:11:53:e9: 9c:d0:50:17:28:73:e9:b9:df:89:fc:4c:0e:e4:bb: a8:8c:bf:86:08:1d:70:66:bc:4f:65:05:25:67:ec: 2c:a7:4c:31:5f:e9:66:aa:e3:aa:c6:05:c6:5f:9f: 60:21:6a:62:69:92:ab:0e:52:d0:7e:55:5b:23:41: d4:92:93:a6:5f:5d:b1:85:9c:c7:e9:6d:d9:4e:b8: ef:6d:41:a9:54:46:61:ff:c2:31:75:00:74:83:5c: af:6a:95:cb:30:86:eb:1b:d3:6f:7f:2d:c0:54:20: 1c:10:f3:15:c6:89:60:2d:95:c5:32:27:fd:42:65: 31:1a:4a:62:43:60:83:ad:07:98:c8:e7:a2:b3:00: 20:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9E:C5:CE:E4:12:21:36:3E:A6:41:C9:C6:64:F3:96:23:D5:4A:ED X509v3 Authority Key Identifier: keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/B1921BE21D1C11F19ECA08BE103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.243.108.0/22 103.231.28.0/22 IPv6: 2405:fc40::/32 Signature Algorithm: sha256WithRSAEncryption 8d:76:cc:37:7c:12:ec:c6:f5:d0:8a:5f:1a:89:c8:93:fc:ec: 13:c9:40:61:80:e5:92:ef:78:6a:0f:87:c7:04:e4:3a:f5:2b: 48:75:b6:55:b4:8b:28:3b:99:4a:3a:1a:73:75:a8:a4:ce:c9: 60:0e:99:5d:71:35:63:ea:6b:e6:3a:6a:a7:1a:e0:78:00:c7: ad:44:04:95:72:4d:b1:e7:91:9b:f1:70:c7:9e:08:fe:88:5d: f0:fa:65:bc:0d:a9:df:42:5b:e3:4d:95:a4:33:9d:ee:5c:76: fc:55:94:de:ee:d5:93:d3:3f:7d:c4:3d:29:94:45:4a:4d:c4: 3a:e2:47:2e:15:47:5c:18:cb:e5:0a:f3:a6:14:03:fa:57:d6: de:38:94:24:44:0e:ab:c0:34:08:99:17:04:53:2b:c5:8b:a0: 31:de:6b:51:f3:2c:02:5e:f2:80:6c:08:89:ea:aa:21:50:13: 1b:b7:d1:f5:45:18:e0:e0:34:64:26:0e:f5:ea:8e:27:d0:c6: ae:1a:1d:74:ca:5e:77:c4:6a:30:38:ff:00:48:67:69:7a:94: 9a:b4:c4:19:7d:b5:b5:48:94:00:eb:28:78:43:33:d4:04:92: 5a:64:8d:4b:8c:20:5a:13:84:69:ba:05:16:3b:60:44:f7:30: 9c:8e:12:6f -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEU3QjExMC8GA1UEBRMoQkEzOTQyNzVDNEZGOEY4RUYyMzQ3NDlBMzZGMkExOTEz OTI3OTU1QjAeFw0yNjA1MjcwODQxMjJaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMTZhZTMyLWE0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp9nD3pDM/+HxfUyzEDORYzzQYP5r4QqMjttttCgCcK5NccvZnZDdtfcdw9Tqd hb9Noz4V5GhC++yaYaTHJ1Yfd0wFvG6aIWW+hQE/zJpTSx6rG2em6KFz9D66ldrP 9CwCyWKIJQv/ydITRwwNX96EDS73/hFT6ZzQUBcoc+m534n8TA7ku6iMv4YIHXBm vE9lBSVn7CynTDFf6Waq46rGBcZfn2AhamJpkqsOUtB+VVsjQdSSk6ZfXbGFnMfp bdlOuO9tQalURmH/wjF1AHSDXK9qlcswhusb029/LcBUIBwQ8xXGiWAtlcUyJ/1C ZTEaSmJDYIOtB5jI56KzACAdAgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQUfZ7FzuQS ITY+pkHJxmTzliPVSu0wHwYDVR0jBBgwFoAUujlCdcT/j47yNHSaNvKhkTknlVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RTdCLzUxMUIzQjFBRDk5 QTExRjA4RDQ5MzhCMDY1RDM2NDFEL3VqbENkY1RfajQ3eU5IU2FOdktoa1RrbmxW cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWpsQ2RjVF9qNDd5TkhTYU52S2hrVGtubFZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU3Qi81MTFCM0IxQUQ5OUExMUYwOEQ0OTM4QjA2NUQzNjQxRC9CMTkyMUJFMjFE MUMxMUYxOUVDQTA4QkUxMDNEOEM2Ny5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAIr82wDBAJn5xwwDQQCAAIwBwMFACQF/EAwDQYJKoZIhvcNAQELBQAD ggEBAI12zDd8EuzG9dCKXxqJyJP87BPJQGGA5ZLveGoPh8cE5Dr1K0h1tlW0iyg7 mUo6GnN1qKTOyWAOmV1xNWPqa+Y6aqca4HgAx61EBJVyTbHnkZvxcMeeCP6IXfD6 ZbwNqd9CW+NNlaQzne5cdvxVlN7u1ZPTP33EPSmURUpNxDriRy4VR1wYy+UK86YU A/pX1t44lCREDqvANAiZFwRTK8WLoDHea1HzLAJe8oBsCInqqiFQExu30fVFGODg NGQmDvXqjifQxq4aHXTKXnfEajA4/wBIZ2l6lJq0xBl9tbVIlADrKHhDM9QEklpk jUuMIFoThGm6BRY7YET3MJyOEm8= -----END CERTIFICATE-----Generated at Sat Jun 13 14:57:51 2026 by rpki-client