$ rpki-client -vvvf rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/22D62D36898111F1A3670DB57111F970.roa File: 22D62D36898111F1A3670DB57111F970.roa (raw, json) Hash identifier: jmB4MGZHwijIKXiayoobyScKrPUI2NpE/HjML3cPfk4= Subject key identifier: 3E:5E:56:60:B4:8A:F4:04:DA:11:00:FB:95:28:6E:1A:0C:39:C9:32 Certificate issuer: /CN=A91834CD/serialNumber=CD7872AAF747BAE03A6118C8381441FF987FCD75 Certificate serial: 1E Authority key identifier: CD:78:72:AA:F7:47:BA:E0:3A:61:18:C8:38:14:41:FF:98:7F:CD:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/22D62D36898111F1A3670DB57111F970.roa Signing time: Wed 09 Sep 2026 09:59:22 +0000 ROA not before: Wed 09 Sep 2026 09:59:22 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 2764 IP address blocks: 103.153.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.crl rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 09:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834CD, serialNumber=CD7872AAF747BAE03A6118C8381441FF987FCD75 Validity Not Before: Sep 9 09:59:22 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa12dfa-32c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:a8:23:87:e6:43:e2:75:31:e7:c1:f9:bf: 5e:e9:39:c4:e9:49:df:fa:c4:3c:27:4d:c7:58:38: 52:ac:a1:2c:01:bc:23:9c:64:87:0a:00:77:56:96: 02:94:35:6e:d6:45:fb:e3:fc:b0:09:2c:d9:c9:13: 11:96:84:d4:ff:48:cc:94:a5:b2:90:fa:10:a8:e8: 47:a1:8d:ee:bd:5b:21:8e:7c:d6:c0:ee:02:ea:13: df:f9:19:07:31:73:53:4c:0a:40:51:57:94:a5:b8: 46:7a:74:1d:89:0d:fe:3f:35:8a:33:77:04:b2:f1: 8e:79:37:2e:bc:ab:4e:5e:4f:9e:54:c5:5b:63:a6: bb:c0:d7:e6:ae:4f:79:d9:19:4f:96:eb:bf:e8:e4: 35:e6:ea:3c:82:06:9b:d7:4f:e8:3c:2f:00:ae:5f: 3a:27:47:e4:08:d3:31:dc:3f:f3:b9:aa:0e:25:e8: e1:80:bd:a5:0a:52:c3:8d:e6:87:12:34:e2:8f:6a: fa:c9:39:43:98:2e:59:44:e8:54:15:05:a8:13:df: da:ea:1f:2f:66:fc:cf:09:8f:a3:45:0c:96:81:7b: 8e:37:fa:3e:0f:b0:ef:8a:5f:4e:6c:b7:ea:1d:31: 6b:06:8b:9b:29:17:8f:02:c9:e6:08:61:93:1a:04: bd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5E:56:60:B4:8A:F4:04:DA:11:00:FB:95:28:6E:1A:0C:39:C9:32 X509v3 Authority Key Identifier: keyid:CD:78:72:AA:F7:47:BA:E0:3A:61:18:C8:38:14:41:FF:98:7F:CD:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/22D62D36898111F1A3670DB57111F970.roa sbgp-ipAddrBlock: critical IPv4: 103.153.1.0/24 Signature Algorithm: sha256WithRSAEncryption 35:09:39:d4:68:28:76:dc:54:54:cc:c2:9c:c0:53:e1:62:89: 