$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa File: DCDCF87AE17511E8886B1878C4F9AE02.roa (raw, json) Hash identifier: dbhJBJJgQitq2uubCQdkkeqRrY/kLqfV4bkZFvMv73k= Subject key identifier: DC:F6:A7:28:0A:A5:77:8A:AE:9B:76:FF:61:C7:26:1D:61:DF:10:AA Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1BFF Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa Signing time: Thu 02 Jul 2026 17:16:11 +0000 ROA not before: Thu 02 Jul 2026 17:16:11 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 135328 IP address blocks: 103.214.104.0/24 maxlen: 24 103.214.105.0/24 maxlen: 24 103.214.106.0/24 maxlen: 24 103.214.107.0/24 maxlen: 24 2404:c480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7167 (0x1bff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Jul 2 17:16:11 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a469cdb-e6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:f9:5b:3a:fe:88:b6:df:d5:0b:de:de:e8: 3f:81:a2:92:76:e2:99:ad:17:e2:84:cd:7f:42:e6: e8:6b:03:44:5c:72:20:de:e8:4e:2f:2a:8d:4c:3d: ba:75:75:51:72:e9:bb:46:ba:af:77:33:17:29:50: 5a:db:82:32:df:70:60:17:d9:93:11:d6:35:00:91: 41:3c:b0:3c:ce:ac:b9:83:81:61:31:38:66:8e:f4: 96:0a:00:77:c1:a4:33:70:aa:14:53:e0:37:4a:c2: 37:85:f6:b7:4e:54:49:1b:09:8e:fb:0e:2b:0a:84: 64:c5:f2:04:b3:a3:77:2d:c0:71:83:b9:9b:e6:a0: d2:64:74:49:9c:26:47:09:1d:06:4a:0b:90:90:34: 3b:09:5b:fd:95:6e:c4:6a:31:18:38:b4:f8:ad:a5: 26:d9:02:2c:7e:0e:9c:3f:08:cb:30:64:ab:93:3b: b8:7c:60:f0:cb:6e:89:f9:a0:1d:3a:b8:09:12:9b: d9:ba:f7:7a:11:53:5c:72:be:25:9e:f9:a2:b8:cb: 72:2d:7a:96:ab:97:64:b3:8b:05:8e:ae:43:ee:18: 9f:dd:47:bc:21:67:8c:76:5a:6a:f3:36:fb:d1:45: 9a:db:c5:95:1d:1c:e2:fd:54:7c:af:30:18:b8:ff: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F6:A7:28:0A:A5:77:8A:AE:9B:76:FF:61:C7:26:1D:61:DF:10:AA X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.214.104.0/22 IPv6: 2404:c480::/32 Signature Algorithm: sha256WithRSAEncryption a1:4f:28:3f:02:37:3b:d5:16:d2:63:93:fe:da:e3:f0:5b:64: 81:3a:a6:68:b4:d9:fb:b9:fd:46:1a:a9:81:a3:0a:63:9d:a7: d2:29:4e:bf:42:0a:fc:ab:c4:26:8e:03:f2:a2:60:39:7e:e9: 2c:d3:1f:15:ea:60:12:f1:7a:11:e0:8b:e7:5e:c0:03:31:11: f8:52:46:53:3c:b0:5e:58:b2:dd:35:0a:ae:06:19:d9:e6:9b: 25:7b:c8:7f:29:ae:6c:57:c0:1d:c0:dc:5a:54:a7:4a:19:73: 2d:04:dd:6c:f0:a0:af:95:51:77:e6:00:61:9c:78:e1:c6:09: b7:cb:d5:94:53:10:9b:1f:ef:0d:4f:64:9d:9d:9e:a9:13:61: 68:da:a1:b4:02:12:7d:6e:55:b4:a1:9e:2b:b2:66:c3:22:36: 60:d9:32:a2:ae:f4:a8:e9:7c:fc:4a:b2:b8:b2:24:91:de:ac: 60:30:66:a0:48:82:b8:02:a7:ad:c6:b0:4b:d8:4b:35:6a:ff: 6f:27:cc:ad:88:c0:72:bd:bc:53:bd:e7:2d:1c:a1:88:ad:0b: a3:fb:73:e1:ec:b4:b3:c0:24:62:47:38:19:14:4c:1f:39:a0: e0:8c:5e:85:03:09:80:f7:4a:bb:f9:8b:52:07:52:90:e7:9b: c2:8e:95:e7 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICG/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjYwNzAyMTcxNjExWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2OWNkYi1lNmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsE/5Wzr+iLbf1Qve3ug/gaKSduKZrRfihM1/QuboawNEXHIg3uhOLyqNTD26 dXVRcum7RrqvdzMXKVBa24Iy33BgF9mTEdY1AJFBPLA8zqy5g4FhMThmjvSWCgB3 waQzcKoUU+A3SsI3hfa3TlRJGwmO+w4rCoRkxfIEs6N3LcBxg7mb5qDSZHRJnCZH CR0GSguQkDQ7CVv9lW7EajEYOLT4raUm2QIsfg6cPwjLMGSrkzu4fGDwy26J+aAd OrgJEpvZuvd6EVNccr4lnvmiuMtyLXqWq5dks4sFjq5D7hif3Ue8IWeMdlpq8zb7 0UWa28WVHRzi/VR8rzAYuP883QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNz2pygK pXeKrpt2/2HHJh1h3xCqMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFCMTQvQjQxQTU4MzgxOEQxMTFFNzk3MENFQzE3QzRGOUFFMDIvRENEQ0Y4N0FF MTc1MTFFODg4NkIxODc4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ9ZoMA0EAgACMAcDBQAkBMSAMA0GCSqGSIb3DQEBCwUAA4IBAQCh Tyg/Ajc71RbSY5P+2uPwW2SBOqZotNn7uf1GGqmBowpjnafSKU6/Qgr8q8QmjgPy omA5fuks0x8V6mAS8XoR4IvnXsADMRH4UkZTPLBeWLLdNQquBhnZ5psle8h/Ka5s V8AdwNxaVKdKGXMtBN1s8KCvlVF35gBhnHjhxgm3y9WUUxCbH+8NT2SdnZ6pE2Fo 2qG0AhJ9blW0oZ4rsmbDIjZg2TKirvSo6Xz8SrK4siSR3qxgMGagSIK4AqetxrBL 2Es1av9vJ8ytiMByvbxTvectHKGIrQuj+3Ph7LSzwCRiRzgZFEwfOaDgjF6FAwmA 90q7+YtSB1KQ55vCjpXn -----END CERTIFICATE-----Generated at Mon Sep 21 03:05:46 2026 by rpki-client