$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/CD284E600CEE11EB88376B5BC4F9AE02.roa File: CD284E600CEE11EB88376B5BC4F9AE02.roa (raw, json) Hash identifier: 816YLoIvH9Oaj07rOnlACoUv6ymscAs9lYY/BFhZ/Lc= Subject key identifier: D2:44:40:02:C8:B3:19:62:2B:95:38:46:61:5F:E4:B6:AB:5A:55:E2 Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Certificate serial: 0885 Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/CD284E600CEE11EB88376B5BC4F9AE02.roa Signing time: Sat 04 Jul 2026 21:22:27 +0000 ROA not before: Sat 04 Jul 2026 21:22:27 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 55720 IP address blocks: 103.248.20.0/24 maxlen: 24 103.248.21.0/24 maxlen: 24 103.248.22.0/24 maxlen: 24 103.248.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 21:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Validity Not Before: Jul 4 21:22:27 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a497993-614f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:8d:38:01:ea:e7:3a:b2:82:09:c2:d3:ff: 1a:7d:34:4c:46:9d:86:e4:42:db:52:27:f8:14:63: 1d:71:cc:cc:55:1c:68:1e:6c:c9:6f:e6:44:65:1f: d8:3e:b9:11:1f:91:cc:c2:48:1f:89:66:ee:97:4e: a9:79:b7:95:72:85:48:c5:5c:ca:f1:71:e6:42:07: 72:db:38:f7:19:11:74:42:d6:31:84:e5:bb:6b:04: b3:25:84:31:75:28:69:e3:23:8e:1e:e4:c1:1d:e5: e5:b9:cf:53:14:52:e9:cc:04:6e:09:8a:06:7d:18: cb:58:d3:ad:a3:d5:9f:8f:16:bc:b1:04:5e:0b:be: 5f:63:6f:b3:43:af:b7:25:b8:23:99:41:77:a6:a2: c5:7b:7b:97:cd:05:3c:e5:18:b0:ff:c8:25:82:fe: 5a:7a:f8:56:9b:5d:e4:e0:02:79:37:23:69:27:e4: 5d:60:91:ee:96:ad:28:4c:63:0e:ff:27:11:20:b0: d5:31:45:e9:6b:07:dd:e0:2d:1e:44:96:c1:7d:de: 9b:70:42:17:58:cd:0e:af:7c:83:04:4c:6d:8c:82: ec:bd:6b:19:99:b4:da:01:45:8b:f1:7b:62:48:3f: af:6d:cb:46:21:fb:a1:02:25:1c:2c:dc:a6:5a:e7: fb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:44:40:02:C8:B3:19:62:2B:95:38:46:61:5F:E4:B6:AB:5A:55:E2 X509v3 Authority Key Identifier: keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/CD284E600CEE11EB88376B5BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.248.20.0/22 Signature Algorithm: sha256WithRSAEncryption 96:23:cd:b9:28:80:97:39:70:a6:57:0b:28:e1:30:3e:d2:94: 58:b1:1d:54:8a:76:b7:3e:ce:bd:ea:0d:5e:6b:64:f0:df:5b: f8:6e:ee:aa:a1:dd:ff:6c:2a:e7:98:ab:5e:2c:f2:b5:82:88: ab:d3:04:c0:07:83:6e:41:fe:dd:68:62:85:6c:d1:cd:56:28: 86:0c:5a:29:e2:e3:95:74:ff:a1:e0:55:c7:ad:a9:df:77:b4: 84:2d:01:dd:03:9f:6e:2d:ca:d5:37:d0:48:a2:a7:7a:3b:03: 23:68:97:48:ea:ea:95:ac:28:94:84:e7:2d:a8:34:53:1b:6a: 55:d4:d5:bc:7c:52:44:1a:7e:6c:bc:f2:7d:88:0d:cd:f5:4d: 99:d6:83:8f:59:25:aa:75:8e:d7:63:0e:6c:3b:be:f6:a8:1c: 43:92:f8:70:32:70:99:09:9c:a9:0d:de:02:46:d5:51:3d:6e: 2c:a8:72:54:1c:50:ad:be:d2:db:b0:71:09:6e:96:95:bb:db: 65:0f:94:0b:41:71:de:2d:88:f6:1c:12:fd:45:c3:16:a4:c1: 1a:ed:e3:d6:dc:a0:e4:9f:6d:fc:b2:56:38:91:9a:e1:ff:e6: 6f:77:77:f2:bd:dd:85:2a:fa:1d:17:b9:4b:c5:f0:0b:fe:4d: d0:e8:35:28 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB RjE3OTFGMjEwHhcNMjYwNzA0MjEyMjI3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5Nzk5My02MTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIqNOAHq5zqyggnC0/8afTRMRp2G5ELbUif4FGMdcczMVRxoHmzJb+ZEZR/Y PrkRH5HMwkgfiWbul06pebeVcoVIxVzK8XHmQgdy2zj3GRF0QtYxhOW7awSzJYQx dShp4yOOHuTBHeXluc9TFFLpzARuCYoGfRjLWNOto9Wfjxa8sQReC75fY2+zQ6+3 JbgjmUF3pqLFe3uXzQU85Riw/8glgv5aevhWm13k4AJ5NyNpJ+RdYJHulq0oTGMO /ycRILDVMUXpawfd4C0eRJbBfd6bcEIXWM0Or3yDBExtjILsvWsZmbTaAUWL8Xti SD+vbctGIfuhAiUcLNymWuf7RQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNJEQALI sxliK5U4RmFf5LarWlXiMB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVFNzcvRDlCRTA3QkEwQ0VEMTFFQkE3RjExMTVCQzRGOUFFMDIvQ0QyODRFNjAw Q0VFMTFFQjg4Mzc2QjVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/gUMA0GCSqGSIb3DQEBCwUAA4IBAQCWI825KICXOXCmVwso4TA+ 0pRYsR1Uina3Ps696g1ea2Tw31v4bu6qod3/bCrnmKteLPK1goir0wTAB4NuQf7d aGKFbNHNViiGDFop4uOVdP+h4FXHranfd7SELQHdA59uLcrVN9BIoqd6OwMjaJdI 6uqVrCiUhOctqDRTG2pV1NW8fFJEGn5svPJ9iA3N9U2Z1oOPWSWqdY7XYw5sO772 qBxDkvhwMnCZCZypDd4CRtVRPW4sqHJUHFCtvtLbsHEJbpaVu9tlD5QLQXHeLYj2 HBL9RcMWpMEa7ePW3KDkn238slY4kZrh/+Zvd3fyvd2FKvodF7lLxfAL/k3Q6DUo -----END CERTIFICATE-----Generated at Sat Jul 18 00:15:56 2026 by rpki-client