$ rpki-client -vvvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa File: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (raw, json) Hash identifier: 45Tpgz9IzmTLnICK73izgPch5+ePBDmLGk6uk2w4SGw= Subject key identifier: 38:2E:12:94:65:AF:4C:8C:AA:00:C1:9A:BE:5D:4B:62:E3:6C:3D:7A Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Certificate serial: 09D9 Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa Signing time: Sun 06 Sep 2026 20:40:29 +0000 ROA not before: Sun 06 Sep 2026 20:40:29 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 149010 IP address blocks: 103.253.24.0/24 maxlen: 24 103.253.25.0/24 maxlen: 24 103.253.26.0/24 maxlen: 24 103.253.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 20:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Validity Not Before: Sep 6 20:40:29 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9dcfbc-0624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:9d:cd:d2:4c:62:61:e5:b8:7d:dc:4b:ec: 15:a7:2a:2c:75:4c:1d:00:65:21:f5:da:88:63:da: 6d:e7:41:8a:eb:16:25:8d:38:af:dd:bd:25:ea:61: 37:df:44:85:bb:4c:70:ff:8a:f0:36:af:7c:35:7d: 53:b2:68:45:b4:b2:d3:a8:3c:17:e9:6b:59:af:df: 51:64:54:63:d7:0d:80:06:5f:05:15:e5:16:c4:ed: d5:28:8b:85:06:16:17:dd:b1:7d:aa:47:ae:bc:30: 7c:b3:ed:ea:dd:0c:2e:bf:09:2d:ee:34:e5:84:95: 3f:cd:a6:9e:78:2e:d5:d4:c4:36:ee:0e:e6:88:1a: 6b:b7:e6:29:a0:87:a2:f9:5f:51:89:93:18:22:fa: de:9f:be:55:a6:4d:2c:43:a4:57:19:2c:d4:23:e2: 84:c5:e1:cd:d8:94:d2:9a:df:0b:d4:c1:18:da:37: 81:cc:0d:58:16:66:5e:00:0f:3b:57:48:71:90:6a: 3a:11:8b:62:cf:6e:c2:14:42:aa:f3:c1:de:c4:36: 09:6e:f8:88:0a:3a:03:2d:b6:52:ac:1c:f3:01:8a: 0d:51:cc:ca:e2:0a:d4:c2:5c:ad:bd:41:2c:21:63: 7c:16:c8:96:6c:7e:0e:fd:c5:4a:f8:1d:ac:56:f1: 71:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2E:12:94:65:AF:4C:8C:AA:00:C1:9A:BE:5D:4B:62:E3:6C:3D:7A X509v3 Authority Key Identifier: keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.253.24.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:e3:e1:79:d9:1a:03:f3:34:65:91:78:3a:4d:50:cd:c7:f0: 39:96:57:a9:51:69:6f:eb:32:b8:ae:d0:8d:50:47:37:b8:cc: 62:88:43:ca:1e:09:b5:a3:27:d9:ec:af:96:f2:84:da:3d:93: ae:18:6a:3f:67:b5:3f:b6:f6:a6:37:83:5c:b2:21:03:f0:73: 39:83:6c:18:1c:f0:cc:89:9a:bb:07:41:2d:1c:f6:19:6c:1e: 04:84:c9:c3:7d:76:84:24:41:25:a5:46:b2:cb:73:ed:11:77: be:f0:40:bd:b7:22:30:78:e6:3c:4b:6f:40:ea:b5:ac:0b:7b: eb:d1:94:c4:8b:d6:dd:4d:ff:3f:66:07:99:9e:7b:c7:d7:28: b3:a2:d4:c6:15:3d:df:1d:5d:02:b1:a0:cf:a1:43:87:4b:44: d9:00:8f:a7:6a:9f:7a:27:72:db:d5:e0:a1:3d:52:ee:4d:e6: 7b:d6:22:a9:2d:83:32:3d:fc:3f:a1:c1:c3:ef:b7:79:0e:d9: 58:f6:0c:ab:18:d2:f0:2c:76:ef:c7:33:0b:dc:98:1b:5f:1e: 89:67:70:8a:e0:48:fa:ec:28:2b:82:6a:10:70:87:b0:41:41: 02:2a:09:16:e9:3f:4d:b2:74:31:92:a6:92:49:34:68:6e:cf: ac:d7:1e:60 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRjExMTAvBgNVBAUTKDlFRkVBQTcyNEQ3MDhDRkU4MkM2QjZCRjI3MENCQjVE RDQzMDZGMjAwHhcNMjYwOTA2MjA0MDI5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlkY2ZiYy0wNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo56dzdJMYmHluH3cS+wVpyosdUwdAGUh9dqIY9pt50GK6xYljTiv3b0l6mE3 30SFu0xw/4rwNq98NX1TsmhFtLLTqDwX6WtZr99RZFRj1w2ABl8FFeUWxO3VKIuF BhYX3bF9qkeuvDB8s+3q3Qwuvwkt7jTlhJU/zaaeeC7V1MQ27g7miBprt+YpoIei +V9RiZMYIvren75Vpk0sQ6RXGSzUI+KExeHN2JTSmt8L1MEY2jeBzA1YFmZeAA87 V0hxkGo6EYtiz27CFEKq88HexDYJbviICjoDLbZSrBzzAYoNUczK4grUwlytvUEs IWN8FsiWbH4O/cVK+B2sVvFxywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDguEpRl r0yMqgDBmr5dS2LjbD16MB8GA1UdIwQYMBaAFJ7+qnJNcIz+gsa2vycMu13UMG8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNGMS9EMENBRjM4NEJB NTkxMUVBOTA0RkY5MURDNEY5QUUwMi9udjZxY2sxd2pQNkN4cmFfSnd5N1hkUXdi eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252NnFjazF3alA2Q3hyYV9Kd3k3WGRRd2J5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODEzRjEvRDBDQUYzODRCQTU5MTFFQTkwNEZGOTFEQzRGOUFFMDIvMDgzNEZGMkMy RjRDMTFFREIwMzc1RDZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/0YMA0GCSqGSIb3DQEBCwUAA4IBAQBr4+F52RoD8zRlkXg6TVDN x/A5llepUWlv6zK4rtCNUEc3uMxiiEPKHgm1oyfZ7K+W8oTaPZOuGGo/Z7U/tvam N4NcsiED8HM5g2wYHPDMiZq7B0EtHPYZbB4EhMnDfXaEJEElpUayy3PtEXe+8EC9 tyIweOY8S29A6rWsC3vr0ZTEi9bdTf8/ZgeZnnvH1yizotTGFT3fHV0CsaDPoUOH S0TZAI+nap96J3Lb1eChPVLuTeZ71iKpLYMyPfw/ocHD77d5DtlY9gyrGNLwLHbv xzML3JgbXx6JZ3CK4Ej67CgrgmoQcIewQUECKgkW6T9NsnQxkqaSSTRobs+s1x5g -----END CERTIFICATE-----Generated at Tue Oct 6 08:41:37 2026 by rpki-client