$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa File: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (raw, json) Hash identifier: RiHTyH8/u4E6R/xXsKR9Dt/X35Ipr5A7B/T2xRmCXs4= Subject key identifier: 36:54:E9:73:38:B5:9A:6A:ED:6F:B9:F4:D2:5C:C0:B9:FC:11:CB:1C Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 07DF Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa Signing time: Tue 08 Sep 2026 21:42:56 +0000 ROA not before: Tue 08 Sep 2026 21:42:56 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 10143 IP address blocks: 103.99.101.0/24 maxlen: 24 103.242.49.0/24 maxlen: 24 2001:df3:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2015 (0x7df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Sep 8 21:42:56 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa08160-d2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:27:f1:69:7c:ef:5d:79:31:ad:ce:0b:b3: 29:d1:27:e6:cf:4f:6e:10:d5:ac:19:e5:0d:8b:fc: 77:8c:49:03:7e:59:42:85:09:9a:21:7e:c2:b7:bb: d0:92:1a:de:c4:ee:ce:24:cd:f2:39:38:27:f1:17: 47:59:a2:50:82:8e:5c:8f:49:41:56:82:88:c6:fe: b4:6a:50:1e:1f:df:52:b4:0e:ad:6e:22:e8:ea:a6: 3d:93:f8:7e:36:fd:ab:21:aa:a5:fe:85:85:b5:ec: 17:7e:53:5a:9c:00:55:f3:6c:9d:17:cf:76:ea:7d: f6:6e:77:d2:6f:d1:84:56:f1:27:93:09:3b:f4:d4: a4:7b:9c:58:df:c1:c5:51:cc:94:ad:f6:56:41:11: 7a:37:c2:d7:fe:42:4e:7a:f2:27:c9:ce:f3:5e:9e: be:18:be:23:3f:1d:9e:fc:c9:c6:c3:e0:0f:7b:6c: 94:86:1e:8d:c0:66:31:3b:72:b1:eb:6d:47:ec:33: 1d:2e:d9:b0:92:0e:6f:e6:ef:3c:4f:c3:93:6a:22: 35:c9:00:3c:26:94:69:ad:a6:40:ac:63:d4:74:97: c8:14:d9:07:78:b0:38:64:d0:7f:05:72:c1:90:eb: 6f:c0:fc:e9:96:aa:4a:51:fb:25:75:ca:bc:a0:7b: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:54:E9:73:38:B5:9A:6A:ED:6F:B9:F4:D2:5C:C0:B9:FC:11:CB:1C X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.101.0/24 103.242.49.0/24 IPv6: 2001:df3:d000::/48 Signature Algorithm: sha256WithRSAEncryption 0e:a3:ce:96:c4:fa:30:6d:02:09:54:b6:f2:94:23:80:09:24: 54:f5:b7:98:18:c0:71:35:bc:65:64:a6:77:e1:b0:96:9a:5b: f5:c3:16:48:a3:4f:d4:b0:67:59:9f:ff:e8:bd:0c:1e:b3:ef: d4:eb:34:e4:82:6e:10:7e:7b:ad:39:71:8e:ff:17:d6:58:25: 0e:0b:66:28:18:8f:d3:65:4b:df:22:79:95:87:29:f2:2f:f2: 99:c5:16:28:18:c5:23:a5:66:f6:c9:75:d3:87:86:ac:67:59: ef:d9:c2:ad:eb:f5:79:fa:e5:97:75:de:98:1a:3b:70:28:18: 38:72:cb:82:50:54:a9:f6:0a:75:54:fe:3b:83:a6:8d:82:63: 45:83:ef:1b:4f:25:58:42:92:8d:e0:f6:bb:6f:9e:8c:53:22: 73:88:b6:ee:b5:b8:f9:3d:c2:ce:40:40:18:0b:2f:37:ae:2f: ba:1a:56:64:71:b4:1b:ec:ac:89:34:22:39:65:1d:30:65:f4: e5:9f:cb:8a:5b:bf:4f:31:c8:2d:2f:48:34:10:20:07:57:20: 73:61:69:c3:be:72:6a:66:ce:57:85:95:dc:ca:25:9f:63:0d: ac:fa:37:ab:8c:a7:ae:cf:37:d7:e1:14:ae:3f:6a:6a:6f:9b: 4a:21:22:d1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICB98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjYwOTA4MjE0MjU2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwODE2MC1kMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlq4n8Wl87115Ma3OC7Mp0Sfmz09uENWsGeUNi/x3jEkDfllChQmaIX7Ct7vQ khrexO7OJM3yOTgn8RdHWaJQgo5cj0lBVoKIxv60alAeH99StA6tbiLo6qY9k/h+ Nv2rIaql/oWFtewXflNanABV82ydF8926n32bnfSb9GEVvEnkwk79NSke5xY38HF UcyUrfZWQRF6N8LX/kJOevInyc7zXp6+GL4jPx2e/MnGw+APe2yUhh6NwGYxO3Kx 621H7DMdLtmwkg5v5u88T8OTaiI1yQA8JpRpraZArGPUdJfIFNkHeLA4ZNB/BXLB kOtvwPzplqpKUfsldcq8oHvQQQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFDZU6XM4 tZpq7W+59NJcwLn8EcscMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkEzMTQvNzBEM0IzNkE1OTUyMTFFQkE2RDc4MDQ4QzRGOUFFMDIvMEREQzJDMTQ3 NzZGMTFFRDhFN0I4Nzc1QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ2NlAwQAZ/IxMA8EAgACMAkDBwAgAQ3z0AAwDQYJKoZIhvcNAQEL BQADggEBAA6jzpbE+jBtAglUtvKUI4AJJFT1t5gYwHE1vGVkpnfhsJaaW/XDFkij T9SwZ1mf/+i9DB6z79TrNOSCbhB+e605cY7/F9ZYJQ4LZigYj9NlS98ieZWHKfIv 8pnFFigYxSOlZvbJddOHhqxnWe/Zwq3r9Xn65Zd13pgaO3AoGDhyy4JQVKn2CnVU /juDpo2CY0WD7xtPJVhCko3g9rtvnoxTInOItu61uPk9ws5AQBgLLzeuL7oaVmRx tBvsrIk0IjllHTBl9OWfy4pbv08xyC0vSDQQIAdXIHNhacO+cmpmzleFldzKJZ9j Daz6N6uMp67PN9fhFK4/ampvm0ohItE= -----END CERTIFICATE-----Generated at Tue Sep 22 21:02:03 2026 by rpki-client