$ rpki-client -vvf rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/B84A6F2E4FF411F18E63268DB6833773.roa File: B84A6F2E4FF411F18E63268DB6833773.roa (raw, json) Hash identifier: BI2faFTClY4g1rHtoS/vehoRqM4DrLlRB/gGKATWsKM= Subject key identifier: CA:24:18:31:B0:46:4E:48:4C:C5:CF:03:2F:8C:65:54:F1:8F:38:74 Certificate issuer: /CN=A9187579/serialNumber=2FF95997575E6732B08790D757F6C1A0C5F2BBFA Certificate serial: 12 Authority key identifier: 2F:F9:59:97:57:5E:67:32:B0:87:90:D7:57:F6:C1:A0:C5:F2:BB:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/B84A6F2E4FF411F18E63268DB6833773.roa Signing time: Fri 15 May 2026 00:27:32 +0000 ROA not before: Fri 15 May 2026 00:27:32 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 133120 IP address blocks: 103.40.109.0/24 maxlen: 24 103.80.20.0/23 maxlen: 24 103.243.110.0/24 maxlen: 24 103.251.144.0/22 maxlen: 24 182.161.64.0/23 maxlen: 24 203.31.65.0/24 maxlen: 24 203.55.90.0/23 maxlen: 24 2407:d080::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.crl rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187579, serialNumber=2FF95997575E6732B08790D757F6C1A0C5F2BBFA Validity Not Before: May 15 00:27:32 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a066874-f323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:0b:cc:8b:15:c5:42:0d:bf:6f:2d:9f:b6: ff:cd:5a:48:2b:c4:3f:7c:46:df:a8:f6:b6:18:85: d2:fd:91:21:f1:64:69:22:bc:4d:b1:fe:48:22:11: 41:cc:db:d4:fc:09:90:78:c8:fa:85:e1:27:3c:cd: b7:e4:a7:06:e2:54:15:9e:39:e2:3f:26:62:89:1b: 3e:73:ad:64:aa:1a:cb:71:dd:9e:e0:36:b5:e0:dc: b9:0f:75:52:5e:da:19:25:51:a2:61:65:c8:9c:f1: ee:f0:8d:36:71:2f:74:9c:89:7f:f6:6e:32:c6:d6: c3:5c:b2:67:04:eb:bf:c7:00:5a:62:fd:2e:d7:b8: 51:9a:82:d5:94:5e:f2:f5:bb:e7:a9:fc:7c:d7:43: 6f:a8:fb:43:9f:a0:3e:e4:af:a2:27:c4:4b:5b:38: a8:0c:91:c0:10:6d:52:fb:40:a9:87:d0:ed:fb:f8: b0:8e:63:3b:06:49:76:6f:54:83:cd:1a:4c:e0:1d: 14:12:3d:dc:f1:a4:2d:05:17:5f:e1:cf:39:68:bd: cb:ca:1a:a6:ba:80:06:d3:b3:79:a6:3b:de:b4:1f: fa:41:2d:8b:b5:bd:76:48:a6:5c:c5:97:46:c9:73: 5c:fb:1b:7e:65:da:d3:2d:80:8a:ac:b2:66:db:67: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:24:18:31:B0:46:4E:48:4C:C5:CF:03:2F:8C:65:54:F1:8F:38:74 X509v3 Authority Key Identifier: keyid:2F:F9:59:97:57:5E:67:32:B0:87:90:D7:57:F6:C1:A0:C5:F2:BB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/B84A6F2E4FF411F18E63268DB6833773.roa sbgp-ipAddrBlock: critical IPv4: 103.40.109.0/24 103.80.20.0/23 103.243.110.0/24 103.251.144.0/22 182.161.64.0/23 203.31.65.0/24 203.55.90.0/23 IPv6: 