$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/B0B70006B19211EC9EAAD44EC4F9AE02.roa File: B0B70006B19211EC9EAAD44EC4F9AE02.roa (raw, json) Hash identifier: rOY8YY2G5Nf7WrRKkM4ulRjlSyfS7GykOQgcR4ZajfI= Subject key identifier: 61:30:47:E2:5F:CA:A7:C1:C9:06:7C:6C:3B:F3:11:46:97:2F:37:A5 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0DC8 Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/B0B70006B19211EC9EAAD44EC4F9AE02.roa Signing time: Tue 18 Aug 2026 12:00:24 +0000 ROA not before: Tue 18 Aug 2026 12:00:23 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 138612 IP address blocks: 103.134.124.0/24 maxlen: 24 103.134.125.0/24 maxlen: 24 2404:6440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3528 (0xdc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Aug 18 12:00:23 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a844957-c8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:64:9b:3c:1f:b2:a0:99:41:bc:c1:d9:65: 96:03:58:25:05:e7:8d:4b:9f:90:8f:b7:6e:5f:eb: e9:1a:1b:c5:de:88:5f:f2:ae:cb:bb:10:38:86:40: 40:9e:32:3f:37:49:ac:bc:d0:d2:b2:b1:6e:1c:07: 55:67:10:1e:75:8d:e8:84:84:de:55:71:89:7e:b1: 47:3f:cf:e8:ab:03:cd:f9:47:61:cb:94:f4:9a:0c: 3e:8a:ba:8a:77:04:1d:61:e5:11:b6:da:84:a5:48: 0e:92:d5:1a:05:e0:10:6f:26:b8:ef:58:fb:dd:c9: a9:ca:ae:79:68:1a:71:96:34:6d:fb:7f:9e:39:13: 3d:89:09:cc:d6:31:8b:bc:f2:a1:3b:39:bd:6d:97: 5e:74:21:2b:b2:14:27:9e:8c:07:2a:f7:6d:5d:50: c9:88:f8:9b:b1:f3:46:f0:9a:a9:1e:bc:34:2f:94: 65:3f:96:fc:aa:02:a2:69:04:e1:d5:1f:f0:aa:c3: b3:57:47:87:eb:b4:37:88:34:79:70:10:cd:75:80: ed:8f:9f:ad:d5:04:a5:60:bb:56:53:ef:51:78:c0: 08:ed:49:d0:1f:aa:7f:af:83:fd:51:b2:98:12:b8: 47:6c:31:91:df:19:cc:e9:95:69:d5:25:20:d7:12: 04:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:30:47:E2:5F:CA:A7:C1:C9:06:7C:6C:3B:F3:11:46:97:2F:37:A5 X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/B0B70006B19211EC9EAAD44EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.124.0/23 IPv6: 2404:6440::/32 Signature Algorithm: sha256WithRSAEncryption 41:62:58:7a:74:8e:09:26:7a:18:f6:ac:23:6c:f2:8f:28:fc: be:50:18:de:ca:f1:72:f9:26:81:f8:a4:ce:38:fc:6a:c6:b1: 91:13:3d:3a:16:b9:96:0c:21:6e:85:4c:70:d0:c1:63:ce:09: a0:f2:69:95:7f:4d:c1:44:72:40:f8:80:62:ed:37:b5:65:cd: c0:67:ed:85:62:c9:32:f9:03:16:b9:f9:a8:df:d4:21:2d:b5: e6:7a:d7:53:09:fe:8a:92:c4:eb:db:fc:15:d3:62:9c:37:0e: f2:a6:88:98:fb:9e:32:ed:6c:ae:18:54:81:10:28:e5:ec:fa: 4e:a5:e2:fb:19:a9:ba:7c:0e:e6:6a:28:08:72:d1:21:91:b4: 9e:c5:1e:f6:6d:90:08:82:b9:7f:99:ac:1e:65:4f:98:d9:cf: f3:fd:29:0a:42:41:0a:ed:a0:b3:7f:1c:65:77:f2:6c:cc:24: f0:28:80:f5:54:f3:6f:4c:71:41:65:63:dc:26:cd:b5:7f:a0: 94:7e:c4:87:f8:0f:4e:9f:08:69:eb:d6:b0:2d:76:a4:99:15: 94:45:0e:ad:8f:aa:83:7f:ab:27:6a:6e:2c:d4:a5:c3:c0:3e: 3f:41:d3:5e:20:c6:4f:a7:03:aa:e8:5a:2b:b6:63:ac:83:1a: 92:0b:df:53 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjYwODE4MTIwMDIzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg0NDk1Ny1jOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzpkmzwfsqCZQbzB2WWWA1glBeeNS5+Qj7duX+vpGhvF3ohf8q7LuxA4hkBA njI/N0msvNDSsrFuHAdVZxAedY3ohITeVXGJfrFHP8/oqwPN+Udhy5T0mgw+irqK dwQdYeURttqEpUgOktUaBeAQbya471j73cmpyq55aBpxljRt+3+eORM9iQnM1jGL vPKhOzm9bZdedCErshQnnowHKvdtXVDJiPibsfNG8JqpHrw0L5RlP5b8qgKiaQTh 1R/wqsOzV0eH67Q3iDR5cBDNdYDtj5+t1QSlYLtWU+9ReMAI7UnQH6p/r4P9UbKY ErhHbDGR3xnM6ZVp1SUg1xIEGwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGEwR+Jf yqfByQZ8bDvzEUaXLzelMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQyQTAvQ0E3RDExNjJGNjc2MTFFOTkwQkFBMjIyQzRGOUFFMDIvQjBCNzAwMDZC MTkyMTFFQzlFQUFENDRFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4Z8MA0EAgACMAcDBQAkBGRAMA0GCSqGSIb3DQEBCwUAA4IBAQBB Ylh6dI4JJnoY9qwjbPKPKPy+UBjeyvFy+SaB+KTOOPxqxrGREz06FrmWDCFuhUxw 0MFjzgmg8mmVf03BRHJA+IBi7Te1Zc3AZ+2FYsky+QMWufmo39QhLbXmetdTCf6K ksTr2/wV02KcNw7ypoiY+54y7WyuGFSBECjl7PpOpeL7Gam6fA7maigIctEhkbSe xR72bZAIgrl/maweZU+Y2c/z/SkKQkEK7aCzfxxld/JszCTwKID1VPNvTHFBZWPc Js21f6CUfsSH+A9Onwhp69awLXakmRWURQ6tj6qDf6snam4s1KXDwD4/QdNeIMZP pwOq6FortmOsgxqSC99T -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:55 2026 by rpki-client