$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/47C98CE6860911EFBACC1172C4F9AE02.roa File: 47C98CE6860911EFBACC1172C4F9AE02.roa (raw, json) Hash identifier: pSI/M/e/fdFE7JMGyIuBN4raQQwqZirTsa6gWZ+EM9w= Subject key identifier: 7A:A0:E4:10:A5:C6:A1:77:43:5E:E7:FD:7E:3A:B8:3F:C2:7B:49:D6 Certificate issuer: /CN=A911EB2D/serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Certificate serial: 0149 Authority key identifier: 7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/47C98CE6860911EFBACC1172C4F9AE02.roa Signing time: Mon 22 Jun 2026 19:44:54 +0000 ROA not before: Mon 22 Jun 2026 19:44:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140849 IP address blocks: 103.152.104.0/23 maxlen: 23 103.152.104.0/24 maxlen: 24 103.152.105.0/24 maxlen: 24 2001:df4:a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 20:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EB2D, serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Validity Not Before: Jun 22 19:44:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a3990b6-0339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:df:3f:c0:72:ec:bd:9a:30:d8:cb:ff:52: ed:1f:31:ce:58:6a:9c:c8:42:94:e9:b8:f1:36:65: a7:e3:e1:65:15:ff:c0:40:de:14:da:cf:66:f1:2b: 87:f8:ee:3b:63:b3:4c:85:3a:c7:fe:fb:80:68:05: f9:b8:a6:08:56:36:51:14:b9:25:6b:d4:05:3c:8b: 5c:fe:1c:d5:14:5b:55:8f:71:db:f6:42:d5:55:14: 11:ad:8d:f2:70:d5:5a:b6:f8:dc:dd:1f:c3:6c:c0: 44:86:08:29:08:f7:dc:72:a3:c8:97:85:21:0f:8d: a8:eb:69:b1:28:9b:f3:1b:fa:7b:bb:70:b9:f6:2a: 4e:fa:e2:c3:ce:68:65:d2:ab:ee:de:3a:68:57:98: 29:2d:bb:d7:a7:81:3e:a4:b0:13:01:1c:37:84:cb: 20:89:d6:9f:e8:ea:cb:65:c4:f2:c5:0d:39:62:c9: 9e:92:2e:97:1a:24:7a:57:f7:8a:9c:c9:24:19:b3: 5a:47:86:9b:58:6a:3b:82:eb:55:37:8c:7c:79:85: c1:6a:3c:62:c5:3d:13:0b:0a:2c:ee:2c:c5:06:8b: d9:34:36:14:8b:46:0a:10:7b:50:d3:b0:07:53:f5: bb:69:e4:d3:b5:21:1f:2f:d3:0c:12:8f:7e:69:25: ba:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A0:E4:10:A5:C6:A1:77:43:5E:E7:FD:7E:3A:B8:3F:C2:7B:49:D6 X509v3 Authority Key Identifier: keyid:7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/47C98CE6860911EFBACC1172C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.104.0/23 IPv6: 2001:df4:a80::/48 Signature Algorithm: sha256WithRSAEncryption 11:f6:c8:e4:ee:35:eb:9b:a3:b3:01:2a:04:b3:d2:f0:40:76: 71:82:5a:70:ee:76:81:2f:5f:63:01:00:51:81:1c:50:7d:c0: 6b:96:32:c4:da:3e:e5:4b:92:64:50:63:06:10:a5:62:62:a9: d6:44:2e:52:11:fb:13:fd:0c:70:98:e9:99:a8:5a:24:7c:30: e8:93:93:da:c6:c9:a1:82:31:f1:f9:32:03:0f:09:5e:0e:a2: 9c:60:5d:ed:7d:e4:fd:e1:75:39:a3:2c:4d:68:c4:a1:5a:54: f3:0d:59:e7:42:49:83:5d:ef:66:c2:6a:74:9e:9c:5c:2e:8e: 4e:16:bb:b2:b7:a0:35:fe:fc:52:32:42:d5:06:b4:4e:8a:5f: dc:d4:29:cc:c0:0d:eb:8e:08:2d:13:76:a5:39:ee:90:5b:b2: 5a:8a:74:da:f8:8c:6d:80:82:d6:f3:40:e5:6f:9f:c2:a4:52: 2f:0e:3e:9e:60:0d:15:35:67:30:e9:e3:d4:ca:41:fd:f3:e7: 6b:98:40:97:aa:5d:37:02:07:ec:f6:14:2e:7b:ea:35:77:a0: ab:3f:44:f5:f5:75:95:36:cc:44:d2:c5:57:7b:9a:4f:f8:ec: a4:9c:6f:a6:c6:34:1e:6d:e9:84:03:29:d8:07:68:cb:08:10: a2:f0:45:11 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVCMkQxMTAvBgNVBAUTKDdBOEFGMjRENzhENzc3MERDMzM5QzJGRjI4RkQ3QzE0 RDEzQzVGQjEwHhcNMjYwNjIyMTk0NDU0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM5OTBiNi0wMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu83fP8By7L2aMNjL/1LtHzHOWGqcyEKU6bjxNmWn4+FlFf/AQN4U2s9m8SuH +O47Y7NMhTrH/vuAaAX5uKYIVjZRFLkla9QFPItc/hzVFFtVj3Hb9kLVVRQRrY3y cNVatvjc3R/DbMBEhggpCPfccqPIl4UhD42o62mxKJvzG/p7u3C59ipO+uLDzmhl 0qvu3jpoV5gpLbvXp4E+pLATARw3hMsgidaf6OrLZcTyxQ05Ysmeki6XGiR6V/eK nMkkGbNaR4abWGo7gutVN4x8eYXBajxixT0TCwos7izFBovZNDYUi0YKEHtQ07AH U/W7aeTTtSEfL9MMEo9+aSW6YQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHqg5BCl xqF3Q17n/X46uD/Ce0nWMB8GA1UdIwQYMBaAFHqK8k1413cNwznC/yj9fBTRPF+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF QjMxMUVBODI2ODc2NDNDNEY5QUUwMi9lb3J5VFhqWGR3M0RPY0xfS1AxOEZORThY N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VvcnlUWGpYZHczRE9jTF9LUDE4Rk5FOFg3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVCMkQvNEE2Q0VEQUNCRUIzMTFFQTgyNjg3NjQzQzRGOUFFMDIvNDdDOThDRTY4 NjA5MTFFRkJBQ0MxMTcyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5hoMA8EAgACMAkDBwAgAQ30CoAwDQYJKoZIhvcNAQELBQADggEB ABH2yOTuNeubo7MBKgSz0vBAdnGCWnDudoEvX2MBAFGBHFB9wGuWMsTaPuVLkmRQ YwYQpWJiqdZELlIR+xP9DHCY6ZmoWiR8MOiTk9rGyaGCMfH5MgMPCV4OopxgXe19 5P3hdTmjLE1oxKFaVPMNWedCSYNd72bCanSenFwujk4Wu7K3oDX+/FIyQtUGtE6K X9zUKczADeuOCC0TdqU57pBbslqKdNr4jG2AgtbzQOVvn8KkUi8OPp5gDRU1ZzDp 49TKQf3z52uYQJeqXTcCB+z2FC576jV3oKs/RPX1dZU2zETSxVd7mk/47KScb6bG NB5t6YQDKdgHaMsIEKLwRRE= -----END CERTIFICATE-----Generated at Sat Jul 18 07:11:12 2026 by rpki-client