$ rpki-client -vvf rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/B69DB4D27D6911EBA420FC6AC4F9AE02.roa File: B69DB4D27D6911EBA420FC6AC4F9AE02.roa (raw, json) Hash identifier: 94CBbsp/sR89TW5T5WAlVSb9xCm0EUDVQO0G5brVTiw= Subject key identifier: 1A:20:2E:7C:D5:C1:E5:C9:BA:03:8C:45:02:36:FC:B6:1C:6F:62:E7 Certificate issuer: /CN=A91712A8/serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA Certificate serial: 072E Authority key identifier: 08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/B69DB4D27D6911EBA420FC6AC4F9AE02.roa Signing time: Sat 16 May 2026 22:28:09 +0000 ROA not before: Sat 16 May 2026 22:28:09 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 58580 IP address blocks: 103.8.28.0/23 maxlen: 24 103.18.84.0/22 maxlen: 24 103.245.220.0/23 maxlen: 24 163.47.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1838 (0x72e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91712A8, serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA Validity Not Before: May 16 22:28:09 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a08ef79-c096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:40:4e:04:85:65:9a:de:b0:b4:6c:ac:6d: 9c:c0:37:4b:75:d2:57:22:18:f9:fe:12:c7:41:d8: 6e:6b:f3:f1:2f:48:cd:1f:46:7a:f9:4f:87:3a:ab: 66:bd:0d:09:bd:bd:76:37:06:9f:c5:5f:75:6b:67: 74:52:d6:b8:e9:c3:31:10:91:a1:c1:eb:a6:e3:e3: bf:bd:10:bb:58:b3:7f:43:57:88:9a:73:4c:19:8d: 4c:26:42:3c:56:e8:ee:9d:93:77:fa:b7:32:5c:75: cd:fb:bc:e3:a9:58:bf:6a:e5:af:30:a1:70:7a:bd: e7:87:56:57:79:c1:15:ee:fd:60:fa:01:6b:a3:24: 2b:3d:ce:58:f2:24:1c:ad:11:a8:50:14:ee:7a:5c: 39:bf:8a:11:4d:d0:d2:80:58:3c:58:ee:6e:5c:60: bf:5e:f6:48:6b:d4:9a:04:2d:6d:31:fb:c6:9f:a0: a6:6b:df:62:e4:f4:c8:ce:b2:db:6e:63:1d:77:c9: 16:7c:09:d3:5b:aa:c4:83:c0:4b:3d:a3:4c:f0:9c: 73:a1:ce:3a:de:77:2a:2f:c9:c1:a5:12:ae:d4:75: 03:4b:11:1d:45:7c:ea:3f:13:3f:b0:28:fa:6b:5d: ab:7a:c4:41:58:03:8d:c0:49:4e:9a:72:33:3d:bb: 71:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:20:2E:7C:D5:C1:E5:C9:BA:03:8C:45:02:36:FC:B6:1C:6F:62:E7 X509v3 Authority Key Identifier: keyid:08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/B69DB4D27D6911EBA420FC6AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.8.28.0/23 103.18.84.0/22 103.245.220.0/23 163.47.100.0/22 Signature Algorithm: sha256WithRSAEncryption 08:eb:46:72:11:10:b0:91:ac:a6:3f:dd:bc:10:ea:7d:52:45: 6d:bf:00:73:69:ca:48:ae:a3:ee:d7:d2:40:26:8a:5f:f8:a8: 92:0b:50:32:ec:78:62:c1:ed:2a:81:07:b0:e6:7c:0e:2b:f0: 95:df:18:63:0a:ef:e3:51:24:fc:a0:a6:97:7c:fc:75:1d:e4: 04:e1:af:60:31:e1:c4:13:cb:cf:19:2b:a4:24:88:71:db:39: 63:5d:86:94:90:4f:2a:1c:e7:93:07:8e:e5:b4:75:43:95:69: 19:30:dc:14:c2:38:0d:9a:47:fa:35:18:86:68:da:9c:7b:b9: 66:38:44:e2:97:bd:1d:39:b0:ec:97:f7:9b:ae:4e:c6:89:fa: 83:7b:79:4b:b8:80:a1:52:9e:e4:5f:37:a6:2b:95:82:97:74: 2c:ae:25:9e:7f:e9:1b:a1:ca:1b:9c:15:45:3c:70:ef:1b:6f: 5e:62:8b:f6:d9:cb:14:df:92:c5:1d:d6:b9:5d:15:c7:a8:6a: b3:2f:24:47:ce:f7:ec:e9:62:93:9d:e3:71:33:6f:32:f7:3e: 4f:01:78:85:51:59:3b:2c:72:a5:bb:8c:69:a2:11:72:12:f2: 8b:1b:2d:82:98:ff:4d:ae:51:46:5b:24:a1:47:79:86:7e:e6: 2c:b3:66:10 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyQTgxMTAvBgNVBAUTKDA4NzQxMzQ5QjY2MjhBMzk4MUY3OEEzNzMwQjg5ODgz RTNENzZCQ0EwHhcNMjYwNTE2MjIyODA5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTA4ZWY3OS1jMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSxATgSFZZresLRsrG2cwDdLddJXIhj5/hLHQdhua/PxL0jNH0Z6+U+HOqtm vQ0Jvb12NwafxV91a2d0Uta46cMxEJGhweum4+O/vRC7WLN/Q1eImnNMGY1MJkI8 VujunZN3+rcyXHXN+7zjqVi/auWvMKFwer3nh1ZXecEV7v1g+gFroyQrPc5Y8iQc rRGoUBTuelw5v4oRTdDSgFg8WO5uXGC/XvZIa9SaBC1tMfvGn6Cma99i5PTIzrLb bmMdd8kWfAnTW6rEg8BLPaNM8Jxzoc463ncqL8nBpRKu1HUDSxEdRXzqPxM/sCj6 a12resRBWAONwElOmnIzPbtxXwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFBogLnzV weXJugOMRQI2/LYcb2LnMB8GA1UdIwQYMBaAFAh0E0m2Yoo5gfeKNzC4mIPj12vK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTJBOC80NjUwMEY4QzdE NjgxMUVCQTQzMjE3NkFDNEY5QUUwMi9DSFFUU2JaaWlqbUI5NG8zTUxpWWctUFhh OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIUVRTYlppaWptQjk0bzNNTGlZZy1QWGE4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzEyQTgvNDY1MDBGOEM3RDY4MTFFQkE0MzIxNzZBQzRGOUFFMDIvQjY5REI0RDI3 RDY5MTFFQkE0MjBGQzZBQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQBZwgcAwQCZxJUAwQBZ/XcAwQCoy9kMA0GCSqGSIb3DQEBCwUAA4IB AQAI60ZyERCwkaymP928EOp9UkVtvwBzacpIrqPu19JAJopf+KiSC1Ay7Hhiwe0q gQew5nwOK/CV3xhjCu/jUST8oKaXfPx1HeQE4a9gMeHEE8vPGSukJIhx2zljXYaU kE8qHOeTB47ltHVDlWkZMNwUwjgNmkf6NRiGaNqce7lmOETil70dObDsl/ebrk7G ifqDe3lLuIChUp7kXzemK5WCl3QsriWef+kbocobnBVFPHDvG29eYov22csU35LF Hda5XRXHqGqzLyRHzvfs6WKTneNxM28y9z5PAXiFUVk7LHKlu4xpohFyEvKLGy2C mP9NrlFGWyShR3mGfuYss2YQ -----END CERTIFICATE-----Generated at Thu May 21 11:57:51 2026 by rpki-client