$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/85E0F43E8C4B11F1B19DE8A35611F970.roa File: 85E0F43E8C4B11F1B19DE8A35611F970.roa (raw, json) Hash identifier: mLSyULYzajAtJ2vg9LM7fm/qvl7GMy/fczxSupefI4k= Subject key identifier: A6:8A:5C:C0:CD:98:97:95:C5:F7:11:B6:50:12:0B:15:94:30:A3:F7 Certificate issuer: /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Certificate serial: 0894 Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/85E0F43E8C4B11F1B19DE8A35611F970.roa Signing time: Sat 01 Aug 2026 17:30:08 +0000 ROA not before: Sat 01 Aug 2026 17:30:08 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 9288 IP address blocks: 103.90.212.0/22 maxlen: 22 103.90.212.0/24 maxlen: 24 103.90.213.0/24 maxlen: 24 103.90.214.0/24 maxlen: 24 103.90.215.0/24 maxlen: 24 123.253.0.0/22 maxlen: 22 123.253.0.0/24 maxlen: 24 123.253.1.0/24 maxlen: 24 123.253.2.0/24 maxlen: 24 123.253.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2196 (0x894) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173060, serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Validity Not Before: Aug 1 17:30:08 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a6e2d20-aca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:63:00:f3:a4:11:1b:a5:29:45:ba:ff:e2: c1:10:d3:10:e5:32:3c:6f:9b:30:3c:78:f7:bc:78: 8e:77:96:15:c9:b4:c1:59:c4:69:21:7c:57:8b:91: 4f:57:ee:01:82:7a:0a:37:91:d5:f5:eb:3b:d7:11: 16:c4:e1:6c:9a:00:09:44:b1:67:fd:8a:42:5c:4a: e4:bc:30:57:fb:56:5c:87:d7:30:d3:88:ed:a4:62: c4:f5:9b:a6:32:1c:00:c2:a2:9b:8a:13:53:b3:41: e6:3f:0b:4b:fe:21:b1:06:85:62:4f:49:6f:79:29: 71:04:2c:19:8a:fc:78:52:d5:79:34:f8:ef:fa:09: cf:ba:73:60:c7:f3:05:2b:2c:22:09:ad:f8:5f:c2: b2:18:4d:7a:09:44:73:34:27:f6:a7:0b:c9:93:c2: 86:41:e1:9f:ec:96:51:a4:31:ad:0f:55:4f:e9:34: 9d:84:ab:b7:ff:7c:6a:39:27:89:e2:9a:46:05:50: d2:e2:26:59:2b:89:7b:2b:80:01:96:ee:32:5f:2c: 66:13:3e:9c:9f:d5:94:a5:9a:f7:bc:20:7b:f2:24: 42:0d:b5:6b:02:d5:8c:4b:4c:71:ee:ad:5c:36:f8: 7d:ae:b9:e6:1d:5c:ca:9c:4c:8e:8f:04:d4:14:10: 7e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8A:5C:C0:CD:98:97:95:C5:F7:11:B6:50:12:0B:15:94:30:A3:F7 X509v3 Authority Key Identifier: keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/85E0F43E8C4B11F1B19DE8A35611F970.roa sbgp-ipAddrBlock: critical IPv4: 103.90.212.0/22 123.253.0.0/22 Signature Algorithm: sha256WithRSAEncryption