$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa File: 8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa (raw, json) Hash identifier: hYSR2FJhnpdH10dSRFY+wszBbz+InLIEAjGCOtkSEmU= Subject key identifier: DF:BC:8B:5D:0D:A2:E9:D6:BD:E3:E2:95:34:01:F8:4C:24:75:BD:D5 Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Certificate serial: 086C Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:02:57 +0000 ROA not before: Wed 16 Apr 2025 21:31:48 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 23862 IP address blocks: 103.53.58.0/24 maxlen: 24 103.53.59.0/24 maxlen: 24 202.92.128.0/24 maxlen: 24 202.92.129.0/24 maxlen: 24 202.92.130.0/24 maxlen: 24 202.92.131.0/24 maxlen: 24 202.92.132.0/24 maxlen: 24 202.92.134.0/24 maxlen: 24 202.92.135.0/24 maxlen: 24 202.92.136.0/22 maxlen: 22 202.92.136.0/24 maxlen: 24 202.92.141.0/24 maxlen: 24 202.92.159.0/24 maxlen: 24 2400:b000:100::/48 maxlen: 48 2400:b000:c0e::/48 maxlen: 48 2400:b000:eee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2156 (0x86c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Validity Not Before: Apr 16 21:31:48 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a47f51-db94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b3:0a:cd:cc:48:29:17:94:8c:da:2f:00:ce: 13:9a:5b:52:d5:66:67:96:5a:07:93:6b:2d:e7:38: 39:d4:fa:74:d6:48:a4:1a:cf:fb:e0:ab:25:b5:a7: 08:df:13:61:ba:3f:67:41:a5:aa:5c:7b:93:c8:3d: 9e:c0:f2:0b:6d:cb:87:bd:06:e6:ea:cb:11:d5:fa: 89:9b:8c:68:cf:50:77:c9:5c:3f:e9:80:74:d0:57: 69:de:38:c7:7e:b5:bc:3e:5b:43:54:77:32:77:8a: 88:0a:39:4b:b9:bd:a4:00:af:3d:98:ba:26:95:e7: 76:39:5d:08:10:fe:b9:1a:32:92:7e:e4:46:b2:2f: 15:0c:6d:85:c3:a7:4a:71:6f:b4:87:16:66:ac:27: 55:36:29:54:e5:0d:84:25:81:c7:4a:84:56:bf:8e: ad:2a:04:9d:3d:b0:3b:3d:a3:40:c8:fa:e3:8a:eb: 30:42:d1:56:ce:e8:fb:2e:b9:43:f5:63:75:fe:0d: 10:f8:2b:92:44:17:e4:d2:19:79:4a:bc:14:e7:5b: 02:c1:19:86:34:f4:49:be:fb:0a:04:ec:72:1e:7c: 5a:06:07:c5:29:44:a6:a1:45:c2:ef:ca:6e:b7:e7: 19:cc:c4:40:ee:58:87:b6:f5:60:8d:21:2a:37:88: 75:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BC:8B:5D:0D:A2:E9:D6:BD:E3:E2:95:34:01:F8:4C:24:75:BD:D5 X509v3 Authority Key Identifier: keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.53.58.0/23 202.92.128.0-202.92.132.255 202.92.134.0-202.92.139.255 202.92.141.0/24 202.92.159.0/24 IPv6: 2400:b000:100::/48 2400:b000:c0e::/48 2400:b000:eee::/48 Signature Algorithm: sha256WithRSAEncryption 91:5b:24:ed:05:5e:29:2b:ee:26:9b:6b:c9:5d:40:ee:de:e9: 86:f4:32:08:5c:19:c3:1b:46:a1:62:06:fc:ff:58:56:d4:3f: 97:97:3e:e2:f4:5e:82:40:27:29:5f:bd:2d:a0:0c:2b:40:8b: f1:ae:bd:6b:95:88:4e:29:5c:43:f2:aa:f1:4f:c6:61:52:e5: 36:27:01:5d:82:c1:c7:06:02:d8:8b:a3:d0:82:1f:2e:8f:ad: 05:cf:d4:73:3a:30:6b:70:b9:a7:c4:94:69:28:b7:26:e1:37: 91:fd:4f:11:ef:a2:a1:ee:a8:f6:fa:c5:89:4f:04:24:45:a5: 09:85:d5:8b:31:32:3f:6b:51:4f:1e:cd:2c:b3:5b:32:4a:b1: 75:63:cb:f5:b9:3e:fc:b0:1c:57:44:f5:18:0e:ac:f0:58:cd: 6b:48:23:4e:39:00:d2:9b:b3:85:22:50:02:2a:d8:77:e3:0b: 50:88:08:77:45:59:0e:f5:db:5f:51:4c:62:4f:cf:73:6e:4a: fd:39:36:f4:0f:40:4e:0e:a7:ce:17:23:50:ed:bc:c4:30:a0: ef:6f:02:6a:50:47:68:c2:7a:89:9b:d6:e2:6e:33:95:79:67: cb:c7:ed:84:ee:8a:47:59:45:f7:f7:a3:e4:23:46:72:28:cb: 16:2d:8d:ec -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB Mjg4N0U2RjUwHhcNMjUwNDE2MjEzMTQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Y1MS1kYjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkrMKzcxIKReUjNovAM4TmltS1WZnlloHk2st5zg51Pp01kikGs/74KsltacI 3xNhuj9nQaWqXHuTyD2ewPILbcuHvQbm6ssR1fqJm4xoz1B3yVw/6YB00Fdp3jjH frW8PltDVHcyd4qICjlLub2kAK89mLomled2OV0IEP65GjKSfuRGsi8VDG2Fw6dK cW+0hxZmrCdVNilU5Q2EJYHHSoRWv46tKgSdPbA7PaNAyPrjiuswQtFWzuj7LrlD 9WN1/g0Q+CuSRBfk0hl5SrwU51sCwRmGNPRJvvsKBOxyHnxaBgfFKUSmoUXC78pu t+cZzMRA7liHtvVgjSEqN4h14QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFN+8i10N ounWvePilTQB+Ewkdb3VMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1 dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA3MTgvOTI4M0VERUUwRTk0MTFFQjk2NjlFMTMzQzRGOUFFMDIvODQzM0ZGNkEw RTk3MTFFQjlBNkMyQjNDQzRGOUFFMDIucm9hMGoGCCsGAQUFBwEHAQH/BFswWTA0 BAIAATAuAwQBZzU6MAwDBAfKXIADBADKXIQwDAMEAcpchgMEAspciAMEAMpcjQME AMpcnzAhBAIAAjAbAwcAJACwAAEAAwcAJACwAAwOAwcAJACwAA7uMA0GCSqGSIb3 DQEBCwUAA4IBAQCRWyTtBV4pK+4mm2vJXUDu3umG9DIIXBnDG0ahYgb8/1hW1D+X lz7i9F6CQCcpX70toAwrQIvxrr1rlYhOKVxD8qrxT8ZhUuU2JwFdgsHHBgLYi6PQ gh8uj60Fz9RzOjBrcLmnxJRpKLcm4TeR/U8R76Kh7qj2+sWJTwQkRaUJhdWLMTI/ a1FPHs0ss1sySrF1Y8v1uT78sBxXRPUYDqzwWM1rSCNOOQDSm7OFIlACKth34wtQ iAh3RVkO9dtfUUxiT89zbkr9OTb0D0BODqfOFyNQ7bzEMKDvbwJqUEdownqJm9bi bjOVeWfLx+2E7opHWUX396PkI0ZyKMsWLY3s -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:20 2026 by rpki-client