$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa File: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (raw, json) Hash identifier: H/+8cEiqjGBMXYBNFLkNc/yFQ5ggKQnuS/ChaNZWBS0= Subject key identifier: 8E:9A:E7:25:AD:57:8F:AE:86:B4:CA:50:26:7B:CF:4D:72:11:AC:1C Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0255 Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa Signing time: Mon 27 Jul 2026 06:22:33 +0000 ROA not before: Mon 27 Jul 2026 06:22:33 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 132366 IP address blocks: 103.242.8.0/24 maxlen: 24 2401:1d20::/48 maxlen: 48 2401:1d20:4::/48 maxlen: 48 2401:1d20:5::/48 maxlen: 48 2401:1d20:6::/48 maxlen: 48 2401:1d20:7::/48 maxlen: 48 2401:1d20:8::/48 maxlen: 48 2401:1d20:9::/48 maxlen: 48 2401:1d20:b::/48 maxlen: 48 2401:1d20:c::/48 maxlen: 48 2401:1d20:d::/48 maxlen: 48 2401:1d20:e::/48 maxlen: 48 2401:1d20:f::/48 maxlen: 48 2401:1d20:10::/48 maxlen: 48 2401:1d20:11::/48 maxlen: 48 2401:1d20:12::/48 maxlen: 48 2401:1d20:13::/48 maxlen: 48 2401:1d20:14::/48 maxlen: 48 2401:1d20:15::/48 maxlen: 48 2401:1d20:16::/48 maxlen: 48 2401:1d20:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Jul 27 06:22:33 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a66f929-5f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:66:56:0c:4b:6a:f4:74:90:f4:d8:f0:e7:41: 1f:9a:d8:8f:1f:95:2f:f9:b0:cf:13:26:3e:e6:1e: 8e:03:32:04:62:5a:92:7d:a9:a7:59:2e:9f:69:a9: c6:98:b9:eb:fb:3a:a7:04:0b:1d:27:bd:a4:95:0c: d0:dd:28:58:14:94:9f:2d:97:20:8f:4d:e5:40:88: 6f:77:b3:31:08:9e:dd:09:08:99:d4:c1:d9:1d:88: fa:ba:39:b7:46:80:cb:c6:e1:05:0c:b5:f6:72:da: b3:67:3b:ae:d3:9b:71:a7:e4:24:7b:a2:2e:fc:43: bf:4c:5c:1a:e6:6b:98:f4:b8:ea:7e:8a:d1:62:69: 6a:d4:48:88:f5:41:ea:9d:61:a0:44:92:58:c6:b7: 86:77:e6:3d:0c:a7:55:ff:c2:0e:7b:10:d7:e3:dd: 57:dd:ff:c8:b8:72:b6:9e:f8:1a:b6:5a:02:81:6f: a4:2a:b8:8d:3a:78:a9:0a:06:a0:17:4e:db:0a:d9: b5:5a:34:d9:e3:e8:ee:00:8d:21:a7:24:9d:3e:d0: f5:df:ad:95:9a:6d:6b:80:e2:1d:78:56:e7:e8:8b: 9c:90:a9:a1:2e:47:55:99:17:e3:6e:e9:d6:d5:a1: 15:cf:87:51:68:ef:72:33:01:6a:3b:06:10:00:04: 03:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9A:E7:25:AD:57:8F:AE:86:B4:CA:50:26:7B:CF:4D:72:11:AC:1C X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.242.8.0/24 