$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/7E8D9A52895411E6B3538424C4F9AE02.roa File: 7E8D9A52895411E6B3538424C4F9AE02.roa (raw, json) Hash identifier: eTQyUMylY0vGU3HeddrGwU7l9VqbceQVt15/3Mvk3cQ= Subject key identifier: 44:58:23:59:61:6C:39:81:36:20:44:16:EE:E5:D2:A3:F3:48:88:BC Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Certificate serial: 1EC9 Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/7E8D9A52895411E6B3538424C4F9AE02.roa Signing time: Wed 06 May 2026 16:23:37 +0000 ROA not before: Wed 06 May 2026 16:23:37 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 135524 IP address blocks: 103.221.252.0/22 maxlen: 22 103.221.252.0/23 maxlen: 23 103.221.252.0/24 maxlen: 24 103.221.253.0/24 maxlen: 24 103.221.254.0/23 maxlen: 23 103.221.254.0/24 maxlen: 24 103.221.255.0/24 maxlen: 24 2405:ac80::/32 maxlen: 36 2405:ac80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7881 (0x1ec9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Validity Not Before: May 6 16:23:37 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69fb6b09-c3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:4b:24:8b:c5:25:15:f0:b0:77:85:2f:08: 95:0e:52:71:64:3d:ca:81:56:9c:53:14:97:29:14: c1:c5:f5:fd:8e:a6:f2:aa:7e:f1:4b:9c:74:60:93: 87:b0:99:61:b7:b9:2b:cc:87:48:55:93:bd:cd:5b: a3:06:f2:41:15:a3:eb:ab:67:00:14:b4:aa:97:d2: d6:f3:16:4e:6e:c7:85:91:94:32:b7:29:46:8c:09: f7:e4:e3:d4:2a:49:5e:8b:9a:8d:fd:3f:84:18:85: 01:c6:8d:9f:71:3e:ee:ce:f6:59:17:ac:09:0a:47: f6:7b:8a:83:6b:6f:e3:a0:be:44:e7:80:23:ab:59: aa:fa:8f:62:35:3c:0c:2f:bf:c2:63:92:0a:6a:dd: 33:a3:8b:ce:e9:ea:80:95:63:ee:e6:3a:3a:f9:ce: a7:b3:0a:ce:df:f4:b4:09:9a:36:3b:8d:21:83:2c: 34:5a:4a:18:34:43:5a:f2:4d:ee:86:18:e2:72:c6: a2:d5:4a:15:2d:d3:1f:09:d8:26:6b:03:e8:43:69: 03:95:b5:a7:34:b0:b1:ec:44:4b:58:c0:4e:c1:c6: a4:e2:c1:ea:85:66:ae:7e:c8:3a:89:07:60:b7:ae: d3:4c:7a:b7:6c:28:d7:76:0e:22:53:1e:b0:db:2c: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:58:23:59:61:6C:39:81:36:20:44:16:EE:E5:D2:A3:F3:48:88:BC X509v3 Authority Key Identifier: keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/7E8D9A52895411E6B3538424C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.221.252.0/22 IPv6: 2405:ac80::/32 Signature Algorithm: sha256WithRSAEncryption 2e:68:3c:01:c8:51:15:9b:75:da:dd:48:14:6c:44:10:3d:f4: 5e:c4:b6:23:dc:ab:2a:30:35:19:92:0b:5f:70:ca:10:66:1a: 5b:2b:90:d8:48:06:09:f1:59:78:49:d2:bc:1f:d2:dd:9e:55: 60:d9:f2:0c:1d:18:6f:de:d5:ab:f9:71:3d:b4:68:85:cf:f0: 92:bf:4f:42:f5:92:dc:a8:a5:17:34:38:e7:86:9b:97:cd:3b: 06:68:a5:50:25:c5:31:86:50:6a:33:2a:ea:55:45:98:78:aa: e6:ef:62:31:b2:e8:f5:d5:3d:a9:ec:bf:51:09:8d:57:75:d6: fd:7b:2d:2b:b9:9f:38:3e:fe:bf:29:02:3c:c0:33:db:3b:d6: 5a:b2:aa:b5:33:cc:c4:b6:0c:e6:0e:c9:6e:52:57:44:b7:3d: 81:c2:d6:24:2d:f7:4e:b7:67:42:5f:38:6a:a2:45:47:66:b7: 8c:d6:02:20:9d:6e:6f:53:a4:63:c9:a1:ca:28:b5:83:ed:36: 06:d3:c4:73:2d:49:c3:8b:c6:0c:34:ff:e7:67:e4:64:15:5b: b7:99:4f:72:ad:ed:3c:12:52:d8:1e:d2:11:41:ec:27:eb:92: 5b:62:aa:f5:13:20:1e:ca:00:8a:d3:00:92:d3:28:18:05:31: 01:3b:71:d6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICHskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw QkZCQkMyMDkwHhcNMjYwNTA2MTYyMzM3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWZiNmIwOS1jM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAib5LJIvFJRXwsHeFLwiVDlJxZD3KgVacUxSXKRTBxfX9jqbyqn7xS5x0YJOH sJlht7krzIdIVZO9zVujBvJBFaPrq2cAFLSql9LW8xZObseFkZQytylGjAn35OPU Kklei5qN/T+EGIUBxo2fcT7uzvZZF6wJCkf2e4qDa2/joL5E54Ajq1mq+o9iNTwM L7/CY5IKat0zo4vO6eqAlWPu5jo6+c6nswrO3/S0CZo2O40hgyw0WkoYNENa8k3u hhjicsai1UoVLdMfCdgmawPoQ2kDlbWnNLCx7ERLWMBOwcak4sHqhWaufsg6iQdg t67TTHq3bCjXdg4iUx6w2yzK0wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFERYI1lh bDmBNiBEFu7l0qPzSIi8MB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5 NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRCM0YvRDM5MTAxMzQ4OTUzMTFFNjhBODU0OTIzQzRGOUFFMDIvN0U4RDlBNTI4 OTU0MTFFNkIzNTM4NDI0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ938MA0EAgACMAcDBQAkBayAMA0GCSqGSIb3DQEBCwUAA4IBAQAu aDwByFEVm3Xa3UgUbEQQPfRexLYj3KsqMDUZkgtfcMoQZhpbK5DYSAYJ8Vl4SdK8 H9LdnlVg2fIMHRhv3tWr+XE9tGiFz/CSv09C9ZLcqKUXNDjnhpuXzTsGaKVQJcUx hlBqMyrqVUWYeKrm72Ixsuj11T2p7L9RCY1Xddb9ey0ruZ84Pv6/KQI8wDPbO9Za sqq1M8zEtgzmDsluUldEtz2BwtYkLfdOt2dCXzhqokVHZreM1gIgnW5vU6RjyaHK KLWD7TYG08RzLUnDi8YMNP/nZ+RkFVu3mU9yre08ElLYHtIRQewn65JbYqr1EyAe ygCK0wCS0ygYBTEBO3HW -----END CERTIFICATE-----Generated at Sat Jun 13 19:16:02 2026 by rpki-client