$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/1291593861AC11ED9EFE1B4DC4F9AE02.roa File: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (raw, json) Hash identifier: TqigQrM56YIrHnpm0cKW5rrtAXNlTI/PvPTRZSz/p8A= Subject key identifier: 8F:B5:0D:A4:C8:55:37:A8:BB:70:EA:DB:21:1F:61:4D:77:60:B0:59 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 0589 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/1291593861AC11ED9EFE1B4DC4F9AE02.roa Signing time: Fri 02 Oct 2026 23:44:39 +0000 ROA not before: Fri 02 Oct 2026 23:44:39 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 138170 IP address blocks: 103.121.218.0/23 maxlen: 23 103.121.218.0/24 maxlen: 24 103.121.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 23:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1417 (0x589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Oct 2 23:44:39 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac041e6-d6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:24:a8:72:8a:43:05:f2:24:6f:4d:01:78: e6:74:24:40:66:bd:59:da:80:05:4c:a2:fa:5a:ed: 07:68:69:00:fc:40:8b:70:7c:01:18:f1:02:2b:74: 94:02:70:a8:23:3a:7f:36:1e:36:85:e4:25:47:13: 91:e5:05:9f:ce:1e:0d:6c:ba:b0:f6:72:b2:f4:87: 3a:0a:c4:bf:ee:73:80:be:73:aa:ec:46:d6:bc:cf: b8:6d:37:6e:da:47:f4:66:fa:b2:4c:65:53:f9:2d: 34:a9:c5:42:56:71:56:b6:55:da:9b:ca:e1:0c:73: 16:1d:56:8a:98:5a:82:d4:8c:d6:7e:be:b8:d3:ac: 29:0a:1c:81:ee:db:bc:bb:02:a5:40:f7:d7:dd:f3: ec:ea:05:d4:e6:fa:14:52:f0:66:1c:c4:66:45:c0: 51:b8:53:21:81:7c:9c:d2:f0:23:10:5b:1c:3a:d4: 0a:87:a9:e8:53:0d:58:e2:c7:35:1d:2e:a5:ef:5a: a2:e4:f1:bb:83:50:2a:88:16:ab:a4:fc:3e:72:f4: c4:b4:e9:58:3d:48:b3:9b:27:43:a1:62:ca:24:42: 78:62:d5:12:62:24:a3:32:66:f0:3d:4f:a0:25:34: 33:52:f4:77:ca:d0:25:49:3b:a4:33:08:9d:4b:2f: b7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B5:0D:A4:C8:55:37:A8:BB:70:EA:DB:21:1F:61:4D:77:60:B0:59 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/1291593861AC11ED9EFE1B4DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.218.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:4e:a2:de:17:0f:0c:ed:b3:9d:65:8a:f0:3c:8f:1f:85:78: 24:10:81:e5:31:93:4c:54:af:73:9a:a9:6c:2c:73:d4:d1:07: 3b:44:7a:f8:e7:6f:e5:a6:f5:26:66:7d:95:f8:61:bd:8c:b1: aa:51:f2:64:28:ac:b1:12:ce:5a:e6:57:be:6c:c8:0f:a8:25: d3:2a:8c:42:12:73:ed:af:d5:12:fe:77:06:be:73:ef:a1:4f: 5b:78:03:88:69:48:52:35:77:40:bf:f7:26:55:59:cf:a2:26: 73:dc:31:b2:9d:7f:84:f5:5a:e0:e7:c2:d0:9b:9a:d1:c1:7b: 1b:28:bf:1e:0b:26:1d:48:0e:1e:fa:07:1e:5f:42:47:82:12: 24:e6:c7:84:98:9c:fc:2a:63:07:ae:ec:be:55:ef:4f:a9:1a: 18:5a:2a:18:77:e4:6e:4e:67:6d:96:b1:bc:2a:f5:0a:b1:96: 2f:0d:e9:2b:50:1b:28:4c:92:5b:27:fd:08:47:d1:19:07:3e: bb:58:9e:5c:53:c1:e0:12:d3:bb:d5:ec:db:e0:79:a9:5d:ee: f2:a4:eb:5a:bd:2c:f7:c7:2a:d2:92:65:2c:4d:f8:85:80:7c: 05:98:0f:3b:5e:47:e6:93:1c:e4:ac:c4:c2:80:49:9b:31:f8: 52:2e:1b:c1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjYxMDAyMjM0NDM5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMwNDFlNi1kNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPgkqHKKQwXyJG9NAXjmdCRAZr1Z2oAFTKL6Wu0HaGkA/ECLcHwBGPECK3SU AnCoIzp/Nh42heQlRxOR5QWfzh4NbLqw9nKy9Ic6CsS/7nOAvnOq7EbWvM+4bTdu 2kf0ZvqyTGVT+S00qcVCVnFWtlXam8rhDHMWHVaKmFqC1IzWfr6406wpChyB7tu8 uwKlQPfX3fPs6gXU5voUUvBmHMRmRcBRuFMhgXyc0vAjEFscOtQKh6noUw1Y4sc1 HS6l71qi5PG7g1AqiBarpPw+cvTEtOlYPUizmydDoWLKJEJ4YtUSYiSjMmbwPU+g JTQzUvR3ytAlSTukMwidSy+3WwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI+1DaTI VTeou3Dq2yEfYU13YLBZMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJDODkvOEZBOTdBRkU0NTEwMTFFQzhDODZFRDQ4QzRGOUFFMDIvMTI5MTU5Mzg2 MUFDMTFFRDlFRkUxQjREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3naMA0GCSqGSIb3DQEBCwUAA4IBAQBMTqLeFw8M7bOdZYrwPI8f hXgkEIHlMZNMVK9zmqlsLHPU0Qc7RHr452/lpvUmZn2V+GG9jLGqUfJkKKyxEs5a 5le+bMgPqCXTKoxCEnPtr9US/ncGvnPvoU9beAOIaUhSNXdAv/cmVVnPoiZz3DGy nX+E9Vrg58LQm5rRwXsbKL8eCyYdSA4e+gceX0JHghIk5seEmJz8KmMHruy+Ve9P qRoYWioYd+RuTmdtlrG8KvUKsZYvDekrUBsoTJJbJ/0IR9EZBz67WJ5cU8HgEtO7 1ezb4HmpXe7ypOtavSz3xyrSkmUsTfiFgHwFmA87XkfmkxzkrMTCgEmbMfhSLhvB -----END CERTIFICATE-----Generated at Sat Oct 31 08:18:03 2026 by rpki-client