$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa File: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (raw, json) Hash identifier: dsoG1fAq1bgsphdBqoNIah+vGbeVpPNIP3lQ1EE01Tg= Subject key identifier: 64:9C:C4:79:DE:3B:15:98:09:17:7B:1F:5E:EC:7C:B7:DD:BD:14:28 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2752 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa Signing time: Thu 16 Jul 2026 16:15:46 +0000 ROA not before: Thu 16 Jul 2026 16:15:46 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 45938 IP address blocks: 103.234.104.0/24 maxlen: 24 2404:e801:101f::/48 maxlen: 48 2404:e801:201f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10066 (0x2752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 16 16:15:46 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a5903b2-c628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4f:f8:34:34:1b:e6:93:f1:c4:88:c4:df:6b: 38:12:f6:bb:ec:e1:61:cd:dd:90:f4:b0:5b:42:99: fc:7a:f3:85:70:39:57:78:0e:50:5b:4e:64:85:c5: 87:5c:2b:24:9e:dc:0a:a6:b6:26:50:28:21:59:fc: 0a:75:c3:08:b7:3a:08:3a:72:e9:07:df:4b:61:86: e9:c0:4c:83:c0:b9:6a:91:e2:fa:df:cf:60:49:2e: 91:45:df:f0:94:0c:56:71:d5:2c:07:72:22:97:dc: 1f:6c:18:2a:88:f0:37:be:ea:04:59:2a:39:13:97: d2:07:fd:c8:74:36:d4:58:b0:9f:e6:05:0d:d0:06: ae:b8:15:0c:4f:1d:e5:48:2e:ea:b7:70:f4:b8:8a: 67:4e:a6:5e:c7:29:67:cd:e1:7d:09:c1:a6:2e:de: a1:64:9d:72:43:6c:27:ee:52:13:d7:d2:47:ef:aa: 03:48:da:78:78:82:8e:2f:e4:dc:f8:a9:8c:f9:da: f4:97:e9:87:63:8e:46:97:ab:16:ca:8d:db:a3:71: c4:e6:b0:60:87:99:3c:bd:ce:96:d3:7d:96:4d:f8: 35:1f:ad:29:a1:c9:0c:4d:3b:3b:29:11:63:cc:9f: 64:ff:d9:ac:f4:0d:27:ae:ad:5b:ac:04:65:04:69: 24:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9C:C4:79:DE:3B:15:98:09:17:7B:1F:5E:EC:7C:B7:DD:BD:14:28 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.234.104.0/24 IPv6: 2404:e801:101f::/48 2404:e801:201f::/48 Signature Algorithm: sha256WithRSAEncryption 90:9f:eb:9e:44:07:c1:c9:d5:9c:a7:a8:c9:f8:82:c2:db:65: 7a:20:33:b5:f2:d7:9c:34:fa:16:a2:0f:c6:cd:cf:d1:ef:3a: 76:ee:57:8c:af:98:2c:8b:a6:d8:3f:23:23:7b:88:2e:d3:24: 04:b1:ce:ba:82:49:2d:82:ab:2e:c4:71:b7:97:cc:a7:44:df: cc:22:8b:11:c7:c3:15:52:ae:30:5a:5c:ec:3d:91:a1:63:13: a3:e8:77:d7:68:46:cd:99:0f:63:3a:a1:e9:fc:1c:de:a5:86: ad:7a:9b:23:58:64:83:88:26:f3:f9:d8:83:a1:38:1c:8b:1a: 27:86:a7:a3:71:b8:58:ec:4f:aa:dd:f4:b3:0c:23:26:e1:0e: d1:bb:d0:17:23:d4:1b:af:91:b4:62:43:94:27:fb:03:44:0b: 0f:2e:30:6c:23:d5:55:03:73:b1:6a:dd:a6:26:a0:d4:0f:fa: 3c:6b:66:fe:b0:37:dd:6d:e1:93:9d:f9:87:78:96:e2:1f:4f: 35:c5:22:18:d7:25:10:16:4b:4f:ba:d0:07:6d:5c:57:f4:29: ee:02:e5:42:29:9a:69:57:58:bd:57:35:29:52:3f:9d:8d:15: 2e:b3:eb:2a:a1:47:bd:57:c6:6b:b2:21:bc:8f:b8:28:5d:b6: 96:65:19:78 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICJ1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjYwNzE2MTYxNTQ2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU5MDNiMi1jNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkk/4NDQb5pPxxIjE32s4Eva77OFhzd2Q9LBbQpn8evOFcDlXeA5QW05khcWH XCskntwKprYmUCghWfwKdcMItzoIOnLpB99LYYbpwEyDwLlqkeL6389gSS6RRd/w lAxWcdUsB3Iil9wfbBgqiPA3vuoEWSo5E5fSB/3IdDbUWLCf5gUN0AauuBUMTx3l SC7qt3D0uIpnTqZexylnzeF9CcGmLt6hZJ1yQ2wn7lIT19JH76oDSNp4eIKOL+Tc +KmM+dr0l+mHY45Gl6sWyo3bo3HE5rBgh5k8vc6W032WTfg1H60pockMTTs7KRFj zJ9k/9ms9A0nrq1brARlBGkk1wIDAQABo4ICejCCAnYwHQYDVR0OBBYEFGScxHne OxWYCRd7H17sfLfdvRQoMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvNUNDQUM3Rjg1 MjhDMTFFQ0I2MTAxQjEwQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQAZ+poMBgEAgACMBIDBwAkBOgBEB8DBwAkBOgBIB8wDQYJKoZIhvcN AQELBQADggEBAJCf655EB8HJ1ZynqMn4gsLbZXogM7Xy15w0+haiD8bNz9HvOnbu V4yvmCyLptg/IyN7iC7TJASxzrqCSS2Cqy7EcbeXzKdE38wiixHHwxVSrjBaXOw9 kaFjE6Pod9doRs2ZD2M6oen8HN6lhq16myNYZIOIJvP52IOhOByLGieGp6NxuFjs T6rd9LMMIybhDtG70Bcj1BuvkbRiQ5Qn+wNECw8uMGwj1VUDc7Fq3aYmoNQP+jxr Zv6wN91t4ZOd+Yd4luIfTzXFIhjXJRAWS0+60AdtXFf0Ke4C5UIpmmlXWL1XNSlS P52NFS6z6yqhR71XxmuyIbyPuChdtpZlGXg= -----END CERTIFICATE-----Generated at Tue Jul 21 13:27:00 2026 by rpki-client