$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/86ED5A7A710311EB9B9D9170C4F9AE02.roa File: 86ED5A7A710311EB9B9D9170C4F9AE02.roa (raw, json) Hash identifier: hYh6X9kgHzr8QQ2Qj2vUziKTsrBrtbnYbYp81FMkDWk= Subject key identifier: 97:AF:67:3E:CC:2B:3B:6E:AA:EA:3D:A3:E7:C8:15:F4:CF:8F:2E:1A Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 119E Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/86ED5A7A710311EB9B9D9170C4F9AE02.roa Signing time: Fri 22 May 2026 20:28:15 +0000 ROA not before: Fri 22 May 2026 20:28:15 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 38136 IP address blocks: 103.150.214.0/23 maxlen: 24 2406:840:d000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 19:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4510 (0x119e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:28:15 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a10bc5f-b4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:f3:f4:34:fd:9c:6f:6c:70:8c:47:c4:6b: a3:39:c8:de:a4:35:38:01:ff:25:a7:d4:a0:d7:31: 08:46:0b:55:22:84:0e:10:6b:85:a3:ec:bf:8b:fd: 12:01:42:0b:44:08:26:2f:54:56:ef:0a:6d:d7:f1: 8d:73:70:97:c8:81:58:d5:ca:b0:2e:2a:8e:b5:65: 31:4a:56:78:93:17:93:3b:c8:be:9f:92:c2:04:c7: fd:78:19:ca:64:0d:d5:81:19:1b:c9:7e:70:7d:a8: 11:ae:b6:64:d5:c9:32:03:fe:41:8a:e9:87:e2:21: 3c:0e:14:d5:e5:9b:d2:f7:d7:5f:da:c7:4b:c2:0b: 49:d4:9f:76:5f:35:6b:10:cd:b8:d5:5a:4d:e8:be: d2:95:02:15:e7:65:66:70:17:b9:ac:3e:44:6f:b2: 29:e3:bd:aa:da:c9:f9:c2:63:9e:41:12:6a:f5:de: a0:22:57:9f:09:74:75:30:6e:32:f1:f9:67:e3:56: 77:66:9b:0b:ab:dc:74:8b:47:1a:b4:13:79:57:9f: f8:2d:71:33:c1:c9:29:dd:0c:c4:f5:a0:d0:b3:78: 67:2e:31:d4:05:61:cd:f8:8c:f2:dc:89:6a:04:e2: ef:ef:71:4e:24:08:64:ee:46:fd:ad:40:7c:b8:84: e8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AF:67:3E:CC:2B:3B:6E:AA:EA:3D:A3:E7:C8:15:F4:CF:8F:2E:1A X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/86ED5A7A710311EB9B9D9170C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.150.214.0/23 IPv6: 2406:840:d000::/36 Signature Algorithm: sha256WithRSAEncryption 88:7f:8e:49:42:cb:7f:0b:1c:9e:8c:88:90:ca:d7:1d:60:df: ea:03:29:3c:b9:e5:d1:c7:0a:bc:af:d3:04:a4:3c:a2:a0:ef: 46:c2:dc:62:a8:d0:45:29:88:f4:0c:98:e1:5a:90:ed:37:d7: 17:3f:63:59:ed:2d:73:f0:52:78:c3:f1:ed:1f:1b:64:71:08: 3f:5e:8d:8d:e1:d6:d6:6f:e1:fb:28:4c:86:77:8e:a0:be:92: 66:9f:22:6d:76:c2:ca:12:b6:1f:3b:b2:06:8e:98:ce:b8:86: 15:72:46:64:1c:56:ee:2a:82:e8:1a:aa:1c:74:e4:ce:c5:60: b3:ef:80:cc:03:9f:6b:f9:e6:ed:5d:74:07:db:a5:46:2e:f7: 3d:43:ad:23:3d:91:b3:a2:d5:1b:08:e5:77:de:26:da:55:3b: 37:18:24:7f:20:37:4a:ac:8a:4e:4d:ae:50:8f:1a:26:a9:c6: 04:ae:e9:db:e6:6a:9e:12:81:53:1d:31:27:1c:45:d3:dd:a6: ca:e6:39:07:39:fd:72:b4:c5:43:48:91:54:85:a4:98:3d:c3: 09:2e:e4:d8:2e:14:09:ca:6d:6d:f5:fa:a9:ae:89:34:9a:71: 96:44:60:1e:43:19:9b:10:b8:d2:74:70:96:a9:07:8e:4a:48: 89:8f:d1:45 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICEZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwNTIyMjAyODE1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTEwYmM1Zi1iNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsR7z9DT9nG9scIxHxGujOcjepDU4Af8lp9Sg1zEIRgtVIoQOEGuFo+y/i/0S AUILRAgmL1RW7wpt1/GNc3CXyIFY1cqwLiqOtWUxSlZ4kxeTO8i+n5LCBMf9eBnK ZA3VgRkbyX5wfagRrrZk1ckyA/5BiumH4iE8DhTV5ZvS99df2sdLwgtJ1J92XzVr EM241VpN6L7SlQIV52VmcBe5rD5Eb7Ip472q2sn5wmOeQRJq9d6gIlefCXR1MG4y 8fln41Z3ZpsLq9x0i0catBN5V5/4LXEzwckp3QzE9aDQs3hnLjHUBWHN+Izy3Ilq BOLv73FOJAhk7kb9rUB8uIToIQIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFJevZz7M Kztuquo9o+fIFfTPjy4aMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvODZFRDVBN0E3 MTAzMTFFQjlCOUQ5MTcwQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQBZ5bWMA4EAgACMAgDBgQkBghA0DANBgkqhkiG9w0BAQsFAAOCAQEA iH+OSULLfwscnoyIkMrXHWDf6gMpPLnl0ccKvK/TBKQ8oqDvRsLcYqjQRSmI9AyY 4VqQ7TfXFz9jWe0tc/BSeMPx7R8bZHEIP16NjeHW1m/h+yhMhneOoL6SZp8ibXbC yhK2HzuyBo6YzriGFXJGZBxW7iqC6BqqHHTkzsVgs++AzAOfa/nm7V10B9ulRi73 PUOtIz2Rs6LVGwjld94m2lU7NxgkfyA3SqyKTk2uUI8aJqnGBK7p2+ZqnhKBUx0x JxxF092myuY5Bzn9crTFQ0iRVIWkmD3DCS7k2C4UCcptbfX6qa6JNJpxlkRgHkMZ mxC40nRwlqkHjkpIiY/RRQ== -----END CERTIFICATE-----Generated at Sat Jun 6 08:19:20 2026 by rpki-client