$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/696ECAD4881311F0BDB4B016C4F9AE02.roa File: 696ECAD4881311F0BDB4B016C4F9AE02.roa (raw, json) Hash identifier: mzJ6hxVR4uDilFXSaSfAp3k8hMQX/qoRbudA3wz4qxs= Subject key identifier: E0:88:33:4A:9E:49:91:D3:B4:85:DC:92:C1:E5:04:D2:27:EF:41:B4 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 3B6D Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/696ECAD4881311F0BDB4B016C4F9AE02.roa Signing time: Wed 22 Apr 2026 15:10:45 +0000 ROA not before: Wed 22 Apr 2026 15:10:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135660 IP address blocks: 111.88.77.0/24 maxlen: 24 117.102.0.0/24 maxlen: 24 117.102.1.0/24 maxlen: 24 117.102.2.0/24 maxlen: 24 117.102.3.0/24 maxlen: 24 117.102.4.0/24 maxlen: 24 117.102.5.0/24 maxlen: 24 117.102.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 13:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15213 (0x3b6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Apr 22 15:10:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69e8e4f5-2a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:9d:2e:9f:04:30:5d:55:95:7c:d9:4c:b7: be:60:1e:9d:ef:17:a1:6e:8b:78:6c:51:06:cc:77: f0:b2:68:4d:e7:9d:d4:2e:47:0d:fb:4b:f3:7d:74: df:c1:f4:f0:b8:82:1e:d2:bd:dd:30:e2:59:d1:89: 11:60:e8:95:89:45:f8:90:a1:3c:2c:c7:04:b4:e0: e7:9f:3b:29:a5:10:5a:ff:8f:20:55:4e:02:d7:fe: a2:a8:c0:3a:a5:c5:79:ac:e4:19:8c:bd:54:6a:c4: 8f:e6:b3:df:86:8f:88:71:cf:c2:2b:38:88:63:01: 8c:31:34:4c:22:19:ea:1c:06:ba:ce:3d:e9:8e:ad: f9:21:59:dc:7e:4b:c0:a4:3e:01:84:39:48:11:1e: c6:dc:42:6c:81:7e:d0:84:1d:54:94:dc:eb:4b:1e: 6f:23:b6:8b:3a:3f:f3:52:74:60:1d:94:0c:f6:1b: f4:e4:33:55:e7:7f:e6:5c:80:3f:ba:16:f1:58:85: 64:49:05:8c:fc:33:fa:c8:92:cc:9b:d6:7e:d5:ce: c2:5d:cf:52:17:1f:b5:41:1c:9e:72:a5:f2:02:14: 9c:a9:63:bb:85:a0:89:80:2d:a8:fc:c9:8d:5a:1f: 24:b3:35:3d:fd:b8:0d:2d:83:c9:c6:23:0d:ba:48: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:88:33:4A:9E:49:91:D3:B4:85:DC:92:C1:E5:04:D2:27:EF:41:B4 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/696ECAD4881311F0BDB4B016C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 111.88.77.0/24 117.102.0.0-117.102.6.255 Signature Algorithm: sha256WithRSAEncryption 29:a5:ac:31:e8:c9:57:a6:f1:ba:bd:cf:b7:a0:96:8c:27:1b: 08:2c:2f:7b:3c:fc:69:40:18:1b:cc:d8:19:e4:86:6e:f7:9e: 3f:0a:99:b5:c3:e9:32:05:e1:fb:c0:91:a1:f4:b8:8c:2f:6e: b8:12:d2:0d:44:eb:79:87:cb:83:73:48:38:43:1b:b5:70:f8: 6b:09:71:8f:44:53:6d:1d:9a:46:01:13:eb:33:35:ab:67:ba: d9:9e:c5:87:48:21:66:da:79:3a:13:04:5d:61:0a:29:25:8c: 74:39:bf:06:e2:c9:3f:a1:60:11:2c:32:72:54:31:01:0c:4b: 35:8a:61:69:64:45:ce:2e:74:7d:54:28:bc:cc:ad:3d:88:e8: 5d:63:a1:95:d3:0e:f8:fb:03:5e:1f:97:ea:a0:5a:8b:b7:61: e5:11:5f:ee:9f:73:9f:ac:23:74:39:aa:b6:b2:65:27:87:18: 4d:44:74:b6:fc:74:c1:e0:42:8b:2a:a0:63:e3:2b:e4:9d:b1: 5a:fe:0b:cb:8d:0a:68:8a:74:73:22:77:0b:07:e0:1a:c3:84: 9b:4e:2e:8d:63:aa:55:fa:da:a6:a2:52:87:72:2b:31:3b:f2: c9:ed:0f:6b:fb:63:ed:f3:0e:4b:58:9b:93:26:87:a4:5f:fa: 25:5f:02:82 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICO20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjYwNDIyMTUxMDQ1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWU4ZTRmNS0yYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0KdLp8EMF1VlXzZTLe+YB6d7xehbot4bFEGzHfwsmhN553ULkcN+0vzfXTf wfTwuIIe0r3dMOJZ0YkRYOiViUX4kKE8LMcEtODnnzsppRBa/48gVU4C1/6iqMA6 pcV5rOQZjL1UasSP5rPfho+Icc/CKziIYwGMMTRMIhnqHAa6zj3pjq35IVncfkvA pD4BhDlIER7G3EJsgX7QhB1UlNzrSx5vI7aLOj/zUnRgHZQM9hv05DNV53/mXIA/ uhbxWIVkSQWM/DP6yJLMm9Z+1c7CXc9SFx+1QRyecqXyAhScqWO7haCJgC2o/MmN Wh8kszU9/bgNLYPJxiMNukj9FQIDAQABo4ICbTCCAmkwHQYDVR0OBBYEFOCIM0qe SZHTtIXcksHlBNIn70G0MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvNjk2RUNBRDQ4 ODEzMTFGMEJEQjRCMDE2QzRGOUFFMDIucm9hMCwGCCsGAQUFBwEHAQH/BB0wGzAZ BAIAATATAwQAb1hNMAsDAwF1ZgMEAHVmBjANBgkqhkiG9w0BAQsFAAOCAQEAKaWs MejJV6bxur3Pt6CWjCcbCCwvezz8aUAYG8zYGeSGbveePwqZtcPpMgXh+8CRofS4 jC9uuBLSDUTreYfLg3NIOEMbtXD4awlxj0RTbR2aRgET6zM1q2e62Z7Fh0ghZtp5 OhMEXWEKKSWMdDm/BuLJP6FgESwyclQxAQxLNYphaWRFzi50fVQovMytPYjoXWOh ldMO+PsDXh+X6qBai7dh5RFf7p9zn6wjdDmqtrJlJ4cYTUR0tvx0weBCiyqgY+Mr 5J2xWv4Ly40KaIp0cyJ3CwfgGsOEm04ujWOqVfrapqJSh3IrMTvyye0Pa/tj7fMO S1ibkyaHpF/6JV8Cgg== -----END CERTIFICATE-----Generated at Tue Apr 28 08:21:58 2026 by rpki-client