$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/614D895A75DC11F19A6AA48A6DA30FBC.roa File: 614D895A75DC11F19A6AA48A6DA30FBC.roa (raw, json) Hash identifier: J5F3yuhEXayGWTKZqGEyENb3lEvu+CWT2L181CXwpDw= Subject key identifier: 94:B0:A4:B0:31:E2:90:36:93:95:40:A9:F7:58:C9:58:D2:53:7A:A0 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0C43 Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/614D895A75DC11F19A6AA48A6DA30FBC.roa Signing time: Wed 05 Aug 2026 06:41:04 +0000 ROA not before: Wed 05 Aug 2026 06:41:04 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 2914 IP address blocks: 103.23.72.0/24 maxlen: 24 103.23.73.0/24 maxlen: 24 103.23.74.0/24 maxlen: 24 103.23.75.0/24 maxlen: 24 103.246.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Aug 5 06:41:04 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a72db00-0bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:33:74:c6:0e:95:6d:74:76:2a:74:39:3b:cb: 7d:45:12:e2:0e:11:4e:56:2f:75:3c:d7:06:4a:ec: 98:39:7b:f7:af:90:71:6d:93:9e:ec:c2:7c:6e:1f: 8f:ad:8e:70:00:8f:33:22:8b:72:ca:d3:1e:83:60: d3:95:07:19:62:6f:ed:35:ba:ac:05:cb:2b:c4:01: 7d:fb:eb:a4:bb:f1:7f:8d:2e:46:26:c8:92:a0:7c: bb:54:85:2c:a2:cb:0a:4c:80:24:ec:ca:1e:d1:24: 4c:02:29:00:6a:7b:f6:bd:43:94:85:9e:fc:0d:b6: ab:08:cb:c0:c1:1a:ae:dd:6f:e0:37:0a:e8:20:7e: a5:f1:f5:29:fb:3b:ec:c9:50:80:2d:4a:e6:05:60: a6:ea:af:5c:62:bb:ac:82:a4:e7:d2:ef:f0:68:c3: 7c:14:e4:ff:e4:7e:ab:8a:b9:08:0e:94:ee:4d:83: 5f:32:df:26:12:7b:71:8a:42:51:1b:bd:77:62:20: b4:29:9f:ce:a6:fe:dd:41:f8:f0:26:03:83:13:56: e0:22:6c:ac:db:6e:a9:5d:02:99:13:d2:6c:47:6f: 16:ae:8d:d6:95:13:b0:2c:04:eb:c2:d8:c7:3c:38: 87:03:0e:e5:60:4e:c8:fa:48:2f:8f:19:46:43:b5: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B0:A4:B0:31:E2:90:36:93:95:40:A9:F7:58:C9:58:D2:53:7A:A0 X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/614D895A75DC11F19A6AA48A6DA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.23.72.0/22 103.246.252.0/24 Signature Algorithm: sha256WithRSAEncryption be:e0:75:89:b2:8c:80:8f:b2:0e:b4:5b:b2:67:2f:f8:ea:08: 70:2a:a1:ec:f4:74:34:9e:87:d1:4c:14:e6:5e:ad:f5:f9:05: 96:f9:f7:e6:71:a1:80:54:bf:bc:2d:b0:98:66:55:0d:59:3f: af:d8:32:54:25:e4:5c:0b:de:69:aa:b4:77:f2:02:a3:d0:37: c0:99:61:8c:09:13:bd:f0:b9:5b:8b:4e:a8:cf:38:7c:fe:cb: 02:7b:3f:0b:22:33:d9:bc:b7:7d:c9:3e:e8:33:73:31:61:93: 29:ee:5e:88:3b:e4:e0:c6:29:8d:52:e0:77:67:46:d3:20:b7: 8e:11:f6:86:93:cf:42:88:3c:57:b6:ed:13:92:33:93:71:f8: 7d:cc:28:1b:7a:15:ec:39:64:35:f6:77:15:a1:b4:57:63:a5: 05:9b:52:0b:28:39:e0:6a:41:b8:59:d5:18:97:2a:9f:bf:b4: a2:5e:9d:83:6b:37:80:1d:ed:50:4d:4d:14:24:37:df:69:1f: 69:56:a1:c5:3a:ef:f6:a3:9f:78:9d:9e:62:68:3d:58:31:73: 98:c4:2f:fb:8c:6c:db:0b:4c:c2:6b:2d:8c:dc:a1:e0:7d:ab: 4c:0e:8f:17:a5:39:8b:2e:4c:73:ca:d4:68:76:3b:93:a9:11: ad:00:9c:32 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYwODA1MDY0MTA0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcyZGIwMC0wYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TN0xg6VbXR2KnQ5O8t9RRLiDhFOVi91PNcGSuyYOXv3r5BxbZOe7MJ8bh+P rY5wAI8zIotyytMeg2DTlQcZYm/tNbqsBcsrxAF9++uku/F/jS5GJsiSoHy7VIUs ossKTIAk7Moe0SRMAikAanv2vUOUhZ78DbarCMvAwRqu3W/gNwroIH6l8fUp+zvs yVCALUrmBWCm6q9cYrusgqTn0u/waMN8FOT/5H6rirkIDpTuTYNfMt8mEntxikJR G713YiC0KZ/Opv7dQfjwJgODE1bgImys226pXQKZE9JsR28Wro3WlROwLATrwtjH PDiHAw7lYE7I+kgvjxlGQ7WbmwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJSwpLAx 4pA2k5VAqfdYyVjSU3qgMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNDAvNjE3RjM1MzY0MEUxMTFFQUJDNjJEQjI2QzRGOUFFMDIvNjE0RDg5NUE3 NURDMTFGMTlBNkFBNDhBNkRBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZxdIAwQAZ/b8MA0GCSqGSIb3DQEBCwUAA4IBAQC+4HWJsoyAj7IO tFuyZy/46ghwKqHs9HQ0nofRTBTmXq31+QWW+ffmcaGAVL+8LbCYZlUNWT+v2DJU JeRcC95pqrR38gKj0DfAmWGMCRO98Llbi06ozzh8/ssCez8LIjPZvLd9yT7oM3Mx YZMp7l6IO+TgximNUuB3Z0bTILeOEfaGk89CiDxXtu0TkjOTcfh9zCgbehXsOWQ1 9ncVobRXY6UFm1ILKDngakG4WdUYlyqfv7SiXp2DazeAHe1QTU0UJDffaR9pVqHF Ou/2o594nZ5iaD1YMXOYxC/7jGzbC0zCay2M3KHgfatMDo8XpTmLLkxzytRodjuT qRGtAJwy -----END CERTIFICATE-----Generated at Wed Aug 19 13:39:30 2026 by rpki-client