$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa File: 23B27B60F68011E982571C3EC4F9AE02.roa (raw, json) Hash identifier: N2B1v1fBFFC6RS5aVDBb3xQJP9X9cFqqHR04heiWGTU= Subject key identifier: 37:CB:A8:E2:8C:E1:F5:93:FD:72:8B:14:9B:43:B8:63:23:7A:22:32 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0DA8 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa Signing time: Wed 29 Jul 2026 02:18:27 +0000 ROA not before: Wed 29 Jul 2026 02:18:27 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 138651 IP address blocks: 103.135.136.0/24 maxlen: 24 103.135.137.0/24 maxlen: 24 2404:7ec0::/36 maxlen: 36 2404:7ec0:1000::/36 maxlen: 36 2404:7ec0:2000::/36 maxlen: 36 2404:7ec0:3000::/36 maxlen: 36 2404:7ec0:4000::/36 maxlen: 36 2404:7ec0:5000::/36 maxlen: 36 2404:7ec0:6000::/36 maxlen: 36 2404:7ec0:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3496 (0xda8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Jul 29 02:18:27 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a6962f3-f8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:8c:75:ea:d9:40:cc:c3:a6:44:52:18:d8: 69:c4:3f:98:4f:fc:b5:c6:66:fb:8e:b3:72:09:88: ac:de:eb:bc:bd:68:03:b9:8f:d0:69:80:9c:21:d1: d7:09:14:b9:9c:16:b6:6a:22:f4:9e:10:86:16:a6: 13:0a:59:ad:6b:55:b9:ff:a4:1e:b7:cf:e5:b9:1f: 54:f4:d5:c4:9c:2f:84:55:63:bc:c5:88:08:e3:58: 1b:82:7f:e1:a4:3d:cd:ed:3e:08:1a:26:92:f4:4e: b0:40:71:b9:7a:d8:be:02:c1:71:66:6d:0a:d3:b9: 9b:33:3a:75:f9:9f:bf:13:79:e2:e2:94:2a:bb:f9: cd:5e:7e:2c:33:3a:04:3f:0d:c1:5b:24:c8:8d:2b: 0c:8c:fd:51:4f:27:26:f0:50:a1:df:b5:ad:df:e2: 09:ff:51:34:44:45:47:e0:f7:35:cd:d8:4b:88:51: 79:1e:54:58:14:54:ac:3b:9c:26:82:12:2f:43:1d: 71:a2:84:a2:8a:6a:4b:f3:af:f4:95:2c:b6:ca:69: e0:47:a3:82:9b:0d:e0:8f:d2:37:e8:75:2d:6f:51: 6b:d6:74:a0:f2:0d:3b:9a:1e:ee:53:cb:ad:2f:50: d2:93:60:34:78:9e:2e:2e:1b:13:10:3f:79:03:2e: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CB:A8:E2:8C:E1:F5:93:FD:72:8B:14:9B:43:B8:63:23:7A:22:32 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.136.0/23 IPv6: 2404:7ec0::/33 Signature Algorithm: sha256WithRSAEncryption 3b:6f:28:f2:b8:69:a3:19:45:69:f5:8e:fe:5a:6c:a8:2f:22: a1:bf:b5:9b:c7:7b:53:dd:b5:cf:62:0a:f0:63:e8:5f:4d:91: 5c:ab:23:93:92:bf:1c:00:76:05:c5:7d:b4:aa:f5:db:55:2a: 4a:21:4a:d6:79:c6:55:b2:7c:9c:17:9c:f2:cc:ab:26:61:22: e2:2c:e9:a9:be:3f:9c:9b:cb:d3:09:bb:49:54:a8:28:29:3d: ee:48:b0:d8:b0:47:4e:b5:5b:ef:87:25:d3:35:68:44:59:78: e1:cf:c6:6a:94:d6:35:41:a2:c4:10:eb:21:04:37:2b:47:aa: 06:31:0c:7d:5b:a5:ac:ec:b0:bd:e3:ce:48:2e:dd:14:a6:75: a2:bf:58:3a:c5:e4:7b:6a:d9:a6:14:4b:8b:3a:e9:51:fe:1f: 75:57:4f:0b:9a:76:7d:39:d8:c4:53:52:e5:4a:b3:28:c1:1c: 62:ca:5d:f5:0f:89:cd:6f:17:30:61:9c:73:88:bf:f0:86:fc: d2:7a:a0:22:56:4a:e9:a5:5d:15:1d:7b:81:de:fd:15:f6:ce: fc:35:1c:e0:48:9d:ed:00:31:2b:69:33:23:0f:c9:93:24:ed: 2a:9f:9e:57:20:0b:b8:72:f6:28:c9:72:5e:db:48:b3:5c:3c: 14:10:d5:43 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICDagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjYwNzI5MDIxODI3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5NjJmMy1mOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXCMderZQMzDpkRSGNhpxD+YT/y1xmb7jrNyCYis3uu8vWgDuY/QaYCcIdHX CRS5nBa2aiL0nhCGFqYTClmta1W5/6Qet8/luR9U9NXEnC+EVWO8xYgI41gbgn/h pD3N7T4IGiaS9E6wQHG5eti+AsFxZm0K07mbMzp1+Z+/E3ni4pQqu/nNXn4sMzoE Pw3BWyTIjSsMjP1RTycm8FCh37Wt3+IJ/1E0REVH4Pc1zdhLiFF5HlRYFFSsO5wm ghIvQx1xooSiimpL86/0lSy2ymngR6OCmw3gj9I36HUtb1Fr1nSg8g07mh7uU8ut L1DSk2A0eJ4uLhsTED95Ay7wRwIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFDfLqOKM 4fWT/XKLFJtDuGMjeiIyMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhBMDYvODAxQ0E1ODRGNjdGMTFFOUFBM0U3MDNEQzRGOUFFMDIvMjNCMjdCNjBG NjgwMTFFOTgyNTcxQzNFQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQBZ4eIMA4EAgACMAgDBgckBH7AADANBgkqhkiG9w0BAQsFAAOCAQEA O28o8rhpoxlFafWO/lpsqC8iob+1m8d7U921z2IK8GPoX02RXKsjk5K/HAB2BcV9 tKr121UqSiFK1nnGVbJ8nBec8syrJmEi4izpqb4/nJvL0wm7SVSoKCk97kiw2LBH TrVb74cl0zVoRFl44c/GapTWNUGixBDrIQQ3K0eqBjEMfVulrOywvePOSC7dFKZ1 or9YOsXke2rZphRLizrpUf4fdVdPC5p2fTnYxFNS5UqzKMEcYspd9Q+JzW8XMGGc c4i/8Ib80nqgIlZK6aVdFR17gd79FfbO/DUc4Eid7QAxK2kzIw/JkyTtKp+eVyAL uHL2KMlyXttIs1w8FBDVQw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:56 2026 by rpki-client