$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa File: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (raw, json) Hash identifier: LsWT9PH7lpuuB3Eu7lPQZ/DRwq+wHiTPxrXabXBYi5Y= Subject key identifier: A3:32:08:4C:65:97:87:62:8D:E1:2B:2B:5A:5D:10:AF:61:1D:22:37 Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Certificate serial: 0623 Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa Signing time: Wed 24 Jun 2026 23:27:58 +0000 ROA not before: Wed 24 Jun 2026 23:27:58 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 136602 IP address blocks: 103.93.208.0/24 maxlen: 24 103.174.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 23:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1571 (0x623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Validity Not Before: Jun 24 23:27:58 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3c67fe-6f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:12:70:57:da:11:09:4a:73:a4:83:66:cf:82: 35:6e:77:a1:d1:b4:e9:c2:91:5f:08:05:15:57:86: da:32:b5:01:3d:d6:d1:46:5b:9d:f8:8a:b3:12:dc: 99:30:dd:65:bf:e9:20:ff:63:4e:f2:40:1c:d6:e5: f6:75:7f:e8:7d:1b:04:9b:97:51:cd:fa:f0:0a:6b: 10:35:3f:0a:74:63:30:dc:e7:56:ad:44:d5:4f:11: 53:7b:76:17:d5:c9:55:11:e6:7e:a4:5d:80:6f:48: 61:af:a3:81:60:f6:77:f1:67:a4:95:fa:c5:e3:0a: 69:2d:60:8d:1e:be:20:5f:f5:b2:a5:4a:2c:d5:05: bf:ca:d6:ad:9c:88:ca:60:7e:f5:63:f2:ac:4d:3a: e5:2b:92:57:e9:f4:29:b0:23:89:49:ad:d5:a7:ab: 7d:38:c8:9d:b2:90:b0:0d:aa:d0:d0:8e:25:21:66: f7:3f:0c:00:44:d6:42:cc:b3:e6:aa:8f:f9:5d:fc: 2b:76:f2:1e:72:80:e1:19:cc:b3:7f:1a:ef:57:25: cc:6d:65:d3:84:50:e8:d4:1c:40:c9:df:c7:72:16: b8:8b:14:ac:46:73:32:a3:cd:7b:da:73:69:d3:69: e6:69:ad:58:08:61:f5:b9:77:a3:6c:63:d2:08:9b: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:32:08:4C:65:97:87:62:8D:E1:2B:2B:5A:5D:10:AF:61:1D:22:37 X509v3 Authority Key Identifier: keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.93.208.0/24 103.174.239.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:2d:e3:27:10:b8:10:8d:90:db:2a:98:77:0e:dd:59:7e:98: 66:bc:28:55:ec:23:0f:38:39:0c:63:32:ee:95:f3:98:4b:7a: 95:2d:51:21:ea:61:af:39:4a:56:77:9d:b9:1b:41:32:8f:37: e7:ad:a6:68:c4:fc:a6:18:fa:a8:38:de:41:77:e5:11:9e:8e: c7:b6:af:45:e0:2b:70:ca:13:a8:a4:ce:39:ed:80:6c:7f:96: 80:33:48:65:6c:04:fe:f2:c2:84:18:29:ae:7f:64:20:10:65: 03:fa:cb:3d:d9:f2:4a:a0:6a:8e:b1:e5:79:ea:54:91:ad:92: 72:46:22:6e:08:dd:f4:72:91:b0:ff:e5:fe:6b:50:ca:61:d7: 76:11:ee:ce:03:ff:84:20:5e:87:95:15:21:04:1e:fd:03:aa: a5:d5:d9:08:fb:0b:b3:4d:30:57:e9:ba:5a:3a:ef:02:25:7a: 45:16:3e:b2:70:b9:95:6a:fa:d6:4e:e0:74:1b:2f:0a:7f:6a: c9:63:b4:8c:52:b2:22:7e:ff:09:a2:2d:10:25:47:a3:0d:af: c3:98:04:ee:b0:a1:a5:a3:fd:04:9b:85:c5:25:17:03:c1:51: f1:03:4c:be:f7:48:2f:62:c3:78:e1:49:4c:4f:c9:12:dd:06: 3c:98:8d:0c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC QzhFMTUyRDgwHhcNMjYwNjI0MjMyNzU4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNjNjdmZS02ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xJwV9oRCUpzpINmz4I1bneh0bTpwpFfCAUVV4baMrUBPdbRRlud+IqzEtyZ MN1lv+kg/2NO8kAc1uX2dX/ofRsEm5dRzfrwCmsQNT8KdGMw3OdWrUTVTxFTe3YX 1clVEeZ+pF2Ab0hhr6OBYPZ38WeklfrF4wppLWCNHr4gX/WypUos1QW/ytatnIjK YH71Y/KsTTrlK5JX6fQpsCOJSa3Vp6t9OMidspCwDarQ0I4lIWb3PwwARNZCzLPm qo/5XfwrdvIecoDhGcyzfxrvVyXMbWXThFDo1BxAyd/Hcha4ixSsRnMyo8172nNp 02nmaa1YCGH1uXejbGPSCJtX0wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKMyCExl l4dijeErK1pdEK9hHSI3MB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM1NjQvRTgwOEFFRDZFRTk0MTFFQkIzRDg1QTg2QzRGOUFFMDIvQTNCMkIwQThF RTk3MTFFQjhFRjFBNTBBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ13QAwQAZ67vMA0GCSqGSIb3DQEBCwUAA4IBAQBMLeMnELgQjZDb Kph3Dt1ZfphmvChV7CMPODkMYzLulfOYS3qVLVEh6mGvOUpWd525G0EyjzfnraZo xPymGPqoON5Bd+URno7Htq9F4CtwyhOopM457YBsf5aAM0hlbAT+8sKEGCmuf2Qg EGUD+ss92fJKoGqOseV56lSRrZJyRiJuCN30cpGw/+X+a1DKYdd2Ee7OA/+EIF6H lRUhBB79A6ql1dkI+wuzTTBX6bpaOu8CJXpFFj6ycLmVavrWTuB0Gy8Kf2rJY7SM UrIifv8Joi0QJUejDa/DmATusKGlo/0Em4XFJRcDwVHxA0y+90gvYsN44UlMT8kS 3QY8mI0M -----END CERTIFICATE-----Generated at Wed Jul 22 02:36:05 2026 by rpki-client