$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/B0604836C95A11F0930CD216C4F9AE02.roa File: B0604836C95A11F0930CD216C4F9AE02.roa (raw, json) Hash identifier: oCQ1G/cB7TCeHKMDNbFEVWrOPNKnyydcJqHYFPTV4ek= Subject key identifier: 57:FC:3A:26:BC:83:FE:A9:F8:E0:7D:7F:04:8B:BA:36:D1:B9:B9:5B Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 1047 Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/B0604836C95A11F0930CD216C4F9AE02.roa Signing time: Sun 14 Jun 2026 18:20:29 +0000 ROA not before: Sun 14 Jun 2026 18:20:29 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 139008 IP address blocks: 103.138.144.0/23 maxlen: 23 103.138.144.0/24 maxlen: 24 103.138.145.0/24 maxlen: 24 103.152.212.0/23 maxlen: 23 103.152.212.0/24 maxlen: 24 103.152.213.0/24 maxlen: 24 2001:df0:3f80::/48 maxlen: 48 2406:2c0::/32 maxlen: 32 2406:2c0:1100::/40 maxlen: 40 2406:2c0:1101::/48 maxlen: 48 2406:2c0:1102::/48 maxlen: 48 2406:2c0:1104::/48 maxlen: 48 2406:2c0:110b::/48 maxlen: 48 2406:2c0:110d::/48 maxlen: 48 2406:2c0:110e::/48 maxlen: 48 2406:2c0:112b::/48 maxlen: 48 2406:2c0:1132::/48 maxlen: 48 2406:2c0:113b::/48 maxlen: 48 2406:2c0:7100::/40 maxlen: 40 2406:2c0:8100::/40 maxlen: 40 2406:2c0:8101::/48 maxlen: 48 2406:2c0:8102::/48 maxlen: 48 2406:2c0:8104::/48 maxlen: 48 2406:2c0:8105::/48 maxlen: 48 2406:2c0:8106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 17:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4167 (0x1047) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: Jun 14 18:20:29 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a2ef0ed-a9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:89:c1:f4:39:6b:e6:5a:88:0a:4e:fe:43: 96:62:c4:78:1a:cf:33:9e:e7:4b:a5:21:7c:c3:c8: f6:02:b9:b0:fe:f1:00:f6:c2:f5:a9:11:0f:db:06: d5:a4:97:ce:e8:0d:4c:32:98:59:7d:40:a2:ea:84: 13:2e:6e:f8:7b:8d:2b:b0:d9:88:3e:42:bb:74:cd: c3:33:1f:52:56:5d:aa:c3:c2:9f:5c:21:34:52:94: 21:ef:5b:07:01:e0:d1:e0:bf:9e:0d:a9:a5:37:b4: 8e:d3:e3:c4:f2:d0:f6:b9:28:43:72:25:b4:e6:b6: 02:84:27:66:42:82:41:11:b7:bf:ab:17:d9:1a:c3: f1:b8:e1:e7:0c:a5:cb:79:77:67:67:a5:e9:45:74: 54:2c:d9:73:0b:03:79:bd:a9:b8:23:bb:70:2a:2a: af:d5:c9:2e:3f:e2:e9:26:61:25:53:ea:75:63:99: 9b:18:da:c0:2b:4e:71:cb:9a:ac:08:64:47:f1:db: c3:39:bd:2c:48:c2:fc:c1:54:43:7b:c7:70:0b:53: 90:75:a1:fb:44:21:f2:be:01:f6:4c:8c:0b:42:a1: 47:37:57:1c:08:35:d5:75:95:98:9e:4b:6a:78:52: f6:46:1b:d8:da:ea:b1:b3:cb:79:d8:3e:38:71:c1: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FC:3A:26:BC:83:FE:A9:F8:E0:7D:7F:04:8B:BA:36:D1:B9:B9:5B