$ rpki-client -vvf rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/CDE70CB2E52011EDB505E014C4F9AE02.roa File: CDE70CB2E52011EDB505E014C4F9AE02.roa (raw, json) Hash identifier: 9PrbzMy6PURlTcLyLFQVyS2VQrb0zJaswTPUL6VmPak= Subject key identifier: DA:33:38:04:A6:FA:97:5D:82:72:7C:9C:C3:42:B9:2D:E8:72:0A:CA Certificate issuer: /CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Certificate serial: 0275 Authority key identifier: C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/CDE70CB2E52011EDB505E014C4F9AE02.roa Signing time: Sat 15 Aug 2026 02:51:25 +0000 ROA not before: Sat 15 Aug 2026 02:51:25 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 40676 IP address blocks: 103.59.108.0/23 maxlen: 23 103.59.110.0/23 maxlen: 23 103.59.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161065, serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Validity Not Before: Aug 15 02:51:25 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a7fd42d-2707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2f:10:71:9d:c2:90:bd:55:27:1e:e7:31:33: a3:c2:9b:56:7d:f3:0b:13:f4:91:a3:47:d9:83:83: 0b:86:16:58:1d:70:63:3d:f5:f9:cd:cb:06:de:25: 52:ac:64:ca:04:10:67:42:48:61:7d:42:0e:f5:6f: 19:be:22:af:5f:3c:e8:99:a7:0d:6b:89:f3:d3:56: cc:51:fb:82:f6:0b:ab:de:54:78:d1:53:ef:74:70: d2:64:cc:ce:bb:f2:aa:f1:0c:78:d3:46:cc:f4:22: be:da:db:90:53:c3:9c:94:b7:a6:1a:47:bc:17:3b: 6a:40:71:69:b3:02:1c:09:dd:77:a3:d4:73:e5:c2: 92:cc:b4:a3:49:5c:49:ab:f0:6f:21:fc:b5:5e:39: 79:0a:fb:ae:c0:e5:7a:55:a1:c4:b3:28:89:7e:88: 82:e0:c4:8b:a2:76:b6:c2:07:44:33:d7:6b:dd:8b: 3e:4c:c2:12:90:24:e7:11:7b:78:92:b7:4b:34:5f: e9:dc:ed:66:37:d6:61:9d:64:95:5a:e0:70:dd:4e: bb:84:77:bd:38:a9:50:8b:c5:1f:0d:dc:15:84:b8: 37:9b:e3:13:d0:4c:a8:74:d3:bf:e2:c6:7a:9c:c7: 45:6f:6e:06:46:86:b7:ef:4b:37:ac:fe:97:a8:d1: 1c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:33:38:04:A6:FA:97:5D:82:72:7C:9C:C3:42:B9:2D:E8:72:0A:CA X509v3 Authority Key Identifier: keyid:C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/CDE70CB2E52011EDB505E014C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.59.108.0/22 Signature Algorithm: sha256WithRSAEncryption 90:fa:c1:85:2b:7c:a3:6e:27:5d:41:d2:4f:d0:c3:93:d8:17: ad:65:9f:df:8d:3d:02:e6:00:4a:80:46:81:6f:1a:4f:8d:c2: eb:3a:96:85:64:7a:0a:76:ed:d4:a0:34:f4:c4:01:2d:2d:7e: 05:95:20:71:a4:d7:92:c5:27:79:23:2f:01:1d:52:2d:9e:93: 84:b6:67:85:10:41:6e:a1:d5:cd:d4:a8:c8:d3:a3:46:23:09: 78:9d:bc:12:26:8d:8a:a9:f7:75:c0:d7:1e:31:5a:80:e0:4b: 9f:69:24:eb:e9:a0:da:69:e1:27:cf:2a:c8:d2:21:5e:fb:45: d2:bb:7f:24:30:3b:6c:30:74:6c:31:13:ef:77:a3:45:c8:38: f2:ce:05:38:bf:13:0b:46:32:5d:81:3e:83:57:29:04:89:f7: 6f:5c:d8:7f:4e:9b:bb:eb:39:f4:fe:f7:a1:0a:d1:21:8c:8a: 5a:a8:53:74:b9:0b:45:17:d9:cd:2c:5f:7a:b3:f8:1a:4a:ed: d9:46:ef:c0:c6:aa:35:13:ac:b3:d2:17:bd:7e:f4:91:e4:e5: 37:fe:3f:5a:73:8d:2a:4d:e8:41:c9:7c:be:95:42:5f:2f:97: 71:7c:e3:e0:7b:25:f3:fb:63:a6:8d:de:4f:b7:9a:53:ab:50: 7b:45:2f:8f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwNjUxMTAvBgNVBAUTKEM4N0ZEM0UyNDA4OEE0RDlERjFDNUQwMjY4NTIwOEU5 MEE2MUVGRjcwHhcNMjYwODE1MDI1MTI1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdmZDQyZC0yNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApi8QcZ3CkL1VJx7nMTOjwptWffMLE/SRo0fZg4MLhhZYHXBjPfX5zcsG3iVS rGTKBBBnQkhhfUIO9W8ZviKvXzzomacNa4nz01bMUfuC9gur3lR40VPvdHDSZMzO u/Kq8Qx400bM9CK+2tuQU8OclLemGke8FztqQHFpswIcCd13o9Rz5cKSzLSjSVxJ q/BvIfy1Xjl5CvuuwOV6VaHEsyiJfoiC4MSLona2wgdEM9dr3Ys+TMISkCTnEXt4 krdLNF/p3O1mN9ZhnWSVWuBw3U67hHe9OKlQi8UfDdwVhLg3m+MT0EyodNO/4sZ6 nMdFb24GRoa370s3rP6XqNEcHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNozOASm +pddgnJ8nMNCuS3ocgrKMB8GA1UdIwQYMBaAFMh/0+JAiKTZ3xxdAmhSCOkKYe/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA2NS8xQTI1RDI3NEU1 MUQxMUVEODUzOEIyNDZDNEY5QUUwMi95SF9UNGtDSXBObmZIRjBDYUZJSTZRcGg3 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX1Q0a0NJcE5uZkhGMENhRklJNlFwaDdfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjEwNjUvMUEyNUQyNzRFNTFEMTFFRDg1MzhCMjQ2QzRGOUFFMDIvQ0RFNzBDQjJF NTIwMTFFREI1MDVFMDE0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZztsMA0GCSqGSIb3DQEBCwUAA4IBAQCQ+sGFK3yjbiddQdJP0MOT 2BetZZ/fjT0C5gBKgEaBbxpPjcLrOpaFZHoKdu3UoDT0xAEtLX4FlSBxpNeSxSd5 Iy8BHVItnpOEtmeFEEFuodXN1KjI06NGIwl4nbwSJo2Kqfd1wNceMVqA4EufaSTr 6aDaaeEnzyrI0iFe+0XSu38kMDtsMHRsMRPvd6NFyDjyzgU4vxMLRjJdgT6DVykE ifdvXNh/Tpu76zn0/vehCtEhjIpaqFN0uQtFF9nNLF96s/gaSu3ZRu/Axqo1E6yz 0he9fvSR5OU3/j9ac40qTehByXy+lUJfL5dxfOPgeyXz+2Omjd5Pt5pTq1B7RS+P -----END CERTIFICATE-----Generated at Wed Aug 19 15:16:25 2026 by rpki-client