$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/20BCACE21F1A11EFB1CD4814C4F9AE02.roa File: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (raw, json) Hash identifier: MdOZTC8gpcPZCiwvzVVuxWOX/YON9CbP3KqKS9V1nVU= Subject key identifier: 25:81:63:7C:45:4A:4D:3A:05:3F:FA:FD:EB:32:FA:B2:9C:C9:FE:40 Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Certificate serial: 0185 Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/20BCACE21F1A11EFB1CD4814C4F9AE02.roa Signing time: Mon 15 Jun 2026 05:33:48 +0000 ROA not before: Mon 15 Jun 2026 05:33:48 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 58582 IP address blocks: 103.8.61.0/24 maxlen: 25 103.251.42.0/24 maxlen: 25 103.255.55.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 05:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Validity Not Before: Jun 15 05:33:48 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a2f8ebc-87ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:ca:74:3e:87:65:ad:a5:18:bc:81:c2:fb: fe:bf:77:7f:7c:af:d4:79:6f:fa:8e:2f:ba:3b:92: a5:f0:98:1d:42:5f:7e:49:b8:2d:79:62:f2:01:8c: 70:28:06:37:5b:0b:21:da:03:dd:84:b4:cd:28:7a: 65:1d:a7:34:e4:26:77:38:2c:b9:19:e3:ac:80:29: 04:13:d4:2b:91:86:c8:4d:d7:a2:61:ae:25:32:1b: 2a:07:9d:62:96:2e:c7:21:90:af:c8:69:a3:cf:65: b9:6b:e7:0a:f1:c9:14:1c:b4:a1:a0:25:79:46:15: 04:76:d5:a6:bd:a2:63:cf:d0:d7:8b:a4:7b:2c:b7: fe:c2:29:f8:f4:d1:c7:8c:24:a8:b8:93:a9:c6:e6: ad:08:9a:be:34:e6:ac:fa:55:bd:40:17:b0:55:46: b2:01:a1:a1:2d:03:08:65:85:71:c8:7f:ce:78:59: 9e:39:fb:35:2f:99:87:44:97:14:d6:e7:c2:05:e2: 27:48:2e:28:18:36:5a:b3:64:77:01:ce:d9:3f:ed: 28:c5:64:3c:ba:b3:79:59:d7:30:b3:c4:b2:5a:e9: 9a:48:6c:f6:78:18:a7:62:33:df:0e:0a:9f:69:80: fe:46:83:29:c5:18:49:db:37:f1:75:45:19:ed:c0: 21:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:81:63:7C:45:4A:4D:3A:05:3F:FA:FD:EB:32:FA:B2:9C:C9:FE:40 X509v3 Authority Key Identifier: keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/20BCACE21F1A11EFB1CD4814C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.8.61.0/24 103.251.42.0/24 103.255.55.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:80:1f:69:ab:c7:88:0e:04:95:79:19:00:e4:8b:95:ac:56: c6:56:77:a5:fd:39:be:68:22:fa:6b:0c:c2:e2:ee:32:3c:b0: 64:db:f7:f9:9f:ef:ec:4e:db:97:33:17:1b:13:5e:63:2e:f3: 34:de:03:1a:03:0f:58:2d:1c:a0:d8:46:1b:a2:85:fd:bf:fb: 99:0a:66:6e:ac:7e:50:c9:97:cc:9e:14:e2:b5:69:34:30:a1: a7:f0:db:4f:64:9a:d2:3e:3d:4f:dd:4f:58:d2:d0:49:d8:35: cf:af:43:af:0f:60:f6:8b:94:7c:76:59:0b:cd:57:a7:18:6b: 53:fb:d9:d9:79:09:30:13:1f:01:e7:c0:11:4e:b9:5b:e2:9b: d7:49:4d:3e:bb:49:fe:70:fb:1a:68:a1:39:8c:92:a8:0d:dd: bf:76:bc:48:a5:36:ae:86:07:67:8a:e8:b5:fc:87:89:f7:46: 3d:01:27:b5:59:dc:ea:a4:6f:94:42:98:ce:b4:d5:cf:0e:cf: 12:fb:82:62:2a:29:a3:d3:73:e1:ca:95:13:c3:a1:03:f9:8e: fc:39:22:e7:59:92:24:54:96:b1:86:90:06:ce:7e:0f:3c:2f: 04:be:7f:2b:2b:0e:c3:d6:e7:7c:9a:ed:88:3c:64:49:ad:83: 8b:f7:8b:b2 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwQ0YxMTAvBgNVBAUTKEVGQzE3QjBEMTExMjZDN0ZBOTQxQkQ0RDBFQ0E3QUEz OUU5MzQ2QTAwHhcNMjYwNjE1MDUzMzQ4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJmOGViYy04N2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscjKdD6HZa2lGLyBwvv+v3d/fK/UeW/6ji+6O5Kl8JgdQl9+SbgteWLyAYxw KAY3Wwsh2gPdhLTNKHplHac05CZ3OCy5GeOsgCkEE9QrkYbITdeiYa4lMhsqB51i li7HIZCvyGmjz2W5a+cK8ckUHLShoCV5RhUEdtWmvaJjz9DXi6R7LLf+win49NHH jCSouJOpxuatCJq+NOas+lW9QBewVUayAaGhLQMIZYVxyH/OeFmeOfs1L5mHRJcU 1ufCBeInSC4oGDZas2R3Ac7ZP+0oxWQ8urN5Wdcws8SyWumaSGz2eBinYjPfDgqf aYD+RoMpxRhJ2zfxdUUZ7cAh6QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFCWBY3xF Sk06BT/6/esy+rKcyf5AMB8GA1UdIwQYMBaAFO/Bew0REmx/qUG9TQ7KeqOek0ag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBDRi83RTAxM0NEQTFG MTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JILXBRYjFORHNwNm81NlRS cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4RjdEUkVTYkgtcFFiMU5Ec3A2bzU2VFJxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEIwQ0YvN0UwMTNDREExRjE4MTFFRjk3MzMzRTEwQzRGOUFFMDIvMjBCQ0FDRTIx RjFBMTFFRkIxQ0Q0ODE0QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZwg9AwQAZ/sqAwQAZ/83MA0GCSqGSIb3DQEBCwUAA4IBAQAugB9p q8eIDgSVeRkA5IuVrFbGVnel/Tm+aCL6awzC4u4yPLBk2/f5n+/sTtuXMxcbE15j LvM03gMaAw9YLRyg2EYbooX9v/uZCmZurH5QyZfMnhTitWk0MKGn8NtPZJrSPj1P 3U9Y0tBJ2DXPr0OvD2D2i5R8dlkLzVenGGtT+9nZeQkwEx8B58ARTrlb4pvXSU0+ u0n+cPsaaKE5jJKoDd2/drxIpTauhgdniui1/IeJ90Y9ASe1WdzqpG+UQpjOtNXP Ds8S+4JiKimj03PhypUTw6ED+Y78OSLnWZIkVJaxhpAGzn4PPC8Evn8rKw7D1ud8 mu2IPGRJrYOL94uy -----END CERTIFICATE-----Generated at Sun Jul 5 09:23:32 2026 by rpki-client