$ rpki-client -vvvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa File: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (raw, json) Hash identifier: NVLNYpqU3o7oqscl+dXgpSjcaFvT5PttmpdNod3IWis= Subject key identifier: 7D:62:64:E7:30:96:45:AB:82:58:FC:F9:72:A1:D9:A3:7C:94:4A:DB Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Certificate serial: 13A0 Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa Signing time: Tue 18 Aug 2026 17:32:50 +0000 ROA not before: Tue 18 Aug 2026 17:32:50 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 135419 IP address blocks: 103.120.112.0/22 maxlen: 22 103.120.112.0/24 maxlen: 24 103.120.113.0/24 maxlen: 24 103.120.114.0/24 maxlen: 24 103.120.115.0/24 maxlen: 24 2403:56c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 16:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5024 (0x13a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Validity Not Before: Aug 18 17:32:50 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a849742-d2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:4a:c6:9e:61:f0:59:b7:6f:81:04:97:63: 19:d9:d0:11:af:12:5b:6a:33:60:14:1b:05:4a:82: 64:b3:9f:59:cf:62:f4:51:06:f1:19:30:fc:fd:b0: e3:8d:8d:66:42:9c:1b:3a:f4:53:1d:a2:79:b5:28: 33:7b:1e:75:35:67:25:11:4e:3a:b4:aa:60:ff:ee: ba:5a:1a:1b:c4:4f:90:00:b4:46:bd:ad:7d:33:12: 07:f4:0d:0b:9e:53:d9:ea:e9:72:0f:46:a3:7c:ac: cc:cb:50:3e:93:41:7b:d7:0d:17:18:94:0d:84:2f: f3:bf:34:5b:f4:b8:94:ca:40:92:53:f0:db:6b:9a: 26:9f:2e:03:73:65:10:d0:78:c4:b9:9d:f5:a9:5b: 6f:1b:bc:c8:c0:40:93:6a:a2:ce:e1:3a:a0:f4:79: f3:0c:73:d9:71:08:73:6e:da:e5:f3:81:ca:87:8e: 24:4d:46:e3:7f:d1:8b:41:c2:4e:ee:01:35:68:72: 3b:4f:4e:c8:68:97:7e:d7:61:44:a8:6e:2c:31:f4: 2a:7a:0c:59:e6:20:c6:bc:52:08:a5:1c:34:7d:da: f8:16:78:32:e1:38:12:ca:78:51:f1:3c:37:c7:b3: dd:06:5a:58:e6:8a:2e:14:4d:34:e6:70:07:0b:e9: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:62:64:E7:30:96:45:AB:82:58:FC:F9:72:A1:D9:A3:7C:94:4A:DB X509v3 Authority Key Identifier: keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.112.0/22 IPv6: 2403:56c0::/32 Signature Algorithm: sha256WithRSAEncryption 76:dc:64:2c:92:ea:1d:1e:7f:fd:72:4c:db:bc:49:1b:f1:94: 64:d4:b6:16:87:08:94:f6:9f:a1:3d:07:01:4e:54:f0:bb:67: a4:95:d6:0d:a8:6d:29:6a:1d:30:65:17:79:4f:19:90:28:0d: 6d:9c:2e:8f:46:9a:52:ab:04:ca:9c:e9:d0:95:34:47:5a:14: 5c:67:da:af:08:0c:2e:60:49:1c:ae:5d:76:90:0b:50:bd:1e: 95:d5:a8:6e:97:31:10:4f:54:fa:32:dc:69:74:db:72:0c:57: 91:0c:63:18:2f:7d:44:cc:47:52:05:f5:c6:ae:01:4e:54:9c: 1e:a1:6c:6c:5a:c1:b0:1d:31:70:77:be:92:64:74:1a:11:2d: 5e:9e:4a:e2:3b:d7:40:34:63:eb:45:4b:05:70:81:05:93:48: 8d:cf:a6:e5:15:0d:3a:0d:7f:35:50:fd:19:82:5e:0d:a7:79: 6b:8d:58:db:92:d0:33:e5:ee:ac:e3:7f:ea:0b:10:bc:55:b1: 40:8c:4e:18:01:fd:8f:79:c0:13:3c:13:08:5c:06:f8:d1:cf: df:66:7a:67:70:5b:57:fc:e8:90:3e:d3:fa:d2:db:2a:3d:34: e4:bc:1d:4a:73:d1:bd:48:89:56:ba:53:c2:bb:26:44:cd:47: e8:25:9f:f0 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICE6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOEYxMTAvBgNVBAUTKDQwOTM4NzA5NzI3NDM4QzhDMURFQkZGRDA0MTU5MDU4 NDgyMEM2RTgwHhcNMjYwODE4MTczMjUwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg0OTc0Mi1kMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8pKxp5h8Fm3b4EEl2MZ2dARrxJbajNgFBsFSoJks59Zz2L0UQbxGTD8/bDj jY1mQpwbOvRTHaJ5tSgzex51NWclEU46tKpg/+66WhobxE+QALRGva19MxIH9A0L nlPZ6ulyD0ajfKzMy1A+k0F71w0XGJQNhC/zvzRb9LiUykCSU/Dba5omny4Dc2UQ 0HjEuZ31qVtvG7zIwECTaqLO4Tqg9HnzDHPZcQhzbtrl84HKh44kTUbjf9GLQcJO 7gE1aHI7T07IaJd+12FEqG4sMfQqegxZ5iDGvFIIpRw0fdr4Fngy4TgSynhR8Tw3 x7PdBlpY5oouFE005nAHC+mJ1QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFH1iZOcw lkWrglj8+XKh2aN8lErbMB8GA1UdIwQYMBaAFECThwlydDjIwd6//QQVkFhIIMbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE4Ri9EMjhENzVDMEMy REYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9NakIzcl85QkJXUVdFZ2d4 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKT0hDWEowT01qQjNyXzlCQldRV0VnZ3h1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzYxOEYvRDI4RDc1QzBDMkRGMTFFOEE2NEVGRDJDQzRGOUFFMDIvMkZFNERBMUVD MkUxMTFFOEExOUNCNzJGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3hwMA0EAgACMAcDBQAkA1bAMA0GCSqGSIb3DQEBCwUAA4IBAQB2 3GQskuodHn/9ckzbvEkb8ZRk1LYWhwiU9p+hPQcBTlTwu2ekldYNqG0pah0wZRd5 TxmQKA1tnC6PRppSqwTKnOnQlTRHWhRcZ9qvCAwuYEkcrl12kAtQvR6V1ahulzEQ T1T6MtxpdNtyDFeRDGMYL31EzEdSBfXGrgFOVJweoWxsWsGwHTFwd76SZHQaES1e nkriO9dANGPrRUsFcIEFk0iNz6blFQ06DX81UP0Zgl4Np3lrjVjbktAz5e6s43/q CxC8VbFAjE4YAf2PecATPBMIXAb40c/fZnpncFtX/OiQPtP60tsqPTTkvB1Kc9G9 SIlWulPCuyZEzUfoJZ/w -----END CERTIFICATE-----Generated at Tue Sep 1 04:40:06 2026 by rpki-client