$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/614D895A75DC11F19A6AA48A6DA30FBC.roa File: 614D895A75DC11F19A6AA48A6DA30FBC.roa (raw, json) Hash identifier: a9aKl465v7NDdlNX+gkLCpTJES/Srn/edKpf/fvxxmo= Subject key identifier: B4:CC:99:CD:69:60:7E:83:78:F9:D4:DA:35:D5:5A:E7:BD:4C:03:B1 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0C2F Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/614D895A75DC11F19A6AA48A6DA30FBC.roa Signing time: Thu 02 Jul 2026 06:08:01 +0000 ROA not before: Thu 02 Jul 2026 06:08:01 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 2914 IP address blocks: 103.23.72.0/24 maxlen: 24 103.23.73.0/24 maxlen: 24 103.23.74.0/24 maxlen: 24 103.23.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3119 (0xc2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Jul 2 06:08:01 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a460041-1d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:0a:c1:96:7e:97:ac:e9:4a:ef:e2:5b:f9: 72:a6:87:3b:44:27:aa:05:6b:f9:f8:f0:52:cf:54: 46:03:86:45:cd:b2:41:69:c3:03:e5:40:7c:9d:97: 11:55:f0:c3:6f:9a:ff:d6:e0:f1:44:2e:ac:59:8e: 98:7e:50:a7:bd:6e:7b:6b:85:f8:9f:56:b6:ae:94: e3:42:3b:08:07:82:4b:23:a3:d4:19:e6:8d:cc:d9: 23:ee:54:69:43:4a:dc:ef:3f:8f:5c:93:b1:f9:d9: 77:b5:10:90:ea:9f:d5:ab:5d:99:9a:27:08:de:88: f3:26:69:25:02:52:a1:2f:da:cd:87:fa:e2:b0:69: e0:cf:6b:2a:de:f5:57:d1:4c:a7:3e:7d:2b:aa:1c: e8:db:40:15:a3:81:48:12:dd:b8:da:73:ea:4c:63: 52:5a:47:21:aa:46:ca:30:b8:85:fa:53:c1:26:ec: 34:ac:45:70:ef:45:75:3b:34:18:38:e4:cd:be:7e: 11:01:33:74:d4:87:bd:0e:99:fd:22:eb:f7:8a:72: 78:cb:3b:90:74:ff:5c:ea:2f:3a:f3:b9:f5:e9:a1: c8:80:f3:8b:ee:8e:64:21:fa:b0:04:9e:f4:ec:bc: 75:69:7b:b4:3b:c7:4c:e9:21:a1:b9:11:c6:b9:9a: 30:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CC:99:CD:69:60:7E:83:78:F9:D4:DA:35:D5:5A:E7:BD:4C:03:B1 X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/614D895A75DC11F19A6AA48A6DA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.23.72.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:b5:4e:2b:d0:d1:f0:79:d2:4b:7f:17:ce:8e:ca:02:c7:cf: 95:3a:76:c3:89:1c:77:c9:32:c0:da:80:f6:60:06:f0:86:8e: 65:80:f2:98:b1:cd:89:14:15:9e:a0:23:ba:2b:58:3d:02:d9: cf:ea:02:88:e4:f1:f1:b6:fe:7f:c4:6b:d6:68:6a:3b:3d:bd: fc:b8:cc:e0:99:eb:7a:9b:bb:c8:2a:18:1c:3f:e7:a9:d0:be: c6:44:9b:91:1d:85:97:98:ce:f4:3a:b5:82:fd:4a:aa:40:0f: 60:09:01:22:78:cf:3a:57:d2:a3:b7:b7:dd:c2:20:2c:1e:a4: a9:ee:57:6c:1a:de:bc:05:c0:c8:79:9d:67:1b:c5:50:4f:14: 2b:63:c3:59:6f:90:d5:38:a8:8a:8d:a9:e7:15:ad:c8:84:70: cb:69:e8:60:39:5e:29:be:c1:50:47:09:68:69:82:b6:db:83: d0:4c:62:4f:d5:e0:c6:8c:64:60:4a:2f:b4:a5:a9:da:2b:70: 9d:84:3f:e0:9a:bf:bb:e0:14:7a:f7:a5:1f:f6:06:a1:60:9e: 87:c9:22:44:42:8c:e3:2d:56:08:0c:ad:3f:a4:69:03:bc:f7: ee:e9:37:59:8c:fa:52:57:f1:bf:a3:0c:e7:f1:11:b0:23:95: f4:59:e6:ab -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYwNzAyMDYwODAxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2MDA0MS0xZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZ0KwZZ+l6zpSu/iW/lypoc7RCeqBWv5+PBSz1RGA4ZFzbJBacMD5UB8nZcR VfDDb5r/1uDxRC6sWY6YflCnvW57a4X4n1a2rpTjQjsIB4JLI6PUGeaNzNkj7lRp Q0rc7z+PXJOx+dl3tRCQ6p/Vq12ZmicI3ojzJmklAlKhL9rNh/risGngz2sq3vVX 0UynPn0rqhzo20AVo4FIEt242nPqTGNSWkchqkbKMLiF+lPBJuw0rEVw70V1OzQY OOTNvn4RATN01Ie9Dpn9Iuv3inJ4yzuQdP9c6i8687n16aHIgPOL7o5kIfqwBJ70 7Lx1aXu0O8dM6SGhuRHGuZownwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLTMmc1p YH6DePnU2jXVWue9TAOxMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNDAvNjE3RjM1MzY0MEUxMTFFQUJDNjJEQjI2QzRGOUFFMDIvNjE0RDg5NUE3 NURDMTFGMTlBNkFBNDhBNkRBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxdIMA0GCSqGSIb3DQEBCwUAA4IBAQAutU4r0NHwedJLfxfOjsoC x8+VOnbDiRx3yTLA2oD2YAbwho5lgPKYsc2JFBWeoCO6K1g9AtnP6gKI5PHxtv5/ xGvWaGo7Pb38uMzgmet6m7vIKhgcP+ep0L7GRJuRHYWXmM70OrWC/UqqQA9gCQEi eM86V9Kjt7fdwiAsHqSp7ldsGt68BcDIeZ1nG8VQTxQrY8NZb5DVOKiKjannFa3I hHDLaehgOV4pvsFQRwloaYK224PQTGJP1eDGjGRgSi+0panaK3CdhD/gmr+74BR6 96Uf9gahYJ6HySJEQozjLVYIDK0/pGkDvPfu6TdZjPpSV/G/owzn8RGwI5X0Wear -----END CERTIFICATE-----Generated at Sun Jul 5 08:35:46 2026 by rpki-client