$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/3EED102CC53011F0ADCB012EC4F9AE02.roa File: 3EED102CC53011F0ADCB012EC4F9AE02.roa (raw, json) Hash identifier: FYuJrC31PU9aboeDs/Zo/WR1Zd9S0N3nIbn61WOZ2kE= Subject key identifier: B6:66:2D:1A:01:CF:46:75:8D:C5:EB:09:C9:F6:D8:C5:D9:A8:00:A5 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0D56 Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/3EED102CC53011F0ADCB012EC4F9AE02.roa Signing time: Mon 24 Aug 2026 18:36:09 +0000 ROA not before: Mon 24 Aug 2026 18:36:09 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 138640 IP address blocks: 103.114.96.0/24 maxlen: 24 103.114.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3414 (0xd56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: Aug 24 18:36:09 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a8c8f19-d878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fe:f5:01:13:c6:8c:a9:c3:df:19:83:93:6c: fd:cc:4d:c0:65:5d:8d:ce:b7:a4:95:a1:d5:4a:d2: 42:11:19:9d:f0:25:ec:ac:bc:5b:ed:c0:42:57:66: 00:fa:94:28:93:cf:29:bd:21:2f:b8:3b:08:41:cb: f7:8f:4b:32:e0:bf:f0:96:de:56:1e:1a:20:e3:59: 28:05:f3:5f:58:c5:d7:c6:ea:ec:06:f0:eb:fa:b2: 9f:5f:1b:95:97:bf:98:4a:c4:20:e6:31:6b:91:be: 45:f6:e9:f9:ed:55:e3:2b:92:f2:57:86:25:82:7d: 6d:1f:96:01:f5:07:5e:51:c3:48:0e:bd:3f:1c:4c: c5:79:9f:a2:04:ca:3b:fa:31:91:d9:03:58:6a:c3: 6a:11:df:53:32:a4:53:2d:11:38:9a:bc:f4:98:dd: cf:4a:e8:27:0c:13:63:24:9f:30:eb:ca:a9:75:08: fb:ee:e6:ff:8c:35:63:ca:5b:e3:03:26:e1:bf:72: 18:51:d6:e7:b4:a8:88:5d:ec:0c:ce:e9:2d:9f:b3: 66:b3:31:8f:1d:84:a9:96:3b:b1:47:ff:d2:27:05: 79:ca:4e:e0:c7:5e:99:cc:84:94:8a:d5:5e:1b:9b: 38:89:90:1a:f2:1f:f3:b7:46:01:98:40:48:12:61: 3d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:66:2D:1A:01:CF:46:75:8D:C5:EB:09:C9:F6:D8:C5:D9:A8:00:A5 X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/3EED102CC53011F0ADCB012EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.114.96.0/23 Signature Algorithm: sha256WithRSAEncryption 04:5b:03:0a:aa:6d:f4:f5:40:2f:4c:ba:a2:2d:cd:05:b8:51: 06:97:3c:ca:93:e1:ea:9b:08:37:0a:20:7c:f1:40:fe:e1:2f: a7:6a:cf:83:bb:8c:10:ed:c7:fa:11:fc:d8:a2:82:cd:40:01: 45:a5:e2:8d:74:b3:38:c1:33:f9:a0:b7:50:bd:00:dc:67:63: 62:44:79:37:75:c0:24:ff:d1:89:e4:c5:15:f8:c2:70:d8:d2: a1:df:68:9b:3d:fc:b4:6a:1b:cb:7b:fd:87:be:95:2b:2f:50: e6:b6:c5:6a:32:83:d9:5d:7e:2c:09:e6:d7:5f:f6:c5:22:0f: 3d:c0:07:ab:84:17:6d:89:cd:b1:6c:01:2d:c9:90:db:b0:10: 47:71:5d:1a:23:68:1f:ea:ba:d0:35:1c:71:ab:db:a8:a2:4a: 96:a1:d3:f1:33:ab:69:26:a2:7b:10:cd:ad:42:b8:cc:e4:0e: c6:a4:ad:d7:00:6e:98:6f:56:c7:11:f2:67:45:51:8e:e3:0f: 5b:99:da:e5:9f:43:42:c5:86:9c:74:4e:8d:57:90:85:60:b7: 8c:80:bf:c2:d6:0a:04:3c:97:12:42:24:5c:16:e3:ec:77:2c: 3f:9c:8f:87:83:b0:ee:c3:86:81:c0:2b:8e:27:5b:06:6b:40: b4:26:f7:d8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjYwODI0MTgzNjA5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThjOGYxOS1kODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2f71ARPGjKnD3xmDk2z9zE3AZV2NzreklaHVStJCERmd8CXsrLxb7cBCV2YA +pQok88pvSEvuDsIQcv3j0sy4L/wlt5WHhog41koBfNfWMXXxursBvDr+rKfXxuV l7+YSsQg5jFrkb5F9un57VXjK5LyV4Ylgn1tH5YB9QdeUcNIDr0/HEzFeZ+iBMo7 +jGR2QNYasNqEd9TMqRTLRE4mrz0mN3PSugnDBNjJJ8w68qpdQj77ub/jDVjylvj Aybhv3IYUdbntKiIXewMzuktn7NmszGPHYSpljuxR//SJwV5yk7gx16ZzISUitVe G5s4iZAa8h/zt0YBmEBIEmE9gQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLZmLRoB z0Z1jcXrCcn22MXZqAClMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JCRjEvMjQ1REM1Q0EwQUY3MTFFQUE4NUE1RDFBQzRGOUFFMDIvM0VFRDEwMkND NTMwMTFGMEFEQ0IwMTJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3JgMA0GCSqGSIb3DQEBCwUAA4IBAQAEWwMKqm309UAvTLqiLc0F uFEGlzzKk+Hqmwg3CiB88UD+4S+nas+Du4wQ7cf6EfzYooLNQAFFpeKNdLM4wTP5 oLdQvQDcZ2NiRHk3dcAk/9GJ5MUV+MJw2NKh32ibPfy0ahvLe/2HvpUrL1DmtsVq MoPZXX4sCebXX/bFIg89wAerhBdtic2xbAEtyZDbsBBHcV0aI2gf6rrQNRxxq9uo okqWodPxM6tpJqJ7EM2tQrjM5A7GpK3XAG6Yb1bHEfJnRVGO4w9bmdrln0NCxYac dE6NV5CFYLeMgL/C1goEPJcSQiRcFuPsdyw/nI+Hg7Duw4aBwCuOJ1sGa0C0JvfY -----END CERTIFICATE-----Generated at Fri Sep 11 08:37:58 2026 by rpki-client