50:81:32:b8:81:1e:da:c5:99:6c:2f:5d:34:08:74:ad:be:cb: 03:3a:3a:54:e5:04:14:74:5c:5b:5f:e0:c8:40:a5:0c:5c:37: 4b:60:c5:c8:2b:6b:ef:93:c7:dd:cf:0d:a2:8f:80:c0:f0:35: 25:be:97:c9:d2:0f:e7:b7:1e:1e:f3:d8:7a:da:b9:79:ec:70: 7f:b4:49:29:f4:f9:4d:d1:43:42:b2:78:ea:07:0d:e6:07:82: d0:73:d2:27:f0:88:55:70:54:cd:a1:00:5f:a2:80:7a:80:42: da:ef:88:6a:da:51:cd:95:f6:73:d6:89:17:86:ec:a1:e6:8f: 68:37:e3:9d:63:09:18:cb:49:77:ed:8a:fe:2f:78:1a:17:67: f2:1e:18:98:33:e4:d7:79:0e:14:07:ad:06:f9:2a:ad:02:5d: 36:b9:55:d2:92:19:86:50:29:7e:c8:e9:2b:e2:ca:19:37:09: ca:63:cc:a6:9a:5b:66:c8:f3:29:72:be:66:68:23:25:5d:81: ba:41:1f:82:17:71:86:b1:d6:09:82:a8:53:0a:1e:fa:5a:c0: db:21:e2:d0:2b:c2:84:42:09:92:b6:36:89:16:2a:19:2d:4b: 77:6c:3e:fd -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzRDRDExMC8GA1UEBRMoQ0Q3ODcyQUFGNzQ3QkFFMDNBNjExOEM4MzgxNDQxRkY5 ODdGQ0Q3NTAeFw0yNjA5MDkwOTU5MjJaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTEyZGZhLTMyYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPFKgjh+ZD4nUx58H5v17pOcTpSd/6xDwnTcdYOFKsoSwBvCOcZIcKAHdWlgKU NW7WRfvj/LAJLNnJExGWhNT/SMyUpbKQ+hCo6Eehje69WyGOfNbA7gLqE9/5GQcx c1NMCkBRV5SluEZ6dB2JDf4/NYozdwSy8Y55Ny68q05eT55UxVtjprvA1+auT3nZ GU+W67/o5DXm6jyCBpvXT+g8LwCuXzonR+QI0zHcP/O5qg4l6OGAvaUKUsON5ocS NOKPavrJOUOYLllE6FQVBagT39rqHy9m/M8Jj6NFDJaBe443+j4PsO+KX05st+od MWsGi5spF48CyeYIYZMaBL2vAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUPl5WYLSK 9ATaEQD7lShuGgw5yTIwHwYDVR0jBBgwFoAUzXhyqvdHuuA6YRjIOBRB/5h/zXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNENELzgyMEYzMUQ2ODk4 MDExRjFCNkIwRUYwNzcxMTFGOTcwL3pYaHlxdmRIdXVBNllSaklPQlJCXzVoX3pY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelhoeXF2ZEh1dUE2WVJqSU9CUkJfNWhfelhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRDRC84MjBGMzFENjg5ODAxMUYxQjZCMEVGMDc3MTExRjk3MC8yMkQ2MkQzNjg5 ODExMUYxQTM2NzBEQjU3MTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABnmQEwDQYJKoZIhvcNAQELBQADggEBADUJOdRoKHbcVFTMwpzAU+Fi iVCBMriBHtrFmWwvXTQIdK2+ywM6OlTlBBR0XFtf4MhApQxcN0tgxcgra++Tx93P DaKPgMDwNSW+l8nSD+e3Hh7z2HrauXnscH+0SSn0+U3RQ0KyeOoHDeYHgtBz0ifw iFVwVM2hAF+igHqAQtrviGraUc2V9nPWiReG7KHmj2g3451jCRjLSXftiv4veBoX Z/IeGJgz5Nd5DhQHrQb5Kq0CXTa5VdKSGYZQKX7I6Sviyhk3CcpjzKaaW2bI8yly vmZoIyVdgbpBH4IXcYax1gmCqFMKHvpawNsh4tArwoRCCZK2NokWKhktS3dsPv0= -----END CERTIFICATE-----Generated at Fri Sep 11 11:27:37 2026 by rpki-client