$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa File: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (raw, json) Hash identifier: D/YGAMQYgBp8xs//uQm8zS3gVyQKn4BxWpNAXYXUHXI= Subject key identifier: 66:4D:D2:5C:9B:9A:B1:FA:27:BA:43:C5:5C:96:65:FE:43:3C:A1:B0 Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Certificate serial: 03AA Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa Signing time: Thu 13 Aug 2026 00:50:04 +0000 ROA not before: Thu 13 Aug 2026 00:50:04 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 150001 IP address blocks: 103.143.88.0/23 maxlen: 23 103.143.88.0/24 maxlen: 24 103.143.89.0/24 maxlen: 24 103.190.132.0/23 maxlen: 23 103.190.132.0/24 maxlen: 24 103.190.133.0/24 maxlen: 24 2400:90a0::/32 maxlen: 32 2400:90a0::/36 maxlen: 36 2400:90a0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 00:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Validity Not Before: Aug 13 00:50:04 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a7d14bc-7c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:b3:20:88:17:a0:78:0d:47:ca:68:62:1a: d7:53:2c:04:e1:4f:59:ca:0b:ad:49:be:9b:1c:dc: 6f:28:58:f5:17:1a:6f:c6:d9:dd:a6:36:7e:1f:e8: 60:ca:6c:41:e0:45:26:4f:14:ce:f6:5d:c3:7a:f4: d9:03:e4:12:14:10:a8:91:d5:4b:72:ad:9d:df:d4: 9f:99:f3:80:6d:9b:3f:00:61:ab:06:de:66:65:0c: 1c:0e:c0:3c:a9:45:51:f0:db:21:d6:60:11:f4:fd: 2a:35:a3:39:ef:ef:3a:fd:3a:21:27:84:0b:fe:b0: 94:d4:b5:e7:d9:60:bb:c6:9d:87:99:be:76:7a:a1: a0:3f:07:30:9b:e2:fa:0d:7f:92:82:5b:ac:8b:6b: 02:c6:38:42:9d:94:81:ae:56:25:7a:6c:f1:c4:55: bf:6a:0c:af:61:93:e4:94:3c:11:ac:0d:fd:44:6e: d9:9e:7f:27:4f:c8:66:e7:87:b7:66:48:ef:2e:e4: fc:ce:0a:3a:48:b8:d1:2d:ce:71:9f:d4:76:cf:e5: 70:55:aa:b3:5b:b5:1b:bf:8e:45:6f:6d:1b:18:b4: 57:b6:7f:9f:ef:cb:ba:6f:85:0c:0d:31:46:9b:e5: 3e:8c:d3:72:c2:3c:7b:1a:45:b0:fd:66:88:64:9f: 20:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4D:D2:5C:9B:9A:B1:FA:27:BA:43:C5:5C:96:65:FE:43:3C:A1:B0 X509v3 Authority Key Identifier: keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.88.0/23 103.190.132.0/23 IPv6: 2400:90a0::/32 Signature Algorithm: sha256WithRSAEncryption a0:b9:76:5f:22:13:2e:b8:ff:2d:2b:22:73:b0:6e:17:98:16: 6e:d5:8f:31:21:3f:dd:36:22:78:61:88:dd:2f:5e:f6:e1:f6: 3e:b4:22:88:4b:31:05:c3:68:19:d9:0c:50:8f:12:cd:14:05: 65:a4:c7:03:63:2b:18:7a:8e:d7:a8:2f:33:cd:f8:f6:38:13: 70:ff:9a:d3:96:9d:a2:7d:f7:b5:28:0b:53:66:66:c3:b9:ab: 06:25:de:83:0c:07:1e:fb:78:2e:75:37:f6:c5:38:88:3b:1a: b8:61:68:e0:bc:13:18:6f:dc:6c:aa:9b:d0:8e:be:0c:8d:25: c8:33:70:b6:12:c9:f3:bf:6f:10:dd:04:05:0f:f0:f3:5d:a1: f4:7a:c6:75:57:4c:be:6e:6d:d6:67:a5:df:57:3f:07:59:a9: f6:cb:b4:66:9b:c1:d1:45:04:b1:8e:66:18:ed:0f:ea:d5:3d: 9b:14:51:c5:c3:32:d3:75:85:f1:ba:6c:b0:34:68:c0:5c:4e: 7f:0e:40:61:7f:fb:50:cc:6f:a2:df:c6:8c:d4:e3:ef:6e:2e: 0a:53:57:b7:08:05:5d:72:5b:51:cc:78:1c:78:23:c2:82:e2: f6:7c:09:9d:68:43:cf:e8:39:0c:7d:4b:de:86:c2:37:57:3e: ea:c2:fa:9d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz NTUxQTREQTMwHhcNMjYwODEzMDA1MDA0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdkMTRiYy03YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uyzIIgXoHgNR8poYhrXUywE4U9ZygutSb6bHNxvKFj1FxpvxtndpjZ+H+hg ymxB4EUmTxTO9l3DevTZA+QSFBCokdVLcq2d39SfmfOAbZs/AGGrBt5mZQwcDsA8 qUVR8Nsh1mAR9P0qNaM57+86/TohJ4QL/rCU1LXn2WC7xp2Hmb52eqGgPwcwm+L6 DX+Sglusi2sCxjhCnZSBrlYlemzxxFW/agyvYZPklDwRrA39RG7Znn8nT8hm54e3 ZkjvLuT8zgo6SLjRLc5xn9R2z+VwVaqzW7Ubv45Fb20bGLRXtn+f78u6b4UMDTFG m+U+jNNywjx7GkWw/WaIZJ8gNQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGZN0lyb mrH6J7pDxVyWZf5DPKGwMB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI3QjIvMEU2MzIxOTRGQjdCMTFFQ0E4N0E4NzJFQzRGOUFFMDIvMkE0RUExMEVG QjdGMTFFQzhGQjU4RTRBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ49YAwQBZ76EMA0EAgACMAcDBQAkAJCgMA0GCSqGSIb3DQEBCwUA A4IBAQCguXZfIhMuuP8tKyJzsG4XmBZu1Y8xIT/dNiJ4YYjdL1724fY+tCKISzEF w2gZ2QxQjxLNFAVlpMcDYysYeo7XqC8zzfj2OBNw/5rTlp2iffe1KAtTZmbDuasG Jd6DDAce+3gudTf2xTiIOxq4YWjgvBMYb9xsqpvQjr4MjSXIM3C2Esnzv28Q3QQF D/DzXaH0esZ1V0y+bm3WZ6XfVz8HWan2y7Rmm8HRRQSxjmYY7Q/q1T2bFFHFwzLT dYXxumywNGjAXE5/DkBhf/tQzG+i38aM1OPvbi4KU1e3CAVdcltRzHgceCPCguL2 fAmdaEPP6DkMfUvehsI3Vz7qwvqd -----END CERTIFICATE-----Generated at Thu Aug 13 09:01:12 2026 by rpki-client