$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/359322B2D1E711EDB90DBF27C4F9AE02.roa File: 359322B2D1E711EDB90DBF27C4F9AE02.roa (raw, json) Hash identifier: ChbWxifo/6+meKUlWnVzvTz6439KwZeyjHcg5zJTcwI= Subject key identifier: DF:E4:A2:81:7D:3B:0A:8B:C8:38:17:F2:EF:B8:18:6E:13:0A:24:11 Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Certificate serial: 02A8 Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/359322B2D1E711EDB90DBF27C4F9AE02.roa Signing time: Thu 03 Sep 2026 02:51:17 +0000 ROA not before: Thu 03 Sep 2026 02:51:17 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 135069 IP address blocks: 103.96.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Validity Not Before: Sep 3 02:51:17 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a98e0a5-86b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:42:01:08:d5:74:e5:a5:be:a0:a3:c9:eb: a6:87:af:0e:a9:99:d6:a6:a9:1f:45:e4:8a:82:1a: cc:32:8e:13:a5:0c:3f:22:a4:b5:c3:bc:b3:db:47: be:76:11:78:09:13:aa:c2:02:20:0a:d7:6e:b4:f0: 12:4d:43:a3:6d:de:f7:c7:d2:26:2b:1d:d6:30:a5: 94:a8:8e:87:30:57:93:e2:65:38:e2:3a:16:8d:d9: db:22:f6:90:e5:ee:98:73:4e:04:e8:8b:98:48:b7: 6b:7c:bb:5d:d9:8b:96:11:02:10:a4:8c:55:ff:da: 3c:31:53:f2:61:c1:64:ba:41:28:49:4d:bb:28:f0: 2b:2d:40:ba:d3:67:10:28:c1:59:53:38:d1:44:f2: fb:99:96:a5:4c:e4:87:85:fc:db:35:87:b3:c7:81: 00:71:b9:ce:13:ac:6c:ad:2e:d3:1f:42:2b:80:f8: fd:7e:62:7d:02:74:f6:cd:4f:bf:13:ce:e9:86:48: e1:c4:ff:5f:64:02:14:dd:93:27:b9:22:c4:a4:48: a7:b6:4f:f6:99:ab:b7:5b:b5:b2:4a:fa:82:3f:ee: 83:b4:ad:97:af:66:6c:72:58:9f:ff:c9:b1:e8:4b: 76:67:d4:cc:77:95:7e:c0:76:5d:1e:94:b8:bf:5f: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E4:A2:81:7D:3B:0A:8B:C8:38:17:F2:EF:B8:18:6E:13:0A:24:11 X509v3 Authority Key Identifier: keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/359322B2D1E711EDB90DBF27C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.96.84.0/22 Signature Algorithm: sha256WithRSAEncryption 28:8a:8a:68:b3:68:3f:93:47:6f:ae:01:c7:8c:61:27:c7:6e: 6c:23:97:01:1e:72:be:a1:96:ab:39:35:4e:9e:a9:4f:e9:35: fe:32:02:71:1a:6d:c5:1b:ec:b4:e7:57:23:ac:50:ec:2d:91: d0:1d:64:2f:cb:e9:43:1f:96:53:f7:e7:5d:aa:6f:ec:bb:b8: a7:32:5e:ca:94:e2:59:58:11:2d:be:69:66:53:7f:a4:f6:61: ff:17:0a:c4:40:50:bc:b0:a8:d7:77:e9:63:1d:11:86:b0:37: 36:06:f2:87:1a:2d:77:7d:8b:89:20:9e:e6:33:b9:e2:af:05: f5:55:ec:d2:f9:da:6e:d8:d6:66:d0:84:4d:e5:2c:0c:f4:47: 30:75:f7:ea:ce:63:9b:ee:8b:78:f0:58:a7:d4:a2:0a:4a:70: a1:ae:17:38:a3:f5:4d:fe:64:47:fb:eb:5d:e2:14:e6:9f:b2: 02:b5:66:0f:5e:21:2c:98:22:3f:9e:20:53:bb:37:c0:70:9a: 6a:f2:8e:b3:5b:71:17:56:bc:b8:02:64:86:01:65:6d:f2:f9: 1a:a2:99:98:55:17:a0:bd:1c:8a:5f:9f:11:34:23:7a:0c:51: 47:df:c0:82:72:6c:96:95:f0:4e:cc:81:14:ca:86:66:0a:ff: 95:b5:25:cd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDMUQxMTAvBgNVBAUTKEZCMDE5N0Q4MDJBNjYxODZFODQwQkQ2MkU4OEVFNDBF RDk1RTk1MjkwHhcNMjYwOTAzMDI1MTE3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZTBhNS04NmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWFCAQjVdOWlvqCjyeumh68OqZnWpqkfReSKghrMMo4TpQw/IqS1w7yz20e+ dhF4CROqwgIgCtdutPASTUOjbd73x9ImKx3WMKWUqI6HMFeT4mU44joWjdnbIvaQ 5e6Yc04E6IuYSLdrfLtd2YuWEQIQpIxV/9o8MVPyYcFkukEoSU27KPArLUC602cQ KMFZUzjRRPL7mZalTOSHhfzbNYezx4EAcbnOE6xsrS7TH0IrgPj9fmJ9AnT2zU+/ E87phkjhxP9fZAIU3ZMnuSLEpEintk/2mau3W7WySvqCP+6DtK2Xr2Zsclif/8mx 6Et2Z9TMd5V+wHZdHpS4v1+D8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN/kooF9 OwqLyDgX8u+4GG4TCiQRMB8GA1UdIwQYMBaAFPsBl9gCpmGG6EC9YuiO5A7ZXpUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0MxRC84Q0ZFMUQ5QUQx RTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZYm9RTDFpNkk3a0R0bGVs U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13R1gyQUttWVlib1FMMWk2STdrRHRsZWxTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNDMUQvOENGRTFEOUFEMUUyMTFFRDkyM0M2MTFGQzRGOUFFMDIvMzU5MzIyQjJE MUU3MTFFREI5MERCRjI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2BUMA0GCSqGSIb3DQEBCwUAA4IBAQAoiopos2g/k0dvrgHHjGEn x25sI5cBHnK+oZarOTVOnqlP6TX+MgJxGm3FG+y051cjrFDsLZHQHWQvy+lDH5ZT 9+ddqm/su7inMl7KlOJZWBEtvmlmU3+k9mH/FwrEQFC8sKjXd+ljHRGGsDc2BvKH Gi13fYuJIJ7mM7nirwX1VezS+dpu2NZm0IRN5SwM9EcwdffqzmOb7ot48Fin1KIK SnChrhc4o/VN/mRH++td4hTmn7ICtWYPXiEsmCI/niBTuzfAcJpq8o6zW3EXVry4 AmSGAWVt8vkaopmYVRegvRyKX58RNCN6DFFH38CCcmyWlfBOzIEUyoZmCv+VtSXN -----END CERTIFICATE-----Generated at Sat Sep 19 18:12:39 2026 by rpki-client