$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/85BD5A028B3C11F18E4E634A4311F970.roa File: 85BD5A028B3C11F18E4E634A4311F970.roa (raw, json) Hash identifier: Wzo7Jbs432YThvEfGQJ7KNXbgzu/I2SuvwRtyrQWWCM= Subject key identifier: 3C:A3:A6:A6:98:16:90:9B:84:66:E0:88:32:FB:A5:BF:1D:D1:D3:5C Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 08CB Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/85BD5A028B3C11F18E4E634A4311F970.roa Signing time: Wed 29 Jul 2026 10:59:09 +0000 ROA not before: Wed 29 Jul 2026 10:59:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139288 IP address blocks: 103.140.215.0/24 maxlen: 24 2001:df0:d780::/48 maxlen: 48 2402:6a20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 20:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2251 (0x8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: Jul 29 10:59:08 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a69dcfc-2bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:71:93:8d:22:8a:56:9d:b0:e3:9d:05:95: 99:7d:49:33:a7:c3:2b:67:08:36:8e:b3:30:b8:05: 3a:b3:27:ba:05:43:3e:ff:33:9f:ef:7c:85:1f:6c: d8:12:5c:b3:ac:6d:71:85:2e:73:44:be:32:e9:91: 86:61:8f:76:4a:d6:3d:13:44:01:67:21:88:0a:07: 4a:86:7a:fb:90:a9:09:f1:ad:97:20:7b:47:bf:42: 7e:b3:a6:eb:4d:49:0f:fe:5c:b4:f2:0a:81:12:32: 56:65:f0:61:5a:34:52:df:1e:f8:18:d4:24:48:65: 7e:ba:15:f6:0f:d9:d6:20:65:b6:ed:ae:c7:38:a2: 19:0f:cd:3d:fb:b4:2f:84:de:9d:0d:f7:57:c2:02: f0:47:3d:3a:c6:53:ad:d9:ba:e9:3e:d0:94:c7:f5: a9:10:92:7c:16:d4:1d:37:38:52:a2:a3:fa:86:17: eb:5b:c9:5c:46:0c:72:6d:12:c4:11:5b:af:ae:e9: bb:52:33:93:18:d9:f1:ba:4f:fb:60:6a:dc:8b:0f: c8:c1:07:09:63:6e:49:a7:fb:53:15:d6:ef:e0:73: e6:bc:79:66:f3:ab:7d:ae:02:bf:b5:a3:2c:d8:77: e8:37:42:12:ad:16:82:1f:bc:7d:34:51:f5:39:fb: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A3:A6:A6:98:16:90:9B:84:66:E0:88:32:FB:A5:BF:1D:D1:D3:5C X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/85BD5A028B3C11F18E4E634A4311F970.roa sbgp-ipAddrBlock: critical IPv4: 103.140.215.0/24 IPv6: 2001:df0:d780::/48 2402:6a20::/32 Signature Algorithm: sha256WithRSAEncryption 6d:dd:05:a6:de:43:da:c2:75:5b:01:97:53:9a:f5:ea:e1:7e: 28:07:02:11:8a:8a:d3:0b:1d:9f:16:f3:1e:ae:1c:87:b9:87: f5:28:0c:d8:9e:84:44:15:a1:da:92:b1:aa:b4:a9:ce:64:f3: a1:4d:b8:0e:e1:2a:fc:f6:f7:84:a3:c2:f5:23:84:4e:b8:e5: 84:68:b6:a1:19:bc:09:ae:da:d0:aa:db:eb:5b:c4:6a:cc:77: 14:4a:8f:60:f2:46:9c:35:e0:4e:60:eb:28:b8:ac:12:fc:dc: e9:1c:ba:ea:75:b4:c9:23:7a:4c:80:16:ee:e2:6e:5b:2d:bd: 46:0b:a8:08:66:6b:f3:55:69:72:6d:93:19:48:69:d8:04:3d: ee:77:50:80:24:bd:18:80:0d:be:45:ae:13:eb:37:19:b8:27: d9:4a:b5:7b:41:d2:3e:aa:ce:bc:83:9d:6f:3e:0b:47:92:42: 0c:dc:10:78:aa:b3:64:42:b8:5c:99:75:18:48:5a:b4:76:9e: f3:24:0b:20:f4:b6:a6:cf:c4:77:b0:09:ce:e3:2c:c9:22:b1: 9a:13:21:26:87:b9:6d:b6:0a:14:d5:b5:c7:2e:e5:85:38:23: 17:7c:25:2f:f9:6e:95:d8:ba:67:3c:a9:54:b9:ba:e2:b1:39: 00:8f:7b:72 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICCMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjYwNzI5MTA1OTA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5ZGNmYy0yYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3lxk40iiladsOOdBZWZfUkzp8MrZwg2jrMwuAU6sye6BUM+/zOf73yFH2zY ElyzrG1xhS5zRL4y6ZGGYY92StY9E0QBZyGICgdKhnr7kKkJ8a2XIHtHv0J+s6br TUkP/ly08gqBEjJWZfBhWjRS3x74GNQkSGV+uhX2D9nWIGW27a7HOKIZD809+7Qv hN6dDfdXwgLwRz06xlOt2brpPtCUx/WpEJJ8FtQdNzhSoqP6hhfrW8lcRgxybRLE EVuvrum7UjOTGNnxuk/7YGrciw/IwQcJY25Jp/tTFdbv4HPmvHlm86t9rgK/taMs 2HfoN0ISrRaCH7x9NFH1OftRzwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFDyjpqaY FpCbhGbgiDL7pb8d0dNcMB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhFOTgvMEVCMTJCNDBFQ0M5MTFFQUI4MjU2MjZFQzRGOUFFMDIvODVCRDVBMDI4 QjNDMTFGMThFNEU2MzRBNDMxMUY5NzAucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM BAIAATAGAwQAZ4zXMBYEAgACMBADBwAgAQ3w14ADBQAkAmogMA0GCSqGSIb3DQEB CwUAA4IBAQBt3QWm3kPawnVbAZdTmvXq4X4oBwIRiorTCx2fFvMerhyHuYf1KAzY noREFaHakrGqtKnOZPOhTbgO4Sr89veEo8L1I4ROuOWEaLahGbwJrtrQqtvrW8Rq zHcUSo9g8kacNeBOYOsouKwS/NzpHLrqdbTJI3pMgBbu4m5bLb1GC6gIZmvzVWly bZMZSGnYBD3ud1CAJL0YgA2+Ra4T6zcZuCfZSrV7QdI+qs68g51vPgtHkkIM3BB4 qrNkQrhcmXUYSFq0dp7zJAsg9Lamz8R3sAnO4yzJIrGaEyEmh7lttgoU1bXHLuWF OCMXfCUv+W6V2LpnPKlUubrisTkAj3ty -----END CERTIFICATE-----Generated at Thu Aug 13 07:51:33 2026 by rpki-client