$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/596841CCA54D11F0BDA77C83C4F9AE02.roa File: 596841CCA54D11F0BDA77C83C4F9AE02.roa (raw, json) Hash identifier: Bwi7xlyf7sfwXmnEXmb5ZeQpkjWTJ7Jui2fMVOVFPX4= Subject key identifier: 87:9D:08:A3:3B:64:54:F1:B3:52:23:AD:EE:EE:AA:FB:3E:CB:3D:9D Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 025B Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/596841CCA54D11F0BDA77C83C4F9AE02.roa Signing time: Tue 11 Aug 2026 02:52:06 +0000 ROA not before: Tue 11 Aug 2026 02:52:06 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 151473 IP address blocks: 103.229.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Aug 11 02:52:06 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a7a8e56-d46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:53:f4:dc:5f:38:20:b1:7f:ff:d5:93:4d:94: f4:27:14:1c:9d:cf:fa:af:5a:bb:7f:2a:6c:b7:05: b3:a3:e7:37:c1:e2:60:8c:85:f8:a7:e6:d3:26:7c: 5c:a7:f0:f7:0e:6f:e6:7b:86:1a:04:86:fc:28:aa: da:e7:30:be:f7:56:cf:7f:23:d8:f2:28:87:55:4a: d2:22:d3:c8:d5:e5:9c:98:a8:a1:7d:50:7e:b4:d2: e7:d1:5d:69:53:a4:0e:8d:b0:f5:35:5c:d3:76:9e: 9d:36:4b:c3:d0:fa:e6:48:ee:66:f9:f4:44:15:68: 84:75:71:b8:b2:24:7f:5e:c9:11:9c:12:eb:2e:c0: 44:f6:5f:41:be:a6:10:7c:73:bc:78:a8:e1:51:9b: 79:76:75:e8:a1:fa:60:29:f1:8a:0f:21:6c:f3:09: 93:5c:4c:df:2b:b8:19:ce:da:14:99:9e:b4:7d:16: 4f:32:54:c6:17:d5:af:a5:8e:83:ad:6a:8b:7b:5c: 8c:b0:16:fc:ad:dd:e0:7c:ae:37:31:c0:77:6e:92: 90:f3:3f:f3:a8:e8:ff:ac:ca:73:5a:7e:00:6d:9d: 89:3b:94:18:d6:6c:53:b1:4e:c1:8a:88:41:76:cc: 73:5b:ac:a8:47:0e:7e:c3:8c:3b:d0:c4:a6:66:4c: fd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9D:08:A3:3B:64:54:F1:B3:52:23:AD:EE:EE:AA:FB:3E:CB:3D:9D X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/596841CCA54D11F0BDA77C83C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.229.253.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ae:db:a7:51:83:45:8e:3e:a0:37:e9:08:8b:52:6c:2f:95: b4:fb:91:50:6f:15:90:45:48:14:26:5d:34:3b:54:b7:32:d4: b7:db:d5:89:eb:d7:99:5a:7f:df:c6:42:c0:78:75:61:8c:ab: 08:43:4b:94:3a:c2:6d:72:6e:a6:8e:60:99:a7:1e:38:af:f1: a8:89:4b:75:a7:33:cb:5a:d2:bf:a1:36:5e:04:0a:95:0a:c8: 86:98:9b:3e:0e:ee:7c:80:99:75:19:67:e7:68:c8:3b:99:d0: 41:e1:b5:06:e2:fa:1d:4a:e8:34:24:67:6b:68:b6:27:22:5a: 91:c7:63:66:90:4b:ed:da:cc:29:00:e5:f3:74:a5:1a:87:bb: 65:d6:ff:94:7b:77:be:fe:63:79:3d:92:b0:37:85:f3:42:14: 1e:81:b0:32:88:1e:46:d6:71:47:ce:ef:05:30:0d:91:ab:a8: f6:39:a3:dd:d8:83:e5:e8:a8:0e:e8:8a:6d:c8:ae:1d:69:a2: 6a:ef:df:3f:21:9e:42:05:9d:8a:4c:da:c7:65:04:f7:f3:08: 4b:86:b5:a9:34:7b:e7:f9:5f:41:00:6b:11:2c:fb:6d:39:5f: 56:91:a3:26:21:93:5a:9a:62:87:d0:95:c8:9f:2b:3b:21:68: 35:2e:42:86 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjYwODExMDI1MjA2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdhOGU1Ni1kNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VP03F84ILF//9WTTZT0JxQcnc/6r1q7fypstwWzo+c3weJgjIX4p+bTJnxc p/D3Dm/me4YaBIb8KKra5zC+91bPfyPY8iiHVUrSItPI1eWcmKihfVB+tNLn0V1p U6QOjbD1NVzTdp6dNkvD0PrmSO5m+fREFWiEdXG4siR/XskRnBLrLsBE9l9BvqYQ fHO8eKjhUZt5dnXoofpgKfGKDyFs8wmTXEzfK7gZztoUmZ60fRZPMlTGF9WvpY6D rWqLe1yMsBb8rd3gfK43McB3bpKQ8z/zqOj/rMpzWn4AbZ2JO5QY1mxTsU7BiohB dsxzW6yoRw5+w4w70MSmZkz98QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIedCKM7 ZFTxs1Ijre7uqvs+yz2dMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNCN0QvQjJCM0Q3N0MxQjQ0MTFFRUEzNTc4RTI5QzRGOUFFMDIvNTk2ODQxQ0NB NTREMTFGMEJEQTc3QzgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ+X9MA0GCSqGSIb3DQEBCwUAA4IBAQBwrtunUYNFjj6gN+kIi1Js L5W0+5FQbxWQRUgUJl00O1S3MtS329WJ69eZWn/fxkLAeHVhjKsIQ0uUOsJtcm6m jmCZpx44r/GoiUt1pzPLWtK/oTZeBAqVCsiGmJs+Du58gJl1GWfnaMg7mdBB4bUG 4vodSug0JGdraLYnIlqRx2NmkEvt2swpAOXzdKUah7tl1v+Ue3e+/mN5PZKwN4Xz QhQegbAyiB5G1nFHzu8FMA2Rq6j2OaPd2IPl6KgO6IptyK4daaJq798/IZ5CBZ2K TNrHZQT38whLhrWpNHvn+V9BAGsRLPttOV9WkaMmIZNammKH0JXInys7IWg1LkKG -----END CERTIFICATE-----Generated at Sat Sep 5 06:00:33 2026 by rpki-client