$ rpki-client -vvvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/35C8F50C218A11EE959B7037C4F9AE02.roa File: 35C8F50C218A11EE959B7037C4F9AE02.roa (raw, json) Hash identifier: FvxI97u3e7WBP79sJ+IUpapGutxoU58idgwtPyrSOAc= Subject key identifier: 23:59:6C:10:38:11:77:99:83:65:88:E2:2D:31:A8:05:6C:0A:89:F6 Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Certificate serial: 025D Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/35C8F50C218A11EE959B7037C4F9AE02.roa Signing time: Mon 31 Aug 2026 02:52:19 +0000 ROA not before: Mon 31 Aug 2026 02:52:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151606 IP address blocks: 103.238.66.0/23 maxlen: 23 103.238.66.0/24 maxlen: 24 103.238.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Sep 2026 02:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Validity Not Before: Aug 31 02:52:19 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a94ec63-a83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:05:b1:b1:f4:a1:20:35:ae:a2:d4:d9:14: 95:1d:c9:a8:c7:25:0a:d0:51:40:52:53:b1:04:66: 0e:cf:11:f9:84:86:d8:92:be:c0:b8:4a:b0:73:16: e2:ca:08:57:a6:f7:da:de:e3:79:ba:2f:71:e7:4f: b8:59:ff:52:69:9a:ff:60:7c:2d:6f:09:38:44:a1: e1:43:13:6c:1b:4e:05:78:10:cf:b1:6b:ae:13:5b: 16:6e:c4:b2:62:25:ac:e7:64:48:e0:d2:c9:4c:67: 95:b0:dd:64:fc:ed:8c:39:d9:60:d4:ab:9e:c5:da: 0f:fe:48:7a:40:94:b0:bb:60:c0:c5:9f:35:4c:69: 02:b4:a7:79:e5:20:4b:8b:ec:ee:6f:33:ee:3b:2a: d1:c3:0d:33:33:c6:4c:86:10:c0:c9:83:3f:09:77: ca:9b:79:c6:96:58:1a:f6:59:68:31:cb:7c:4d:11: e8:17:8b:ff:f6:34:ec:cc:1a:f6:97:27:7f:44:a9: b8:c8:28:da:7c:3c:a5:4c:84:57:e6:d3:3c:a9:04: 4c:91:50:8a:31:11:95:66:3f:72:ff:1a:58:54:29: 69:1f:dd:16:f2:97:ab:d0:a2:b2:72:3a:cc:02:4c: 94:4d:fd:2e:23:30:af:b9:bf:c0:02:e6:53:6b:f5: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:6C:10:38:11:77:99:83:65:88:E2:2D:31:A8:05:6C:0A:89:F6 X509v3 Authority Key Identifier: keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/35C8F50C218A11EE959B7037C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.238.66.0/23 Signature Algorithm: sha256WithRSAEncryption 09:f3:ad:b9:4c:b1:9f:39:be:99:5a:91:21:72:c6:03:1d:30: ec:19:46:c0:f3:53:27:57:27:22:a4:1c:4b:c1:0a:57:8b:7b: 7f:0a:19:c1:d7:23:bf:4f:bc:e8:20:94:91:d1:ca:04:38:91: 17:69:4c:be:50:48:24:0d:20:ab:a2:f7:0c:07:f5:30:b4:fe: 3f:44:49:95:3e:cf:b1:1f:58:65:26:b8:bf:8d:10:65:b6:c3: da:d1:d8:c1:ec:c7:00:dc:a1:2c:28:bc:3b:47:82:0e:f8:f8: 8d:17:89:76:05:68:1d:b1:06:30:65:13:4c:56:59:c2:d5:39: 3f:5e:9c:8d:b4:12:82:16:f4:d3:9b:18:b5:67:6a:d7:4f:ae: cf:06:87:c6:c7:55:cf:4c:22:a0:93:1a:a3:ae:13:7c:57:42: 34:f6:64:d2:ce:9c:2d:82:e3:42:47:35:9c:bc:4f:2a:e4:08: 44:fe:08:c6:e8:a8:d1:62:d2:ed:6a:0b:1f:79:94:1f:75:8d: 2d:6d:95:e0:fa:30:94:ab:81:ce:ff:30:7f:7e:3f:1c:9d:6d: ff:bc:75:3a:b6:ac:43:36:b7:95:ab:46:15:6f:da:7b:46:94: 7b:cd:52:f7:2c:39:1d:df:6d:8b:84:6e:a8:f6:06:1e:c6:be: 2a:b8:56:8e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk1QjYxMTAvBgNVBAUTKDE2MEUwMDAxNUQyQjU4MTUzRjM0ODJFOERFOTQ3QjVG NEFENzg3MTgwHhcNMjYwODMxMDI1MjE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0ZWM2My1hODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze0FsbH0oSA1rqLU2RSVHcmoxyUK0FFAUlOxBGYOzxH5hIbYkr7AuEqwcxbi yghXpvfa3uN5ui9x50+4Wf9SaZr/YHwtbwk4RKHhQxNsG04FeBDPsWuuE1sWbsSy YiWs52RI4NLJTGeVsN1k/O2MOdlg1KuexdoP/kh6QJSwu2DAxZ81TGkCtKd55SBL i+zubzPuOyrRww0zM8ZMhhDAyYM/CXfKm3nGllga9lloMct8TRHoF4v/9jTszBr2 lyd/RKm4yCjafDylTIRX5tM8qQRMkVCKMRGVZj9y/xpYVClpH90W8per0KKycjrM AkyUTf0uIzCvub/AAuZTa/UnKQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCNZbBA4 EXeZg2WI4i0xqAVsCon2MB8GA1UdIwQYMBaAFBYOAAFdK1gVPzSC6N6Ue19K14cY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTVCNi9GMDczMEM4ODIx NjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldCVV9OSUxvM3BSN1gwclho eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnNEFBVjByV0JVX05JTG8zcFI3WDByWGh4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk1QjYvRjA3MzBDODgyMTY5MTFFRUI1NkYyMjQ5QzRGOUFFMDIvMzVDOEY1MEMy MThBMTFFRTk1OUI3MDM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+5CMA0GCSqGSIb3DQEBCwUAA4IBAQAJ8625TLGfOb6ZWpEhcsYD HTDsGUbA81MnVycipBxLwQpXi3t/ChnB1yO/T7zoIJSR0coEOJEXaUy+UEgkDSCr ovcMB/UwtP4/REmVPs+xH1hlJri/jRBltsPa0djB7McA3KEsKLw7R4IO+PiNF4l2 BWgdsQYwZRNMVlnC1Tk/XpyNtBKCFvTTmxi1Z2rXT67PBofGx1XPTCKgkxqjrhN8 V0I09mTSzpwtguNCRzWcvE8q5AhE/gjG6KjRYtLtagsfeZQfdY0tbZXg+jCUq4HO /zB/fj8cnW3/vHU6tqxDNreVq0YVb9p7RpR7zVL3LDkd322LhG6o9gYexr4quFaO -----END CERTIFICATE-----Generated at Tue Sep 1 05:20:46 2026 by rpki-client