$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa File: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (raw, json) Hash identifier: jTIvbVyfBLzCwFhD7kHQgV+cFcm0Ml95zgedo0LbL/c= Subject key identifier: 7E:EB:4E:43:7C:36:C5:A4:77:A2:A2:D9:53:CC:8E:99:FA:F7:75:0E Certificate issuer: /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Certificate serial: 036A Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa Signing time: Thu 21 May 2026 01:31:51 +0000 ROA not before: Thu 21 May 2026 01:31:51 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 138341 IP address blocks: 103.115.76.0/22 maxlen: 22 103.115.76.0/24 maxlen: 24 103.115.77.0/24 maxlen: 24 103.115.78.0/24 maxlen: 24 202.181.88.0/21 maxlen: 24 2402:e340::/32 maxlen: 32 2402:e340::/48 maxlen: 48 2402:e340::/64 maxlen: 64 2402:e340:0:1::/64 maxlen: 64 2402:e340:1::/48 maxlen: 48 2402:e340:2::/48 maxlen: 48 2402:e340:3::/48 maxlen: 48 2402:e340:4::/48 maxlen: 48 2402:e340:5::/48 maxlen: 48 2402:e340:6::/48 maxlen: 48 2402:e340:7::/48 maxlen: 48 2402:e340:f::/48 maxlen: 48 2402:e340:10::/48 maxlen: 48 2402:e340:11::/48 maxlen: 48 2402:e340:12::/48 maxlen: 48 2402:e340:3004::/48 maxlen: 48 2402:e340:6004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 06:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 874 (0x36a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Validity Not Before: May 21 01:31:51 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a0e6087-aa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:c2:4a:d8:88:c7:72:f9:2a:48:1d:4d:fe: 44:31:e3:68:16:94:5a:38:43:2d:ad:47:03:de:a0: d1:bb:0c:1e:5a:8b:18:ea:76:ab:ff:92:02:bd:0b: bd:f6:40:04:14:94:15:46:6a:8b:a7:22:ce:68:77: d9:62:4c:07:17:ac:f9:99:73:6a:68:31:d1:8a:ef: 09:b1:31:22:9b:0d:88:a2:f4:ec:3d:43:28:42:20: 11:ec:66:27:48:aa:f4:ab:11:9c:89:de:9a:4b:49: 4d:56:f2:51:7b:a9:24:24:32:c0:3d:26:34:3d:bf: e2:d4:ea:37:60:01:06:a3:3c:79:cc:4d:f3:0f:88: 55:d0:ea:2d:7b:d6:56:bd:e6:24:09:51:38:10:81: a6:65:b5:71:8d:29:92:05:74:fc:ec:29:1d:f4:52: a8:b9:a8:75:f3:88:81:fe:f4:66:e7:74:e6:ae:f6: c4:89:0b:b2:5f:f0:ac:3d:84:0d:7c:bd:c6:e0:c5: b9:0d:c2:81:39:2b:83:fe:f5:6c:57:66:4d:b6:38: 31:8a:b0:4f:6a:d6:fd:34:bb:a3:0a:8e:8f:fd:af: 5e:d8:65:f3:15:a9:41:a4:8c:70:80:0d:c5:ea:fc: 00:ac:15:04:80:23:d2:a2:b8:e0:43:c8:0c:d8:ab: 54:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EB:4E:43:7C:36:C5:A4:77:A2:A2:D9:53:CC:8E:99:FA:F7:75:0E X509v3 Authority Key Identifier: keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.76.0/22 202.181.88.0/21 IPv6: 2402:e340::/32 