$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/DF6FAF5EAF0111EB96FC344BC4F9AE02.roa File: DF6FAF5EAF0111EB96FC344BC4F9AE02.roa (raw, json) Hash identifier: O7q6vC3f7mgfgSWaqE1hv9hGOVd2i6m0sfIqfZGDdfA= Subject key identifier: 37:9A:F9:DE:F7:72:89:D2:61:B8:25:2F:C9:D3:36:9E:47:5D:C8:DC Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Certificate serial: 3972 Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/DF6FAF5EAF0111EB96FC344BC4F9AE02.roa Signing time: Tue 30 Jun 2026 15:11:12 +0000 ROA not before: Tue 30 Jun 2026 15:11:12 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 32787 IP address blocks: 203.125.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14706 (0x3972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Validity Not Before: Jun 30 15:11:12 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a43dc90-bf19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3f:8f:d7:5c:bd:5d:87:1c:3f:92:2b:df:98: 13:f1:dc:04:9a:02:06:7a:f3:13:1d:54:6f:05:09: aa:5e:c5:01:c6:81:5c:5a:85:89:30:ef:f5:ce:05: f3:9c:38:20:88:db:c2:8f:e9:d3:4d:6e:70:fb:1c: 73:19:bb:f9:ae:85:74:dd:59:52:45:77:88:26:79: fc:15:d9:fa:31:b7:2f:33:7f:3c:ac:e2:8e:34:c4: 38:01:a0:7e:cb:28:66:8f:c8:18:7d:92:e8:03:00: a9:a1:19:1e:39:b8:fc:a4:15:03:70:dc:6e:70:02: 1c:ea:3b:3b:c5:e1:27:e8:29:0f:2b:35:b9:2d:ea: d8:94:c8:ac:4c:83:64:9b:3a:53:d5:0d:36:af:62: 47:64:d1:6c:79:1e:a7:04:2c:d4:6c:cf:74:68:40: 2c:92:de:1a:cd:ef:ac:2f:c5:bc:49:96:b1:95:7c: 30:74:8c:9f:75:99:1e:de:d3:39:08:8e:f7:3c:bf: d4:94:db:40:4f:c8:77:db:c1:90:fb:e4:be:9d:f0: f2:0d:41:e7:c4:b0:1d:82:1f:a8:ba:e6:8b:78:77: 9a:ef:d9:77:dc:49:57:dc:b4:6c:f8:8b:0f:fc:6f: 93:b0:71:e8:40:64:76:6f:e9:60:5b:2c:79:e7:83: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9A:F9:DE:F7:72:89:D2:61:B8:25:2F:C9:D3:36:9E:47:5D:C8:DC X509v3 Authority Key Identifier: keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/DF6FAF5EAF0111EB96FC344BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.125.128.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:2b:93:e1:3c:59:5c:69:bf:18:57:d2:e5:0d:e2:ab:6e:33: 5a:f8:b1:c6:8f:e5:2a:fa:44:b0:03:15:57:b9:4f:07:39:30: 72:8a:b5:b2:1a:31:8b:5e:20:48:56:9c:1b:b6:08:fe:a9:66: 5d:ad:1b:22:d6:91:ef:f6:66:06:b8:73:a6:ae:98:47:ca:46: 93:c6:b0:e3:86:fd:b0:4f:e2:81:2c:0e:52:38:7e:d0:a0:42: e9:95:c5:aa:36:33:7f:b4:9a:1b:de:bf:a6:e7:41:22:fc:ea: ef:a6:04:61:86:0c:6e:6d:e5:04:ab:f0:cf:31:eb:25:b0:df: e1:99:31:f5:d0:05:ab:78:31:0c:b8:52:7e:b0:a7:9d:3a:00: e6:5d:f0:90:3f:57:17:f5:4d:8b:42:e4:c5:a0:2a:07:d7:42: 1c:d4:13:3f:87:3b:d5:d7:c2:bb:bb:ff:a1:56:90:4b:f0:6e: 59:39:3d:18:1d:db:4d:72:a6:19:f1:0c:28:4e:76:56:d0:c3: e2:75:c8:89:7e:b1:c5:b6:8c:c9:f6:51:74:36:49:2c:19:65: 41:69:fb:f1:ff:93:c6:0b:fa:3e:b7:4e:65:3d:84:d4:75:29: d5:bf:55:d1:e8:8e:47:84:d5:db:6c:26:80:92:2b:14:2f:05: 57:3a:f5:67 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICOXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0 MkI1MDUxQ0UwHhcNMjYwNjMwMTUxMTEyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQzZGM5MC1iZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD+P11y9XYccP5Ir35gT8dwEmgIGevMTHVRvBQmqXsUBxoFcWoWJMO/1zgXz nDggiNvCj+nTTW5w+xxzGbv5roV03VlSRXeIJnn8Fdn6MbcvM388rOKONMQ4AaB+ yyhmj8gYfZLoAwCpoRkeObj8pBUDcNxucAIc6js7xeEn6CkPKzW5LerYlMisTINk mzpT1Q02r2JHZNFseR6nBCzUbM90aEAskt4aze+sL8W8SZaxlXwwdIyfdZke3tM5 CI73PL/UlNtAT8h328GQ++S+nfDyDUHnxLAdgh+ouuaLeHea79l33ElX3LRs+IsP /G+TsHHoQGR2b+lgWyx554MDSQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDea+d73 conSYbglL8nTNp5HXcjcMB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvREY2RkFGNUVB RjAxMTFFQjk2RkMzNDRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAy32AMA0GCSqGSIb3DQEBCwUAA4IBAQCbK5PhPFlcab8YV9LlDeKr bjNa+LHGj+Uq+kSwAxVXuU8HOTByirWyGjGLXiBIVpwbtgj+qWZdrRsi1pHv9mYG uHOmrphHykaTxrDjhv2wT+KBLA5SOH7QoELplcWqNjN/tJob3r+m50Ei/OrvpgRh hgxubeUEq/DPMeslsN/hmTH10AWreDEMuFJ+sKedOgDmXfCQP1cX9U2LQuTFoCoH 10Ic1BM/hzvV18K7u/+hVpBL8G5ZOT0YHdtNcqYZ8QwoTnZW0MPidciJfrHFtozJ 9lF0NkksGWVBafvx/5PGC/o+t05lPYTUdSnVv1XR6I5HhNXbbCaAkisULwVXOvVn -----END CERTIFICATE-----Generated at Tue Jul 21 13:13:28 2026 by rpki-client