X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/B0604836C95A11F0930CD216C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.144.0/23 103.152.212.0/23 IPv6: 2001:df0:3f80::/48 2406:2c0::/32 Signature Algorithm: sha256WithRSAEncryption 46:b5:08:f0:38:87:26:bd:3b:15:52:6b:db:3e:dd:d8:a1:71: 4a:0b:68:2a:76:b6:82:dc:f8:07:30:d6:24:74:df:22:5d:d8: 87:36:53:2e:65:ac:30:3c:d4:c7:c2:c4:78:e0:fb:b3:36:50: f1:30:64:62:97:8e:fc:31:58:c9:b7:58:9c:6b:01:9a:66:6a: a6:59:07:20:7f:18:a7:d3:b3:72:05:a8:24:31:cc:a2:dc:e3: 0e:ce:ab:b9:35:18:cb:f1:f7:15:0e:51:35:3d:76:e1:cc:b4: 5a:2b:15:0c:5b:dc:05:31:4e:12:55:21:1f:06:c5:02:4b:78: 42:f8:f5:6e:03:01:34:a7:a5:57:29:61:4c:ff:35:ab:2f:30: a5:a0:fd:a9:7f:5e:bb:34:c7:7e:14:12:4d:12:10:a3:3d:c9: d8:3a:25:5a:e6:21:54:5d:23:1d:63:37:43:a3:5f:40:b2:54: 2c:dc:af:dd:cf:90:92:3a:5b:3b:cf:e2:b9:f7:34:dc:e0:a2: ba:30:02:12:41:84:a7:e7:8c:36:46:09:07:84:00:d4:b7:07: 27:b4:c3:a1:a5:38:dd:2b:86:50:31:f3:b3:9e:43:a6:a9:42: 72:34:f5:b5:9b:9a:b9:c6:44:43:ae:8c:4a:87:73:18:5b:66: f1:64:13:70 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICEEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjYwNjE0MTgyMDI5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJlZjBlZC1hOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+yJwfQ5a+ZaiApO/kOWYsR4Gs8znudLpSF8w8j2Armw/vEA9sL1qREP2wbV pJfO6A1MMphZfUCi6oQTLm74e40rsNmIPkK7dM3DMx9SVl2qw8KfXCE0UpQh71sH AeDR4L+eDamlN7SO0+PE8tD2uShDciW05rYChCdmQoJBEbe/qxfZGsPxuOHnDKXL eXdnZ6XpRXRULNlzCwN5vam4I7twKiqv1ckuP+LpJmElU+p1Y5mbGNrAK05xy5qs CGRH8dvDOb0sSML8wVRDe8dwC1OQdaH7RCHyvgH2TIwLQqFHN1ccCDXVdZWYnktq eFL2RhvY2uqxs8t52D44ccH9ZwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFf8Oia8 g/6p+OB9fwSLujbRublbMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlCREYvRTcwRTBBOTg3MDkzMTFFOTgwQkQ3QzNEQzRGOUFFMDIvQjA2MDQ4MzZD OTVBMTFGMDkzMENEMjE2QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQBZ4qQAwQBZ5jUMBYEAgACMBADBwAgAQ3wP4ADBQAkBgLAMA0GCSqG SIb3DQEBCwUAA4IBAQBGtQjwOIcmvTsVUmvbPt3YoXFKC2gqdraC3PgHMNYkdN8i XdiHNlMuZawwPNTHwsR44PuzNlDxMGRil478MVjJt1icawGaZmqmWQcgfxin07Ny BagkMcyi3OMOzqu5NRjL8fcVDlE1PXbhzLRaKxUMW9wFMU4SVSEfBsUCS3hC+PVu AwE0p6VXKWFM/zWrLzCloP2pf167NMd+FBJNEhCjPcnYOiVa5iFUXSMdYzdDo19A slQs3K/dz5CSOls7z+K59zTc4KK6MAISQYSn54w2RgkHhADUtwcntMOhpTjdK4ZQ MfOznkOmqUJyNPW1m5q5xkRDroxKh3MYW2bxZBNw -----END CERTIFICATE-----Generated at Sun Jul 5 09:24:18 2026 by rpki-client