$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/909F300E9BE911F197C251106311F970.roa File: 909F300E9BE911F197C251106311F970.roa (raw, json) Hash identifier: UG0FjZkpaj0Zev1rxDEvnntqC39qA875ExgczrszIDY= Subject key identifier: 27:E0:C8:B8:98:01:A8:4F:0C:5D:EC:02:A5:EC:25:90:F5:E6:25:BB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: FACF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/909F300E9BE911F197C251106311F970.roa Signing time: Wed 19 Aug 2026 16:18:08 +0000 ROA not before: Wed 19 Aug 2026 16:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142511 IP address blocks: 103.171.24.0/23 maxlen: 24 2001:df0:2840::/48 maxlen: 48 2001:df7:3280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64207 (0xfacf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 19 16:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a85d740-4b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:80:69:a3:c1:d6:4e:c8:6e:c5:7e:e9:f0: 4d:e2:11:22:10:4d:e6:46:b9:99:09:3e:8c:22:10: cf:1e:c6:6e:93:d3:a5:11:3b:0d:fe:25:b6:df:30: 2d:a1:be:15:8b:8d:af:06:59:99:c9:bc:c0:b0:28: 53:27:f2:8a:c2:47:98:a9:0f:1d:e6:b7:d3:e0:52: a7:c9:40:7b:9c:7e:8a:b3:f5:0a:d3:8b:cc:02:64: 19:72:22:b8:e0:ff:f6:03:5a:97:f5:fc:c3:bf:f6: a7:2a:91:48:70:97:97:e9:1f:60:fc:e3:ab:39:c9: e1:d0:f8:72:d7:57:84:19:f4:06:9c:d6:5b:a6:4a: a5:72:ec:0f:77:25:59:bc:c6:26:5e:d1:e1:1f:28: c3:33:07:c0:2a:80:a0:1e:3c:b7:1a:51:f3:56:85: 34:01:61:41:cf:38:2b:58:2a:dd:a1:8a:7d:ab:2b: df:02:7d:c4:43:02:b1:fb:e8:35:1f:7e:27:6d:8e: 5c:c4:f8:43:d0:0a:30:a7:1f:2b:7b:a3:52:bd:d2: eb:d5:12:9c:c0:28:74:95:9a:89:42:54:d8:bc:5b: ff:83:70:c8:fd:ea:94:43:c3:46:ba:e9:ca:28:a7: 63:0c:6e:42:3b:66:f6:1b:e3:c8:57:93:f1:16:c3: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E0:C8:B8:98:01:A8:4F:0C:5D:EC:02:A5:EC:25:90:F5:E6:25:BB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/909F300E9BE911F197C251106311F970.roa sbgp-ipAddrBlock: critical IPv4: 103.171.24.0/23 IPv6: 2001:df0:2840::/48 2001:df7:3280::/48 Signature Algorithm: sha256WithRSAEncryption 88:3a:c6:7e:a3:d7:cc:9d:eb:e2:dd:e4:0f:3d:42:77:f4:2a: 73:5c:16:34:73:8f:7d:c2:9e:96:cc:f2:d1:a6:de:8b:54:29: 0d:ff:b0:13:68:b3:91:97:af:a3:f3:3b:5a:8e:7e:5d:90:b8: 5f:71:b5:ce:c4:0f:80:f4:dc:9a:0d:0b:2e:05:0b:66:75:4c: 97:cc:d0:b9:ef:ed:63:f0:28:64:e8:41:2d:66:1f:e8:ab:a0: 6d:03:18:0d:2b:bc:e3:da:fc:88:d8:7e:95:40:2e:02:00:bf: 26:a0:12:17:58:a8:8b:33:46:81:78:83:6b:03:a1:22:b3:ee: ce:c0:9b:6a:81:10:b7:41:b7:61:09:5a:29:13:dd:11:91:b2: 02:89:95:e2:13:eb:1c:e6:dc:7c:a8:59:a4:01:bb:9a:ce:1f: 76:2e:8d:1a:a9:8e:c8:bd:37:cf:95:d1:1d:be:a1:74:76:b2: f7:20:d6:d1:0e:a1:26:15:4b:c3:b5:57:50:48:00:f7:77:bd: 95:8b:de:4d:dd:18:3a:10:60:2a:c5:7c:d9:4b:50:57:38:b1: 4f:ae:0a:44:1a:91:db:24:04:cf:03:55:42:f4:f7:65:d2:82: bb:5e:9c:d2:8d:2e:75:6b:00:0d:b1:b3:2a:f9:2f:63:54:3c: a7:a4:b7:42 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAPrPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDgxOTE2MTgwOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE4NWQ3NDAtNGIxZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlEgGmjwdZOyG7FfunwTeIRIhBN5ka5mQk+jCIQzx7GbpPTpRE7Df4ltt8w LaG+FYuNrwZZmcm8wLAoUyfyisJHmKkPHea30+BSp8lAe5x+irP1CtOLzAJkGXIi uOD/9gNal/X8w7/2pyqRSHCXl+kfYPzjqznJ4dD4ctdXhBn0BpzWW6ZKpXLsD3cl WbzGJl7R4R8owzMHwCqAoB48txpR81aFNAFhQc84K1gq3aGKfasr3wJ9xEMCsfvo NR9+J22OXMT4Q9AKMKcfK3ujUr3S69USnMAodJWaiUJU2Lxb/4NwyP3qlEPDRrrp yiinYwxuQjtm9hvjyFeT8RbD/usCAwEAAaOCAnowggJ2MB0GA1UdDgQWBBQn4Mi4 mAGoTwxd7AKl7CWQ9eYluzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkwOUYzMDBF OUJFOTExRjE5N0MyNTExMDYzMTFGOTcwLnJvYTA5BggrBgEFBQcBBwEB/wQqMCgw DAQCAAEwBgMEAWerGDAYBAIAAjASAwcAIAEN8ChAAwcAIAEN9zKAMA0GCSqGSIb3 DQEBCwUAA4IBAQCIOsZ+o9fMnevi3eQPPUJ39CpzXBY0c499wp6WzPLRpt6LVCkN /7ATaLORl6+j8ztajn5dkLhfcbXOxA+A9NyaDQsuBQtmdUyXzNC57+1j8Chk6EEt Zh/oq6BtAxgNK7zj2vyI2H6VQC4CAL8moBIXWKiLM0aBeINrA6Eis+7OwJtqgRC3 QbdhCVopE90RkbICiZXiE+sc5tx8qFmkAbuazh92Lo0aqY7IvTfPldEdvqF0drL3 INbRDqEmFUvDtVdQSAD3d72Vi95N3Rg6EGAqxXzZS1BXOLFPrgpEGpHbJATPA1VC 9Pdl0oK7XpzSjS51awANsbMq+S9jVDynpLdC -----END CERTIFICATE-----Generated at Fri Sep 4 21:25:56 2026 by rpki-client