$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa File: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (raw, json) Hash identifier: GeYMMjQQO4OJv0hhzntd/IKM1r5EywrlvT+cEVRcT2M= Subject key identifier: 68:33:A7:FF:0A:68:03:83:AC:87:AF:6A:3A:86:DE:54:A9:C9:D0:67 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 1263 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa Signing time: Wed 26 Aug 2026 17:34:56 +0000 ROA not before: Wed 26 Aug 2026 17:34:56 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 395886 IP address blocks: 103.140.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4707 (0x1263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 26 17:34:56 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a8f23c0-ee21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:50:94:6f:39:85:7b:c6:f1:35:87:b4:7d: 09:de:db:35:06:e6:b2:15:17:32:2c:37:ae:03:0a: ab:b8:cc:d0:aa:c0:60:35:26:7d:91:70:12:fc:1b: f0:d8:63:64:2c:75:6e:85:33:57:e9:e5:c8:a8:77: 63:d5:23:b0:34:a9:0a:57:cd:a9:c2:0c:bc:a0:a4: e0:44:71:eb:47:43:37:75:35:0f:ca:8d:bf:42:b7: b4:4c:29:be:dd:a7:5f:0d:35:47:f9:9c:55:6b:aa: 6c:47:de:57:28:d5:02:b0:25:34:ac:87:57:2b:9c: ef:86:43:b8:4e:90:23:e7:d7:10:5e:7f:98:34:ff: 20:34:83:87:12:65:d0:84:4b:7c:10:b4:36:25:26: 31:39:76:31:ae:97:32:c1:f2:e8:3f:26:99:2a:47: 16:fb:53:6f:92:3a:42:2e:b0:94:5c:e9:a1:10:9d: 21:b5:ab:58:fe:ca:9b:cf:eb:14:5e:00:11:a8:1c: bc:2e:67:d7:47:d8:9b:22:16:32:7a:03:c9:27:aa: d4:1a:3e:32:f1:ff:8d:21:f0:35:05:96:7e:a1:23: ea:5b:07:09:c2:ee:54:8f:e8:24:69:0f:ce:b5:fa: 06:0d:da:8a:08:fe:23:b1:86:e8:9a:7e:be:d5:57: 23:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:33:A7:FF:0A:68:03:83:AC:87:AF:6A:3A:86:DE:54:A9:C9:D0:67 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.9.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:e4:0e:3f:c9:a2:33:d2:27:fb:91:04:85:90:44:5f:f1:99: 99:c9:82:3c:b5:7c:85:8f:e3:5e:85:0a:8b:8b:85:eb:a2:64: 59:66:b8:20:82:9c:dc:79:a0:ee:1b:2a:19:af:fd:72:46:b9: 09:00:13:8b:eb:56:df:b7:e2:e8:18:0f:98:44:96:d2:30:46: 0f:3a:40:52:00:1b:81:5d:11:2e:b8:b0:fd:d0:12:2a:a0:9f: ae:9a:c4:65:3b:ac:f9:8a:a6:69:9e:ea:3e:b9:d5:d7:f0:28: 1b:18:15:e5:5e:a9:98:36:40:4a:a7:8d:d6:42:cd:a1:ec:73: e9:01:bc:56:e6:b4:a3:67:cb:42:22:cd:2c:b6:6c:20:0d:27: e1:71:9f:54:9c:9f:a2:6a:fc:03:92:b8:ca:13:48:32:a2:b6: c7:14:ee:cf:5a:ca:81:00:7f:dd:18:f9:81:e0:e3:ab:fb:17: 01:b4:bb:e4:26:c6:03:5d:6e:90:3a:00:28:44:8e:a9:7e:be: fc:01:6d:d3:96:c2:ec:87:bf:b3:1f:7c:c2:82:ec:d7:b8:a1: a8:4e:a0:ae:a5:4c:b5:07:a7:54:06:97:ee:f2:aa:fd:97:78: b8:1f:a4:80:a8:07:d5:90:40:cd:bc:7d:9b:76:c7:47:c1:fc: fb:1c:69:1d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjYwODI2MTczNDU2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmMjNjMC1lZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPVQlG85hXvG8TWHtH0J3ts1BuayFRcyLDeuAwqruMzQqsBgNSZ9kXAS/Bvw 2GNkLHVuhTNX6eXIqHdj1SOwNKkKV82pwgy8oKTgRHHrR0M3dTUPyo2/Qre0TCm+ 3adfDTVH+ZxVa6psR95XKNUCsCU0rIdXK5zvhkO4TpAj59cQXn+YNP8gNIOHEmXQ hEt8ELQ2JSYxOXYxrpcywfLoPyaZKkcW+1NvkjpCLrCUXOmhEJ0htatY/sqbz+sU XgARqBy8LmfXR9ibIhYyegPJJ6rUGj4y8f+NIfA1BZZ+oSPqWwcJwu5Uj+gkaQ/O tfoGDdqKCP4jsYbomn6+1Vcj6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGgzp/8K aAODrIevajqG3lSpydBnMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvQzNCRUFDMzhD RjdDMTFGMEIwRUI0NjQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4wJMA0GCSqGSIb3DQEBCwUAA4IBAQAc5A4/yaIz0if7kQSFkERf 8ZmZyYI8tXyFj+NehQqLi4XromRZZrgggpzceaDuGyoZr/1yRrkJABOL61bft+Lo GA+YRJbSMEYPOkBSABuBXREuuLD90BIqoJ+umsRlO6z5iqZpnuo+udXX8CgbGBXl XqmYNkBKp43WQs2h7HPpAbxW5rSjZ8tCIs0stmwgDSfhcZ9UnJ+iavwDkrjKE0gy orbHFO7PWsqBAH/dGPmB4OOr+xcBtLvkJsYDXW6QOgAoRI6pfr78AW3TlsLsh7+z H3zCguzXuKGoTqCupUy1B6dUBpfu8qr9l3i4H6SAqAfVkEDNvH2bdsdHwfz7HGkd -----END CERTIFICATE-----Generated at Sat Sep 5 01:47:29 2026 by rpki-client