$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/77A20CBE5BDC11F0BE617A76C4F9AE02.roa File: 77A20CBE5BDC11F0BE617A76C4F9AE02.roa (raw, json) Hash identifier: qb0iLAdfO1ru4p3NPIJI1bx0UaugPeokXn9k90Iki+I= Subject key identifier: 7C:8D:1B:0C:7D:DB:7D:BB:52:53:93:63:3C:02:98:ED:AC:DE:E6:A0 Certificate issuer: /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787 Certificate serial: 0680 Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/77A20CBE5BDC11F0BE617A76C4F9AE02.roa Signing time: Thu 14 May 2026 23:32:26 +0000 ROA not before: Thu 14 May 2026 23:32:26 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 142436 IP address blocks: 103.168.90.0/23 maxlen: 23 103.168.90.0/24 maxlen: 24 2001:df6:d580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787 Validity Not Before: May 14 23:32:26 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a065b8a-e109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:ba:ab:76:c6:d9:21:fc:ea:76:0f:ed:ea: 67:1c:fa:53:7e:4a:1b:2b:39:c8:94:19:fa:7b:a6: 59:79:53:55:06:45:db:0d:fc:ae:28:f1:c3:34:80: ea:96:b5:77:a4:e5:cb:60:b0:82:7f:d5:de:83:60: a5:86:ab:8c:e4:73:2f:9b:45:57:f2:54:b9:91:a6: 99:e4:09:96:31:76:6d:99:67:1c:45:dc:43:e9:c6: 8a:44:00:84:6b:34:1f:b8:d4:aa:d6:dc:4e:65:85: 9b:79:64:9b:fe:92:6c:de:6e:db:9a:d2:06:68:5e: f5:05:e9:2b:31:46:f6:20:1c:c7:ba:de:87:88:67: 31:fa:c2:22:fe:5f:d3:14:52:f3:26:ad:52:eb:2b: db:5d:7e:fb:0c:ef:b0:29:a3:0d:63:5e:20:e0:ba: 0b:63:26:0d:ac:2e:1e:76:a0:65:90:cc:f6:46:20: e7:ae:bc:51:18:bd:cb:d1:7a:66:b3:1d:b5:e5:fd: 59:71:b5:3c:d5:06:6f:8b:da:98:8b:9a:6b:1f:38: 4b:3f:6d:c9:00:00:ae:d2:2b:03:dd:86:f4:1b:70: 96:e3:72:98:3b:52:e2:24:86:02:94:08:eb:c4:bb: 5e:08:21:82:c2:ea:2f:40:27:92:ca:b0:88:54:4f: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8D:1B:0C:7D:DB:7D:BB:52:53:93:63:3C:02:98:ED:AC:DE:E6:A0 X509v3 Authority Key Identifier: keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/77A20CBE5BDC11F0BE617A76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.168.90.0/23 IPv6: 2001:df6:d580::/48 Signature Algorithm: sha256WithRSAEncryption 60:ac:54:99:2b:6b:15:c1:e9:cf:21:cc:0b:53:85:f5:60:62: 66:2d:d8:da:02:d3:5f:e9:2d:97:ed:77:d4:d7:85:c3:ec:71: 9d:47:2f:3a:ec:f1:bd:9e:9f:03:28:a8:a2:0a:11:82:d5:78: 2e:50:8f:43:a1:32:b3:60:1b:d4:7d:9f:7e:7e:e2:9a:c1:1c: aa:6b:24:c9:c4:ec:8f:3d:a8:f3:01:77:62:4d:16:dc:8d:da: a6:f4:eb:b7:32:f9:f5:2a:52:17:ab:f6:75:e1:65:de:ab:09: 5d:82:35:ae:c0:31:b6:0d:b7:56:99:14:8a:2d:25:3e:e6:ac: 54:28:c1:02:4f:85:6c:4e:3a:f7:08:64:a3:33:45:6a:eb:bf: aa:78:e7:e2:ed:ef:dc:b7:b0:2d:69:e3:e2:5f:01:0c:27:e5: 53:28:7f:5c:22:47:0a:73:12:f9:6a:f6:90:86:eb:80:09:37: 03:24:92:c9:81:82:eb:25:9f:70:7b:2e:d0:da:8a:6a:c3:c6: 46:cb:e6:b0:54:87:47:b0:66:2f:8e:85:9e:b0:ae:20:ff:5b: 5b:34:d5:04:3e:67:e6:eb:a9:27:e3:4d:82:94:30:fd:74:09: aa:0a:c3:58:6b:ec:cb:9c:6e:e2:3f:0e:e0:b8:95:44:12:ef: 23:2b:fb:55 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRjkxMTAvBgNVBAUTKDc0NDhDNzMwQTEwNTREN0YxRTI5REMxMTk1MTU4NURE MTFERTE3ODcwHhcNMjYwNTE0MjMzMjI2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTA2NWI4YS1lMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfq6q3bG2SH86nYP7epnHPpTfkobKznIlBn6e6ZZeVNVBkXbDfyuKPHDNIDq lrV3pOXLYLCCf9Xeg2ClhquM5HMvm0VX8lS5kaaZ5AmWMXZtmWccRdxD6caKRACE azQfuNSq1txOZYWbeWSb/pJs3m7bmtIGaF71BekrMUb2IBzHut6HiGcx+sIi/l/T FFLzJq1S6yvbXX77DO+wKaMNY14g4LoLYyYNrC4edqBlkMz2RiDnrrxRGL3L0Xpm sx215f1ZcbU81QZvi9qYi5prHzhLP23JAACu0isD3Yb0G3CW43KYO1LiJIYClAjr xLteCCGCwuovQCeSyrCIVE+FtwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHyNGwx9 2327UlOTYzwCmO2s3uagMB8GA1UdIwQYMBaAFHRIxzChBU1/HincEZUVhd0R3heH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGOS80RUMyQ0Q3NENG NEYxMUVCQUFCNDA4NEVDNEY5QUUwMi9kRWpITUtFRlRYOGVLZHdSbFJXRjNSSGVG NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFakhNS0VGVFg4ZUtkd1JsUldGM1JIZUY0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwRjkvNEVDMkNENzRDRjRGMTFFQkFBQjQwODRFQzRGOUFFMDIvNzdBMjBDQkU1 QkRDMTFGMEJFNjE3QTc2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6haMA8EAgACMAkDBwAgAQ321YAwDQYJKoZIhvcNAQELBQADggEB AGCsVJkraxXB6c8hzAtThfVgYmYt2NoC01/pLZftd9TXhcPscZ1HLzrs8b2enwMo qKIKEYLVeC5Qj0OhMrNgG9R9n35+4prBHKprJMnE7I89qPMBd2JNFtyN2qb067cy +fUqUher9nXhZd6rCV2CNa7AMbYNt1aZFIotJT7mrFQowQJPhWxOOvcIZKMzRWrr v6p45+Lt79y3sC1p4+JfAQwn5VMof1wiRwpzEvlq9pCG64AJNwMkksmBgusln3B7 LtDaimrDxkbL5rBUh0ewZi+OhZ6wriD/W1s01QQ+Z+brqSfjTYKUMP10CaoKw1hr 7MucbuI/DuC4lUQS7yMr+1U= -----END CERTIFICATE-----Generated at Fri Jun 12 23:28:26 2026 by rpki-client