$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/14A4E3F099E211EAAC99C833C4F9AE02.roa File: 14A4E3F099E211EAAC99C833C4F9AE02.roa (raw, json) Hash identifier: icEGC8iWrZAuCb+Toy7ITwaY5wPDLr4xdAi9iPNhR7A= Subject key identifier: 09:54:64:EE:65:F2:19:7F:B1:E8:01:3C:B0:0E:20:13:A2:A4:7C:C2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0A42 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/14A4E3F099E211EAAC99C833C4F9AE02.roa Signing time: Fri 10 Jul 2026 20:21:38 +0000 ROA not before: Fri 10 Jul 2026 20:21:38 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 139004 IP address blocks: 103.138.120.0/22 maxlen: 24 2001:df0:3b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 19:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2626 (0xa42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Jul 10 20:21:38 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a515451-9690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:13:f7:ea:e2:b7:f0:88:5b:35:c3:cc:40:34: 30:ac:36:53:cf:f8:90:04:66:ff:9b:d5:ce:4b:30: d9:88:71:cc:07:2a:6a:25:f3:f4:c6:82:42:87:c0: 09:1a:bb:1c:e1:5b:90:9d:3f:91:31:e0:74:a8:4f: 5d:b2:fc:1d:48:1e:05:12:a2:32:8c:80:2c:19:9b: b9:7d:79:d6:0b:7e:13:54:9c:bd:7c:b4:09:cd:fc: 07:78:4a:e2:12:ab:0b:95:5c:ef:63:7a:c2:20:3a: 4f:47:92:1c:47:d0:c9:cc:15:9f:67:e3:1e:7d:94: 7b:37:a2:25:91:46:db:0e:e1:9c:04:73:4e:96:da: a4:8b:80:c4:57:3c:f9:77:56:35:d0:67:d2:a9:a3: 56:63:85:9d:f9:4d:12:e9:32:bb:30:df:90:cb:24: 17:9b:bd:81:5e:fa:46:91:d6:da:6e:2f:fe:90:7c: 98:70:6e:5a:e9:4a:28:a5:3e:6d:7c:49:3e:6e:c3: f1:fb:05:ec:39:8f:b1:f3:0c:4f:e1:be:a6:39:ae: 57:1c:cc:2f:9f:b2:ed:0a:69:54:4e:6a:69:e3:a3: e3:4f:a5:e6:30:22:0d:c7:eb:de:b7:c1:58:f5:6d: e9:a2:f7:2b:38:76:d9:75:1e:0d:c7:b2:7d:3d:52: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:54:64:EE:65:F2:19:7F:B1:E8:01:3C:B0:0E:20:13:A2:A4:7C:C2 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/14A4E3F099E211EAAC99C833C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.120.0/22 IPv6: 2001:df0:3b80::/48 Signature Algorithm: sha256WithRSAEncryption a4:75:fe:79:34:1f:d4:aa:3e:8f:5e:a1:49:91:fa:b6:70:0a: c1:44:a6:b9:e7:8a:43:ce:2a:bc:10:ca:1a:48:83:27:24:94: 5c:b7:e1:27:20:c7:66:08:8c:18:75:61:61:62:ef:df:01:d7: c3:05:eb:4f:91:c7:92:d9:c5:db:93:be:70:39:c6:3a:20:44: 6c:b7:77:ec:e7:a0:05:4e:b4:ef:f3:8d:21:83:13:4f:24:3f: 3d:7a:18:ca:37:58:77:7c:72:9f:42:7c:e0:26:52:ad:dc:56: 92:d8:60:7a:c8:e8:55:dc:06:0f:4e:b2:b0:d5:cb:d2:db:fb: 2c:6e:c9:e5:41:5c:7f:48:38:2f:ae:3b:3a:96:1a:d6:ed:99: da:a1:c0:d4:ba:d3:a7:a7:f6:5a:4c:27:81:5a:e0:5b:3f:7b: d0:bd:64:41:02:15:46:d2:15:fb:dc:f2:3f:22:3f:8c:db:2d: 14:ee:98:99:ba:a9:d0:89:08:14:e9:90:f0:56:4e:55:c3:3b: 99:af:16:57:77:f9:bb:16:82:3a:0d:a0:40:86:a1:10:5a:65: 8f:66:ac:bd:03:79:52:13:8d:b1:f3:43:d2:36:72:76:64:75: e1:ea:95:4f:7d:95:da:49:61:48:ef:74:02:b8:c8:10:ee:3c: 6e:ee:76:9c -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjYwNzEwMjAyMTM4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTUxNTQ1MS05NjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBP36uK38IhbNcPMQDQwrDZTz/iQBGb/m9XOSzDZiHHMBypqJfP0xoJCh8AJ Grsc4VuQnT+RMeB0qE9dsvwdSB4FEqIyjIAsGZu5fXnWC34TVJy9fLQJzfwHeEri EqsLlVzvY3rCIDpPR5IcR9DJzBWfZ+MefZR7N6IlkUbbDuGcBHNOltqki4DEVzz5 d1Y10GfSqaNWY4Wd+U0S6TK7MN+QyyQXm72BXvpGkdbabi/+kHyYcG5a6UoopT5t fEk+bsPx+wXsOY+x8wxP4b6mOa5XHMwvn7LtCmlUTmpp46PjT6XmMCINx+vet8FY 9W3povcrOHbZdR4Nx7J9PVL8bQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAlUZO5l 8hl/segBPLAOIBOipHzCMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI4QzEvRjhBRkExNDA5OUUwMTFFQTk2NjUyRjMyQzRGOUFFMDIvMTRBNEUzRjA5 OUUyMTFFQUFDOTlDODMzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ4p4MA8EAgACMAkDBwAgAQ3wO4AwDQYJKoZIhvcNAQELBQADggEB AKR1/nk0H9SqPo9eoUmR+rZwCsFEprnnikPOKrwQyhpIgycklFy34Scgx2YIjBh1 YWFi798B18MF60+Rx5LZxduTvnA5xjogRGy3d+znoAVOtO/zjSGDE08kPz16GMo3 WHd8cp9CfOAmUq3cVpLYYHrI6FXcBg9OsrDVy9Lb+yxuyeVBXH9IOC+uOzqWGtbt mdqhwNS606en9lpMJ4Fa4Fs/e9C9ZEECFUbSFfvc8j8iP4zbLRTumJm6qdCJCBTp kPBWTlXDO5mvFld3+bsWgjoNoECGoRBaZY9mrL0DeVITjbHzQ9I2cnZkdeHqlU99 ldpJYUjvdAK4yBDuPG7udpw= -----END CERTIFICATE-----Generated at Sat Jul 18 08:23:26 2026 by rpki-client