$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa File: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (raw, json) Hash identifier: SLCj9anN66mOHlI7TnJKqCN/QIRAStQO4Xz/z4ETHIw= Subject key identifier: 91:5E:0C:92:73:86:02:CA:9D:C9:C0:C9:38:94:8A:70:5E:93:1C:24 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 09A1 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa Signing time: Sat 10 Oct 2026 22:44:03 +0000 ROA not before: Sat 10 Oct 2026 22:44:03 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 150436 IP address blocks: 103.228.66.0/24 maxlen: 24 103.228.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 22:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2465 (0x9a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 10 22:44:03 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acabfb3-df82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8b:9f:91:60:66:63:75:09:4a:f9:77:c0:f9: a6:7e:56:5e:5a:4d:74:11:cd:f0:d6:5b:14:aa:0a: 51:56:6c:5d:c2:36:c0:00:2a:f9:1b:e5:ff:c5:b5: d9:64:c4:e8:77:8f:b0:4c:ac:11:28:8e:86:64:bb: e3:50:57:ee:1d:ff:66:41:b2:78:d0:e7:a4:2c:5e: e8:3c:3d:3a:c5:64:8a:0a:14:ce:37:b0:42:b2:d0: ce:d5:fe:68:b2:1b:5a:55:ba:f1:15:1c:46:e8:0c: b8:30:c0:42:ba:79:29:36:f7:82:8d:d9:95:07:7e: 22:ef:2d:1d:39:ac:b3:3f:62:ee:be:fa:09:de:04: df:6e:dd:17:82:e1:54:08:94:b6:79:3e:d0:99:0a: e1:6c:86:43:62:7d:11:09:7f:de:c9:46:49:83:11: 56:29:61:8e:3b:18:15:bd:cd:11:e0:df:90:ff:c9: 95:4f:12:ed:2f:f6:e3:e8:31:ae:26:d2:20:33:67: 22:d2:1f:3e:b5:11:f0:4c:c5:78:4b:90:a1:26:9f: 01:ee:fe:57:67:5a:ac:5f:78:93:8e:65:67:74:fd: 31:da:eb:54:7c:76:7c:07:43:94:a7:c5:41:4c:ec: 0f:2e:a6:13:b9:59:03:19:92:c5:06:21:a9:1b:4e: c0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5E:0C:92:73:86:02:CA:9D:C9:C0:C9:38:94:8A:70:5E:93:1C:24 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.228.66.0/23 Signature Algorithm: sha256WithRSAEncryption 74:11:8f:d2:30:7d:c7:64:eb:bc:63:ee:6d:5d:d7:db:e1:75: fa:39:59:66:ff:e9:46:18:b7:e6:b7:6c:41:12:ba:eb:7f:d4: 5d:f0:1c:72:8c:92:81:97:ba:61:3b:a5:67:c6:57:aa:2f:83: 10:53:26:f7:e5:59:c3:27:9a:84:42:28:27:cf:96:a8:11:a8: d2:1c:5d:d4:6e:b0:44:2c:de:61:fa:f7:38:ec:92:e0:9c:d8: fe:75:46:a5:5f:2f:6b:d1:01:f7:61:43:37:9e:32:dd:f6:18: 36:0f:86:78:d5:3b:d1:89:0d:ab:c3:95:2c:41:3a:55:e7:df: c6:ed:68:36:07:4c:9d:88:e9:db:ae:fe:01:8f:a1:89:1b:47: b4:be:00:7a:15:21:c1:b9:52:b9:3f:d7:f0:62:9c:7d:3c:f4: 6c:57:9f:e3:5a:87:22:4a:86:7e:48:6c:60:a2:f1:98:df:72: 5a:4e:43:0a:71:13:cc:bd:83:66:34:e9:31:ae:12:55:c2:7d: ba:6d:83:af:ba:1c:46:37:ee:97:45:bf:01:f3:5f:09:78:69: 71:7e:f5:82:68:35:52:5c:28:56:b6:6f:68:53:00:3c:f2:6a: 43:90:6b:d3:cc:14:23:f7:1a:90:b1:72:ef:e0:2b:af:31:52: 76:bd:da:3d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYxMDEwMjI0NDAzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhYmZiMy1kZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYufkWBmY3UJSvl3wPmmflZeWk10Ec3w1lsUqgpRVmxdwjbAACr5G+X/xbXZ ZMTod4+wTKwRKI6GZLvjUFfuHf9mQbJ40OekLF7oPD06xWSKChTON7BCstDO1f5o shtaVbrxFRxG6Ay4MMBCunkpNveCjdmVB34i7y0dOayzP2LuvvoJ3gTfbt0XguFU CJS2eT7QmQrhbIZDYn0RCX/eyUZJgxFWKWGOOxgVvc0R4N+Q/8mVTxLtL/bj6DGu JtIgM2ci0h8+tRHwTMV4S5ChJp8B7v5XZ1qsX3iTjmVndP0x2utUfHZ8B0OUp8VB TOwPLqYTuVkDGZLFBiGpG07AhQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJFeDJJz hgLKncnAyTiUinBekxwkMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNzM4Q0REM0Uy QzhBMTFFRjkzQjhBNzA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+RCMA0GCSqGSIb3DQEBCwUAA4IBAQB0EY/SMH3HZOu8Y+5tXdfb 4XX6OVlm/+lGGLfmt2xBErrrf9Rd8BxyjJKBl7phO6VnxleqL4MQUyb35VnDJ5qE Qignz5aoEajSHF3UbrBELN5h+vc47JLgnNj+dUalXy9r0QH3YUM3njLd9hg2D4Z4 1TvRiQ2rw5UsQTpV59/G7Wg2B0ydiOnbrv4Bj6GJG0e0vgB6FSHBuVK5P9fwYpx9 PPRsV5/jWociSoZ+SGxgovGY33JaTkMKcRPMvYNmNOkxrhJVwn26bYOvuhxGN+6X Rb8B818JeGlxfvWCaDVSXChWtm9oUwA88mpDkGvTzBQj9xqQsXLv4CuvMVJ2vdo9 -----END CERTIFICATE-----Generated at Sun Oct 25 19:48:49 2026 by rpki-client