IPv6: 2401:1d20::/48 2401:1d20:4::-2401:1d20:9:ffff:ffff:ffff:ffff:ffff 2401:1d20:b::-2401:1d20:17:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4e:79:86:e2:b8:25:f7:6e:a1:12:13:4c:6b:07:08:f7:4e:42: 10:07:6e:dd:74:04:62:90:39:03:ac:b5:20:0c:d6:88:2a:4b: c8:42:8d:fb:c1:40:f1:b9:b3:7f:e9:c8:9e:f4:4a:52:ad:d0: f4:33:cc:b7:89:3b:50:12:e4:62:e3:8e:2f:1f:c7:a5:b3:47: d2:74:48:b2:bd:2d:99:52:ab:f1:df:9d:04:96:86:77:6b:d9: 32:2a:af:8a:e4:e6:b0:bc:11:09:4d:75:1d:59:e9:74:5c:26: 16:c1:06:14:6d:dd:c4:9e:71:4b:d9:19:ef:a9:7f:6a:ea:de: 0c:d8:a8:b7:8e:b2:67:91:d8:8e:16:45:46:7d:1b:9c:e4:ce: 82:49:db:af:9c:53:cb:f6:26:ed:0a:1b:e4:09:b7:7e:95:39: de:b0:73:50:b5:e1:06:4b:f9:7b:6b:ba:a9:37:b0:5a:9a:d4: b3:94:e6:d8:15:c5:36:19:d2:41:42:96:11:f5:a8:0c:78:25: 5e:84:f3:dc:a4:ac:60:e1:7a:77:7e:90:a2:77:c4:86:f0:dc: 58:27:73:ae:57:de:c8:b6:94:04:c3:ad:3e:85:12:c0:c1:a2: 39:0c:dc:2d:d5:80:2a:12:75:ad:ed:36:7a:b1:e9:b7:66:91: b6:dc:6b:ae -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjYwNzI3MDYyMjMzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY2ZjkyOS01Zjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA72ZWDEtq9HSQ9Njw50EfmtiPH5Uv+bDPEyY+5h6OAzIEYlqSfamnWS6faanG mLnr+zqnBAsdJ72klQzQ3ShYFJSfLZcgj03lQIhvd7MxCJ7dCQiZ1MHZHYj6ujm3 RoDLxuEFDLX2ctqzZzuu05txp+Qke6Iu/EO/TFwa5muY9LjqforRYmlq1EiI9UHq nWGgRJJYxreGd+Y9DKdV/8IOexDX491X3f/IuHK2nvgatloCgW+kKriNOnipCgag F07bCtm1WjTZ4+juAI0hpySdPtD1362Vmm1rgOIdeFbn6IuckKmhLkdVmRfjbunW 1aEVz4dRaO9yMwFqOwYQAAQDbQIDAQABo4ICmTCCApUwHQYDVR0OBBYEFI6a5yWt V4+uhrTKUCZ7z01yEawcMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIwMTcvREU3NUYyMjIyQTEzMTFFRTk1RDU4QTY2QzRGOUFFMDIvMUQxMUZGRDQz NTJEMTFFRTk1NDNCNTJGQzRGOUFFMDIucm9hMFgGCCsGAQUFBwEHAQH/BEkwRzAM BAIAATAGAwQAZ/IIMDcEAgACMDEDBwAkAR0gAAAwEgMHAiQBHSAABAMHASQBHSAA CDASAwcAJAEdIAALAwcDJAEdIAAQMA0GCSqGSIb3DQEBCwUAA4IBAQBOeYbiuCX3 bqESE0xrBwj3TkIQB27ddARikDkDrLUgDNaIKkvIQo37wUDxubN/6cie9EpSrdD0 M8y3iTtQEuRi444vH8els0fSdEiyvS2ZUqvx350EloZ3a9kyKq+K5OawvBEJTXUd Wel0XCYWwQYUbd3EnnFL2RnvqX9q6t4M2Ki3jrJnkdiOFkVGfRuc5M6CSduvnFPL 9ibtChvkCbd+lTnesHNQteEGS/l7a7qpN7BamtSzlObYFcU2GdJBQpYR9agMeCVe hPPcpKxg4Xp3fpCid8SG8NxYJ3OuV97ItpQEw60+hRLAwaI5DNwt1YAqEnWt7TZ6 sem3ZpG23Guu -----END CERTIFICATE-----Generated at Tue Jul 28 05:43:08 2026 by rpki-client