$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/D7BBDE18D3AB11EFB022202CC4F9AE02.roa File: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (raw, json) Hash identifier: QATPpzGS/ZP7kNOUm90TMsTc1uCxiE2w36dBLpw4fDU= Subject key identifier: 63:17:4E:B6:CA:36:F9:5A:0A:EB:CE:ED:F1:29:30:6C:1C:4F:E3:4C Certificate issuer: /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4 Certificate serial: 0115 Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/D7BBDE18D3AB11EFB022202CC4F9AE02.roa Signing time: Thu 04 Jun 2026 22:50:55 +0000 ROA not before: Thu 04 Jun 2026 22:50:55 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 132257 IP address blocks: 103.8.236.0/23 maxlen: 24 103.243.150.0/23 maxlen: 23 103.243.150.0/24 maxlen: 24 103.243.151.0/24 maxlen: 24 2001:df0:2b1::/48 maxlen: 48 2404:2940::/32 maxlen: 32 2404:2940:1000::/36 maxlen: 36 2404:2940:2000::/36 maxlen: 36 2404:2940:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4 Validity Not Before: Jun 4 22:50:55 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a22014e-ff74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d9:2c:5b:38:a3:09:f0:1c:89:6a:28:86:79: 10:fc:67:0b:a4:3a:47:5f:12:63:65:2d:f2:88:e4: 79:d6:62:7a:03:af:3b:43:61:54:c6:c6:5f:54:50: e4:9f:04:aa:96:db:42:f3:f0:b5:86:e0:02:2b:d9: 19:5a:1e:be:0b:37:f2:02:1a:da:e4:5d:68:e6:cc: 4e:0c:9d:aa:53:20:9d:62:98:45:5d:d9:94:01:c1: 3a:bf:5d:11:62:af:2e:7e:90:88:34:0b:c1:f5:8f: 73:f3:38:4b:25:43:a9:84:bb:80:c0:b4:40:ab:84: 00:0f:5c:d3:4c:cb:e8:dc:43:c5:a7:a5:4e:cd:9f: 9c:13:60:4a:17:16:0b:53:ef:c5:8b:c5:9a:2a:27: 32:2f:f1:4c:c4:10:c9:4c:48:19:e0:f0:3f:8c:ba: 65:5d:f3:e0:37:b1:78:78:52:08:78:1e:0b:a7:c7: ed:38:a4:d9:be:05:12:9e:20:1c:59:01:41:54:99: 72:7f:89:58:a0:75:49:7e:6a:24:c2:a9:9a:01:4b: cb:52:7e:5d:d0:ed:0c:88:73:7b:a6:ca:9d:0b:6f: f1:57:48:b3:33:a0:51:d9:05:84:77:6b:0a:61:34: 3b:58:dd:6e:06:24:6f:a3:95:07:e2:4c:72:78:81: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:17:4E:B6:CA:36:F9:5A:0A:EB:CE:ED:F1:29:30:6C:1C:4F:E3:4C X509v3 Authority Key Identifier: keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/D7BBDE18D3AB11EFB022202CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.8.236.0/23 103.243.150.0/23 IPv6: 2001:df0:2b1::/48 2404:2940::/32 Signature Algorithm: sha256WithRSAEncryption 47:1d:7e:43:0d:7c:22:82:2c:3a:57:2b:5d:41:f0:0e:2a:a4: 