$ rpki-client -vvf rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/D5B3126E534B11F1B99ADA8D94833773.roa File: D5B3126E534B11F1B99ADA8D94833773.roa (raw, json) Hash identifier: sXd+41/gn4hIOq0ToYPsxHfLlqQrww+estsIf7WIWOE= Subject key identifier: 18:20:76:E2:54:E5:7A:4E:46:70:8D:77:1C:A2:7B:14:97:76:12:7D Certificate issuer: /CN=A914ACC8/serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01 Certificate serial: 03 Authority key identifier: 61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/D5B3126E534B11F1B99ADA8D94833773.roa Signing time: Tue 19 May 2026 06:27:40 +0000 ROA not before: Tue 19 May 2026 06:27:40 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 140576 IP address blocks: 103.150.134.0/24 maxlen: 24 103.150.135.0/24 maxlen: 24 203.143.82.0/24 maxlen: 24 203.143.83.0/24 maxlen: 24 203.143.84.0/24 maxlen: 24 203.143.85.0/24 maxlen: 24 203.143.86.0/24 maxlen: 24 203.143.87.0/24 maxlen: 24 203.143.88.0/24 maxlen: 24 203.143.89.0/24 maxlen: 24 203.143.90.0/24 maxlen: 24 2406:340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 06:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ACC8, serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01 Validity Not Before: May 19 06:27:40 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a0c02dc-828f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:d0:91:93:d9:9e:c9:f5:25:26:ee:34:81: 64:63:61:e0:5a:4b:b8:55:cd:d2:d2:e9:8f:ba:06: f7:ed:28:c0:51:6b:07:9d:12:87:7e:8b:49:3d:fb: 1b:86:49:08:12:c1:ee:58:d0:a0:3f:06:fb:fe:ff: 51:df:99:05:a9:25:72:19:25:c4:56:1f:20:e2:d1: e3:92:69:51:cd:55:be:71:d2:52:53:2b:8a:fa:97: dd:c8:61:fe:1a:c6:5b:18:7e:81:18:7c:53:b7:0c: 86:1e:8b:8b:70:5a:d2:77:fc:93:df:d0:33:02:a8: 42:6f:b5:f2:e9:3d:67:01:db:90:5e:bb:95:96:1d: 09:78:69:db:1b:3b:00:60:db:fe:51:0c:43:83:e0: 48:b7:71:d4:64:fc:41:e7:3a:5f:b3:3a:47:b7:56: 46:88:20:bb:b7:f4:78:5f:9a:70:71:b1:e2:38:7a: 79:6c:3d:df:aa:c9:0f:2e:70:b2:2a:31:a0:82:16: 86:a8:88:a0:9c:44:1a:19:91:8e:c1:16:a1:80:d1: aa:22:f6:a9:2d:9c:4d:ee:64:3f:8f:73:68:d1:6c: 28:e0:81:78:1d:32:8f:25:f3:5a:e0:d2:65:d7:6f: 5c:1d:25:a2:a0:82:01:72:f8:4b:f4:c6:b1:79:4c: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:20:76:E2:54:E5:7A:4E:46:70:8D:77:1C:A2:7B:14:97:76:12:7D X509v3 Authority Key Identifier: keyid:61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/D5B3126E534B11F1B99ADA8D94833773.roa sbgp-ipAddrBlock: critical IPv4: 103.150.134.0/23 203.143.82.0-203.143.90.255 IPv6: 2406:340::/32 