$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/8DBBDE9C5DEF11F18C01C64FBD833773.roa File: 8DBBDE9C5DEF11F18C01C64FBD833773.roa (raw, json) Hash identifier: 7b/Lfw2aHzuIkV4xitvizUnPInwhgKAGehvAixn2H/E= Subject key identifier: 68:69:70:16:6D:A6:1B:D8:F9:C7:D2:A5:18:00:58:21:FA:06:EC:04 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0D0A Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/8DBBDE9C5DEF11F18C01C64FBD833773.roa Signing time: Mon 01 Jun 2026 19:24:48 +0000 ROA not before: Mon 01 Jun 2026 19:24:48 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 131474 IP address blocks: 103.123.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3338 (0xd0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: Jun 1 19:24:48 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a1ddc80-0cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:eb:11:6f:e1:cc:ad:58:28:a9:2f:61:e9: 06:86:26:0f:d9:18:7a:aa:3e:bb:a4:49:da:ec:a8: 0f:36:03:20:11:90:f3:9c:5c:f5:89:d6:7a:c1:3e: 32:ef:78:da:32:d4:1d:1d:49:a6:b7:91:fd:13:47: 10:e5:7b:6d:b4:2f:9a:fc:f5:d5:30:f2:7e:29:8c: 7d:20:71:ce:73:2b:9c:48:07:39:04:46:af:f0:00: 4f:7c:18:04:a3:9b:75:ac:55:53:2a:a0:32:31:cd: 26:6a:67:be:cf:47:23:d3:4e:64:29:78:8e:b7:89: c6:a9:17:8c:e5:bb:17:47:77:54:4e:df:72:72:b9: 67:7c:ff:33:87:b3:40:5c:4d:fd:a9:71:2e:bd:a1: 14:bc:db:0d:a9:0f:5d:05:f8:35:ec:b3:c0:19:d8: fb:60:06:31:74:ed:23:1a:89:c0:eb:45:f4:be:e8: a0:d4:7b:6d:fa:5b:a1:56:fc:fe:37:e7:f6:45:04: 78:64:17:2a:41:00:c4:8e:49:df:84:4e:c6:c0:c3: 38:d1:74:4b:db:6b:57:ce:8c:10:ad:3d:29:a5:58: 1c:87:bb:90:7e:e5:9d:dd:b1:17:98:95:47:59:d7: 14:14:48:33:81:3e:1d:61:6c:76:50:07:d3:8b:17: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:69:70:16:6D:A6:1B:D8:F9:C7:D2:A5:18:00:58:21:FA:06:EC:04 X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/8DBBDE9C5DEF11F18C01C64FBD833773.roa sbgp-ipAddrBlock: critical IPv4: 103.123.168.0/24 Signature Algorithm: sha256WithRSAEncryption 11:5f:81:61:e3:b8:ce:c8:eb:43:92:2f:18:dd:e4:66:04:f2: 08:8f:ff:7b:ff:22:34:5d:62:93:5d:be:67:59:69:5a:4c:11: 19:03:a7:28:d0:dc:96:d4:b5:04:1d:d7:71:d4:72:ee:af:b6: 7e:e0:3e:0d:0f:d5:1f:71:ba:e7:c2:48:fa:73:df:4c:56:df: c5:d6:47:2d:b3:96:3a:44:3d:7c:0c:4d:e2:f2:de:0b:36:c6: 60:8f:2d:5c:ca:c2:72:e8:98:83:ca:84:11:b9:6e:e8:13:ac: 8e:44:03:ab:8d:31:62:f7:65:21:8d:c5:29:6d:ec:97:89:f8: 67:89:6f:c7:70:18:19:aa:50:4a:74:e4:5c:d1:cd:89:44:57: 35:28:68:1d:4f:80:a2:c2:5a:7d:72:91:21:89:6b:17:03:30: c2:9d:fe:98:c4:80:7e:9b:20:1f:0a:4d:ca:5d:8b:d4:95:a6: 1e:ba:58:2e:00:81:8f:62:d5:40:99:e4:12:66:b7:13:20:1d: 87:8e:db:5e:20:03:11:4f:6b:bc:02:43:32:a0:cd:7a:5c:2a: db:dc:5f:01:94:66:b9:2f:1f:4d:db:59:33:be:74:63:88:9c: e1:f1:17:42:21:ca:36:b2:b1:da:20:dd:eb:cc:5a:14:6e:50: 09:7d:48:01 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjYwNjAxMTkyNDQ4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFkZGM4MC0wY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRjrEW/hzK1YKKkvYekGhiYP2Rh6qj67pEna7KgPNgMgEZDznFz1idZ6wT4y 73jaMtQdHUmmt5H9E0cQ5XtttC+a/PXVMPJ+KYx9IHHOcyucSAc5BEav8ABPfBgE o5t1rFVTKqAyMc0mame+z0cj005kKXiOt4nGqReM5bsXR3dUTt9ycrlnfP8zh7NA XE39qXEuvaEUvNsNqQ9dBfg17LPAGdj7YAYxdO0jGonA60X0vuig1Htt+luhVvz+ N+f2RQR4ZBcqQQDEjknfhE7GwMM40XRL22tXzowQrT0ppVgch7uQfuWd3bEXmJVH WdcUFEgzgT4dYWx2UAfTixeReQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGhpcBZt phvY+cfSpRgAWCH6BuwEMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNBRDcvMDdDRjhEN0EwQjg0MTFFQUEyMTY3ODRGQzRGOUFFMDIvOERCQkRFOUM1 REVGMTFGMThDMDFDNjRGQkQ4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ3uoMA0GCSqGSIb3DQEBCwUAA4IBAQARX4Fh47jOyOtDki8Y3eRm BPIIj/97/yI0XWKTXb5nWWlaTBEZA6co0NyW1LUEHddx1HLur7Z+4D4ND9Ufcbrn wkj6c99MVt/F1kcts5Y6RD18DE3i8t4LNsZgjy1cysJy6JiDyoQRuW7oE6yORAOr jTFi92UhjcUpbeyXifhniW/HcBgZqlBKdORc0c2JRFc1KGgdT4Ciwlp9cpEhiWsX AzDCnf6YxIB+myAfCk3KXYvUlaYeulguAIGPYtVAmeQSZrcTIB2HjtteIAMRT2u8 AkMyoM16XCrb3F8BlGa5Lx9N21kzvnRjiJzh8RdCIco2srHaIN3rzFoUblAJfUgB -----END CERTIFICATE-----Generated at Tue Jun 2 22:22:22 2026 by rpki-client