$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/CA585D04695611F1B5B78DB37347A888.roa File: CA585D04695611F1B5B78DB37347A888.roa (raw, json) Hash identifier: 2w+4FRPq9PLl3sJ8KEWwhZgoS0HJeWcUkVXycyWZGm0= Subject key identifier: 65:6D:E3:25:CB:6E:37:48:94:A8:0C:E1:DB:09:BC:53:73:61:AE:51 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 09AD Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/CA585D04695611F1B5B78DB37347A888.roa Signing time: Sat 10 Oct 2026 22:44:26 +0000 ROA not before: Sat 10 Oct 2026 22:44:26 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 40065 IP address blocks: 103.20.222.0/24 maxlen: 24 103.20.223.0/24 maxlen: 24 150.129.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 22:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2477 (0x9ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 10 22:44:26 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acabfca-beaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:d7:32:f0:e8:38:d8:2d:62:ae:b1:40:b2: 52:e9:3f:6a:62:84:fa:f1:92:a0:f6:c1:45:5f:10: 52:78:61:9a:d2:b0:f0:9d:6c:f4:74:f4:6a:d2:ce: 14:bf:99:61:7b:5e:c0:71:c6:ac:59:39:fb:e4:33: ac:74:43:ff:70:b3:4b:d6:99:23:66:a6:12:09:85: 42:16:cf:ec:b9:58:be:ce:de:49:7d:a5:fc:fe:e9: 19:c7:e3:6a:75:fc:5c:d2:bd:d5:53:06:e7:d7:32: 72:25:24:79:7a:2f:52:a9:ff:02:74:31:27:38:4c: be:66:e6:5a:2c:45:60:54:67:97:80:c5:c2:f7:c1: a9:44:b7:f0:dc:43:d6:68:83:62:59:d6:3a:bc:8b: c3:6f:5f:06:05:bc:f8:48:9d:18:1d:9e:6c:92:c1: df:f2:df:9d:f2:0d:2b:1c:48:9e:6a:8b:0d:6f:71: 36:ee:bf:3b:a6:2f:ac:54:81:fa:1f:f8:6b:9b:cf: d2:3d:3c:57:26:07:9a:f2:cc:60:bb:21:67:86:d0: d5:51:6c:85:0b:cc:cb:32:9c:e4:28:a1:ac:2a:38: 69:ef:db:5e:db:a9:71:d8:dc:64:39:22:00:69:74: 18:7d:6a:36:75:c2:cf:1d:dd:1b:34:b5:52:9d:c4: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6D:E3:25:CB:6E:37:48:94:A8:0C:E1:DB:09:BC:53:73:61:AE:51 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/CA585D04695611F1B5B78DB37347A888.roa sbgp-ipAddrBlock: critical IPv4: 103.20.222.0/23 150.129.41.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:47:5a:38:0e:55:ad:a1:f0:0e:81:d3:f1:02:0d:f9:0e:eb: 22:7b:74:e4:f5:d4:47:21:9f:4a:4c:8d:63:f4:a8:28:65:eb: 56:5e:17:27:dd:ec:9e:64:35:43:d9:d5:9a:08:97:9e:53:ba: 78:07:e5:86:a5:76:6e:ad:18:f8:69:c1:90:f6:cf:8b:c5:91: cc:7b:32:ae:f8:e3:0b:fc:68:57:96:45:c2:2a:dd:54:4c:78: e2:d2:fe:6f:b7:97:1b:95:bd:15:76:ac:35:a5:68:9c:ba:d3: cc:17:c6:b6:f7:c5:de:03:28:d8:83:16:b4:8b:1a:02:c7:e5: 76:7e:13:4a:4d:1c:09:cf:af:aa:65:66:ff:ff:92:e1:79:a3: dd:e8:33:64:19:1c:29:b1:aa:b6:bc:a5:a3:ad:70:23:1a:e1: bb:03:47:5f:09:3e:a7:b5:b0:08:97:e6:c5:52:fd:b6:75:9c: c6:87:74:75:68:55:be:ed:56:15:a9:1d:c3:69:4e:17:f9:b3: 8a:9e:a9:62:17:e2:e1:5b:15:f4:f0:8e:1c:14:73:4c:5e:cc: 72:d6:50:77:c6:f9:6e:8c:6b:cf:23:5d:3d:9a:43:0f:87:b2: 28:4a:94:14:43:bb:1b:23:b1:40:69:ce:02:63:69:2a:a0:35: 1c:81:96:61 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYxMDEwMjI0NDI2WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhYmZjYS1iZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfTXMvDoONgtYq6xQLJS6T9qYoT68ZKg9sFFXxBSeGGa0rDwnWz0dPRq0s4U v5lhe17AccasWTn75DOsdEP/cLNL1pkjZqYSCYVCFs/suVi+zt5JfaX8/ukZx+Nq dfxc0r3VUwbn1zJyJSR5ei9Sqf8CdDEnOEy+ZuZaLEVgVGeXgMXC98GpRLfw3EPW aINiWdY6vIvDb18GBbz4SJ0YHZ5sksHf8t+d8g0rHEieaosNb3E27r87pi+sVIH6 H/hrm8/SPTxXJgea8sxguyFnhtDVUWyFC8zLMpzkKKGsKjhp79te26lx2NxkOSIA aXQYfWo2dcLPHd0bNLVSncR2xQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGVt4yXL bjdIlKgM4dsJvFNzYa5RMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvQ0E1ODVEMDQ2 OTU2MTFGMUI1Qjc4REIzNzM0N0E4ODgucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZxTeAwQAloEpMA0GCSqGSIb3DQEBCwUAA4IBAQB9R1o4DlWtofAO gdPxAg35Dusie3Tk9dRHIZ9KTI1j9KgoZetWXhcn3eyeZDVD2dWaCJeeU7p4B+WG pXZurRj4acGQ9s+LxZHMezKu+OML/GhXlkXCKt1UTHji0v5vt5cblb0Vdqw1pWic utPMF8a298XeAyjYgxa0ixoCx+V2fhNKTRwJz6+qZWb//5LheaPd6DNkGRwpsaq2 vKWjrXAjGuG7A0dfCT6ntbAIl+bFUv22dZzGh3R1aFW+7VYVqR3DaU4X+bOKnqli F+LhWxX08I4cFHNMXsxy1lB3xvlujGvPI109mkMPh7IoSpQUQ7sbI7FAac4CY2kq oDUcgZZh -----END CERTIFICATE-----Generated at Fri Oct 23 10:03:20 2026 by rpki-client