$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/C098D762675111E9A0C4BB36C4F9AE02.roa File: C098D762675111E9A0C4BB36C4F9AE02.roa (raw, json) Hash identifier: HQH51hi8x4G+r78sw5Vb/qFkzB1JErJiNGaCDyzi5E0= Subject key identifier: EF:94:D9:FE:9A:EF:65:1F:FB:DC:4F:35:97:E6:A4:40:06:F7:E0:E0 Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Certificate serial: 3598 Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/C098D762675111E9A0C4BB36C4F9AE02.roa Signing time: Sat 08 Aug 2026 15:17:40 +0000 ROA not before: Sat 08 Aug 2026 15:17:40 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132423 IP address blocks: 103.21.124.0/22 maxlen: 22 103.21.124.0/24 maxlen: 24 103.21.125.0/24 maxlen: 24 103.21.126.0/24 maxlen: 24 103.21.127.0/24 maxlen: 24 2001:df0:413::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 15:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13720 (0x3598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Validity Not Before: Aug 8 15:17:40 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6a774894-5e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:6f:73:d9:7a:f2:00:f8:b1:2e:d8:14:98: 15:dc:f0:c4:88:08:da:d6:71:dd:1d:c5:f8:ca:9c: e2:24:0a:5a:49:3c:2d:79:fa:2f:6b:c0:b7:9d:29: 3c:ee:3e:3d:55:b1:aa:7a:c1:7b:b9:1c:02:a6:09: 4a:7d:c3:02:89:a0:c0:7b:65:3a:d5:54:e3:86:13: d5:0a:0f:1d:6b:3f:ba:f6:6f:0d:6f:14:e5:d5:ed: d1:b0:03:ed:e8:95:fb:11:f3:ba:f3:bb:c1:7c:30: 3f:8a:9a:04:d7:db:39:5a:82:22:e3:ba:be:49:e5: 59:0d:de:73:1a:c5:6c:13:a4:68:30:e8:22:41:fc: ec:29:a1:70:cb:f1:d7:29:a0:ec:09:a0:fa:91:f1: 82:90:db:a1:85:d2:a8:9e:7e:39:44:a3:5b:f2:ed: 34:b9:2a:ad:46:5d:0b:d2:65:ff:30:1a:26:5f:d6: 16:01:10:66:74:3b:96:71:64:c3:0d:db:69:b6:5f: 2f:8f:bc:fd:7d:79:e5:94:5e:9e:86:57:ae:10:d3: 5b:ac:25:cb:0c:76:14:8c:41:03:c3:26:9a:64:13: 98:6b:f6:20:ab:93:8a:f1:f9:ef:cf:90:aa:44:18: 11:bf:67:eb:1b:c6:b0:ed:59:82:f9:50:7e:7d:56: 88:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:94:D9:FE:9A:EF:65:1F:FB:DC:4F:35:97:E6:A4:40:06:F7:E0:E0 X509v3 Authority Key Identifier: keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/C098D762675111E9A0C4BB36C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.21.124.0/22 IPv6: 2001:df0:413::/48 Signature Algorithm: sha256WithRSAEncryption db:b5:7b:d1:eb:3b:22:29:88:16:b0:d8:0d:e3:63:07:c7:3f: b4:d3:6d:3e:59:cd:99:fc:e1:e1:62:6d:eb:c6:af:e6:fe:6a: 3a:34:99:14:71:44:a8:c9:0d:af:18:1a:7e:4a:e4:ae:27:9e: 8a:69:b1:e4:44:e9:b4:7d:19:5b:d8:a8:d9:fe:d3:ed:35:23: f9:a0:91:d6:7a:fd:2e:e7:fa:33:e9:fd:b7:5f:f3:b5:cc:9b: 61:ce:3a:4d:34:74:71:11:56:41:1c:e1:ed:d4:d0:71:3c:74: 9c:52:be:1f:fe:23:f7:cd:27:c7:9e:d3:35:19:20:8f:97:4c: 1c:69:a2:47:f0:26:79:ba:a9:c7:74:03:51:de:14:ee:e8:18: fa:1e:7e:4c:82:48:1a:0d:69:d6:58:a2:37:59:83:65:b2:a7: ac:d1:92:84:e6:1e:bd:bc:a7:b3:44:3b:ba:c1:0f:41:da:39: 4c:8a:8d:62:13:43:73:5d:48:b4:2b:56:b9:c3:fb:e2:e9:45: 51:33:3a:4e:b9:e0:c6:a3:f3:b9:25:69:89:1a:70:1d:68:e5: 92:2b:4e:fc:f8:25:ec:b1:d7:6f:00:b1:34:36:c0:c0:ea:26: bc:fa:a3:32:ce:28:c6:c3:4f:8c:c9:20:e9:88:a0:23:19:39: 41:42:95:50 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICNZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCMUQxMTAvBgNVBAUTKDk0MkYyNUQ3MzUwQjIwM0VBODlFRjJEMUNDMTUwQjA1 QjE3QjJCODcwHhcNMjYwODA4MTUxNzQwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc3NDg5NC01ZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32Bvc9l68gD4sS7YFJgV3PDEiAja1nHdHcX4ypziJApaSTwtefova8C3nSk8 7j49VbGqesF7uRwCpglKfcMCiaDAe2U61VTjhhPVCg8daz+69m8NbxTl1e3RsAPt 6JX7EfO687vBfDA/ipoE19s5WoIi47q+SeVZDd5zGsVsE6RoMOgiQfzsKaFwy/HX KaDsCaD6kfGCkNuhhdKonn45RKNb8u00uSqtRl0L0mX/MBomX9YWARBmdDuWcWTD Ddtptl8vj7z9fXnllF6ehleuENNbrCXLDHYUjEEDwyaaZBOYa/Ygq5OK8fnvz5Cq RBgRv2frG8aw7VmC+VB+fVaIfwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFO+U2f6a 72Uf+9xPNZfmpEAG9+DgMB8GA1UdIwQYMBaAFJQvJdc1CyA+qJ7y0cwVCwWxeyuH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkIxRC9DNjg0Q0E5QzFE QUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElENm9udkxSekJVTEJiRjdL NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDOGwxelVMSUQ2b252TFJ6QlVMQmJGN0s0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZCMUQvQzY4NENBOUMxREFCMTFFMkEyMUUzNUFBMDhCMDJDRDIvQzA5OEQ3NjI2 NzUxMTFFOUEwQzRCQjM2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZxV8MA8EAgACMAkDBwAgAQ3wBBMwDQYJKoZIhvcNAQELBQADggEB ANu1e9HrOyIpiBaw2A3jYwfHP7TTbT5ZzZn84eFibevGr+b+ajo0mRRxRKjJDa8Y Gn5K5K4nnoppseRE6bR9GVvYqNn+0+01I/mgkdZ6/S7n+jPp/bdf87XMm2HOOk00 dHERVkEc4e3U0HE8dJxSvh/+I/fNJ8ee0zUZII+XTBxpokfwJnm6qcd0A1HeFO7o GPoefkyCSBoNadZYojdZg2Wyp6zRkoTmHr28p7NEO7rBD0HaOUyKjWITQ3NdSLQr VrnD++LpRVEzOk654Maj87klaYkacB1o5ZIrTvz4Jeyx128AsTQ2wMDqJrz6ozLO KMbDT4zJIOmIoCMZOUFClVA= -----END CERTIFICATE-----Generated at Wed Aug 19 14:30:43 2026 by rpki-client