$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/160A52A854EF11EFB9156612C4F9AE02.roa File: 160A52A854EF11EFB9156612C4F9AE02.roa (raw, json) Hash identifier: q5zOvT4EolzxJnpWJZXj87BdcVRbnQ7M7O7aI2ns0Mc= Subject key identifier: A1:B6:93:FB:87:80:69:0B:1D:CD:FE:C9:F8:62:B3:CB:A2:54:1D:A4 Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Certificate serial: 0252 Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/160A52A854EF11EFB9156612C4F9AE02.roa Signing time: Sat 29 Aug 2026 02:53:56 +0000 ROA not before: Sat 29 Aug 2026 02:53:56 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151648 IP address blocks: 103.248.222.0/24 maxlen: 24 103.248.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Validity Not Before: Aug 29 02:53:56 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9249c4-5f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0f:69:69:df:16:8b:a6:e5:db:34:7f:c3:88: 9d:15:a6:25:a6:76:2e:46:75:e6:31:12:56:1a:93: 23:79:b6:31:c3:21:c6:a4:75:e5:b3:6c:ad:bf:f4: 44:9c:f9:72:1d:8f:16:6c:be:07:6b:a0:9a:53:be: 4a:e4:22:3c:b9:7b:18:75:05:4d:2b:e8:6a:b8:8b: ca:9b:7f:8a:dd:fa:61:89:a2:f8:f6:80:c4:6f:02: eb:d8:31:3d:93:91:e0:bd:85:13:3b:dd:fc:16:82: 7e:46:2e:71:51:ab:ab:36:2b:a0:b5:1a:37:c1:91: 38:79:72:63:a8:84:d2:81:2a:fd:49:d2:7a:0f:76: 9f:f6:1b:75:eb:3c:25:14:6b:29:b3:84:19:b6:67: e5:50:9a:4e:2b:74:b7:bb:89:fc:45:a3:db:8d:1d: 7a:a4:e5:2d:33:9d:f8:2b:cf:9f:bb:78:8b:cd:53: 56:b1:3d:8a:2e:84:79:84:91:59:46:87:2c:a4:0e: 48:fc:91:bd:d5:87:48:47:9d:87:d6:3a:2a:6d:b1: d5:37:ed:88:b8:7b:fa:46:6c:c6:61:17:e4:3d:41: ac:25:50:37:09:41:ed:ad:cd:a6:b0:b3:df:96:d0: a6:2d:c0:6e:48:7d:81:10:36:e4:4d:fa:92:b2:12: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B6:93:FB:87:80:69:0B:1D:CD:FE:C9:F8:62:B3:CB:A2:54:1D:A4 X509v3 Authority Key Identifier: keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/160A52A854EF11EFB9156612C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.248.222.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:f2:df:92:98:88:3f:e5:e2:5f:bc:15:b2:2f:45:20:db:21: fc:af:e1:ee:26:63:11:5e:cd:ab:f7:5e:c1:27:95:bf:cc:31: 62:ce:76:d7:cc:ed:69:51:3c:0f:59:87:23:c7:1b:0c:c2:1a: b7:1a:aa:0a:54:dc:68:5a:e9:91:54:09:40:ca:5c:bb:07:ce: fa:2a:6d:72:e3:46:9d:12:2f:3e:00:a1:f6:ca:92:6c:be:0c: 1e:6d:5c:07:fe:fd:e7:41:a7:39:05:6b:9c:30:f4:1f:88:cc: 3e:ef:e5:fc:97:14:c5:7e:74:9b:f8:42:4c:26:02:96:e3:c6: 45:37:4d:95:9a:4a:fa:ad:8b:4c:24:8f:3e:85:b4:84:f3:6f: e2:ff:11:15:68:48:9e:14:59:d2:0e:d7:7c:18:29:52:61:6a: 77:12:29:48:9f:3a:7a:b6:30:48:c1:cf:04:59:ba:4a:79:25: b8:70:56:4b:eb:c2:b0:17:42:7f:d9:d7:69:92:63:e1:48:42: c4:02:93:27:e2:7f:c8:d3:f6:5a:3e:67:ba:66:07:6d:f2:3a: f4:bc:11:91:0b:df:b9:cd:1c:4b:4b:3a:01:95:57:93:2f:e4: af:2e:1f:9f:69:03:25:29:66:ec:92:23:3f:1e:f0:17:e1:fc: 90:e7:30:8d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD NjZFMTJDOUYwHhcNMjYwODI5MDI1MzU2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkyNDljNC01ZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmA9pad8Wi6bl2zR/w4idFaYlpnYuRnXmMRJWGpMjebYxwyHGpHXls2ytv/RE nPlyHY8WbL4Ha6CaU75K5CI8uXsYdQVNK+hquIvKm3+K3fphiaL49oDEbwLr2DE9 k5HgvYUTO938FoJ+Ri5xUaurNiugtRo3wZE4eXJjqITSgSr9SdJ6D3af9ht16zwl FGsps4QZtmflUJpOK3S3u4n8RaPbjR16pOUtM534K8+fu3iLzVNWsT2KLoR5hJFZ RocspA5I/JG91YdIR52H1joqbbHVN+2IuHv6RmzGYRfkPUGsJVA3CUHtrc2msLPf ltCmLcBuSH2BEDbkTfqSshLnXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKG2k/uH gGkLHc3+yfhis8uiVB2kMB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0 RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YwRkEvMjA2REZDNTAzNEU3MTFFRUIwQzgzNjE2QzRGOUFFMDIvMTYwQTUyQTg1 NEVGMTFFRkI5MTU2NjEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ/jeMA0GCSqGSIb3DQEBCwUAA4IBAQAK8t+SmIg/5eJfvBWyL0Ug 2yH8r+HuJmMRXs2r917BJ5W/zDFiznbXzO1pUTwPWYcjxxsMwhq3GqoKVNxoWumR VAlAyly7B876Km1y40adEi8+AKH2ypJsvgwebVwH/v3nQac5BWucMPQfiMw+7+X8 lxTFfnSb+EJMJgKW48ZFN02Vmkr6rYtMJI8+hbSE82/i/xEVaEieFFnSDtd8GClS YWp3EilInzp6tjBIwc8EWbpKeSW4cFZL68KwF0J/2ddpkmPhSELEApMn4n/I0/Za Pme6Zgdt8jr0vBGRC9+5zRxLSzoBlVeTL+SvLh+faQMlKWbskiM/HvAX4fyQ5zCN -----END CERTIFICATE-----Generated at Sat Sep 5 08:07:46 2026 by rpki-client