$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa File: 8224E55C345F11F0BD514C6CC4F9AE02.roa (raw, json) Hash identifier: u6/wQAnigEtagpknx3tXOVG7uwO7ZVlGNYHIfxcAb4g= Subject key identifier: 0B:B0:CF:08:44:80:4D:BC:2D:B4:E5:28:C1:51:CD:E8:67:50:0F:8E Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 125B Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa Signing time: Wed 26 Aug 2026 17:34:39 +0000 ROA not before: Wed 26 Aug 2026 17:34:39 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 152918 IP address blocks: 103.149.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4699 (0x125b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 26 17:34:39 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a8f23af-c768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:b8:e8:3d:d6:02:68:b1:ee:d6:fe:f7:e0: 4c:36:d1:ff:d1:d0:e8:ba:c4:27:60:0e:39:9f:cd: 53:25:a0:0b:50:5b:38:17:f6:99:51:35:db:53:2e: c8:ba:3a:f9:30:08:16:7a:3b:3f:46:eb:73:f3:f3: f4:24:52:e5:62:02:7b:cd:a4:18:b8:04:c5:9b:d9: 09:f1:67:79:ad:6a:b0:0f:d4:47:82:f5:0d:5e:8c: 2d:38:9c:ed:83:ad:0e:81:1c:77:9f:f3:c9:fc:d8: a2:ef:3e:dc:5b:a4:99:0a:89:40:36:a4:e4:96:67: 57:d9:6e:bb:1a:27:d5:f7:a1:17:68:37:18:57:9a: 39:64:77:89:93:d9:43:a8:77:27:3d:dc:0d:ae:70: b0:4c:52:43:43:d9:1f:8f:de:15:07:c7:3a:ef:39: cf:bc:40:47:67:f0:9e:9c:5a:05:08:2b:d0:85:3a: f5:40:20:95:bd:07:0d:a1:47:89:76:19:e9:93:84: d6:bd:a2:e0:19:0c:45:dd:8c:37:8a:f9:ea:29:4a: da:43:d7:7a:cc:6b:c5:bf:13:77:a5:5f:2a:5e:ba: e1:59:05:cc:fa:d3:59:ed:46:72:ae:21:33:09:96: 38:e3:df:eb:60:f4:5e:0e:9f:1d:23:04:6a:80:a7: 0e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B0:CF:08:44:80:4D:BC:2D:B4:E5:28:C1:51:CD:E8:67:50:0F:8E X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.144.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:b4:af:97:89:69:6a:35:9f:71:5c:e0:5f:f4:80:b5:bd:d1: 1c:d2:bd:43:81:8e:00:ba:ba:06:5a:9b:f5:c6:e6:4f:6f:d0: 72:93:3a:4b:d1:f4:e9:aa:53:76:63:c5:c0:2c:64:55:c4:31: 09:1a:e3:10:07:c1:30:b5:db:54:98:0e:f4:be:e2:14:28:8f: 8b:33:80:c2:68:6b:b2:ef:be:84:a1:d3:6c:0d:fb:c8:5f:ea: fd:5c:be:c7:a8:0c:d9:1e:3b:78:22:c2:1a:b3:05:e8:e2:03: 1a:d7:e1:b5:b4:33:9a:86:21:6d:17:e1:52:0f:12:aa:84:6a: 10:2a:40:8e:05:7b:dd:73:c6:ac:f3:87:5e:ea:6e:5e:14:ce: 56:1a:da:50:59:33:29:77:93:70:87:24:60:0a:67:eb:1e:6d: a2:9b:45:ef:e9:13:bb:5e:9e:b8:0b:97:98:9b:27:8b:02:6f: 0f:03:51:00:ee:26:21:68:26:bb:64:f7:34:49:55:5a:45:ba: 0a:d1:7f:8f:bf:78:a5:23:44:ea:7e:48:05:bd:89:a4:73:9a: 61:cd:d7:a8:dc:05:0c:e6:1a:19:fc:d4:02:87:d7:6b:20:d6: 3e:43:7f:b1:33:14:4d:9d:4f:7c:8a:64:1e:88:37:e3:44:bd: 55:0d:4d:e7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICElswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjYwODI2MTczNDM5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmMjNhZi1jNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Bu46D3WAmix7tb+9+BMNtH/0dDousQnYA45n81TJaALUFs4F/aZUTXbUy7I ujr5MAgWejs/Rutz8/P0JFLlYgJ7zaQYuATFm9kJ8Wd5rWqwD9RHgvUNXowtOJzt g60OgRx3n/PJ/Nii7z7cW6SZColANqTklmdX2W67GifV96EXaDcYV5o5ZHeJk9lD qHcnPdwNrnCwTFJDQ9kfj94VB8c67znPvEBHZ/CenFoFCCvQhTr1QCCVvQcNoUeJ dhnpk4TWvaLgGQxF3Yw3ivnqKUraQ9d6zGvFvxN3pV8qXrrhWQXM+tNZ7UZyriEz CZY449/rYPReDp8dIwRqgKcOMwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAuwzwhE gE28LbTlKMFRzehnUA+OMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvODIyNEU1NUMz NDVGMTFGMEJENTE0QzZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ5WQMA0GCSqGSIb3DQEBCwUAA4IBAQBetK+XiWlqNZ9xXOBf9IC1 vdEc0r1DgY4AuroGWpv1xuZPb9BykzpL0fTpqlN2Y8XALGRVxDEJGuMQB8EwtdtU mA70vuIUKI+LM4DCaGuy776EodNsDfvIX+r9XL7HqAzZHjt4IsIaswXo4gMa1+G1 tDOahiFtF+FSDxKqhGoQKkCOBXvdc8as84de6m5eFM5WGtpQWTMpd5NwhyRgCmfr Hm2im0Xv6RO7Xp64C5eYmyeLAm8PA1EA7iYhaCa7ZPc0SVVaRboK0X+Pv3ilI0Tq fkgFvYmkc5phzdeo3AUM5hoZ/NQCh9drINY+Q3+xMxRNnU98imQeiDfjRL1VDU3n -----END CERTIFICATE-----Generated at Sat Sep 5 04:24:39 2026 by rpki-client