$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/BDD52DF26AF311F1A3F54E617547A888.roa File: BDD52DF26AF311F1A3F54E617547A888.roa (raw, json) Hash identifier: YDvGDAvEOaQ3i1B7cemmqUz4csMi56McTSjidKVS5sQ= Subject key identifier: 02:D0:14:69:DE:8F:07:F2:FC:A9:06:64:24:D7:91:7B:AD:71:8A:AB Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 0487 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/BDD52DF26AF311F1A3F54E617547A888.roa Signing time: Thu 18 Jun 2026 08:57:32 +0000 ROA not before: Thu 18 Jun 2026 08:57:32 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 13875 IP address blocks: 103.91.219.0/24 maxlen: 24 103.95.207.0/24 maxlen: 24 103.101.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 01:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Jun 18 08:57:32 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a33b2fc-7d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:79:27:07:a9:4b:34:93:6b:f9:81:db:55:cb: ec:25:a2:da:f9:30:62:df:3c:76:7a:b8:d4:52:60: 49:fd:a2:01:b0:9a:15:85:5d:66:0e:38:e7:66:9c: 8b:ed:cb:a3:bf:4f:96:1c:22:16:8e:f3:57:d3:d7: 43:b3:7b:7e:bb:ce:7f:8e:4a:17:d0:5e:72:7f:9b: 86:3b:8d:f5:3c:ba:0e:5e:0e:94:15:9b:6c:c0:b3: 86:31:26:11:dd:1d:27:9f:99:ae:bc:e5:c8:05:f0: b4:e6:85:b0:8e:2e:a6:90:1a:0d:40:16:f2:54:cc: 08:8f:ae:ca:43:f8:af:a3:a7:fa:bc:73:a8:f1:8e: ff:c9:95:32:11:1f:4a:9f:77:88:87:e7:81:d9:c5: 35:63:dc:55:f4:a2:e6:1f:fa:95:81:b0:b5:44:b5: 0b:1c:09:11:25:83:0b:c9:7a:92:8c:e8:8a:a5:fe: c2:ef:00:47:26:3f:15:71:61:75:2d:eb:67:3f:38: 22:ff:4b:63:47:18:5a:93:a7:ab:77:54:cf:ac:2a: c6:9e:86:ad:9b:ec:b7:8b:e8:87:39:8e:33:dd:30: 65:16:79:b4:46:95:a9:82:93:7e:92:fb:c9:bf:c1: a5:39:73:f4:67:09:72:b2:7a:a0:75:e6:e5:d8:a6: 17:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D0:14:69:DE:8F:07:F2:FC:A9:06:64:24:D7:91:7B:AD:71:8A:AB X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/BDD52DF26AF311F1A3F54E617547A888.roa sbgp-ipAddrBlock: critical IPv4: 103.91.219.0/24 103.95.207.0/24 103.101.153.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:27:ca:bd:7c:0b:22:3c:5c:e9:58:6f:11:29:84:1b:18:62: 72:a4:b7:0c:3b:50:12:82:f3:6a:e6:a1:e7:d8:53:df:68:99: 25:80:9a:1e:9f:8b:92:86:8b:12:f4:6e:e3:07:fe:e4:b0:29: 03:86:16:fd:29:c3:0a:6e:a3:d4:07:ef:42:94:1a:4e:33:6b: a8:5b:3a:7e:56:4a:c9:4f:57:84:ed:6f:ce:5a:08:7b:56:bd: df:d9:ba:b8:f7:7c:07:74:4d:7a:b4:18:d5:70:52:ee:c7:f8: a9:fb:e4:6b:b4:16:6b:fb:5e:a5:3f:e5:dd:34:0e:d3:96:b0: 8a:d3:fe:f2:0a:a5:d0:3e:11:39:2c:1e:9d:92:6b:a3:71:90: 0e:50:66:98:d9:db:d0:fd:f6:d8:d3:dd:0d:77:ec:42:81:0d: 12:b6:88:91:4f:92:29:cb:ea:f7:0c:0f:54:11:28:8f:91:1e: 18:a1:f3:63:2d:25:af:da:70:51:a4:4d:e6:a7:7d:af:78:fd: 58:40:07:a1:d7:81:a1:e6:0b:a6:4f:bd:37:4c:9e:2e:31:70: 56:88:be:d9:d0:21:11:63:9e:9f:70:64:b9:9f:ae:51:5c:a8: 40:21:4f:5b:5e:ea:42:d7:27:d5:83:4c:02:17:d3:14:e6:58: d2:57:90:f9 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjYwNjE4MDg1NzMyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMzYjJmYy03ZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HknB6lLNJNr+YHbVcvsJaLa+TBi3zx2erjUUmBJ/aIBsJoVhV1mDjjnZpyL 7cujv0+WHCIWjvNX09dDs3t+u85/jkoX0F5yf5uGO431PLoOXg6UFZtswLOGMSYR 3R0nn5muvOXIBfC05oWwji6mkBoNQBbyVMwIj67KQ/ivo6f6vHOo8Y7/yZUyER9K n3eIh+eB2cU1Y9xV9KLmH/qVgbC1RLULHAkRJYMLyXqSjOiKpf7C7wBHJj8VcWF1 LetnPzgi/0tjRxhak6erd1TPrCrGnoatm+y3i+iHOY4z3TBlFnm0RpWpgpN+kvvJ v8GlOXP0Zwlysnqgdebl2KYXTQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFALQFGne jwfy/KkGZCTXkXutcYqrMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdGQzIvNUUzMEJGNzBCQkE2MTFFQ0JBRjQzMTU2QzRGOUFFMDIvQkRENTJERjI2 QUYzMTFGMUEzRjU0RTYxNzU0N0E4ODgucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ1vbAwQAZ1/PAwQAZ2WZMA0GCSqGSIb3DQEBCwUAA4IBAQBeJ8q9 fAsiPFzpWG8RKYQbGGJypLcMO1ASgvNq5qHn2FPfaJklgJoen4uShosS9G7jB/7k sCkDhhb9KcMKbqPUB+9ClBpOM2uoWzp+VkrJT1eE7W/OWgh7Vr3f2bq493wHdE16 tBjVcFLux/ip++RrtBZr+16lP+XdNA7TlrCK0/7yCqXQPhE5LB6dkmujcZAOUGaY 2dvQ/fbY090Nd+xCgQ0StoiRT5Ipy+r3DA9UESiPkR4YofNjLSWv2nBRpE3mp32v eP1YQAeh14Gh5gumT703TJ4uMXBWiL7Z0CERY56fcGS5n65RXKhAIU9bXupC1yfV g0wCF9MU5ljSV5D5 -----END CERTIFICATE-----Generated at Tue Jul 21 21:41:53 2026 by rpki-client