$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/D872E50C86EE11F19E006003A7EE528E.roa File: D872E50C86EE11F19E006003A7EE528E.roa (raw, json) Hash identifier: OdA0q8Xqcugi+KRO0TZSlo4VkUhBeRX9z+VAyH1oHuw= Subject key identifier: DE:49:AA:82:EA:07:6E:E4:51:A9:FC:7E:0C:77:13:D4:93:60:7E:59 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 260B Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/D872E50C86EE11F19E006003A7EE528E.roa Signing time: Thu 23 Jul 2026 23:33:02 +0000 ROA not before: Thu 23 Jul 2026 23:33:02 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38800 IP address blocks: 103.154.194.0/23 maxlen: 23 103.154.194.0/24 maxlen: 24 103.154.195.0/24 maxlen: 24 182.50.168.0/22 maxlen: 24 202.87.208.0/22 maxlen: 24 203.99.156.0/22 maxlen: 24 2402:ae80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 15:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9739 (0x260b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: Jul 23 23:33:02 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a62a4ae-ef9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:a8:f2:37:22:8a:1f:b6:f4:f4:fd:42:02: b7:b6:a8:ae:bc:94:0a:da:2c:c0:60:1a:48:ac:c1: df:d6:a2:0b:56:a6:36:17:00:48:b8:c2:52:dc:98: 63:9c:19:d9:a7:60:da:53:26:ac:69:b9:5e:f0:09: 60:7b:93:2c:ad:0b:b5:45:eb:cd:32:48:12:18:ac: 0a:9f:c4:70:2c:ab:58:6a:60:a2:5a:5d:de:74:7d: 88:fa:b2:95:c9:54:29:38:ca:cf:fb:3d:7d:ca:6a: 47:ba:07:0f:ba:7e:3d:b3:7e:7c:06:b9:a4:81:85: 86:76:ca:25:62:a4:f9:b1:96:ee:a1:83:fe:70:d0: e0:e2:fe:2a:a4:32:cf:b8:0e:05:7e:ec:39:5c:a5: 75:d5:79:e4:07:c9:69:8e:27:df:2f:eb:7f:24:cc: f3:e6:4e:df:03:5e:0d:4b:a1:9d:a3:19:fd:42:1c: 33:b3:93:c8:f5:25:29:f0:6f:25:9d:48:7d:be:28: 20:7b:71:52:5d:f1:82:f9:91:21:88:9d:6b:40:74: 9f:b4:85:4b:c0:27:92:07:0d:21:12:f2:7c:6a:3a: 8c:ce:ed:c3:70:57:fc:f6:22:74:70:0f:0b:bb:fb: fb:77:e0:e6:76:9d:de:20:9f:a1:60:c2:93:66:64: d0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:49:AA:82:EA:07:6E:E4:51:A9:FC:7E:0C:77:13:D4:93:60:7E:59 X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/D872E50C86EE11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.154.194.0/23 182.50.168.0/22 202.87.208.0/22 203.99.156.0/22 IPv6: 2402:ae80::/32 Signature Algorithm: sha256WithRSAEncryption 36:f4:43:bc:9f:7f:2b:e4:c0:56:73:3b:fe:74:f4:23:ef:5e: 89:e1:87:a3:5c:6b:3e:3a:31:0d:f4:72:35:06:32:11:62:29: 0c:bc:80:8b:29:90:d1:12:5f:54:b7:af:df:ef:15:88:3b:a2: 9c:f0:b4:5b:d0:f8:55:e0:af:c0:2f:00:c6:ba:2e:bb:f1:29: b1:c0:1e:11:d3:ba:b1:00:4e:b4:fa:9f:18:94:8b:ac:f2:7d: ce:eb:17:a9:0b:b6:ea:be:ed:1e:a1:49:fd:4a:75:27:b5:dd: 90:76:04:20:f9:31:69:53:20:c9:a0:5f:82:b6:f2:1f:7b:8f: 04:4c:a8:ba:7b:ba:ee:e4:67:a0:55:dd:ab:d0:51:ee:af:6a: f2:da:f9:a6:cc:20:ce:ed:d7:8d:ad:a4:8e:15:89:18:89:a2: 21:5a:96:fc:f7:0c:84:c2:b6:19:55:0b:47:f5:22:4a:22:b8: 1c:62:db:fc:ab:34:cb:cb:d4:b9:a1:d2:5a:b4:27:82:9f:97: ac:03:7e:78:9e:b8:c0:5e:9d:bf:5d:27:68:bb:3e:83:26:47: 05:ff:99:77:f4:37:ad:80:a9:52:be:c6:3b:f8:30:c9:b4:1c: 71:af:d1:4d:6d:3c:1c:1f:31:ce:cb:67:c8:16:b5:49:cf:a6: bb:ec:c9:9c -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICJgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjYwNzIzMjMzMzAyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTRhZS1lZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdyo8jciih+29PT9QgK3tqiuvJQK2izAYBpIrMHf1qILVqY2FwBIuMJS3Jhj nBnZp2DaUyasable8Alge5MsrQu1RevNMkgSGKwKn8RwLKtYamCiWl3edH2I+rKV yVQpOMrP+z19ympHugcPun49s358BrmkgYWGdsolYqT5sZbuoYP+cNDg4v4qpDLP uA4Ffuw5XKV11XnkB8lpjiffL+t/JMzz5k7fA14NS6Gdoxn9Qhwzs5PI9SUp8G8l nUh9vigge3FSXfGC+ZEhiJ1rQHSftIVLwCeSBw0hEvJ8ajqMzu3DcFf89iJ0cA8L u/v7d+Dmdp3eIJ+hYMKTZmTQIwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFN5JqoLq B27kUan8fgx3E9STYH5ZMB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY0MzgvQjdFRjUzRkUyQjRFMTFFNUFDQkJERjNBQzRGOUFFMDIvRDg3MkU1MEM4 NkVFMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQBZ5rCAwQCtjKoAwQCylfQAwQCy2OcMA0EAgACMAcDBQAkAq6AMA0G CSqGSIb3DQEBCwUAA4IBAQA29EO8n38r5MBWczv+dPQj716J4YejXGs+OjEN9HI1 BjIRYikMvICLKZDREl9Ut6/f7xWIO6Kc8LRb0PhV4K/ALwDGui678SmxwB4R07qx AE60+p8YlIus8n3O6xepC7bqvu0eoUn9SnUntd2QdgQg+TFpUyDJoF+CtvIfe48E TKi6e7ru5GegVd2r0FHur2ry2vmmzCDO7deNraSOFYkYiaIhWpb89wyEwrYZVQtH 9SJKIrgcYtv8qzTLy9S5odJatCeCn5esA354nrjAXp2/XSdouz6DJkcF/5l39Det gKlSvsY7+DDJtBxxr9FNbTwcHzHOy2fIFrVJz6a77Mmc -----END CERTIFICATE-----Generated at Tue Jul 28 15:53:45 2026 by rpki-client