$ rpki-client -vvf rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/B9FB709CED5C11EC8CD1DC69C4F9AE02.roa File: B9FB709CED5C11EC8CD1DC69C4F9AE02.roa (raw, json) Hash identifier: Lpv8FUYAiNLQy8O51Ypq+r2GlXqyRl0Wy5E1LXHcCRM= Subject key identifier: D0:97:38:FD:FF:CA:B0:7E:AD:2D:64:49:CF:24:4F:65:C9:C2:28:3D Certificate issuer: /CN=A916E675/serialNumber=9B0B51CB1CA37F68C27EC7571FE466105CC25E24 Certificate serial: 03AA Authority key identifier: 9B:0B:51:CB:1C:A3:7F:68:C2:7E:C7:57:1F:E4:66:10:5C:C2:5E:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/B9FB709CED5C11EC8CD1DC69C4F9AE02.roa Signing time: Wed 29 Jul 2026 01:49:57 +0000 ROA not before: Wed 29 Jul 2026 01:49:57 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 139064 IP address blocks: 103.189.156.0/23 maxlen: 23 103.189.156.0/24 maxlen: 24 103.189.157.0/24 maxlen: 24 2001:df0:d3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.crl rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E675, serialNumber=9B0B51CB1CA37F68C27EC7571FE466105CC25E24 Validity Not Before: Jul 29 01:49:57 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a695c44-5023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:b9:09:cb:a5:d3:a4:f2:89:57:b2:3d:36: 19:88:5a:e8:95:95:b4:30:2a:87:33:ef:93:a3:d6: 98:c9:c9:eb:fb:6f:1e:45:42:0d:88:61:2a:78:d4: cd:1e:ec:64:b6:48:b0:1b:b8:c8:b2:40:75:7a:7a: 72:f3:c0:4d:83:a5:d7:1b:3f:56:7c:17:0e:6f:66: 42:7e:a8:74:d3:24:e9:c0:ad:f3:65:fd:b6:dd:c6: 84:10:51:3c:ff:34:10:44:df:4e:77:a7:5f:d5:e2: 8a:0d:74:aa:e8:28:c1:86:49:c7:e4:bc:be:6c:50: 51:13:41:e6:46:f9:5e:44:f8:c5:34:7a:af:8f:18: f4:31:96:67:14:03:b8:e1:30:c5:0e:34:0d:a0:4c: e9:bc:94:06:82:d5:8f:cf:24:4e:bb:f8:5e:fd:46: 31:a7:38:db:e6:0d:1d:dc:45:e1:9b:7a:ba:03:91: 87:f9:15:26:84:f2:7a:97:56:10:91:b0:34:09:97: 20:9a:23:65:5f:78:40:dd:12:ba:a7:85:db:11:7b: 0d:8d:b3:0b:ed:d8:96:e3:da:11:7c:04:56:b0:43: ef:b2:7d:6d:7a:2e:e1:a9:e5:b5:73:98:74:ed:c7: a3:65:33:28:b6:14:14:56:23:e9:ac:af:28:c1:13: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:97:38:FD:FF:CA:B0:7E:AD:2D:64:49:CF:24:4F:65:C9:C2:28:3D X509v3 Authority Key Identifier: keyid:9B:0B:51:CB:1C:A3:7F:68:C2:7E:C7:57:1F:E4:66:10:5C:C2:5E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/B9FB709CED5C11EC8CD1DC69C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.189.156.0/23 IPv6: 2001:df0:d3c0::/48 Signature Algorithm: sha256WithRSAEncryption 