$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/7CB2221C91E111F09C322980C4F9AE02.roa File: 7CB2221C91E111F09C322980C4F9AE02.roa (raw, json) Hash identifier: +G1GX3sR2GYiRKUcJWGvUToVmT2bZx4Tjc2DJXgOZdg= Subject key identifier: CF:A7:6A:AB:3A:74:E6:25:61:B2:13:08:A3:20:BA:A7:C8:A5:7C:C1 Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653 Certificate serial: 143D Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/7CB2221C91E111F09C322980C4F9AE02.roa Signing time: Thu 06 Aug 2026 17:33:29 +0000 ROA not before: Thu 06 Aug 2026 17:33:29 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 13335 IP address blocks: 203.116.108.0/24 maxlen: 24 203.117.8.0/24 maxlen: 24 203.117.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5181 (0x143d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653 Validity Not Before: Aug 6 17:33:29 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a74c569-71ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:ee:88:01:af:8b:1a:a5:36:ab:60:4f:fd: 5f:3f:90:31:93:4d:5e:3d:9f:16:e5:45:fb:1b:64: 58:33:3b:97:80:42:ba:c1:16:d7:c7:b5:ec:e1:ca: 3d:bb:bd:4e:62:f5:57:9c:27:ca:a8:56:ea:e0:38: ad:be:fb:a8:87:e6:f1:51:82:39:9c:9c:3c:5a:2b: 71:e3:82:db:f6:04:fa:87:15:a2:df:1f:ca:6b:ab: 9e:65:03:f7:15:16:74:2d:05:14:1c:7e:4a:5a:dd: f2:18:bc:fb:ed:6d:44:0d:bf:2a:69:6a:25:11:f4: da:e4:cb:a6:6d:67:f5:ec:db:b8:66:2c:09:30:65: ca:0c:32:ab:5d:3c:44:4e:0a:27:ca:86:e0:38:5e: 69:f8:36:0a:a9:9d:b1:98:cd:6c:aa:b1:0d:3e:d4: cd:cd:da:2e:49:a1:5b:75:55:01:ba:0a:da:a8:a2: f6:4b:0f:17:40:2f:49:ba:73:5b:81:d6:84:39:fc: f5:74:23:b0:86:f7:f8:49:36:dc:54:9f:27:65:65: b9:a3:e5:ba:4c:2e:c4:4c:1e:e7:2a:47:92:02:42: 80:99:bf:c9:16:0d:b5:70:c9:77:39:af:3e:ba:25: 29:24:a7:db:b4:80:de:a1:42:ff:30:93:55:46:7f: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A7:6A:AB:3A:74:E6:25:61:B2:13:08:A3:20:BA:A7:C8:A5:7C:C1 X509v3 Authority Key Identifier: keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/7CB2221C91E111F09C322980C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.116.108.0/24 203.117.8.0/24 203.117.53.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:a9:63:dc:29:f1:cc:0f:4d:f0:14:5b:33:1d:4e:8c:82:11: 87:63:10:5a:c1:10:21:39:c1:ea:e2:b8:70:ba:a1:c5:8a:c5: 90:54:26:b0:0c:c3:3c:95:22:cb:75:82:ec:88:cc:60:cc:80: 18:b9:f3:51:58:d2:4b:ac:a4:75:47:75:35:c7:15:92:2b:13: ff:dd:66:f8:72:32:5d:dd:33:7a:93:75:cf:77:bb:95:5e:06: ac:8c:af:34:99:c1:b3:0b:b6:51:51:92:68:8b:33:10:72:4c: 60:9d:f4:1a:ec:d5:78:14:1c:05:8c:76:25:9c:f4:6d:4b:10: 18:78:84:2f:3e:dc:ad:03:33:04:4a:10:3a:a4:ac:2a:c7:b8: 34:77:29:02:1c:73:96:9f:92:4f:ed:32:a4:12:a5:bf:5c:22: 19:af:14:9e:14:c1:f4:3f:6b:cc:ea:50:6e:fd:9c:a8:8b:13: 0a:1c:32:48:18:7d:d6:0c:1d:be:4e:67:7e:6f:4b:f5:12:de: eb:f8:d1:16:b2:89:55:02:81:24:d3:0a:d2:63:a9:6a:65:21: 46:cc:6c:8b:c4:44:9b:3e:31:c1:bb:ae:9a:20:3f:21:6d:5e: a7:57:52:13:94:c7:d1:b2:78:70:ea:e8:fa:73:03:0e:04:30: 24:8c:7e:2f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICFD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyREMxMTAvBgNVBAUTKEMyQjlGNUYzQzY4QzU3NjcyNzIzOUI5MkE5M0IzNjI5 N0QxQjE2NTMwHhcNMjYwODA2MTczMzI5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0YzU2OS03MWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPDuiAGvixqlNqtgT/1fP5Axk01ePZ8W5UX7G2RYMzuXgEK6wRbXx7Xs4co9 u71OYvVXnCfKqFbq4Ditvvuoh+bxUYI5nJw8Witx44Lb9gT6hxWi3x/Ka6ueZQP3 FRZ0LQUUHH5KWt3yGLz77W1EDb8qaWolEfTa5MumbWf17Nu4ZiwJMGXKDDKrXTxE TgonyobgOF5p+DYKqZ2xmM1sqrENPtTNzdouSaFbdVUBugraqKL2Sw8XQC9JunNb gdaEOfz1dCOwhvf4STbcVJ8nZWW5o+W6TC7ETB7nKkeSAkKAmb/JFg21cMl3Oa8+ uiUpJKfbtIDeoUL/MJNVRn/+/QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFM+naqs6 dOYlYbITCKMguqfIpXzBMB8GA1UdIwQYMBaAFMK59fPGjFdnJyObkqk7Nil9GxZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJEQy8yRDUxQUY0MkZE M0UxMUU4ODhDNTM5NDRDNEY5QUUwMi93cm4xODhhTVYyY25JNXVTcVRzMktYMGJG bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dybjE4OGFNVjJjbkk1dVNxVHMyS1gwYkZsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDAyREMvMkQ1MUFGNDJGRDNFMTFFODg4QzUzOTQ0QzRGOUFFMDIvN0NCMjIyMUM5 MUUxMTFGMDlDMzIyOTgwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAy3RsAwQAy3UIAwQAy3U1MA0GCSqGSIb3DQEBCwUAA4IBAQAdqWPc KfHMD03wFFszHU6MghGHYxBawRAhOcHq4rhwuqHFisWQVCawDMM8lSLLdYLsiMxg zIAYufNRWNJLrKR1R3U1xxWSKxP/3Wb4cjJd3TN6k3XPd7uVXgasjK80mcGzC7ZR UZJoizMQckxgnfQa7NV4FBwFjHYlnPRtSxAYeIQvPtytAzMEShA6pKwqx7g0dykC HHOWn5JP7TKkEqW/XCIZrxSeFMH0P2vM6lBu/ZyoixMKHDJIGH3WDB2+Tmd+b0v1 Et7r+NEWsolVAoEk0wrSY6lqZSFGzGyLxESbPjHBu66aID8hbV6nV1ITlMfRsnhw 6uj6cwMOBDAkjH4v -----END CERTIFICATE-----Generated at Fri Sep 11 09:03:17 2026 by rpki-client