$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/CD57B28C814211EA94DD3E2DC4F9AE02.roa File: CD57B28C814211EA94DD3E2DC4F9AE02.roa (raw, json) Hash identifier: IUz2Q5bD+d2a5hWSIO7TTyRJWvOUcF3m6LFQhPIhf48= Subject key identifier: 6D:3F:86:A0:65:48:7F:3F:7A:52:6F:3A:43:CE:75:AF:03:AD:69:BB Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 0AB5 Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/CD57B28C814211EA94DD3E2DC4F9AE02.roa Signing time: Sun 16 Aug 2026 20:39:06 +0000 ROA not before: Sun 16 Aug 2026 20:39:06 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 132270 IP address blocks: 103.71.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2741 (0xab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Aug 16 20:39:06 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a821fe9-a889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:7e:93:9f:13:d5:81:05:cc:ef:8e:85:55: fe:dd:e5:da:23:56:6e:7d:b1:e4:e1:c4:b9:c3:43: e1:3a:36:08:93:9e:d7:81:5d:33:51:5c:27:7f:1b: d4:5b:09:7f:cb:88:37:01:6f:a5:be:29:34:75:d2: 87:d9:d7:4f:2b:22:f4:4d:ec:6a:da:61:85:50:eb: 22:48:68:86:6f:ee:e6:60:85:56:4c:ce:77:46:1f: b1:46:a8:66:72:bc:49:96:a8:64:e6:d3:8d:c3:1e: 04:dd:e0:db:a8:92:8f:40:6f:4a:25:22:f6:eb:b3: 42:88:94:05:3f:3a:bb:90:fc:9e:43:63:80:14:46: 1b:ba:4a:36:b0:1c:49:cc:32:8c:8a:90:b1:b9:23: 1c:5f:f5:96:8c:8e:40:0d:88:99:e1:eb:3a:16:63: 6a:0f:a5:10:eb:08:62:cd:10:5d:fd:03:c9:b3:a7: 5f:60:cb:03:56:33:37:cb:de:0d:00:01:52:68:e3: a5:3f:50:d3:e9:67:e6:5d:05:23:2c:48:a3:77:8d: 2f:45:aa:ed:ab:83:25:a3:77:fb:12:77:84:eb:56: 5b:32:60:d8:97:72:8f:6a:9a:64:01:ba:9a:1c:9b: 4c:71:5e:15:f8:dc:46:30:de:85:00:e2:9a:ac:44: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3F:86:A0:65:48:7F:3F:7A:52:6F:3A:43:CE:75:AF:03:AD:69:BB X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/CD57B28C814211EA94DD3E2DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.71.242.0/23 Signature Algorithm: sha256WithRSAEncryption 33:6f:50:94:0d:a6:75:62:09:02:ab:cd:b2:de:d0:f1:14:dd: 8e:85:8b:e4:40:34:c8:ce:8c:d2:cb:e1:9e:59:d0:75:2d:80: 49:8c:ff:15:07:d3:01:b2:0e:69:23:1a:73:39:21:bc:62:b0: 40:8d:e4:23:f0:c5:85:1c:ae:10:27:7c:7d:73:c1:2d:a3:a9: 4f:c8:d4:78:5e:6e:7d:33:61:77:d4:f2:16:99:d7:b9:e9:14: af:70:d7:78:1b:2f:cd:df:e5:73:e9:bc:02:bd:7b:de:03:38: be:d7:e5:81:06:5b:b4:01:fb:59:ad:ed:a7:c9:8d:a2:30:89: c3:e2:f0:9b:61:5e:ed:b3:e0:40:88:46:d2:e3:fe:55:95:16: 5b:ed:95:87:ef:d7:a6:ea:bc:eb:87:30:86:53:da:74:8b:6d: 09:83:02:83:d7:cd:38:5b:5e:91:ca:b3:45:11:00:11:9c:39: 02:21:fb:5f:29:4b:f7:36:24:3b:7a:3b:b3:d7:99:4f:4a:43: cf:77:c7:4f:fc:ba:88:5d:36:0d:5f:88:15:d9:9f:41:2a:fb: cc:31:21:5d:c1:e0:0f:4a:c2:83:42:4b:33:a5:6d:2c:bd:b1: 67:11:1b:6a:f7:29:45:be:a8:6e:21:a4:35:06:58:cb:8c:e6: 87:6c:9e:cf -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjYwODE2MjAzOTA2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgyMWZlOS1hODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnR+k58T1YEFzO+OhVX+3eXaI1ZufbHk4cS5w0PhOjYIk57XgV0zUVwnfxvU Wwl/y4g3AW+lvik0ddKH2ddPKyL0Texq2mGFUOsiSGiGb+7mYIVWTM53Rh+xRqhm crxJlqhk5tONwx4E3eDbqJKPQG9KJSL267NCiJQFPzq7kPyeQ2OAFEYbuko2sBxJ zDKMipCxuSMcX/WWjI5ADYiZ4es6FmNqD6UQ6whizRBd/QPJs6dfYMsDVjM3y94N AAFSaOOlP1DT6WfmXQUjLEijd40vRartq4Mlo3f7EneE61ZbMmDYl3KPappkAbqa HJtMcV4V+NxGMN6FAOKarETqXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG0/hqBl SH8/elJvOkPOda8DrWm7MB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdCM0EvNTUxQkYyQkM4MTQwMTFFQUJCMEQ3MjI4QzRGOUFFMDIvQ0Q1N0IyOEM4 MTQyMTFFQTk0REQzRTJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ0fyMA0GCSqGSIb3DQEBCwUAA4IBAQAzb1CUDaZ1YgkCq82y3tDx FN2OhYvkQDTIzozSy+GeWdB1LYBJjP8VB9MBsg5pIxpzOSG8YrBAjeQj8MWFHK4Q J3x9c8Eto6lPyNR4Xm59M2F31PIWmde56RSvcNd4Gy/N3+Vz6bwCvXveAzi+1+WB Blu0AftZre2nyY2iMInD4vCbYV7ts+BAiEbS4/5VlRZb7ZWH79em6rzrhzCGU9p0 i20JgwKD1804W16RyrNFEQARnDkCIftfKUv3NiQ7ejuz15lPSkPPd8dP/LqIXTYN X4gV2Z9BKvvMMSFdweAPSsKDQkszpW0svbFnERtq9ylFvqhuIaQ1BljLjOaHbJ7P -----END CERTIFICATE-----Generated at Wed Aug 19 14:30:44 2026 by rpki-client