$ rpki-client -vvvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/4A0A084CB7F711F1BFCDB8EA6E11F970.roa File: 4A0A084CB7F711F1BFCDB8EA6E11F970.roa (raw, json) Hash identifier: w5rbVEuozUE3vtz50NXNeGKW8yGXi2bMqugFVs2Gbgs= Subject key identifier: C9:B0:73:B6:B6:45:4F:6E:81:AC:03:5B:CE:74:81:39:1A:82:E9:21 Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Certificate serial: 02C2 Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/4A0A084CB7F711F1BFCDB8EA6E11F970.roa Signing time: Thu 24 Sep 2026 09:06:55 +0000 ROA not before: Thu 24 Sep 2026 09:06:55 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 133955 IP address blocks: 103.235.4.0/24 maxlen: 24 103.235.5.0/24 maxlen: 24 103.235.6.0/24 maxlen: 24 103.235.7.0/24 maxlen: 24 150.129.208.0/24 maxlen: 24 150.129.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 09:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Validity Not Before: Sep 24 09:06:55 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6ab4e82f-bbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:1f:ee:6a:4e:cf:a0:44:2e:1a:5e:98:11: 44:bd:df:28:66:83:70:64:c8:8f:04:48:6d:06:14: c1:f5:2e:7d:0f:b5:46:db:20:4d:8f:be:c4:4f:02: be:0d:0d:8b:8c:c8:66:f1:bc:e3:a1:71:c5:53:b0: 78:f0:e3:bd:1e:d8:f9:09:a9:85:e2:eb:6c:4f:67: 30:d8:21:a3:bf:58:84:c2:f1:b1:8d:fb:5d:d0:01: 52:da:15:43:f5:bb:dd:b6:1f:88:7c:01:18:f1:ef: 26:06:1e:cf:90:2d:38:ba:be:18:47:17:cc:01:cd: 06:bf:1e:21:f2:20:aa:bc:1e:d7:94:0a:78:e1:74: 36:68:0c:62:9c:90:d8:81:ef:79:ba:62:2f:a5:2f: 90:3a:9c:6a:11:6c:ad:9d:90:5f:41:3c:b5:58:ec: 00:a4:7c:38:f2:b3:e6:05:94:02:a2:0e:41:ac:bf: a3:00:bc:32:5c:f8:f4:49:2a:e4:5f:b0:f8:7a:4d: b4:44:b2:29:33:20:12:4e:66:27:e2:66:d6:58:f1: 97:2c:1c:08:a7:b0:f0:9c:8b:c3:62:e9:d6:3c:2b: 45:b4:53:c1:6e:23:ad:3f:3b:4c:f5:3b:58:a6:ac: 0d:57:d1:50:f0:93:03:be:a1:3b:b5:a8:40:23:21: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B0:73:B6:B6:45:4F:6E:81:AC:03:5B:CE:74:81:39:1A:82:E9:21 X509v3 Authority Key Identifier: keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/4A0A084CB7F711F1BFCDB8EA6E11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.235.4.0/22 150.129.208.0/24 150.129.210.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:a7:99:96:e1:ef:1c:48:0a:af:d5:a4:91:47:da:89:85:43: 91:61:7f:2a:2c:14:b6:bf:cf:3e:86:09:4e:ab:2b:ae:66:04: 82:8f:eb:6f:9a:ef:52:98:ec:20:b9:c2:b7:a6:20:70:df:5c: d8:81:e9:4d:b4:88:95:ee:10:67:5d:4e:dd:4d:31:32:e9:18: 1b:40:19:3f:38:da:7e:2b:68:ce:6e:a3:4d:7c:ad:c5:04:4a: aa:e2:09:5f:3e:3c:5b:e8:33:21:fd:d2:a2:07:e6:26:30:10: ef:8c:42:4c:50:20:4f:f2:ec:89:05:ed:1b:33:8b:75:a1:c8: a1:57:35:49:7e:6c:03:57:93:a1:cd:60:ac:f8:d4:70:86:9d: a9:c6:6a:37:61:30:b2:7f:7f:0f:cb:b4:ab:36:36:2b:a8:ac: be:e2:fa:10:96:d5:85:63:74:36:18:68:08:9b:30:0d:36:31: ec:a8:85:45:8a:2d:da:a5:6f:fe:9a:43:1c:5f:e0:b8:0e:9a: 46:96:c3:72:95:5b:4a:d7:84:33:8e:4e:2c:20:73:5b:4f:b6: 45:ef:43:d5:d8:38:47:cb:64:63:e8:1f:f1:3f:e0:f1:b4:25: a0:12:36:a6:cf:5e:77:88:0d:00:8f:92:49:d2:3c:9f:09:17: 0f:f4:00:37 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTkxMTAvBgNVBAUTKEVCQzNEN0ZDRkIxMzRGNTM4RkMxOUY5OEFEODk4QzBG M0YwNzRGMjAwHhcNMjYwOTI0MDkwNjU1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI0ZTgyZi1iYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJ0f7mpOz6BELhpemBFEvd8oZoNwZMiPBEhtBhTB9S59D7VG2yBNj77ETwK+ DQ2LjMhm8bzjoXHFU7B48OO9Htj5CamF4utsT2cw2CGjv1iEwvGxjftd0AFS2hVD 9bvdth+IfAEY8e8mBh7PkC04ur4YRxfMAc0Gvx4h8iCqvB7XlAp44XQ2aAxinJDY ge95umIvpS+QOpxqEWytnZBfQTy1WOwApHw48rPmBZQCog5BrL+jALwyXPj0SSrk X7D4ek20RLIpMyASTmYn4mbWWPGXLBwIp7DwnIvDYunWPCtFtFPBbiOtPztM9TtY pqwNV9FQ8JMDvqE7tahAIyFhywIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMmwc7a2 RU9ugawDW850gTkagukhMB8GA1UdIwQYMBaAFOvD1/z7E09Tj8GfmK2JjA8/B08g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBOS8yNjE4ODQwRUIx NDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQxT1B3Wi1ZclltTUR6OEhU eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY4UFhfUHNUVDFPUHdaLVlyWW1NRHo4SFR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI1QTkvMjYxODg0MEVCMTQzMTFFRDg3RDA3Njc4QzRGOUFFMDIvNEEwQTA4NENC N0Y3MTFGMUJGQ0RCOEVBNkUxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ+sEAwQAloHQAwQAloHSMA0GCSqGSIb3DQEBCwUAA4IBAQCdp5mW 4e8cSAqv1aSRR9qJhUORYX8qLBS2v88+hglOqyuuZgSCj+tvmu9SmOwgucK3piBw 31zYgelNtIiV7hBnXU7dTTEy6RgbQBk/ONp+K2jObqNNfK3FBEqq4glfPjxb6DMh /dKiB+YmMBDvjEJMUCBP8uyJBe0bM4t1ocihVzVJfmwDV5OhzWCs+NRwhp2pxmo3 YTCyf38Py7SrNjYrqKy+4voQltWFY3Q2GGgImzANNjHsqIVFii3apW/+mkMcX+C4 DppGlsNylVtK14Qzjk4sIHNbT7ZF70PV2DhHy2Rj6B/xP+DxtCWgEjamz153iA0A j5JJ0jyfCRcP9AA3 -----END CERTIFICATE-----Generated at Thu Sep 24 15:13:12 2026 by rpki-client