Signature Algorithm: sha256WithRSAEncryption 8d:a0:39:61:04:a8:3c:b6:20:e3:d9:68:d8:bf:9e:10:30:0e: 40:d2:d3:6e:de:d2:4e:51:07:a1:f9:14:2d:72:37:7d:ab:5f: b3:ab:a6:54:9e:4f:38:be:67:ea:93:88:5b:2e:94:db:54:8d: 86:fd:42:7d:76:20:da:c8:e3:14:1a:4f:e2:b7:cc:f1:76:57: 7e:42:77:53:45:cd:a9:a5:b0:73:7a:ec:82:fd:43:4a:96:47: ce:3c:fb:83:6a:91:31:3e:de:70:67:a2:8a:23:df:30:e9:7c: 9d:25:94:db:f5:9f:26:47:4c:17:df:5f:58:ba:01:13:53:7b: 7d:47:65:06:b1:32:0c:a6:07:f1:c6:3b:b0:47:8c:db:e3:b4: d2:d0:34:54:06:47:e9:cc:43:19:76:32:9c:7e:9c:f6:ca:73: c0:af:31:c7:a5:3d:7b:d4:ed:fd:90:08:d0:bd:66:e4:4a:02: 79:52:ff:b0:01:9d:a4:c7:14:a0:3b:0a:13:42:6c:f0:fc:ac: 68:e1:ff:ca:ed:0a:60:10:45:e5:f1:d2:2f:ce:cf:f2:96:dc: e2:87:30:0c:c4:a3:8a:1c:84:75:fb:07:f8:41:45:9c:fc:0c: 51:c0:cb:17:5d:8e:a9:86:7d:e8:9c:c2:d4:84:70:1f:b7:aa: 1b:e3:4c:57 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICA2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDRBOTkzRkY4NEY2MDI5MDNBMzE3RTI4OEJEMTlCOURB MjA5MzU1OEEwHhcNMjYwNTIxMDEzMTUxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTBlNjA4Ny1hYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3nCStiIx3L5KkgdTf5EMeNoFpRaOEMtrUcD3qDRuwweWosY6nar/5ICvQu9 9kAEFJQVRmqLpyLOaHfZYkwHF6z5mXNqaDHRiu8JsTEimw2IovTsPUMoQiAR7GYn SKr0qxGcid6aS0lNVvJRe6kkJDLAPSY0Pb/i1Oo3YAEGozx5zE3zD4hV0Oote9ZW veYkCVE4EIGmZbVxjSmSBXT87Ckd9FKouah184iB/vRm53TmrvbEiQuyX/CsPYQN fL3G4MW5DcKBOSuD/vVsV2ZNtjgxirBPatb9NLujCo6P/a9e2GXzFalBpIxwgA3F 6vwArBUEgCPSorjgQ8gM2KtUHwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFH7rTkN8 NsWkd6Ki2VPMjpn693UOMB8GA1UdIwQYMBaAFEqZP/hPYCkDoxfiiL0Zudogk1WK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zQTQxN0Q3NDA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tRT2pGLUtJdlJtNTJpQ1RW WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nwa18tRTlnS1FPakYtS0l2Um01MmlDVFZZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM5OTgvM0E0MTdENzQwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvODVDMkZEQUEw OEUwMTFFRDlDM0RDQjdBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ3NMAwQDyrVYMA0EAgACMAcDBQAkAuNAMA0GCSqGSIb3DQEBCwUA A4IBAQCNoDlhBKg8tiDj2WjYv54QMA5A0tNu3tJOUQeh+RQtcjd9q1+zq6ZUnk84 vmfqk4hbLpTbVI2G/UJ9diDayOMUGk/it8zxdld+QndTRc2ppbBzeuyC/UNKlkfO PPuDapExPt5wZ6KKI98w6XydJZTb9Z8mR0wX319YugETU3t9R2UGsTIMpgfxxjuw R4zb47TS0DRUBkfpzEMZdjKcfpz2ynPArzHHpT171O39kAjQvWbkSgJ5Uv+wAZ2k xxSgOwoTQmzw/Kxo4f/K7QpgEEXl8dIvzs/yltzihzAMxKOKHIR1+wf4QUWc/AxR wMsXXY6phn3onMLUhHAft6ob40xX -----END CERTIFICATE-----Generated at Sat Jun 6 04:50:30 2026 by rpki-client