2407:d080::/32 Signature Algorithm: sha256WithRSAEncryption 8f:a2:7e:7c:fb:77:dd:42:f3:b5:ca:8d:5a:1d:95:41:b1:af: 9c:f9:59:86:18:bc:d9:73:1e:3a:ed:c7:d3:5d:73:cb:26:dd: d1:b3:28:7e:6a:f3:39:01:f0:14:a1:b0:b2:5e:88:bd:06:21: 63:f7:f8:7e:8e:0b:86:7d:ba:f1:6b:12:35:da:e2:a0:f1:20: b6:75:26:fc:83:a1:72:1a:4c:1a:e4:0d:c5:3f:00:8b:e9:10: dc:34:e1:1f:f1:32:35:b8:8c:81:71:76:a7:7b:ab:4c:dd:8b: 77:ef:8c:d6:09:00:ce:4b:1a:8a:52:b9:c8:e4:9c:7d:d8:2d: 17:4c:13:72:55:fa:9a:51:41:49:f7:e8:da:be:a3:0c:33:d0: ed:0c:bd:fd:03:c2:74:32:11:1e:7c:9a:78:08:f6:86:22:b8: 75:81:b6:60:c6:50:f7:50:7c:43:97:b7:3f:4f:5f:1e:07:ef: f3:0e:ea:f5:de:d2:15:a1:98:fc:4e:64:34:db:40:f8:9c:f3: 09:4c:dc:60:70:a7:3d:c4:8b:61:be:4c:2f:64:04:19:dc:0e: 39:9b:f0:60:bd:fa:2e:2d:01:2f:fe:42:62:b8:b1:4b:5b:a3: f1:90:cc:68:63:50:66:ff:24:42:e2:f4:d9:ed:13:ce:c3:b9: de:d4:0c:62 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzU3OTExMC8GA1UEBRMoMkZGOTU5OTc1NzVFNjczMkIwODc5MEQ3NTdGNkMxQTBD NUYyQkJGQTAeFw0yNjA1MTUwMDI3MzJaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMDY2ODc0LWYzMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6ggvMixXFQg2/by2ftv/NWkgrxD98Rt+o9rYYhdL9kSHxZGkivE2x/kgiEUHM 29T8CZB4yPqF4Sc8zbfkpwbiVBWeOeI/JmKJGz5zrWSqGstx3Z7gNrXg3LkPdVJe 2hklUaJhZcic8e7wjTZxL3SciX/2bjLG1sNcsmcE67/HAFpi/S7XuFGagtWUXvL1 u+ep/HzXQ2+o+0OfoD7kr6InxEtbOKgMkcAQbVL7QKmH0O37+LCOYzsGSXZvVIPN GkzgHRQSPdzxpC0FF1/hzzlovcvKGqa6gAbTs3mmO960H/pBLYu1vXZIplzFl0bJ c1z7G35l2tMtgIqssmbbZ00HAgMBAAGjggKTMIICjzAdBgNVHQ4EFgQUyiQYMbBG TkhMxc8DL4xlVPGPOHQwHwYDVR0jBBgwFoAUL/lZl1deZzKwh5DXV/bBoMXyu/ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3NTc5Lzc4ODUwMjUyNDM3 QzExRjFCMzZEM0IyNEMxODMzNzczL0xfbFpsMWRlWnpLd2g1RFhWX2JCb01YeXVf by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTF9sWmwxZGVaekt3aDVEWFZfYkJvTVh5dV9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU3OS83ODg1MDI1MjQzN0MxMUYxQjM2RDNCMjRDMTgzMzc3My9CODRBNkYyRTRG RjQxMUYxOEU2MzI2OERCNjgzMzc3My5yb2EwUgYIKwYBBQUHAQcBAf8EQzBBMDAE AgABMCoDBABnKG0DBAFnUBQDBABn824DBAJn+5ADBAG2oUADBADLH0EDBAHLN1ow DQQCAAIwBwMFACQH0IAwDQYJKoZIhvcNAQELBQADggEBAI+ifnz7d91C87XKjVod lUGxr5z5WYYYvNlzHjrtx9Ndc8sm3dGzKH5q8zkB8BShsLJeiL0GIWP3+H6OC4Z9 uvFrEjXa4qDxILZ1JvyDoXIaTBrkDcU/AIvpENw04R/xMjW4jIFxdqd7q0zdi3fv jNYJAM5LGopSucjknH3YLRdME3JV+ppRQUn36Nq+owwz0O0Mvf0DwnQyER58mngI 9oYiuHWBtmDGUPdQfEOXtz9PXx4H7/MO6vXe0hWhmPxOZDTbQPic8wlM3GBwpz3E i2G+TC9kBBncDjmb8GC9+i4tAS/+QmK4sUtbo/GQzGhjUGb/JELi9NntE87Dud7U DGI= -----END CERTIFICATE-----Generated at Tue Jun 2 22:11:34 2026 by rpki-client