$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa File: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (raw, json) Hash identifier: hsA4dzDqhKvp9cdCvi5E/QiWDK70tsjIjm1pqpZGIzQ= Subject key identifier: 03:D0:3B:52:F9:D5:46:18:72:F3:DC:76:17:01:2F:B4:DF:FD:E2:E0 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0255 Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa Signing time: Mon 03 Aug 2026 03:51:49 +0000 ROA not before: Mon 03 Aug 2026 03:51:49 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 147314 IP address blocks: 103.228.10.0/24 maxlen: 24 103.228.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Aug 3 03:51:49 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a701055-aadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a6:d8:01:eb:52:5c:50:38:bd:52:46:9a:fb: 18:cf:2c:9e:46:c6:8c:16:29:a2:6d:ca:e3:0e:d1: bb:64:52:b1:bd:94:aa:26:86:63:07:a0:03:1c:c7: 55:ec:fb:29:5d:a9:ac:04:b9:f2:b8:c6:97:ff:f8: 27:1f:16:2a:7f:6c:c2:c0:3d:cb:e5:57:4e:c5:47: 1c:0d:93:3f:6d:4b:fa:67:71:a3:50:82:3c:9b:1f: 70:47:06:4b:bd:98:97:6f:bd:21:64:00:9c:6a:eb: 66:10:14:5c:c6:14:82:2f:f5:56:68:0a:88:08:38: c0:67:c2:cf:af:1a:88:00:24:21:cc:c0:e0:47:cc: 79:30:e6:6d:90:ec:11:96:e5:8a:df:31:f4:5c:98: 29:69:0e:1e:0b:3e:2c:fb:a7:cc:2e:87:5e:21:26: fa:3f:5b:87:5f:b2:b6:a6:b0:8a:23:58:1e:6e:b1: f8:9f:fc:43:ec:3f:7c:8c:be:1d:30:4e:b3:68:4f: b5:f0:3b:2c:0f:b2:6d:60:84:2b:a8:bc:37:4a:c0: c7:a9:b3:50:0d:2a:8b:a8:4e:ed:c2:52:78:c5:66: c2:31:a9:ad:a3:6f:be:21:10:c7:c6:23:be:af:57: 18:e5:b7:7a:f5:59:1d:06:c7:87:51:7d:d5:71:a8: 3b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D0:3B:52:F9:D5:46:18:72:F3:DC:76:17:01:2F:B4:DF:FD:E2:E0 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.228.10.0/23 Signature Algorithm: sha256WithRSAEncryption aa:95:ac:90:50:b8:6c:5d:91:18:37:f0:21:d4:cb:e7:ba:ef: 4c:18:ce:a7:6f:57:c5:3d:1e:14:5c:18:7d:67:2c:d7:6f:95: 74:45:52:40:77:76:84:fa:6b:34:56:37:a9:67:b4:b1:1b:2e: 2c:3e:14:92:f5:04:ae:ee:a7:46:79:66:ad:ff:fc:65:c0:c1: e1:7d:9c:f3:b2:00:84:dc:00:82:06:5b:a8:b7:eb:5e:d7:c7: ce:2a:e4:5d:20:8f:fc:29:81:7e:1d:e8:30:12:d2:22:ac:e5: 2d:85:08:55:ee:f1:20:0c:09:d3:4a:24:cc:fb:a4:a5:95:fe: 9f:f4:5a:9e:9d:d0:35:57:17:f0:4c:4d:59:d7:bb:3e:90:95: 48:d1:01:d7:bd:95:2f:44:5c:8e:1b:05:de:e7:8c:34:a3:de: a8:7f:b0:ed:4a:6b:9d:b9:f5:51:10:0a:f6:9b:e1:54:5d:70: 49:74:bb:71:c3:6a:07:ae:07:08:2e:7f:08:4a:db:af:f4:42: 48:ce:60:fd:51:82:d7:1d:1a:8b:eb:3a:62:a4:1e:a8:be:3f: 1c:66:28:0c:f5:ed:5d:14:7c:87:45:12:09:d2:22:6f:6c:92: ce:8d:11:54:a3:68:e7:20:a2:39:a3:33:b0:ec:da:f7:a3:36: 2d:63:2a:3a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwODAzMDM1MTQ5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcwMTA1NS1hYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoabYAetSXFA4vVJGmvsYzyyeRsaMFimibcrjDtG7ZFKxvZSqJoZjB6ADHMdV 7PspXamsBLnyuMaX//gnHxYqf2zCwD3L5VdOxUccDZM/bUv6Z3GjUII8mx9wRwZL vZiXb70hZACcautmEBRcxhSCL/VWaAqICDjAZ8LPrxqIACQhzMDgR8x5MOZtkOwR luWK3zH0XJgpaQ4eCz4s+6fMLodeISb6P1uHX7K2prCKI1gebrH4n/xD7D98jL4d ME6zaE+18DssD7JtYIQrqLw3SsDHqbNQDSqLqE7twlJ4xWbCMamto2++IRDHxiO+ r1cY5bd69VkdBseHUX3Vcag7UwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAPQO1L5 1UYYcvPcdhcBL7Tf/eLgMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVDQzMvNjQxNkQ4MzgxNEMwMTFFRTk2RUE1NDIxQzRGOUFFMDIvQ0QxQzc1RDhC OThBMTFGMEEyNkMzODU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+QKMA0GCSqGSIb3DQEBCwUAA4IBAQCqlayQULhsXZEYN/Ah1Mvn uu9MGM6nb1fFPR4UXBh9ZyzXb5V0RVJAd3aE+ms0VjepZ7SxGy4sPhSS9QSu7qdG eWat//xlwMHhfZzzsgCE3ACCBluot+te18fOKuRdII/8KYF+HegwEtIirOUthQhV 7vEgDAnTSiTM+6Sllf6f9FqendA1VxfwTE1Z17s+kJVI0QHXvZUvRFyOGwXe54w0 o96of7DtSmudufVREAr2m+FUXXBJdLtxw2oHrgcILn8IStuv9EJIzmD9UYLXHRqL 6zpipB6ovj8cZigM9e1dFHyHRRIJ0iJvbJLOjRFUo2jnIKI5ozOw7Nr3ozYtYyo6 -----END CERTIFICATE-----Generated at Fri Sep 11 05:26:20 2026 by rpki-client