$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/0964A56EF35511E8AC1ECA17C4F9AE02.roa File: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (raw, json) Hash identifier: NbC/fbC6XQGeqxTw9dujytNOnLDF7yOfjQzVCGBwIeA= Subject key identifier: 0A:BB:CA:30:DD:D4:A0:D9:DA:AD:03:3A:27:1B:06:A7:AB:F8:DA:94 Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Certificate serial: 15CA Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/0964A56EF35511E8AC1ECA17C4F9AE02.roa Signing time: Sun 02 Aug 2026 17:30:06 +0000 ROA not before: Sun 02 Aug 2026 17:30:06 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 2635 IP address blocks: 45.121.180.0/24 maxlen: 24 45.121.181.0/24 maxlen: 24 45.121.182.0/24 maxlen: 24 45.121.183.0/24 maxlen: 24 103.62.32.0/24 maxlen: 24 103.62.33.0/24 maxlen: 24 103.62.34.0/24 maxlen: 24 103.62.35.0/24 maxlen: 24 2403:6b80::/40 maxlen: 48 2403:6b80:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Aug 2026 16:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5578 (0x15ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Validity Not Before: Aug 2 17:30:06 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6f7e9d-85c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ba:f5:20:de:0a:fe:48:3e:9d:ac:c9:00:b5: 49:fc:17:7f:a3:fb:3b:1e:72:0f:1f:20:a5:3d:46: 80:54:1c:0f:d0:fa:70:f2:c2:4e:15:66:8b:82:b6: 79:ea:18:cb:8f:b8:28:05:5e:7c:6f:82:a2:55:f1: 88:50:9e:55:7a:a1:f5:30:07:98:3f:39:76:b3:39: 62:29:1c:63:5b:57:da:74:96:88:b2:af:c2:a1:5d: a5:70:9b:f7:ad:ce:0f:e9:a9:bd:21:91:59:fd:2f: 16:49:3f:36:3c:c7:0c:20:0f:db:4b:93:20:c1:3c: 04:f7:c3:08:4f:9f:20:05:30:76:b5:a7:f1:ae:b4: 3f:0b:1e:db:84:7f:68:a0:ec:f6:96:1d:09:b8:b2: 81:18:8f:82:41:97:48:4c:98:99:9f:f9:3f:dc:52: 31:6d:e6:f3:7e:a1:a4:69:f2:5d:59:03:69:71:52: c0:0f:c7:61:07:3a:59:01:ca:85:1e:58:42:ae:93: 6d:49:60:61:01:8d:c1:59:da:f9:b2:f3:9d:9b:5d: 0e:eb:73:a8:76:bc:cd:35:23:34:79:9f:83:08:b9: 3d:4f:4b:90:08:29:e4:db:fb:0d:67:39:57:f7:d9: a5:4b:3c:9a:0a:40:58:cc:25:23:08:9a:03:76:80: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BB:CA:30:DD:D4:A0:D9:DA:AD:03:3A:27:1B:06:A7:AB:F8:DA:94 X509v3 Authority Key Identifier: keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/0964A56EF35511E8AC1ECA17C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.121.180.0/22 103.62.32.0/22 IPv6: 2403:6b80::/40 2403:6b80:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 96:25:c8:58:5d:46:51:6d:5d:72:ff:cf:f5:03:28:ab:c7:76: 03:cf:ac:74:0c:5f:c1:45:60:7c:fe:aa:84:a8:88:0f:54:8b: e6:f8:c7:6b:39:ae:99:fe:1e:8e:03:56:c5:a3:dc:61:6a:56: fa:94:95:95:9e:01:b5:01:6f:1d:94:ea:b8:91:78:3f:96:19: 9b:e7:97:e6:28:88:ac:26:dc:d9:78:05:b6:4a:2c:07:81:6b: df:5a:74:34:b8:08:fb:b5:74:e7:5c:53:0f:3d:a0:5b:96:15: c4:78:81:84:3a:d9:13:9c:c2:3b:81:ae:e2:fa:5d:f5:09:45: d2:a3:b4:ea:09:88:df:4c:1a:99:42:2c:8d:6f:7a:4e:48:35: af:e1:97:7a:2b:0d:86:22:f2:fc:92:d0:9d:d3:1e:83:5d:25: ec:28:c8:77:9c:74:ac:55:ca:ba:0e:c8:88:4c:e1:79:82:42: c2:c2:c1:3a:d0:03:76:00:f3:65:a3:3d:6b:d8:01:15:87:6b: 26:72:33:3d:e4:d2:1a:2e:49:59:66:d8:95:3a:b0:00:97:9d: 60:22:2c:4b:96:f6:89:74:ec:1c:c2:c4:f5:68:54:5d:c0:1f: 15:25:8b:5d:a0:a5:c3:3a:c1:9f:41:eb:53:80:cf:b6:16:a4: 7f:bc:ab:f0 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICFcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I4M0YxMTAvBgNVBAUTKDE5ODAzNTUyOTlCNkMyMjM3QjQyMzUwMDBGNzIzNTk3 QkZFQjMzREEwHhcNMjYwODAyMTczMDA2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZmN2U5ZC04NWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5br1IN4K/kg+nazJALVJ/Bd/o/s7HnIPHyClPUaAVBwP0Ppw8sJOFWaLgrZ5 6hjLj7goBV58b4KiVfGIUJ5VeqH1MAeYPzl2szliKRxjW1fadJaIsq/CoV2lcJv3 rc4P6am9IZFZ/S8WST82PMcMIA/bS5MgwTwE98MIT58gBTB2tafxrrQ/Cx7bhH9o oOz2lh0JuLKBGI+CQZdITJiZn/k/3FIxbebzfqGkafJdWQNpcVLAD8dhBzpZAcqF HlhCrpNtSWBhAY3BWdr5svOdm10O63OodrzNNSM0eZ+DCLk9T0uQCCnk2/sNZzlX 99mlSzyaCkBYzCUjCJoDdoA53wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFAq7yjDd 1KDZ2q0DOicbBqer+NqUMB8GA1UdIwQYMBaAFBmANVKZtsIje0I1AA9yNZe/6zPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjgzRi8zREIzREJFQTU1 NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndpTjdRalVBRDNJMWw3X3JN OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZQTFVcG0yd2lON1FqVUFEM0kxbDdfck05by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I4M0YvM0RCM0RCRUE1NTRGMTFFODlCQzJFODU3QzRGOUFFMDIvMDk2NEE1NkVG MzU1MTFFOEFDMUVDQTE3QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQCLXm0AwQCZz4gMBYEAgACMBADBgAkA2uAAAMGACQDa4D/MA0GCSqG SIb3DQEBCwUAA4IBAQCWJchYXUZRbV1y/8/1Ayirx3YDz6x0DF/BRWB8/qqEqIgP VIvm+MdrOa6Z/h6OA1bFo9xhalb6lJWVngG1AW8dlOq4kXg/lhmb55fmKIisJtzZ eAW2SiwHgWvfWnQ0uAj7tXTnXFMPPaBblhXEeIGEOtkTnMI7ga7i+l31CUXSo7Tq CYjfTBqZQiyNb3pOSDWv4Zd6Kw2GIvL8ktCd0x6DXSXsKMh3nHSsVcq6DsiITOF5 gkLCwsE60AN2APNloz1r2AEVh2smcjM95NIaLklZZtiVOrAAl51gIixLlvaJdOwc wsT1aFRdwB8VJYtdoKXDOsGfQetTgM+2FqR/vKvw -----END CERTIFICATE-----Generated at Thu Aug 6 14:12:34 2026 by rpki-client