$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/899BFC6C533C11EF8B23DB12C4F9AE02.roa File: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (raw, json) Hash identifier: DoN06rjlT8jJrbB7bIMyGFkrhFmwrrIum9heHhm38qI= Subject key identifier: EE:A7:48:5A:AA:6D:99:9E:36:5C:9E:A2:2D:1D:68:F9:7A:3C:98:FC Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 02B5 Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/899BFC6C533C11EF8B23DB12C4F9AE02.roa Signing time: Thu 09 Jul 2026 04:31:11 +0000 ROA not before: Thu 09 Jul 2026 04:31:11 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 151419 IP address blocks: 103.158.117.0/24 maxlen: 24 2401:e60:1::/48 maxlen: 48 2401:e60:2::/48 maxlen: 48 2401:e60:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Jul 9 04:31:11 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4f240f-5549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ba:ee:ca:6c:11:4a:a5:ca:73:88:5d:17:8d: 15:71:ea:d5:a1:b4:13:71:96:0d:f6:04:7c:e1:3d: 7f:36:b0:5c:ea:11:ec:e7:8e:52:f2:38:e2:df:ea: 18:77:1a:c5:0c:20:7e:31:d9:89:39:bd:99:09:9c: 9e:e3:81:16:84:13:f5:14:e6:9d:c8:04:18:5f:00: 6c:6f:95:55:27:e8:6b:da:ed:d1:45:7d:f5:cd:88: 6e:b5:c2:8e:b6:73:27:07:92:fe:3f:3f:03:a5:cf: 8d:d3:68:02:be:0f:a6:22:d1:7d:0b:d9:49:86:5d: aa:a9:b4:24:36:90:80:d8:1c:08:f8:c6:4d:a3:41: e0:b0:7a:50:30:44:5b:be:ad:4e:f0:c2:6e:e2:f3: 08:c2:e4:06:b7:5b:8f:ab:3a:c8:f1:f2:7e:bb:83: e2:db:6f:36:a6:c0:24:db:64:ff:69:65:0d:33:15: 92:6c:0b:d6:35:a0:f5:c0:26:62:51:57:c3:52:6a: c8:60:6e:32:7b:f1:72:b3:0d:8c:02:71:a7:97:67: 18:a5:81:c9:e3:91:77:c8:bf:0c:63:1b:6a:3f:e4: 99:a7:f5:93:9a:81:f8:44:6a:04:2e:2e:ae:9c:5a: f6:3a:46:47:0c:40:5b:f6:bd:0e:88:c0:c7:1d:52: 27:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A7:48:5A:AA:6D:99:9E:36:5C:9E:A2:2D:1D:68:F9:7A:3C:98:FC X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/899BFC6C533C11EF8B23DB12C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.158.117.0/24 IPv6: 2401:e60:1::-2401:e60:3:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7d:fb:4e:e3:13:84:24:cf:db:44:05:27:7e:1a:ba:7b:d6:4e: 41:79:f6:c7:34:ec:3b:86:b3:36:af:d3:5b:9c:45:14:e5:a6: 97:f2:27:e1:60:71:ab:4c:8b:42:4e:ce:ab:3f:4c:26:3b:a1: 65:b3:ac:b3:aa:d3:05:46:5e:08:29:8e:42:86:cc:08:62:18: 8f:c2:7f:10:e3:29:f6:87:5a:13:de:64:8a:9a:c0:64:7c:e3: 7d:ec:86:7f:f2:29:1c:30:b6:1f:eb:a2:57:05:6a:b5:ff:c8: 69:83:f6:99:ac:4d:c9:fb:d1:8d:cf:a6:4f:83:55:b7:80:00: d2:38:46:e4:34:f1:1e:50:d2:cf:f4:bd:d2:85:82:a1:0d:86: 13:49:ca:6a:16:67:6c:1a:99:b3:08:66:20:a0:9b:28:bb:29: 3c:3d:3c:4a:08:c5:36:bd:47:c5:70:f7:1e:a6:3a:44:3f:23: 7b:cb:50:ac:e7:95:f7:7d:d3:85:14:b5:7c:ea:22:d8:4c:2b: c5:3c:42:a4:16:96:fe:2c:e5:8a:ec:23:fd:a7:bc:7c:bd:77: 3d:a2:9d:f0:c0:7e:40:73:4b:3a:df:f5:a4:3f:e3:3d:4e:64: 10:24:97:29:22:52:83:67:22:31:49:5f:68:53:62:9c:6f:cd: 56:4f:d6:6e -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjYwNzA5MDQzMTExWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmMjQwZi01NTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh7ruymwRSqXKc4hdF40VcerVobQTcZYN9gR84T1/NrBc6hHs545S8jji3+oY dxrFDCB+MdmJOb2ZCZye44EWhBP1FOadyAQYXwBsb5VVJ+hr2u3RRX31zYhutcKO tnMnB5L+Pz8Dpc+N02gCvg+mItF9C9lJhl2qqbQkNpCA2BwI+MZNo0HgsHpQMERb vq1O8MJu4vMIwuQGt1uPqzrI8fJ+u4Pi2282psAk22T/aWUNMxWSbAvWNaD1wCZi UVfDUmrIYG4ye/Fysw2MAnGnl2cYpYHJ45F3yL8MYxtqP+SZp/WTmoH4RGoELi6u nFr2OkZHDEBb9r0OiMDHHVInoQIDAQABo4ICfDCCAngwHQYDVR0OBBYEFO6nSFqq bZmeNlyeoi0daPl6PJj8MB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JFQTcvMDQ0RjY0NDgxMTY4MTFFRUFDNjNDMjM0QzRGOUFFMDIvODk5QkZDNkM1 MzNDMTFFRjhCMjNEQjEyQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAM BAIAATAGAwQAZ551MBoEAgACMBQwEgMHACQBDmAAAQMHAiQBDmAAADANBgkqhkiG 9w0BAQsFAAOCAQEAfftO4xOEJM/bRAUnfhq6e9ZOQXn2xzTsO4azNq/TW5xFFOWm l/In4WBxq0yLQk7Oqz9MJjuhZbOss6rTBUZeCCmOQobMCGIYj8J/EOMp9odaE95k iprAZHzjfeyGf/IpHDC2H+uiVwVqtf/IaYP2maxNyfvRjc+mT4NVt4AA0jhG5DTx HlDSz/S90oWCoQ2GE0nKahZnbBqZswhmIKCbKLspPD08SgjFNr1HxXD3HqY6RD8j e8tQrOeV933ThRS1fOoi2EwrxTxCpBaW/izliuwj/ae8fL13PaKd8MB+QHNLOt/1 pD/jPU5kECSXKSJSg2ciMUlfaFNinG/NVk/Wbg== -----END CERTIFICATE-----Generated at Wed Jul 22 00:01:03 2026 by rpki-client