$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa File: CBB9F6766CE211EEA9499734C4F9AE02.roa (raw, json) Hash identifier: sGiM6GvJxV9yJqw6hLJjsRcyN9Otue9M3LO38P82h9k= Subject key identifier: 30:8B:F3:C1:14:ED:C3:09:45:9C:96:D9:F8:0F:92:A3:9F:8E:C2:DF Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 0642 Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa Signing time: Thu 30 Jul 2026 23:44:08 +0000 ROA not before: Thu 30 Jul 2026 23:44:08 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 137845 IP address blocks: 103.115.168.0/22 maxlen: 22 103.115.168.0/24 maxlen: 24 103.115.169.0/24 maxlen: 24 2403:1840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 22:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Jul 30 23:44:08 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a6be1c8-a3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:76:a6:d6:0d:84:f9:c8:42:dd:f0:7e:3c:f0: 27:4f:db:e5:9b:6b:ae:f9:5e:f1:29:05:ca:fe:28: 91:0a:3d:de:c0:cf:51:22:2f:a1:23:ae:0a:d4:e3: 6d:e1:3b:45:4f:6e:39:63:9a:32:60:c5:12:bd:59: f0:c3:e7:eb:2f:a7:a4:ae:b8:36:72:e6:69:96:2a: c3:cf:a4:e8:b8:9c:e0:4f:1f:7c:d3:08:f1:49:59: db:8e:f6:2d:a0:7f:a9:a3:6c:0e:38:19:1a:00:9c: 39:d7:e6:df:85:55:2f:e0:63:0a:12:26:44:0f:a8: 9c:61:e0:65:3c:dc:10:d3:b3:6c:31:3c:b3:d4:4d: 41:bd:75:b7:c7:b0:29:be:bb:fb:60:a0:bc:37:ec: ad:4d:99:d0:66:c4:c2:1d:89:a2:41:20:4b:32:ae: c1:68:20:2e:30:0e:23:37:38:b9:01:26:ff:ff:dd: b8:eb:2b:df:7a:85:89:02:88:13:ba:6c:55:12:48: 40:6e:52:c1:49:2e:42:53:15:d4:0d:d9:96:95:36: 62:f4:8d:3d:71:da:94:ea:b7:50:12:10:92:fc:44: 42:67:fe:00:34:15:ee:6e:a3:8b:b8:89:87:ee:3a: 17:03:06:84:9c:2a:f2:b6:14:ff:0e:fb:6b:e5:07: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8B:F3:C1:14:ED:C3:09:45:9C:96:D9:F8:0F:92:A3:9F:8E:C2:DF X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.168.0/22 IPv6: 2403:1840::/32 Signature Algorithm: sha256WithRSAEncryption 4a:04:68:b1:de:6a:d9:59:43:97:79:f1:01:b4:e9:34:5a:b0: 06:53:82:67:35:f6:8c:c1:18:a5:4a:56:47:04:69:28:9a:de: cc:de:b3:b6:b0:31:94:9d:88:10:3f:37:6f:50:bc:76:72:63: c1:79:a6:82:c3:74:7b:04:22:10:4c:99:ca:5b:fe:de:5d:a1: 2e:f0:8c:28:1d:8e:ff:31:4a:45:9d:c8:a2:20:17:bd:db:e6: bf:43:a5:84:48:f1:82:e4:de:68:db:da:cb:94:c6:a6:5d:17: 37:57:4a:77:fe:8f:3b:56:db:09:08:ec:7a:03:4a:03:cc:ef: f8:0a:e4:7f:92:46:f0:b0:9c:da:4e:ad:0d:86:6a:48:71:c2: 3e:10:2a:0b:88:7f:e5:4c:80:f2:5c:52:8b:5d:68:4f:e1:54: a1:37:59:45:e5:42:27:01:95:b3:51:9d:70:ec:c4:b3:9d:bf: bb:7e:f7:bd:62:f4:56:81:5b:ac:80:00:da:38:8a:16:93:01: 03:77:6b:bd:86:51:74:9a:3d:56:8a:90:58:6f:c5:e6:78:c3: 3b:f3:8c:40:1f:2c:84:a4:98:88:89:3c:37:16:f6:6d:63:07: 52:78:dd:77:fc:c2:da:e7:ca:91:1a:48:15:4b:0b:dd:9d:fd: 42:0b:76:67 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjYwNzMwMjM0NDA4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZiZTFjOC1hM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Xam1g2E+chC3fB+PPAnT9vlm2uu+V7xKQXK/iiRCj3ewM9RIi+hI64K1ONt 4TtFT245Y5oyYMUSvVnww+frL6ekrrg2cuZplirDz6TouJzgTx980wjxSVnbjvYt oH+po2wOOBkaAJw51+bfhVUv4GMKEiZED6icYeBlPNwQ07NsMTyz1E1BvXW3x7Ap vrv7YKC8N+ytTZnQZsTCHYmiQSBLMq7BaCAuMA4jNzi5ASb//9246yvfeoWJAogT umxVEkhAblLBSS5CUxXUDdmWlTZi9I09cdqU6rdQEhCS/ERCZ/4ANBXubqOLuImH 7joXAwaEnCrythT/Dvtr5QdbwwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDCL88EU 7cMJRZyW2fgPkqOfjsLfMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxNTEvMTJBQ0Q2QkFGNERDMTFFQjhGN0RCOTQ5QzRGOUFFMDIvQ0JCOUY2NzY2 Q0UyMTFFRUE5NDk5NzM0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3OoMA0EAgACMAcDBQAkAxhAMA0GCSqGSIb3DQEBCwUAA4IBAQBK BGix3mrZWUOXefEBtOk0WrAGU4JnNfaMwRilSlZHBGkomt7M3rO2sDGUnYgQPzdv ULx2cmPBeaaCw3R7BCIQTJnKW/7eXaEu8IwoHY7/MUpFnciiIBe92+a/Q6WESPGC 5N5o29rLlMamXRc3V0p3/o87VtsJCOx6A0oDzO/4CuR/kkbwsJzaTq0NhmpIccI+ ECoLiH/lTIDyXFKLXWhP4VShN1lF5UInAZWzUZ1w7MSznb+7fve9YvRWgVusgADa OIoWkwEDd2u9hlF0mj1WipBYb8XmeMM784xAHyyEpJiIiTw3FvZtYwdSeN13/MLa 58qRGkgVSwvdnf1CC3Zn -----END CERTIFICATE-----Generated at Sat Aug 29 09:13:43 2026 by rpki-client