$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/4AC304E0FF0C11F0A96F3AB880EE528E.roa File: 4AC304E0FF0C11F0A96F3AB880EE528E.roa (raw, json) Hash identifier: yWUP3xc3oZav5MF32w6E6CDkx0HjSsWKGM8Gw/Y1fZ4= Subject key identifier: 88:84:95:03:68:02:F3:31:BB:D2:39:13:26:99:53:4C:56:45:07:E4 Certificate issuer: /CN=A9119850/serialNumber=7F27A788DC0C12041702C796C6DD5A174401F347 Certificate serial: 0388 Authority key identifier: 7F:27:A7:88:DC:0C:12:04:17:02:C7:96:C6:DD:5A:17:44:01:F3:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/4AC304E0FF0C11F0A96F3AB880EE528E.roa Signing time: Mon 03 Aug 2026 01:50:15 +0000 ROA not before: Mon 03 Aug 2026 01:50:15 +0000 ROA not after: Wed 02 Dec 2026 00:00:00 +0000 asID: 63852 IP address blocks: 103.42.216.0/22 maxlen: 22 103.42.216.0/24 maxlen: 24 103.42.217.0/24 maxlen: 24 103.42.218.0/24 maxlen: 24 103.42.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.crl rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119850, serialNumber=7F27A788DC0C12041702C796C6DD5A174401F347 Validity Not Before: Aug 3 01:50:15 2026 GMT Not After : Dec 2 00:00:00 2026 GMT Subject: CN=6a6ff3d7-fcdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:46:b1:8a:03:42:ea:c1:78:26:cd:d9:5f: 39:85:92:a2:da:23:ce:83:a9:ef:1f:1d:32:36:af: 3c:ee:12:bc:79:6e:be:de:74:04:ed:d0:af:18:0d: f1:3e:1b:b2:e8:5c:77:2c:a5:cf:00:97:35:90:ea: a9:64:89:42:2d:8d:63:79:9b:2f:5c:c4:42:43:44: 89:e2:fc:4a:68:ed:9c:4d:92:9f:5f:76:a4:e9:45: 9f:e4:7d:dc:d8:e3:42:f9:f3:0e:0a:04:e3:4e:55: f4:ca:e2:67:75:7b:59:cf:32:01:26:49:3a:b2:1c: 06:b7:34:e5:13:62:04:9d:cb:af:a8:ba:25:c1:ad: e1:73:a7:6e:12:4c:f6:6c:fa:69:77:9c:87:4b:84: a8:06:8e:28:7d:94:82:6a:6b:02:cf:8f:b0:3b:1b: 8a:ff:70:79:21:4b:5f:18:a6:c9:33:f1:a5:0f:90: 83:26:ae:32:1b:04:f3:b1:df:c8:31:a6:ce:57:96: c0:51:ec:64:0f:fe:d4:8c:5d:fe:60:f4:8e:61:11: ec:41:48:40:40:4d:54:d2:e3:3c:d4:1f:69:1b:da: 0d:c2:32:0b:75:e2:2a:b7:6b:ff:c5:6f:ee:1b:21: 60:57:1d:db:b9:55:b7:2b:88:0c:4f:0d:4b:d3:05: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:84:95:03:68:02:F3:31:BB:D2:39:13:26:99:53:4C:56:45:07:E4 X509v3 Authority Key Identifier: keyid:7F:27:A7:88:DC:0C:12:04:17:02:C7:96:C6:DD:5A:17:44:01:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/4AC304E0FF0C11F0A96F3AB880EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.42.216.0/22 Signature Algorithm: sha256WithRSAEncryption