Signature Algorithm: sha256WithRSAEncryption a0:69:df:a4:41:27:a7:5d:e0:6b:01:0f:eb:5f:81:65:a5:08: 0a:5b:14:79:01:d1:cd:e9:2b:f3:dc:22:80:df:01:fe:a5:99: a2:f7:e7:18:c0:5a:3e:2a:73:a7:35:ea:a2:57:bf:0c:8b:42: 7a:54:64:68:90:8c:ef:e7:d4:e0:10:fb:a9:b2:67:62:5d:36: 9f:e6:58:c3:36:3e:6c:08:98:a9:e1:ed:74:09:d1:52:22:ce: 8f:cc:af:6d:59:62:84:6a:14:df:cd:a9:2c:a1:b2:8b:fa:87: 0e:fa:90:a0:2c:ac:b8:21:c5:3e:fd:83:69:e1:00:c3:f7:94: ab:2f:c8:ce:dc:1f:78:2c:53:b1:8b:62:8e:f5:61:a4:97:8b: 17:6a:05:4d:41:95:dc:a9:8b:17:26:6d:07:95:fa:7d:6f:0a: 0d:be:23:36:38:00:e3:65:18:6a:71:df:66:e2:22:f1:4b:f4: 17:61:b0:d5:25:75:c4:ef:c9:45:03:a2:f1:23:38:ca:87:e3: 26:33:4e:91:15:ca:e3:01:df:b5:6d:45:05:a1:0a:a3:36:7c: d6:c3:16:2d:00:2e:2e:42:c1:78:c5:50:1d:5a:cf:15:28:07: e9:65:21:e9:03:af:13:47:11:d6:7f:fd:98:cd:ab:27:ad:71: c0:d4:fb:b4 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QUNDODExMC8GA1UEBRMoNjEwOEExMzIxNzk2QzE2QzI2MTRCNzVDRDc4QjVGNTc5 MENEQUQwMTAeFw0yNjA1MTkwNjI3NDBaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMGMwMmRjLTgyOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpltCRk9meyfUlJu40gWRjYeBaS7hVzdLS6Y+6BvftKMBRawedEod+i0k9+xuG SQgSwe5Y0KA/Bvv+/1HfmQWpJXIZJcRWHyDi0eOSaVHNVb5x0lJTK4r6l93IYf4a xlsYfoEYfFO3DIYei4twWtJ3/JPf0DMCqEJvtfLpPWcB25Beu5WWHQl4adsbOwBg 2/5RDEOD4Ei3cdRk/EHnOl+zOke3VkaIILu39HhfmnBxseI4enlsPd+qyQ8ucLIq MaCCFoaoiKCcRBoZkY7BFqGA0aoi9qktnE3uZD+Pc2jRbCjggXgdMo8l81rg0mXX b1wdJaKgggFy+Ev0xrF5TCXxAgMBAAGjggJ9MIICeTAdBgNVHQ4EFgQUGCB24lTl ek5GcI13HKJ7FJd2En0wHwYDVR0jBBgwFoAUYQihMheWwWwmFLdc14tfV5DNrQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBQ0M4L0EyNDhGRkM2NTM0 OTExRjE5MUMxRDE4NTkyODMzNzczL1lRaWhNaGVXd1d3bUZMZGMxNHRmVjVETnJR RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVFpaE1oZVd3V3dtRkxkYzE0dGZWNUROclFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUNDOC9BMjQ4RkZDNjUzNDkxMUYxOTFDMUQxODU5MjgzMzc3My9ENUIzMTI2RTUz NEIxMUYxQjk5QURBOEQ5NDgzMzc3My5yb2EwPAYIKwYBBQUHAQcBAf8ELTArMBoE AgABMBQDBAFnloYwDAMEAcuPUgMEAMuPWjANBAIAAjAHAwUAJAYDQDANBgkqhkiG 9w0BAQsFAAOCAQEAoGnfpEEnp13gawEP61+BZaUIClsUeQHRzekr89wigN8B/qWZ ovfnGMBaPipzpzXqole/DItCelRkaJCM7+fU4BD7qbJnYl02n+ZYwzY+bAiYqeHt dAnRUiLOj8yvbVlihGoU382pLKGyi/qHDvqQoCysuCHFPv2DaeEAw/eUqy/Iztwf eCxTsYtijvVhpJeLF2oFTUGV3KmLFyZtB5X6fW8KDb4jNjgA42UYanHfZuIi8Uv0 F2Gw1SV1xO/JRQOi8SM4yofjJjNOkRXK4wHftW1FBaEKozZ81sMWLQAuLkLBeMVQ HVrPFSgH6WUh6QOvE0cR1n/9mM2rJ61xwNT7tA== -----END CERTIFICATE-----Generated at Thu May 21 10:12:39 2026 by rpki-client