$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa File: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (raw, json) Hash identifier: aH2PFWJx8DbhX2Z6lNZyZCXpMFOnUtp/rNxQv+i82qY= Subject key identifier: 38:93:61:86:5D:9D:69:3A:B7:56:64:EF:DF:95:DE:F8:DB:24:85:07 Certificate issuer: /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Certificate serial: 0CA3 Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa Signing time: Tue 28 Jul 2026 19:36:59 +0000 ROA not before: Tue 28 Jul 2026 19:36:59 +0000 ROA not after: Sat 28 Nov 2026 00:00:00 +0000 asID: 136400 IP address blocks: 103.86.124.0/24 maxlen: 24 103.86.125.0/24 maxlen: 24 103.86.126.0/24 maxlen: 24 103.86.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F224, serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Validity Not Before: Jul 28 19:36:59 2026 GMT Not After : Nov 28 00:00:00 2026 GMT Subject: CN=6a6904db-34bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a0:1e:e5:5b:d1:47:01:9d:00:73:12:ae:16: de:c6:00:65:54:82:dd:86:72:6c:f6:8c:5a:70:ae: 75:ef:77:bb:34:6e:59:18:0b:a3:94:bd:07:5a:fd: 30:45:6c:72:fa:ab:90:80:95:15:0d:7e:c4:2c:7b: 26:c1:51:cb:b0:e5:d7:86:20:45:58:9a:3e:fa:d6: 49:59:ba:8c:67:9b:47:dd:44:47:67:80:1d:04:50: ce:6d:56:b0:07:48:56:33:61:b3:09:96:bc:c8:32: ef:d1:2f:78:b9:0b:5a:cd:3e:ba:00:74:e3:88:33: 81:0b:16:19:09:c7:18:d8:09:41:f3:80:43:67:e8: 17:1d:ac:43:e0:21:87:4a:90:70:ef:a1:eb:22:7b: d4:fb:45:f9:76:1d:7f:89:22:bc:30:ba:ca:8a:28: cb:5e:1d:a4:31:29:93:6d:8f:d9:a8:f2:46:42:2f: 06:ee:44:e4:5a:ed:5a:7f:8c:8e:ab:5f:da:d4:dc: 5a:3a:70:8a:af:3a:73:e5:28:e6:06:e5:99:11:c6: 31:10:b2:65:74:b4:cf:22:b6:10:de:5a:ea:05:a0: ce:54:dd:45:77:4d:0e:21:18:e9:02:53:d8:b9:fc: aa:10:17:59:f1:9d:0e:75:56:95:d0:52:f3:11:ef: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:93:61:86:5D:9D:69:3A:B7:56:64:EF:DF:95:DE:F8:DB:24:85:07 X509v3 Authority Key Identifier: keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.124.0/22 Signature Algorithm: sha256WithRSAEncryption 24:68:3e:73:fe:95:9e:30:0f:c9:d2:fb:0e:aa:92:06:cc:01: b2:f7:34:56:9a:80:97:b0:1d:9c:85:d5:be:3a:00:94:d1:3c: f3:12:21:aa:93:4d:16:f6:32:1d:72:5e:68:a3:c9:ea:19:6c: 44:36:12:9c:e7:f8:fc:9b:75:da:e8:33:53:dd:17:07:74:24: 2f:65:ad:3c:e4:62:1c:f7:78:91:67:25:75:dc:ae:8b:c7:ce: 3e:59:38:59:d0:76:b9:01:e7:de:40:20:ca:33:a8:dc:d1:19: b0:12:ee:2c:ad:20:6d:c2:8e:e0:5a:a4:39:ec:13:90:b4:26: 00:4b:55:9f:b3:2a:9e:3b:21:97:db:16:b9:16:2e:e5:59:7f: 65:c7:fc:90:2c:9f:6f:0a:23:a3:e3:22:05:63:25:06:f8:f7: 00:13:60:d4:b1:9f:8c:9f:39:a7:e3:2c:2b:00:4f:2f:54:92: 78:96:9c:5a:ab:0c:d6:b3:0c:03:b3:73:98:16:e5:0a:5c:04: 78:2a:b2:f6:37:b9:f9:72:8f:09:70:c1:46:dc:de:6a:00:fd: 0d:0e:ed:bc:aa:84:64:34:93:a2:60:a5:6f:fa:a3:ae:ee:a3: 76:e7:97:72:2e:d6:18:21:e1:5f:fa:6b:fd:76:43:f8:5d:9c: cc:19:7d:00 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyMjQxMTAvBgNVBAUTKEJCNjVFMzRGNEZERUE5MkI1OUEzMjU0N0EzMzgyMDhB NjA4OTFFMDkwHhcNMjYwNzI4MTkzNjU5WhcNMjYxMTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MDRkYi0zNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6aAe5VvRRwGdAHMSrhbexgBlVILdhnJs9oxacK5173e7NG5ZGAujlL0HWv0w RWxy+quQgJUVDX7ELHsmwVHLsOXXhiBFWJo++tZJWbqMZ5tH3URHZ4AdBFDObVaw B0hWM2GzCZa8yDLv0S94uQtazT66AHTjiDOBCxYZCccY2AlB84BDZ+gXHaxD4CGH SpBw76HrInvU+0X5dh1/iSK8MLrKiijLXh2kMSmTbY/ZqPJGQi8G7kTkWu1af4yO q1/a1NxaOnCKrzpz5SjmBuWZEcYxELJldLTPIrYQ3lrqBaDOVN1Fd00OIRjpAlPY ufyqEBdZ8Z0OdVaV0FLzEe9TEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDiTYYZd nWk6t1Zk79+V3vjbJIUHMB8GA1UdIwQYMBaAFLtl409P3qkrWaMlR6M4IIpgiR4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjIyNC82RTlCQTQxQTIw NTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFTdFpveVZIb3pnZ2ltQ0pI Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UyWGpUMF9lcVN0Wm95VkhvemdnaW1DSkhnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YyMjQvNkU5QkE0MUEyMDU4MTFFQUI3MTc3MjFCQzRGOUFFMDIvQTQ2RTRFQUMy MDU5MTFFQUFCNkVDRjFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ1Z8MA0GCSqGSIb3DQEBCwUAA4IBAQAkaD5z/pWeMA/J0vsOqpIG zAGy9zRWmoCXsB2chdW+OgCU0TzzEiGqk00W9jIdcl5oo8nqGWxENhKc5/j8m3Xa 6DNT3RcHdCQvZa085GIc93iRZyV13K6Lx84+WThZ0Ha5AefeQCDKM6jc0RmwEu4s rSBtwo7gWqQ57BOQtCYAS1WfsyqeOyGX2xa5Fi7lWX9lx/yQLJ9vCiOj4yIFYyUG +PcAE2DUsZ+Mnzmn4ywrAE8vVJJ4lpxaqwzWswwDs3OYFuUKXAR4KrL2N7n5co8J cMFG3N5qAP0NDu28qoRkNJOiYKVv+qOu7qN255dyLtYYIeFf+mv9dkP4XZzMGX0A -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:35 2026 by rpki-client