$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/A01CB8D409DD11EBB507BD1DC4F9AE02.roa File: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (raw, json) Hash identifier: 7kGBgOCffz8RCK57g3IF8bU12ZydXkBz4WpEpH4Rrv0= Subject key identifier: C1:8D:1B:A8:7B:B6:97:84:69:21:B8:AE:2F:D6:2C:8C:52:6A:C3:56 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 086C Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/A01CB8D409DD11EBB507BD1DC4F9AE02.roa Signing time: Sat 04 Jul 2026 21:22:13 +0000 ROA not before: Sat 04 Jul 2026 21:22:13 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 55720 IP address blocks: 45.120.28.0/24 maxlen: 24 45.120.29.0/24 maxlen: 24 45.120.30.0/24 maxlen: 24 45.120.31.0/24 maxlen: 24 103.232.84.0/24 maxlen: 24 103.232.85.0/24 maxlen: 24 103.232.86.0/24 maxlen: 24 103.232.87.0/24 maxlen: 24 2402:90c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 21:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2156 (0x86c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: Jul 4 21:22:13 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a497985-8039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:6b:ab:c1:0a:81:d6:2a:97:e4:61:8f:ed: 3f:a4:5f:e0:fd:0e:85:f3:74:4b:99:a3:f9:08:51: 52:dd:f4:f9:e4:25:d3:8a:3d:21:e7:ee:54:a0:54: 77:ee:bb:7c:6d:55:bd:84:ee:09:f0:8c:96:29:b0: 14:69:95:9b:d5:7e:69:32:25:a2:a6:46:36:eb:7c: dc:7b:31:31:c4:ab:75:99:a7:70:44:ee:ad:d9:a1: 28:c6:38:e0:80:2f:5d:da:49:28:bd:93:8e:46:2c: bd:67:54:84:fd:cd:01:b7:7b:02:3b:81:58:7c:d1: be:e3:60:03:bc:fd:58:1a:c7:6f:64:88:2d:9a:f4: 46:1e:d3:bb:26:64:76:fa:92:e4:71:0d:a4:76:79: b9:2c:4a:bd:b6:48:db:d5:08:f6:19:67:5e:5a:3f: 2a:f3:c4:07:e9:58:ce:5c:fe:17:0d:78:f3:45:3d: f1:3b:4f:ba:bb:f0:21:c6:1f:2d:d0:09:e9:28:88: 90:ef:47:36:b7:62:c3:60:43:ff:a6:a4:b6:c9:7b: 6c:f3:a7:99:2c:7f:b5:7b:f1:26:bc:5f:eb:2d:b3: 39:ee:fc:b1:c7:63:f0:35:b1:e6:7c:8f:ee:46:a7: ef:13:2b:46:60:93:53:a9:37:79:02:f8:7d:74:c2: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8D:1B:A8:7B:B6:97:84:69:21:B8:AE:2F:D6:2C:8C:52:6A:C3:56 X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/A01CB8D409DD11EBB507BD1DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.28.0/22 103.232.84.0/22 IPv6: 2402:90c0::/32 Signature Algorithm: sha256WithRSAEncryption 29:d4:de:23:25:45:7b:b6:21:00:f9:12:0b:aa:80:6e:0f:0e: 74:2a:60:cb:ab:cb:c1:f1:41:fa:a0:57:d8:db:ca:90:18:ac: ec:9c:b1:3a:9b:12:6b:e4:9c:43:87:29:8c:ff:0f:86:0e:98: b9:c9:10:cd:c7:ed:28:51:f0:ab:89:84:00:8f:42:c5:f8:04: 39:82:9f:e3:f9:67:e2:15:15:5e:3b:71:e4:1e:cc:f8:0e:1e: 8b:f8:4c:5d:c6:33:c2:30:f4:54:02:75:32:7b:c1:f9:18:9e: 23:e8:ca:7d:dd:e7:58:70:f3:aa:c4:b5:a1:75:f8:4d:c5:1a: 6a:65:b1:9c:67:04:09:d4:ca:9e:6a:6c:7c:a0:40:47:11:7e: e4:7a:5a:2d:ac:67:bc:cb:59:f9:e6:22:f4:cc:58:00:32:3f: ac:89:de:d6:e3:b2:8f:ff:83:b2:e1:e4:52:44:08:90:8f:e7: 34:8e:f6:77:73:fb:a0:5a:2b:d3:f9:a0:ed:c6:b0:7d:d1:bf: e0:b2:20:bd:65:5e:2b:0e:cc:fc:a9:6f:35:82:ad:65:47:5b: 47:06:a2:44:46:fa:ed:cf:24:3b:6d:17:52:29:66:61:f9:20: 5b:9c:fc:88:4d:6f:58:a4:c5:19:2c:17:2f:e9:bc:8d:9f:3a: 9c:67:8c:f0 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjYwNzA0MjEyMjEzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5Nzk4NS04MDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmolrq8EKgdYql+Rhj+0/pF/g/Q6F83RLmaP5CFFS3fT55CXTij0h5+5UoFR3 7rt8bVW9hO4J8IyWKbAUaZWb1X5pMiWipkY263zcezExxKt1madwRO6t2aEoxjjg gC9d2kkovZOORiy9Z1SE/c0Bt3sCO4FYfNG+42ADvP1YGsdvZIgtmvRGHtO7JmR2 +pLkcQ2kdnm5LEq9tkjb1Qj2GWdeWj8q88QH6VjOXP4XDXjzRT3xO0+6u/Ahxh8t 0AnpKIiQ70c2t2LDYEP/pqS2yXts86eZLH+1e/EmvF/rLbM57vyxx2PwNbHmfI/u RqfvEytGYJNTqTd5Avh9dMIzkwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMGNG6h7 tpeEaSG4ri/WLIxSasNWMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNERDkvN0M5MkI4RTIwOURDMTFFQkFGNDc5RDFDQzRGOUFFMDIvQTAxQ0I4RDQw OUREMTFFQkI1MDdCRDFEQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXgcAwQCZ+hUMA0EAgACMAcDBQAkApDAMA0GCSqGSIb3DQEBCwUA A4IBAQAp1N4jJUV7tiEA+RILqoBuDw50KmDLq8vB8UH6oFfY28qQGKzsnLE6mxJr 5JxDhymM/w+GDpi5yRDNx+0oUfCriYQAj0LF+AQ5gp/j+WfiFRVeO3HkHsz4Dh6L +ExdxjPCMPRUAnUye8H5GJ4j6Mp93edYcPOqxLWhdfhNxRpqZbGcZwQJ1Mqeamx8 oEBHEX7kelotrGe8y1n55iL0zFgAMj+sid7W47KP/4Oy4eRSRAiQj+c0jvZ3c/ug WivT+aDtxrB90b/gsiC9ZV4rDsz8qW81gq1lR1tHBqJERvrtzyQ7bRdSKWZh+SBb nPyITW9YpMUZLBcv6byNnzqcZ4zw -----END CERTIFICATE-----Generated at Sat Jul 18 00:16:26 2026 by rpki-client