$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/668242F49C4511EDB73A4379C4F9AE02.roa File: 668242F49C4511EDB73A4379C4F9AE02.roa (raw, json) Hash identifier: a1ihaW44y7pPngH9tloHWvGy8yxGeQDZAFa7vmcwPNI= Subject key identifier: 33:3B:E7:8A:DB:01:8C:F4:A0:38:69:A5:DF:27:84:0D:FB:7C:29:D1 Certificate issuer: /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Certificate serial: 0281 Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/668242F49C4511EDB73A4379C4F9AE02.roa Signing time: Thu 11 Jun 2026 04:31:34 +0000 ROA not before: Thu 11 Jun 2026 04:31:34 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 133501 IP address blocks: 103.87.216.0/24 maxlen: 24 103.232.140.0/24 maxlen: 24 103.232.141.0/24 maxlen: 24 203.32.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C7A, serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Validity Not Before: Jun 11 04:31:34 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a2a3a26-747c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:68:66:86:44:4b:45:0a:3e:b0:01:68:ba: 06:cf:3d:5b:38:99:24:e6:b4:c5:93:51:cd:cd:96: 7a:62:06:4c:39:b9:28:c1:0b:41:70:56:12:38:e1: b6:aa:81:78:08:e3:ef:22:23:f8:e7:bd:58:3a:0e: 76:cd:10:e3:46:08:49:72:fe:22:e7:2d:02:aa:89: 8b:3d:e4:8b:54:c5:28:78:16:a7:ff:d4:f9:fb:4d: 38:bb:d9:48:96:ee:21:78:ca:90:26:a7:c8:7c:d3: e5:a0:1b:4f:17:13:a9:3f:c8:59:2e:68:fe:5d:c9: 18:12:ab:f5:0e:91:28:79:c9:a1:9a:db:fb:6c:f6: 53:c9:8c:69:7e:27:30:e7:bd:33:ff:64:64:96:ae: b0:86:c4:a2:91:44:1e:a4:48:73:41:7e:a7:bb:a3: e2:ae:f0:98:26:04:99:df:4e:03:80:1b:34:3d:3a: 7f:61:e0:dc:cb:17:3a:d0:96:8c:7e:7c:07:f1:55: 3b:a3:15:ac:69:52:9d:ae:26:dd:0a:e2:ec:bc:34: 50:74:ea:10:dc:3c:02:e5:7f:67:e1:ce:b8:f3:75: f2:e3:19:69:f0:21:a0:5e:2f:7e:4a:de:50:fc:18: 67:b7:d5:85:03:ac:42:14:cf:9c:6c:23:71:41:2b: 29:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3B:E7:8A:DB:01:8C:F4:A0:38:69:A5:DF:27:84:0D:FB:7C:29:D1 X509v3 Authority Key Identifier: keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/668242F49C4511EDB73A4379C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.87.216.0/24 103.232.140.0/23 203.32.33.0/24 Signature Algorithm: sha256WithRSAEncryption 21:64:51:f0:45:53:e7:7a:bc:7e:ef:53:ec:2d:07:2e:ec:6a: 5b:34:b8:3f:f8:8c:f3:bb:c4:3f:c5:79:4d:dd:5f:d8:ed:c0: 47:aa:e9:be:bc:ae:fd:b1:4f:17:44:7e:43:74:9b:86:f9:2a: 0b:8b:b5:17:79:78:0b:89:66:d8:5e:7f:4b:20:38:f7:eb:f0: 24:8c:e3:dc:46:7b:ad:60:0e:b0:ab:4f:37:f9:05:a4:3c:73: 19:dd:ff:18:16:04:7a:e3:c4:43:10:69:fb:cf:ac:9d:c0:ca: fd:4c:7d:27:24:89:ea:77:e0:95:0a:11:fb:30:13:c8:b0:54: 0b:d6:24:84:4d:2f:37:b9:6a:b1:6f:e9:38:8c:dd:a1:f6:c4: 67:cd:e5:8e:d6:ee:64:da:40:c4:a2:d4:c2:41:f1:8b:30:47: e2:08:a3:0c:5c:30:f1:da:d8:03:d8:21:9f:7d:e3:0e:b3:fd: 7b:d2:f3:21:29:c9:2f:a9:4a:13:61:6f:ab:ab:d7:82:8e:9b: 2e:e8:76:0e:c8:4c:8f:37:d1:b3:00:60:50:e1:b4:11:b1:81: 42:41:60:f4:16:69:63:ff:8f:b8:9c:f5:54:d5:eb:6a:95:7c: 45:32:fa:7a:16:1b:a8:33:3e:a3:b2:68:42:f3:85:b7:12:f9: 27:36:65:64 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDN0ExMTAvBgNVBAUTKDQwREJBRTJDODMxOThCQzZGQUQyNTgyOTk4ODIzNDU2 QTM3NzYzQUIwHhcNMjYwNjExMDQzMTM0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJhM2EyNi03NDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sJoZoZES0UKPrABaLoGzz1bOJkk5rTFk1HNzZZ6YgZMObkowQtBcFYSOOG2 qoF4COPvIiP4571YOg52zRDjRghJcv4i5y0CqomLPeSLVMUoeBan/9T5+004u9lI lu4heMqQJqfIfNPloBtPFxOpP8hZLmj+XckYEqv1DpEoecmhmtv7bPZTyYxpficw 570z/2Rklq6whsSikUQepEhzQX6nu6PirvCYJgSZ304DgBs0PTp/YeDcyxc60JaM fnwH8VU7oxWsaVKdribdCuLsvDRQdOoQ3DwC5X9n4c6483Xy4xlp8CGgXi9+St5Q /Bhnt9WFA6xCFM+cbCNxQSspJwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDM754rb AYz0oDhppd8nhA37fCnRMB8GA1UdIwQYMBaAFEDbriyDGYvG+tJYKZiCNFajd2Or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEM3QS9BQzQ1OTYyRTlD NDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4YjYwbGdwbUlJMFZxTjNZ NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdXVMSU1aaThiNjBsZ3BtSUkwVnFOM1k2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhDN0EvQUM0NTk2MkU5QzQwMTFFRDk3MDA4NDcwQzRGOUFFMDIvNjY4MjQyRjQ5 QzQ1MTFFREI3M0E0Mzc5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ1fYAwQBZ+iMAwQAyyAhMA0GCSqGSIb3DQEBCwUAA4IBAQAhZFHw RVPnerx+71PsLQcu7GpbNLg/+Izzu8Q/xXlN3V/Y7cBHqum+vK79sU8XRH5DdJuG +SoLi7UXeXgLiWbYXn9LIDj36/AkjOPcRnutYA6wq083+QWkPHMZ3f8YFgR648RD EGn7z6ydwMr9TH0nJInqd+CVChH7MBPIsFQL1iSETS83uWqxb+k4jN2h9sRnzeWO 1u5k2kDEotTCQfGLMEfiCKMMXDDx2tgD2CGffeMOs/170vMhKckvqUoTYW+rq9eC jpsu6HYOyEyPN9GzAGBQ4bQRsYFCQWD0Fmlj/4+4nPVU1etqlXxFMvp6FhuoMz6j smhC84W3EvknNmVk -----END CERTIFICATE-----Generated at Sat Jun 13 13:27:48 2026 by rpki-client