$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/590697D6465611EE8128031BC4F9AE02.roa File: 590697D6465611EE8128031BC4F9AE02.roa (raw, json) Hash identifier: VAtwg4JA7DKaiR1Y/aQYlkU3CfV+E/YtMAPsl8ob9cY= Subject key identifier: 10:19:05:45:15:6D:0B:EC:86:A7:EF:C8:17:91:7B:A8:C6:5C:E4:CB Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Certificate serial: 06A5 Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/590697D6465611EE8128031BC4F9AE02.roa Signing time: Sun 14 Jun 2026 23:26:08 +0000 ROA not before: Sun 14 Jun 2026 23:26:08 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 48014 IP address blocks: 103.167.234.0/24 maxlen: 24 103.167.235.0/24 maxlen: 24 2407:79c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Jul 2026 22:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Validity Not Before: Jun 14 23:26:08 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a2f3890-ba4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:a7:a1:f5:16:52:a4:7a:9d:19:84:b8:40: d1:a6:65:14:13:8e:d1:a6:d2:52:f3:f3:34:91:d5: b3:37:c9:80:bb:ab:d2:7c:a8:f4:b7:a7:19:0c:44: 1d:ff:93:ec:6c:62:28:85:7e:89:58:bd:ac:0e:26: 24:e8:be:2a:0a:77:88:04:d6:e0:cd:d0:04:d6:13: a8:4f:07:f2:34:6a:5c:a8:8c:6d:29:b7:42:54:d6: ce:b3:9d:38:27:f1:73:3a:12:52:52:f9:4c:79:b7: 15:22:b6:3c:cd:78:8b:33:3d:f0:8e:99:1e:6d:72: 94:52:a0:3c:35:1c:e6:46:42:ef:83:d4:71:a9:a7: 3c:89:88:8f:68:5e:7b:a6:7d:b4:2c:91:4a:72:e5: d2:1e:f0:00:77:97:38:89:b3:f3:a5:89:c2:59:44: 57:85:ec:7b:ba:90:9d:1e:f0:a8:fc:73:97:0b:af: 5f:cb:4e:2b:c3:95:02:42:31:8f:33:af:61:ca:4b: 72:6f:c3:6f:e3:2d:fe:d4:4c:94:e8:8b:ee:d0:ba: b1:0b:f5:91:37:96:a3:48:78:50:10:69:07:9c:24: c4:4a:f8:14:7c:35:99:04:c4:60:16:32:ba:da:0b: 8d:d3:a9:8b:f7:1f:91:e8:26:3b:53:db:35:85:67: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:19:05:45:15:6D:0B:EC:86:A7:EF:C8:17:91:7B:A8:C6:5C:E4:CB X509v3 Authority Key Identifier: keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/590697D6465611EE8128031BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.167.234.0/23 IPv6: 2407:79c0::/32 Signature Algorithm: sha256WithRSAEncryption 17:c2:a0:7b:34:15:df:bf:94:56:21:22:f4:09:fd:af:28:32: 9b:69:42:c7:2e:25:a4:9b:f6:a7:b3:a9:5d:de:64:39:0d:cf: ef:86:68:a7:35:da:13:93:1e:f2:7a:04:70:cf:7c:a3:70:2f: e7:b3:c4:d7:82:15:7c:39:aa:5d:a4:32:65:56:63:2b:0f:16: b4:1e:46:7f:91:29:3a:ab:02:e9:1c:e4:7f:2e:11:30:13:37: 40:11:60:c8:1c:bf:c0:fa:a7:cd:d6:84:b4:e1:c4:4e:86:3c: 0f:a9:0f:fa:4e:f6:81:58:49:f0:b4:72:35:45:e4:9b:37:bd: 50:de:92:20:95:b7:49:8f:6e:02:09:32:06:ea:6f:50:f2:13: e2:ed:26:84:05:16:56:b7:a8:4f:09:3a:ad:0b:d8:cd:62:90: cd:2b:9f:a6:2f:65:19:7e:4d:1d:ab:e1:84:d9:66:59:db:ed: 53:0c:9a:58:a9:4b:1e:66:db:ab:8e:09:1c:d6:4d:92:24:6e: d9:9d:9c:c9:40:8e:9f:e1:2c:44:b8:d4:72:f5:b8:29:28:6e: f1:38:33:9f:80:02:bb:45:97:c8:96:e3:87:20:d3:ed:e3:72: 56:8d:3a:d2:60:37:03:12:40:d3:76:fa:8e:a1:6a:09:44:24: 8a:e2:6d:b6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG ODE1NkUwRTkwHhcNMjYwNjE0MjMyNjA4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJmMzg5MC1iYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4OnofUWUqR6nRmEuEDRpmUUE47RptJS8/M0kdWzN8mAu6vSfKj0t6cZDEQd /5PsbGIohX6JWL2sDiYk6L4qCneIBNbgzdAE1hOoTwfyNGpcqIxtKbdCVNbOs504 J/FzOhJSUvlMebcVIrY8zXiLMz3wjpkebXKUUqA8NRzmRkLvg9Rxqac8iYiPaF57 pn20LJFKcuXSHvAAd5c4ibPzpYnCWURXhex7upCdHvCo/HOXC69fy04rw5UCQjGP M69hyktyb8Nv4y3+1EyU6Ivu0LqxC/WRN5ajSHhQEGkHnCTESvgUfDWZBMRgFjK6 2guN06mL9x+R6CY7U9s1hWe8kQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBAZBUUV bQvshqfvyBeRe6jGXOTLMB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1 MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzYxMDkvQzgyMDcyMTJDNTBEMTFFQjlBQUVFODdCQzRGOUFFMDIvNTkwNjk3RDY0 NjU2MTFFRTgxMjgwMzFCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6fqMA0EAgACMAcDBQAkB3nAMA0GCSqGSIb3DQEBCwUAA4IBAQAX wqB7NBXfv5RWISL0Cf2vKDKbaULHLiWkm/ans6ld3mQ5Dc/vhminNdoTkx7yegRw z3yjcC/ns8TXghV8OapdpDJlVmMrDxa0HkZ/kSk6qwLpHOR/LhEwEzdAEWDIHL/A +qfN1oS04cROhjwPqQ/6TvaBWEnwtHI1ReSbN71Q3pIglbdJj24CCTIG6m9Q8hPi 7SaEBRZWt6hPCTqtC9jNYpDNK5+mL2UZfk0dq+GE2WZZ2+1TDJpYqUseZturjgkc 1k2SJG7ZnZzJQI6f4SxEuNRy9bgpKG7xODOfgAK7RZfIluOHINPt43JWjTrSYDcD EkDTdvqOoWoJRCSK4m22 -----END CERTIFICATE-----Generated at Sun Jun 28 12:56:48 2026 by rpki-client