30:76:25:6b:99:ef:04:4c:ff:dd:a7:52:4f:ef:89:cd:54:e8: 30:f7:0f:0e:b2:ec:b9:40:a6:10:28:0c:bb:98:bf:25:40:b4: bc:cb:1a:d2:02:30:26:db:cd:85:33:23:a4:a3:0e:4d:78:94: 6b:d4:67:9b:09:64:60:e3:21:32:b0:6f:6b:92:fc:8b:93:4b: e7:39:81:e8:6d:c8:f1:9c:14:be:cf:8d:9b:c6:fb:e9:7b:3c: 27:0a:6e:57:4d:77:35:2f:14:1e:e3:fe:d2:8c:4b:2b:b0:31: 17:30:69:b7:da:e6:4b:b5:28:5a:2a:3b:ba:1d:c8:23:9f:2b: c2:e2:f6:03:bb:2f:f3:41:00:d0:06:dd:a3:1c:d2:31:5c:96: 3f:e0:6b:70:f4:33:64:3c:30:55:24:d5:cd:c6:22:06:f0:c9: 02:4b:91:de:4a:52:f3:a2:e2:39:25:8c:b5:a6:53:24:a1:b3: ed:48:3f:3c:19:23:f6:aa:dc:f8:50:c6:8a:ad:92:42:08:79: eb:3c:6e:2b:ec:55:31:42:c4:ed:cf:59:eb:ed:9e:c1:63:9c: 7b:9e:07:5d:48:70:65:76:68:7a:5a:dd:8c:0d:cc:32:f3:cd: f0:24:fa:0a:96:5a:97:4d:93:b2:82:73:cf:45:0b:33:d6:2e: 39:42:66:f1 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU2NzUxMTAvBgNVBAUTKDlCMEI1MUNCMUNBMzdGNjhDMjdFQzc1NzFGRTQ2NjEw NUNDMjVFMjQwHhcNMjYwNzI5MDE0OTU3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5NWM0NC01MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK25Ccul06TyiVeyPTYZiFrolZW0MCqHM++To9aYycnr+28eRUINiGEqeNTN HuxktkiwG7jIskB1enpy88BNg6XXGz9WfBcOb2ZCfqh00yTpwK3zZf223caEEFE8 /zQQRN9Od6df1eKKDXSq6CjBhknH5Ly+bFBRE0HmRvleRPjFNHqvjxj0MZZnFAO4 4TDFDjQNoEzpvJQGgtWPzyROu/he/UYxpzjb5g0d3EXhm3q6A5GH+RUmhPJ6l1YQ kbA0CZcgmiNlX3hA3RK6p4XbEXsNjbML7diW49oRfARWsEPvsn1tei7hqeW1c5h0 7cejZTMothQUViPprK8owRPOcwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNCXOP3/ yrB+rS1kSc8kT2XJwig9MB8GA1UdIwQYMBaAFJsLUcsco39own7HVx/kZhBcwl4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTY3NS9CQkVCOUZBRUVE NTYxMUVDOUNDMjgwNEVDNEY5QUUwMi9td3RSeXh5amYyakNmc2RYSC1SbUVGekNY aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213dFJ5eHlqZjJqQ2ZzZFhILVJtRUZ6Q1hpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkU2NzUvQkJFQjlGQUVFRDU2MTFFQzlDQzI4MDRFQzRGOUFFMDIvQjlGQjcwOUNF RDVDMTFFQzhDRDFEQzY5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ72cMA8EAgACMAkDBwAgAQ3w08AwDQYJKoZIhvcNAQELBQADggEB ADB2JWuZ7wRM/92nUk/vic1U6DD3Dw6y7LlAphAoDLuYvyVAtLzLGtICMCbbzYUz I6SjDk14lGvUZ5sJZGDjITKwb2uS/IuTS+c5gehtyPGcFL7PjZvG++l7PCcKbldN dzUvFB7j/tKMSyuwMRcwabfa5ku1KFoqO7odyCOfK8Li9gO7L/NBANAG3aMc0jFc lj/ga3D0M2Q8MFUk1c3GIgbwyQJLkd5KUvOi4jkljLWmUyShs+1IPzwZI/aq3PhQ xoqtkkIIees8bivsVTFCxO3PWevtnsFjnHueB11IcGV2aHpa3YwNzDLzzfAk+gqW WpdNk7KCc89FCzPWLjlCZvE= -----END CERTIFICATE-----Generated at Wed Aug 19 13:39:18 2026 by rpki-client