6d:f0:ee:ef:98:53:1e:68:8d:4c:f6:27:13:36:ad:65:cd:3b: 5a:1a:bd:3c:c8:c1:6c:ac:e7:0f:cf:da:ef:f4:b4:36:74:14: 58:17:d2:70:02:ce:1c:38:69:02:f1:ba:fb:8e:91:a0:6a:11: db:e6:d5:23:b2:2d:eb:5c:bc:d6:23:4b:99:72:bc:52:00:c3: ab:42:92:33:25:96:5c:01:fc:d1:00:29:12:66:b5:6d:26:9e: 6d:d4:7b:96:62:68:c2:05:c8:a5:f7:fe:5a:b7:97:fa:6d:ab: 77:7d:a6:4d:b3:ce:12:30:d1:bf:c0:a7:6c:80:31:bc:cd:8c: 4a:ac:b3:26:ff:d5:bf:bb:b9:c7:91:72:4b:f8:83:0c:2e:6d: f7:72:33:e7:fa:b4:67:1c:8a:b9:57:8e:6b:9f:7d:65:1e:29: f0:fc:c3:6c:d5:8c:42:38:c7:16:5b:60:7a:ba:b1:12:16:ef: 64:8d:91:fa:6b:66:89:79:76:69:f3:36:0c:c6:58:ea:77:54: b2:7b:f1:0a:5f:de:72:8a:ff:1b:e9:11:0c:67:9b:c1:06:e0: 80:0f:62:96:0e:63:13:33:10:07:fc:db:58:d3:08:5f:d7:55: 07:a9:12:1f -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MDQxMTAvBgNVBAUTKDlEQ0NEMDgwRjA3MkRFMjRFRjg0MkM2QUEyOTI0OTlF RjEzNjlCRjQwHhcNMjYwNjA0MjI1MDU1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyMDE0ZS1mZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldksWzijCfAciWoohnkQ/GcLpDpHXxJjZS3yiOR51mJ6A687Q2FUxsZfVFDk nwSqlttC8/C1huACK9kZWh6+CzfyAhra5F1o5sxODJ2qUyCdYphFXdmUAcE6v10R Yq8ufpCINAvB9Y9z8zhLJUOphLuAwLRAq4QAD1zTTMvo3EPFp6VOzZ+cE2BKFxYL U+/Fi8WaKicyL/FMxBDJTEgZ4PA/jLplXfPgN7F4eFIIeB4Lp8ftOKTZvgUSniAc WQFBVJlyf4lYoHVJfmokwqmaAUvLUn5d0O0MiHN7psqdC2/xV0izM6BR2QWEd2sK YTQ7WN1uBiRvo5UH4kxyeIGRKQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFGMXTrbK NvlaCuvO7fEpMGwcT+NMMB8GA1UdIwQYMBaAFJ3M0IDwct4k74QsaqKSSZ7xNpv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNC8zMjFCQzQ4Q0Qz QUIxMUVGOEVCRDBDMkJDNEY5QUUwMi9uY3pRZ1BCeTNpVHZoQ3hxb3BKSm52RTJt X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25jelFnUEJ5M2lUdmhDeHFvcEpKbnZFMm1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE1MDQvMzIxQkM0OENEM0FCMTFFRjhFQkQwQzJCQzRGOUFFMDIvRDdCQkRFMThE M0FCMTFFRkIwMjIyMDJDQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQBZwjsAwQBZ/OWMBYEAgACMBADBwAgAQ3wArEDBQAkBClAMA0GCSqG SIb3DQEBCwUAA4IBAQBHHX5DDXwigiw6VytdQfAOKqRt8O7vmFMeaI1M9icTNq1l zTtaGr08yMFsrOcPz9rv9LQ2dBRYF9JwAs4cOGkC8br7jpGgahHb5tUjsi3rXLzW I0uZcrxSAMOrQpIzJZZcAfzRACkSZrVtJp5t1HuWYmjCBcil9/5at5f6bat3faZN s84SMNG/wKdsgDG8zYxKrLMm/9W/u7nHkXJL+IMMLm33cjPn+rRnHIq5V45rn31l Hinw/MNs1YxCOMcWW2B6urESFu9kjZH6a2aJeXZp8zYMxljqd1Sye/EKX95yiv8b 6REMZ5vBBuCAD2KWDmMTMxAH/NtY0whf11UHqRIf -----END CERTIFICATE-----Generated at Sat Jun 13 22:53:37 2026 by rpki-client