$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/ED7C5416CD3711EDB6A0F37BC4F9AE02.roa File: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (raw, json) Hash identifier: 2sdJJ6iJjkZc6Wd4X6PmhZwhxLJKNYxKwduCcx3eWls= Subject key identifier: 47:E4:80:54:5C:AC:2A:BE:78:53:A1:26:2D:FB:6C:96:62:98:72:FC Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 07E1 Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/ED7C5416CD3711EDB6A0F37BC4F9AE02.roa Signing time: Tue 08 Sep 2026 21:43:00 +0000 ROA not before: Tue 08 Sep 2026 21:43:00 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 7545 IP address blocks: 103.99.101.0/24 maxlen: 24 103.242.49.0/24 maxlen: 24 2001:df3:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Sep 8 21:43:00 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa08164-e702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:6a:94:93:9a:1f:05:1d:8a:00:cb:80:da: 65:70:7a:6f:eb:3b:70:bf:10:df:45:98:4f:91:63: bf:70:60:aa:94:1b:76:f4:04:4c:6f:31:b0:49:08: 72:dc:67:fe:55:ee:77:1c:c3:42:67:0a:55:ce:58: 6a:f0:9b:df:61:49:a9:8d:34:cc:83:e5:d2:d5:2e: 43:39:b3:1a:6d:9a:7c:75:d7:b2:f3:df:23:d2:e7: 65:3d:a6:58:bf:91:94:45:a5:48:5b:0d:3b:f7:78: 99:3a:f3:e8:1c:5f:b4:64:6d:30:53:2d:7d:d4:1d: f7:20:e9:10:59:6e:b6:92:16:8d:4d:c5:7a:8e:90: 1c:fd:df:15:07:cb:a3:83:3f:f5:2d:4a:44:aa:0f: 2a:90:41:fd:7c:2a:08:17:ba:4a:7c:76:9c:b9:9c: dd:f5:e1:c7:11:7c:aa:bb:5a:ed:d9:e7:1f:e0:34: 11:bf:1d:9f:2f:c1:74:c7:ab:26:86:7c:9a:2c:7a: 87:66:a7:2c:bb:f6:57:38:f4:d3:44:a5:3a:ca:fd: 8c:e3:20:b0:7f:d0:df:41:ba:02:a4:f6:49:d5:15: cb:fc:21:23:ec:c7:dc:21:e7:32:a1:3d:7d:df:e3: 80:6f:bc:e0:9d:63:ea:2e:56:67:19:c1:73:cf:21: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E4:80:54:5C:AC:2A:BE:78:53:A1:26:2D:FB:6C:96:62:98:72:FC X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/ED7C5416CD3711EDB6A0F37BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.101.0/24 103.242.49.0/24 IPv6: 2001:df3:d000::/48 Signature Algorithm: sha256WithRSAEncryption 78:01:96:5d:26:fc:84:33:59:28:cd:c5:42:9a:6b:d7:90:5d: 37:4a:88:18:c2:70:ca:37:72:f9:38:cc:9d:8d:c5:e3:2c:95: de:2b:77:98:4f:0e:00:39:21:a0:08:e9:df:82:38:83:32:5e: 9d:b4:b0:9b:ca:81:65:ab:77:74:77:e6:15:e6:46:41:ef:7c: 64:26:d3:63:2f:fb:55:c5:c5:6a:67:8e:82:11:5e:92:68:a2: d7:2e:dd:a4:4e:b1:cd:e8:df:4a:f3:85:8d:e7:05:6f:85:33: 90:fb:9e:22:1d:6a:fc:6c:1d:56:9c:a8:88:88:73:1f:be:72: 2c:de:b6:24:c2:b1:cd:83:c0:b7:42:2e:39:35:da:e8:1e:8d: 81:45:4e:45:9b:50:32:b7:64:25:ca:b1:53:b9:79:c5:e0:12: 02:76:37:b1:a0:d3:4b:71:9a:a7:0f:c7:35:89:1f:f2:c9:8e: 72:6f:dd:9c:55:73:d5:b3:90:62:a0:e2:24:c8:a3:94:82:de: a4:fe:08:e4:bb:7f:9a:4a:8d:39:7d:22:49:ff:aa:82:31:52: 6e:69:58:73:55:bd:b0:f7:40:86:f5:3d:b6:e5:59:62:6e:63: be:09:1e:7d:78:50:46:a5:5c:ae:e2:bf:18:91:1d:79:38:39: f5:50:76:3a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjYwOTA4MjE0MzAwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwODE2NC1lNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLBqlJOaHwUdigDLgNplcHpv6ztwvxDfRZhPkWO/cGCqlBt29ARMbzGwSQhy 3Gf+Ve53HMNCZwpVzlhq8JvfYUmpjTTMg+XS1S5DObMabZp8ddey898j0udlPaZY v5GURaVIWw0793iZOvPoHF+0ZG0wUy191B33IOkQWW62khaNTcV6jpAc/d8VB8uj gz/1LUpEqg8qkEH9fCoIF7pKfHacuZzd9eHHEXyqu1rt2ecf4DQRvx2fL8F0x6sm hnyaLHqHZqcsu/ZXOPTTRKU6yv2M4yCwf9DfQboCpPZJ1RXL/CEj7MfcIecyoT19 3+OAb7zgnWPqLlZnGcFzzyFn+QIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFEfkgFRc rCq+eFOhJi37bJZimHL8MB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkEzMTQvNzBEM0IzNkE1OTUyMTFFQkE2RDc4MDQ4QzRGOUFFMDIvRUQ3QzU0MTZD RDM3MTFFREI2QTBGMzdCQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ2NlAwQAZ/IxMA8EAgACMAkDBwAgAQ3z0AAwDQYJKoZIhvcNAQEL BQADggEBAHgBll0m/IQzWSjNxUKaa9eQXTdKiBjCcMo3cvk4zJ2NxeMsld4rd5hP DgA5IaAI6d+COIMyXp20sJvKgWWrd3R35hXmRkHvfGQm02Mv+1XFxWpnjoIRXpJo otcu3aROsc3o30rzhY3nBW+FM5D7niIdavxsHVacqIiIcx++cizetiTCsc2DwLdC Ljk12ugejYFFTkWbUDK3ZCXKsVO5ecXgEgJ2N7Gg00txmqcPxzWJH/LJjnJv3ZxV c9WzkGKg4iTIo5SC3qT+COS7f5pKjTl9Ikn/qoIxUm5pWHNVvbD3QIb1PbblWWJu Y74JHn14UEalXK7ivxiRHXk4OfVQdjo= -----END CERTIFICATE-----Generated at Wed Sep 23 16:39:02 2026 by rpki-client