$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DA3891D484AB11F0BEE30678C4F9AE02.roa File: DA3891D484AB11F0BEE30678C4F9AE02.roa (raw, json) Hash identifier: 6B35rfEKeNMxUR/KJBocQxmAcHhBBj7eKbxn9uCgQNE= Subject key identifier: A1:55:4A:58:C9:EA:C1:4C:F2:79:F6:BE:E5:F6:C4:3D:E4:80:E2:53 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 09AE Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DA3891D484AB11F0BEE30678C4F9AE02.roa Signing time: Sat 10 Oct 2026 22:44:29 +0000 ROA not before: Sat 10 Oct 2026 22:44:29 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 401948 IP address blocks: 103.209.233.0/24 maxlen: 24 103.209.234.0/24 maxlen: 24 163.53.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 22:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 10 22:44:29 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acabfcd-9c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:33:f2:ff:3c:08:c6:55:eb:38:0f:42:d0:16: ff:cb:4f:eb:00:e9:9e:93:0c:bf:ff:78:6c:41:bd: f9:ac:8e:9f:2e:6b:c1:7e:e6:2f:86:e2:be:5b:88: 24:b6:7b:5a:3d:b5:ef:2e:a2:e3:a1:de:00:6d:4f: c4:09:a0:f6:6f:87:96:6b:e0:a6:e1:02:0c:2e:be: 7b:49:97:14:fb:1b:06:3f:fc:3c:13:2e:0f:ac:83: 4a:53:87:b3:2a:9a:b3:96:f4:07:b0:c0:03:44:bc: c8:0e:17:9b:e8:68:d5:40:0e:c6:2a:91:ed:2a:bf: 97:d5:58:d2:a9:57:6d:e2:5b:18:3d:ec:64:09:db: a0:aa:d0:78:30:e2:d6:70:93:92:aa:73:a0:a9:ec: 4e:68:81:41:8b:9c:a9:6e:8f:49:ab:5e:6d:1e:24: 65:94:7e:2d:fc:59:b7:b6:89:f4:5b:98:69:6e:8d: 67:ca:97:a1:bd:79:74:95:32:c5:ce:f2:59:56:55: 93:dd:a7:11:84:34:9d:94:74:29:31:92:2c:d2:44: 0a:f9:b3:a2:c4:e5:3e:0a:df:db:59:ad:22:c3:8f: 81:bc:61:b2:1e:5e:5b:12:b6:1b:79:08:bf:f2:fa: 73:58:53:45:02:59:68:dc:d2:ba:5b:60:9e:7e:a8: c9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:55:4A:58:C9:EA:C1:4C:F2:79:F6:BE:E5:F6:C4:3D:E4:80:E2:53 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DA3891D484AB11F0BEE30678C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.209.233.0-103.209.234.255 163.53.17.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:34:76:c8:9f:75:7b:57:80:da:42:3b:3b:18:ee:32:40:f2: 8c:37:40:fb:61:5e:27:21:54:9e:ae:7d:d3:e7:5b:2d:d3:ab: d5:3b:fa:1a:d1:6c:7e:48:a2:7e:8e:57:a4:c2:7e:6c:35:30: 3a:eb:1e:d0:4a:7d:9a:eb:24:b4:48:10:b3:6a:82:0d:6b:10: 4c:7b:bc:13:1e:25:1c:67:f7:a8:bc:ee:84:c5:4b:d2:ac:bb: 66:94:7f:9b:df:64:c0:38:cd:15:20:c1:81:f5:ce:ce:f6:74: b0:bc:65:50:0b:c4:ba:9c:28:f7:da:08:0c:82:35:d3:ba:cf: de:31:0e:41:5b:05:e1:5d:93:21:48:b6:cb:60:2f:ff:b1:81: da:b3:9b:75:00:50:69:a6:cc:3d:34:9e:64:06:84:09:fb:e4: 33:dc:51:44:e9:32:10:d6:38:a0:8f:ff:14:cc:d8:65:0f:21: 66:c7:38:0e:a6:9a:f8:c1:08:03:50:9a:c3:ff:ce:99:8f:e3: cf:2c:2f:bb:59:7c:37:22:32:8d:12:b0:8b:77:09:47:af:90: 4d:ff:47:50:bc:b3:ad:b8:c1:84:ac:5b:6b:12:90:da:96:df: 6d:f1:d1:2a:94:40:00:7b:5b:a5:28:57:e8:09:79:1f:cc:92: bc:78:6e:8b -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYxMDEwMjI0NDI5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhYmZjZC05YzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjPy/zwIxlXrOA9C0Bb/y0/rAOmekwy//3hsQb35rI6fLmvBfuYvhuK+W4gk tntaPbXvLqLjod4AbU/ECaD2b4eWa+Cm4QIMLr57SZcU+xsGP/w8Ey4PrINKU4ez KpqzlvQHsMADRLzIDheb6GjVQA7GKpHtKr+X1VjSqVdt4lsYPexkCdugqtB4MOLW cJOSqnOgqexOaIFBi5ypbo9Jq15tHiRllH4t/Fm3ton0W5hpbo1nypehvXl0lTLF zvJZVlWT3acRhDSdlHQpMZIs0kQK+bOixOU+Ct/bWa0iw4+BvGGyHl5bErYbeQi/ 8vpzWFNFAllo3NK6W2CefqjJbwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFKFVSljJ 6sFM8nn2vuX2xD3kgOJTMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvREEzODkxRDQ4 NEFCMTFGMEJFRTMwNjc4QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBABn0ekDBABn0eoDBACjNREwDQYJKoZIhvcNAQELBQADggEBAC80 dsifdXtXgNpCOzsY7jJA8ow3QPthXichVJ6ufdPnWy3Tq9U7+hrRbH5Ion6OV6TC fmw1MDrrHtBKfZrrJLRIELNqgg1rEEx7vBMeJRxn96i87oTFS9Ksu2aUf5vfZMA4 zRUgwYH1zs72dLC8ZVALxLqcKPfaCAyCNdO6z94xDkFbBeFdkyFItstgL/+xgdqz m3UAUGmmzD00nmQGhAn75DPcUUTpMhDWOKCP/xTM2GUPIWbHOA6mmvjBCANQmsP/ zpmP488sL7tZfDciMo0SsIt3CUevkE3/R1C8s624wYSsW2sSkNqW323x0SqUQAB7 W6UoV+gJeR/Mkrx4bos= -----END CERTIFICATE-----Generated at Sun Oct 25 14:24:44 2026 by rpki-client