d5:b6:7b:a0:4e:13:39:bd:a7:4c:06:f6:49:93:c3:2b:b5:2b: 48:b1:58:fb:85:ad:82:4f:04:b2:7b:65:3a:85:79:97:6f:b3: d4:5a:20:92:79:dc:88:b4:24:01:f0:61:9f:c4:7a:55:65:0a: b5:1f:40:81:9f:6e:e1:5b:d8:95:19:20:40:70:c8:35:18:aa: 7a:5c:fa:bd:80:13:77:b3:f4:f8:8b:51:52:89:88:b7:ee:bb: b6:dc:9a:e5:12:62:fe:be:64:0d:64:a5:2d:31:53:57:8e:48: 8e:f6:55:c5:f8:2e:77:b8:ef:11:01:9a:5b:ae:04:b7:21:73: de:41:1e:d3:a9:9a:cc:8b:f5:eb:38:62:ae:22:3b:75:54:1f: 99:21:29:73:95:24:01:f1:9a:25:b4:9c:88:1e:4e:f8:60:61: 87:4e:4e:1d:7d:8d:1c:fb:94:b6:63:ae:a8:39:0c:97:e0:8c: 33:59:f8:58:48:55:1d:16:70:08:fc:c8:33:5d:70:03:db:a5: 74:f1:c0:6a:54:21:5f:9b:de:70:87:08:ad:7a:a6:af:34:f8: 3e:5a:60:f6:84:aa:b5:b1:6d:35:d3:63:c6:0d:8c:da:91:c2: 2e:4f:29:e7:af:38:b8:e2:20:55:28:76:16:ab:ef:b2:4c:53: 06:9f:72:13 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk4NTAxMTAvBgNVBAUTKDdGMjdBNzg4REMwQzEyMDQxNzAyQzc5NkM2REQ1QTE3 NDQwMUYzNDcwHhcNMjYwODAzMDE1MDE1WhcNMjYxMjAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZmZjNkNy1mY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulhGsYoDQurBeCbN2V85hZKi2iPOg6nvHx0yNq887hK8eW6+3nQE7dCvGA3x Phuy6Fx3LKXPAJc1kOqpZIlCLY1jeZsvXMRCQ0SJ4vxKaO2cTZKfX3ak6UWf5H3c 2ONC+fMOCgTjTlX0yuJndXtZzzIBJkk6shwGtzTlE2IEncuvqLolwa3hc6duEkz2 bPppd5yHS4SoBo4ofZSCamsCz4+wOxuK/3B5IUtfGKbJM/GlD5CDJq4yGwTzsd/I MabOV5bAUexkD/7UjF3+YPSOYRHsQUhAQE1U0uM81B9pG9oNwjILdeIqt2v/xW/u GyFgVx3buVW3K4gMTw1L0wUnEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIiElQNo AvMxu9I5EyaZU0xWRQfkMB8GA1UdIwQYMBaAFH8np4jcDBIEFwLHlsbdWhdEAfNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTg1MC9GRTE5RUE2QzA3 MkMxMUVEQkQ0MTVFMTNDNEY5QUUwMi9meWVuaU53TUVnUVhBc2VXeHQxYUYwUUI4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z5ZW5pTndNRWdRWEFzZVd4dDFhRjBRQjgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk4NTAvRkUxOUVBNkMwNzJDMTFFREJENDE1RTEzQzRGOUFFMDIvNEFDMzA0RTBG RjBDMTFGMEE5NkYzQUI4ODBFRTUyOEUucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZyrYMA0GCSqGSIb3DQEBCwUAA4IBAQDVtnugThM5vadMBvZJk8Mr tStIsVj7ha2CTwSye2U6hXmXb7PUWiCSedyItCQB8GGfxHpVZQq1H0CBn27hW9iV GSBAcMg1GKp6XPq9gBN3s/T4i1FSiYi37ru23JrlEmL+vmQNZKUtMVNXjkiO9lXF +C53uO8RAZpbrgS3IXPeQR7TqZrMi/XrOGKuIjt1VB+ZISlzlSQB8ZoltJyIHk74 YGGHTk4dfY0c+5S2Y66oOQyX4IwzWfhYSFUdFnAI/MgzXXAD26V08cBqVCFfm95w hwiteqavNPg+WmD2hKq1sW0102PGDYzakcIuTynnrzi44iBVKHYWq++yTFMGn3IT -----END CERTIFICATE-----Generated at Fri Sep 11 15:43:26 2026 by rpki-client