$ rpki-client -vvvf rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/2CDBC1B0251111E997B74770C4F9AE02.roa File: 2CDBC1B0251111E997B74770C4F9AE02.roa (raw, json) Hash identifier: /FP64PwMxeWgm0N8c4GVP/FLJobB8jyGVkFe2s5ljxI= Subject key identifier: 58:A7:2B:7E:99:F7:32:66:34:D3:3C:F2:C6:40:61:12:EA:91:6D:C4 Certificate issuer: /CN=A913344F/serialNumber=AD21E2A0887D8010588369F1478596028477CDBE Certificate serial: 11A7 Authority key identifier: AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/2CDBC1B0251111E997B74770C4F9AE02.roa Signing time: Mon 10 Aug 2026 17:33:31 +0000 ROA not before: Mon 10 Aug 2026 17:33:31 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 137989 IP address blocks: 103.119.152.0/22 maxlen: 22 103.119.152.0/24 maxlen: 24 103.119.153.0/24 maxlen: 24 103.119.154.0/24 maxlen: 24 103.119.155.0/24 maxlen: 24 2403:45c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4519 (0x11a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F, serialNumber=AD21E2A0887D8010588369F1478596028477CDBE Validity Not Before: Aug 10 17:33:31 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7a0b6b-87cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:c6:d5:66:d2:30:69:c6:3e:8c:bb:60:bb: 2e:e1:6c:89:14:d9:e8:11:f2:27:4a:f2:8b:0d:40: dd:61:7f:ed:dd:70:50:d9:c9:b4:bc:8c:27:77:23: 23:b6:63:7d:c4:31:99:82:a8:6c:73:ad:ce:ff:10: 5a:2c:8f:5d:e2:99:1f:dd:36:be:fd:f6:d0:0e:17: ce:0a:96:cd:53:80:ec:f3:5a:f6:ff:10:1d:d2:ee: d5:c2:ea:8e:85:3a:85:b3:9a:0c:49:c9:2a:83:c8: a3:aa:54:51:0b:53:c0:22:78:53:dc:81:d2:9c:dc: 8e:c6:44:06:0a:f1:f2:db:a5:42:10:2e:2e:95:5c: c9:85:1a:c5:5f:71:b2:2b:08:35:0b:ec:eb:07:a5: 4a:0b:82:a5:26:15:e3:a7:f2:ff:e0:8a:9d:f3:a5: e2:9b:c0:4f:18:65:fd:8a:cb:8d:b9:88:d5:18:ac: ff:8e:0c:60:f8:f5:cf:0c:5e:2f:c8:75:85:61:d7: 8a:51:36:6e:61:86:18:fa:6f:11:08:47:a6:1c:d9: 3b:71:51:2d:8d:67:11:68:c8:68:71:8b:7e:94:57: d0:7a:c4:44:12:22:9d:2a:e0:e0:5f:ef:9c:77:e5: 86:3f:ad:42:15:66:7a:c2:34:33:a9:5b:54:68:b7: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:2B:7E:99:F7:32:66:34:D3:3C:F2:C6:40:61:12:EA:91:6D:C4 X509v3 Authority Key Identifier: keyid:AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/2CDBC1B0251111E997B74770C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.119.152.0/22 IPv6: 2403:45c0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:e5:88:93:b8:18:a9:00:a1:38:3b:59:59:9f:24:2e:cd:53: 5f:83:bd:23:52:6c:72:9c:26:30:fa:eb:36:c7:03:15:cd:23: 78:08:d4:78:6a:cf:ad:72:b6:64:c1:89:ba:ef:b9:4e:3f:66: 63:8b:11:a2:4b:96:2e:0c:54:b4:03:d7:8f:be:04:1e:96:f5: 58:96:84:04:27:25:6a:7d:ff:ff:96:12:af:13:f0:93:a9:88: ef:1e:47:35:9a:fd:2f:9f:29:c0:ee:1b:f1:09:d4:a6:81:ab: 1d:65:2d:e6:86:06:f9:0f:9b:9a:ec:2b:02:c0:9d:0c:dc:12: 54:ed:de:4a:85:f5:57:8d:38:9b:9a:98:8f:30:29:2b:89:f6: f9:f7:ec:29:40:f8:f9:f1:f9:12:9e:7f:9e:52:e5:d9:84:80: 78:42:f0:a5:0e:e3:b9:14:82:15:ca:40:3d:71:cc:a3:32:91: aa:a3:ce:98:76:6f:b7:6a:47:16:fd:2f:81:ea:be:c3:ec:30: 85:d5:b0:da:4d:0f:4b:a1:5e:6b:10:85:ef:ce:de:0c:0c:c7: 33:db:5f:45:4b:0f:07:76:48:e9:21:a2:8c:65:12:89:2f:0f: 89:5b:45:b4:74:de:b5:b3:03:1e:08:61:dd:b7:2f:3c:3d:46: c6:38:47:56 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICEacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKEFEMjFFMkEwODg3RDgwMTA1ODgzNjlGMTQ3ODU5NjAy ODQ3N0NEQkUwHhcNMjYwODEwMTczMzMxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdhMGI2Yi04N2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUrG1WbSMGnGPoy7YLsu4WyJFNnoEfInSvKLDUDdYX/t3XBQ2cm0vIwndyMj tmN9xDGZgqhsc63O/xBaLI9d4pkf3Ta+/fbQDhfOCpbNU4Ds81r2/xAd0u7VwuqO hTqFs5oMSckqg8ijqlRRC1PAInhT3IHSnNyOxkQGCvHy26VCEC4ulVzJhRrFX3Gy Kwg1C+zrB6VKC4KlJhXjp/L/4Iqd86Xim8BPGGX9isuNuYjVGKz/jgxg+PXPDF4v yHWFYdeKUTZuYYYY+m8RCEemHNk7cVEtjWcRaMhocYt+lFfQesREEiKdKuDgX++c d+WGP61CFWZ6wjQzqVtUaLeetwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFinK36Z 9zJmNNM88sZAYRLqkW3EMB8GA1UdIwQYMBaAFK0h4qCIfYAQWINp8UeFlgKEd82+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri85NEZGQkFBMDI1 MEYxMUU5OTBEREUzNkNDNEY5QUUwMi9yU0hpb0loOWdCQllnMm54UjRXV0FvUjN6 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSGlvSWg5Z0JCWWcybnhSNFdXQW9SM3piNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM0NEYvOTRGRkJBQTAyNTBGMTFFOTkwRERFMzZDQzRGOUFFMDIvMkNEQkMxQjAy NTExMTFFOTk3Qjc0NzcwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3eYMA0EAgACMAcDBQAkA0XAMA0GCSqGSIb3DQEBCwUAA4IBAQBt 5YiTuBipAKE4O1lZnyQuzVNfg70jUmxynCYw+us2xwMVzSN4CNR4as+tcrZkwYm6 77lOP2ZjixGiS5YuDFS0A9ePvgQelvVYloQEJyVqff//lhKvE/CTqYjvHkc1mv0v nynA7hvxCdSmgasdZS3mhgb5D5ua7CsCwJ0M3BJU7d5KhfVXjTibmpiPMCkrifb5 9+wpQPj58fkSnn+eUuXZhIB4QvClDuO5FIIVykA9ccyjMpGqo86Ydm+3akcW/S+B 6r7D7DCF1bDaTQ9LoV5rEIXvzt4MDMcz219FSw8HdkjpIaKMZRKJLw+JW0W0dN61 swMeCGHdty88PUbGOEdW -----END CERTIFICATE-----Generated at Sat Sep 5 03:54:16 2026 by rpki-client