$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa File: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (raw, json) Hash identifier: R7lR2WcGvuNrxwIvmAcXlnO8bRBc1zrOE25McAan8c8= Subject key identifier: D0:62:2B:4E:7E:0C:EF:CD:66:70:6F:7F:50:44:E5:10:9E:8D:0A:7D Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Certificate serial: 19EF Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa Signing time: Tue 28 Jul 2026 12:44:33 +0000 ROA not before: Tue 28 Jul 2026 12:44:32 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136004 IP address blocks: 103.79.117.0/24 maxlen: 24 103.99.176.0/23 maxlen: 23 103.99.176.0/24 maxlen: 24 103.99.177.0/24 maxlen: 24 103.120.110.0/24 maxlen: 24 2403:46c0::/32 maxlen: 32 2403:46c0::/34 maxlen: 34 2403:46c0:4000::/34 maxlen: 34 2403:46c0:8000::/34 maxlen: 34 2403:46c0:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6639 (0x19ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Validity Not Before: Jul 28 12:44:32 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a68a430-60ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:8c:51:f8:52:5e:29:95:f3:d6:e1:47:61: 08:19:84:44:e4:f7:cf:a9:e4:ba:54:c8:2e:81:3c: c2:ba:af:18:1e:6b:a8:9f:45:37:10:2e:01:93:61: cb:10:e9:b3:a8:fc:0a:2e:a7:c2:5d:02:38:9d:60: c9:c1:2d:10:33:0a:87:c2:c5:62:3b:b7:24:64:20: d2:2e:87:cc:c8:45:1f:9b:a3:e4:e0:2c:67:95:aa: b0:90:4f:43:f3:17:34:de:47:a0:68:e8:d6:2a:2f: 47:b0:7e:e2:ac:42:d2:d5:1c:5c:c1:18:7a:98:27: a7:7f:68:8e:5d:f9:ee:6a:48:fa:eb:b2:c5:e3:9b: e6:07:28:b5:13:76:ec:db:6e:9b:d3:7c:a1:aa:34: f2:6a:32:1f:7d:79:30:a6:59:ad:d2:19:f1:8d:17: 9a:81:eb:97:e5:d0:77:ba:0c:02:78:f5:11:6b:d3: bf:97:fc:c1:12:e6:a9:82:a9:9c:a6:f9:98:f7:0e: 1d:d6:6e:b4:01:d3:02:dd:46:dc:4c:57:b5:f0:b1: 50:d7:7a:ac:d8:9d:df:d3:ad:ae:cd:e2:41:f2:1c: 61:09:be:84:aa:2f:5f:15:cb:19:75:8d:69:77:6e: ce:04:b0:da:88:82:3a:1f:85:58:c1:05:79:56:83: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:62:2B:4E:7E:0C:EF:CD:66:70:6F:7F:50:44:E5:10:9E:8D:0A:7D X509v3 Authority Key Identifier: keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.79.117.0/24 103.99.176.0/23 103.120.110.0/24 IPv6: 2403:46c0::/32 Signature Algorithm: sha256WithRSAEncryption 3a:5b:56:00:80:48:fc:a8:44:11:61:cc:b9:85:5b:b3:b5:21: 1c:d5:44:b9:9b:46:cf:5b:6e:cf:95:d5:fd:6b:5b:47:a9:59: 95:64:e4:6b:51:51:80:a9:48:8c:97:54:50:77:09:91:29:f1: 12:de:f0:f2:2b:7c:40:89:48:e8:0c:24:d1:80:a0:55:d9:45: d4:4f:8b:63:3c:e6:24:45:07:13:d7:8b:80:98:27:02:dd:b0: d6:0a:24:4f:b8:b8:ff:60:71:c7:14:57:03:1e:dd:28:21:bd: 28:79:e2:99:fa:d1:f1:f8:cd:b6:be:5a:d2:e8:b0:02:3d:7a: 55:29:8c:08:4d:47:78:72:ed:81:4a:f8:d1:8f:49:7e:54:75: 94:e8:76:40:3b:07:f4:0c:e9:30:5a:19:b1:ea:90:d5:81:b1: e7:9c:0f:77:83:61:a7:b9:1c:37:62:56:25:95:a9:39:60:94: 7b:c9:ce:16:c6:b8:7d:ce:c1:fc:28:e7:05:61:05:ba:30:dd: d5:53:50:e1:51:c8:75:61:ae:b2:0b:7e:35:4d:05:d4:ff:cd: 7d:a1:e7:a2:9a:71:f6:52:d6:84:05:90:07:66:95:e7:9e:9a: 31:93:d3:78:a8:67:a1:dd:cf:10:ac:d6:51:56:a6:13:79:a6: ab:d9:cb:f7 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICGe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx QjVFQjE1OEUwHhcNMjYwNzI4MTI0NDMyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4YTQzMC02MGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm+MUfhSXimV89bhR2EIGYRE5PfPqeS6VMgugTzCuq8YHmuon0U3EC4Bk2HL EOmzqPwKLqfCXQI4nWDJwS0QMwqHwsViO7ckZCDSLofMyEUfm6Pk4CxnlaqwkE9D 8xc03kegaOjWKi9HsH7irELS1RxcwRh6mCenf2iOXfnuakj667LF45vmByi1E3bs 226b03yhqjTyajIffXkwplmt0hnxjReageuX5dB3ugwCePURa9O/l/zBEuapgqmc pvmY9w4d1m60AdMC3UbcTFe18LFQ13qs2J3f062uzeJB8hxhCb6Eqi9fFcsZdY1p d27OBLDaiII6H4VYwQV5VoMnrQIDAQABo4ICezCCAncwHQYDVR0OBBYEFNBiK05+ DO/NZnBvf1BE5RCejQp9MB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2 RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNDOEEvRTdGRkM1RjQ4NkY3MTFFNzg2MzRFQzdFQzRGOUFFMDIvOUZENUM4RjQ4 RUZFMTFFODhDNkVCRDM3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZ091AwQBZ2OwAwQAZ3huMA0EAgACMAcDBQAkA0bAMA0GCSqGSIb3 DQEBCwUAA4IBAQA6W1YAgEj8qEQRYcy5hVuztSEc1US5m0bPW27PldX9a1tHqVmV ZORrUVGAqUiMl1RQdwmRKfES3vDyK3xAiUjoDCTRgKBV2UXUT4tjPOYkRQcT14uA mCcC3bDWCiRPuLj/YHHHFFcDHt0oIb0oeeKZ+tHx+M22vlrS6LACPXpVKYwITUd4 cu2BSvjRj0l+VHWU6HZAOwf0DOkwWhmx6pDVgbHnnA93g2GnuRw3YlYllak5YJR7 yc4Wxrh9zsH8KOcFYQW6MN3VU1DhUch1Ya6yC341TQXU/819oeeimnH2UtaEBZAH ZpXnnpoxk9N4qGeh3c8QrNZRVqYTeaar2cv3 -----END CERTIFICATE-----Generated at Wed Jul 29 08:46:18 2026 by rpki-client