b6:c4:9f:66:7b:ca:0d:98:66:05:1b:af:f2:04:11:81:a2:8d: 20:2b:22:8b:dd:f7:97:d4:8e:c3:76:45:49:6d:e1:63:75:0f: 8c:1a:7f:98:45:2c:83:8f:b4:dd:3a:e9:96:31:ef:bd:dd:53: 48:90:01:55:4e:9a:e1:db:0a:dc:d5:10:0b:ee:68:27:a8:ae: e7:e9:5e:f4:dd:dd:64:30:7a:a9:8f:8b:38:1f:b2:1a:78:fa: 9d:9d:5c:f4:33:4d:48:c1:60:da:03:a4:18:cd:ad:84:57:ae: 9a:fc:34:46:e8:3e:3c:d4:5f:e1:3b:9a:d9:97:d5:a6:e2:f6: e4:ea:7a:b3:26:85:0a:af:5d:a9:32:c3:28:7a:52:47:ae:01: a3:5f:46:f0:75:0e:68:7f:e6:73:0e:bd:bd:3c:89:a9:28:28: e6:ca:c1:97:e7:51:6a:43:e4:dc:ac:3e:41:9a:c0:aa:12:ad: 93:e3:ef:26:99:cb:4d:6d:14:db:93:60:bf:a1:e4:10:ac:53: 94:a9:9b:fd:51:90:0d:c0:f5:2c:73:78:31:c9:92:f7:6e:c4: 69:1f:56:4b:35:bd:e3:6a:04:52:2c:7e:37:07:72:9d:79:5f: 7b:bf:20:77:48:6f:52:de:35:86:19:b3:24:93:4a:e2:a2:97: 78:d1:33:38 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMwNjAxMTAvBgNVBAUTKDdGREY2MjE4RkEwMTVEMEEwMDc0QTg0NDI0NTE4MDZB MjhGOURERjUwHhcNMjYwODAxMTczMDA4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZlMmQyMC1hY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm45jAPOkERulKUW6/+LBENMQ5TI8b5swPHj3vHiOd5YVybTBWcRpIXxXi5FP V+4BgnoKN5HV9es71xEWxOFsmgAJRLFn/YpCXErkvDBX+1Zch9cw04jtpGLE9Zum MhwAwqKbihNTs0HmPwtL/iGxBoViT0lveSlxBCwZivx4UtV5NPjv+gnPunNgx/MF KywiCa34X8KyGE16CURzNCf2pwvJk8KGQeGf7JZRpDGtD1VP6TSdhKu3/3xqOSeJ 4ppGBVDS4iZZK4l7K4ABlu4yXyxmEz6cn9WUpZr3vCB78iRCDbVrAtWMS0xx7q1c Nvh9rrnmHVzKnEyOjwTUFBB+FwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKaKXMDN mJeVxfcRtlASCxWUMKP3MB8GA1UdIwQYMBaAFH/fYhj6AV0KAHSoRCRRgGoo+d31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzA2MC9BNzI1ODZCMDAz QjExMUVCODQzQTc3NTZDNEY5QUUwMi9mOTlpR1BvQlhRb0FkS2hFSkZHQWFpajUz ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5OWlHUG9CWFFvQWRLaEVKRkdBYWlqNTNmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzMwNjAvQTcyNTg2QjAwM0IxMTFFQjg0M0E3NzU2QzRGOUFFMDIvODVFMEY0M0U4 QzRCMTFGMUIxOURFOEEzNTYxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ1rUAwQCe/0AMA0GCSqGSIb3DQEBCwUAA4IBAQC2xJ9me8oNmGYF G6/yBBGBoo0gKyKL3feX1I7DdkVJbeFjdQ+MGn+YRSyDj7TdOumWMe+93VNIkAFV Tprh2wrc1RAL7mgnqK7n6V703d1kMHqpj4s4H7IaePqdnVz0M01IwWDaA6QYza2E V66a/DRG6D481F/hO5rZl9Wm4vbk6nqzJoUKr12pMsMoelJHrgGjX0bwdQ5of+Zz Dr29PImpKCjmysGX51FqQ+TcrD5BmsCqEq2T4+8mmctNbRTbk2C/oeQQrFOUqZv9 UZANwPUsc3gxyZL3bsRpH1ZLNb3jagRSLH43B3KdeV97vyB3SG9S3jWGGbMkk0ri opd40TM4 -----END CERTIFICATE-----Generated at Fri Sep 11 17:39:12 2026 by rpki-client