$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/53409F861D9C11EAA3FD402FC4F9AE02.roa File: 53409F861D9C11EAA3FD402FC4F9AE02.roa (raw, json) Hash identifier: ss0dQeyv0nnH3qUz4HPcJdRyluiut3shmhaCT4RFo0A= Subject key identifier: FF:6B:2D:1C:72:37:7F:AE:11:16:91:5B:F0:DB:4E:4E:34:C4:87:14 Certificate issuer: /CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Certificate serial: 0CBC Authority key identifier: 1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/53409F861D9C11EAA3FD402FC4F9AE02.roa Signing time: Sun 16 Aug 2026 19:35:58 +0000 ROA not before: Sun 16 Aug 2026 19:35:58 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 139237 IP address blocks: 103.29.114.0/24 maxlen: 24 103.140.53.0/24 maxlen: 24 2001:df0:ac80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117FA3, serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Validity Not Before: Aug 16 19:35:58 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a82111e-3d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:4a:94:10:20:36:99:d6:d7:63:66:b9:8d: 16:ea:c0:8f:3c:8f:ba:58:b3:b9:5c:5b:78:cc:0b: 8f:f7:20:20:4a:75:13:8e:95:27:82:6c:71:06:39: 95:2e:5c:96:a1:e5:00:ac:88:64:9e:e2:21:cc:eb: d2:40:67:aa:ac:e4:a6:fc:a2:ab:4d:d1:f6:91:13: 9c:33:56:15:b2:1b:12:fc:fe:7b:1b:6b:b0:bc:9d: f8:1d:ca:49:f4:22:c9:66:09:7c:f5:a4:eb:1b:1f: 1d:02:46:df:91:8a:1f:8e:47:b2:71:72:0a:93:f7: 36:2f:33:89:f1:c6:2e:92:74:58:e8:26:7b:70:0b: bc:d9:05:ca:08:56:83:53:b5:9f:12:ba:ef:0a:f4: c1:f4:e9:f8:a3:06:d8:93:ab:56:cd:5c:0b:9a:3c: 1e:7f:32:16:43:97:77:4c:67:8c:c6:35:f4:8f:ae: 1f:9a:64:47:d7:75:a3:74:fb:f1:42:45:75:5d:7f: 9c:01:63:43:bf:00:4c:4c:a3:71:08:fe:b2:74:ff: 0c:1b:df:c9:b8:a5:04:3b:c1:95:b4:e3:15:41:1f: d2:3c:a9:d3:4d:4d:a3:d4:bd:37:20:92:70:47:69: 7b:a0:1b:51:0b:1f:9a:eb:b0:65:28:2b:66:76:0e: ae:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6B:2D:1C:72:37:7F:AE:11:16:91:5B:F0:DB:4E:4E:34:C4:87:14 X509v3 Authority Key Identifier: keyid:1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/53409F861D9C11EAA3FD402FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.29.114.0/24 103.140.53.0/24 IPv6: 2001:df0:ac80::/48 Signature Algorithm: sha256WithRSAEncryption 94:1f:e4:a5:11:86:99:41:bf:29:22:65:4d:d4:d7:f8:94:5f: e0:fb:f2:f8:cd:91:e4:47:c8:2f:3e:49:59:38:1c:46:12:e3: b5:d6:59:b3:96:f8:e8:a2:54:3c:a8:cc:f1:f4:c2:f9:08:f0: 79:83:e6:64:67:18:84:3e:77:f4:44:75:b4:44:07:f9:64:a4: fc:14:42:e6:82:76:4a:b4:29:c1:27:05:42:26:f9:e7:f3:9a: ea:db:9d:4e:8f:a9:d5:c7:b6:6e:70:87:2a:78:4c:d1:17:1f: 82:18:fa:5e:6b:41:06:93:42:29:e3:c4:ff:a2:46:39:b1:11: f3:16:ae:92:4a:72:c5:54:74:6a:63:65:3c:09:09:0f:21:c3: 14:1c:38:b1:f7:eb:74:df:9e:7c:dd:27:de:2b:8a:e1:d3:ed: 10:de:12:fe:98:87:a4:ef:72:49:79:b5:5e:bc:b4:f7:25:86: a6:99:bd:2f:10:8b:da:9a:9a:6f:8b:30:87:52:99:90:61:7e: 80:d3:a2:e6:15:8e:63:34:88:f9:a8:10:26:e8:3c:5a:45:58: 48:94:0b:80:8d:1f:d1:9f:18:50:01:1d:7d:6f:2f:ac:6a:4b: be:34:c0:87:8c:ee:f5:0c:e8:3e:53:3a:25:0c:3b:65:26:85: 68:7c:f8:fd -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdGQTMxMTAvBgNVBAUTKDFCODIxMkRCRjE1NTNDM0I3NjFGMTk5RTVFMDVBMkQx MDk4RENENDcwHhcNMjYwODE2MTkzNTU4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgyMTExZS0zZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrlKlBAgNpnW12NmuY0W6sCPPI+6WLO5XFt4zAuP9yAgSnUTjpUngmxxBjmV LlyWoeUArIhknuIhzOvSQGeqrOSm/KKrTdH2kROcM1YVshsS/P57G2uwvJ34HcpJ 9CLJZgl89aTrGx8dAkbfkYofjkeycXIKk/c2LzOJ8cYuknRY6CZ7cAu82QXKCFaD U7WfErrvCvTB9On4owbYk6tWzVwLmjwefzIWQ5d3TGeMxjX0j64fmmRH13WjdPvx QkV1XX+cAWNDvwBMTKNxCP6ydP8MG9/JuKUEO8GVtOMVQR/SPKnTTU2j1L03IJJw R2l7oBtRCx+a67BlKCtmdg6ubQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFP9rLRxy N3+uERaRW/DbTk40xIcUMB8GA1UdIwQYMBaAFBuCEtvxVTw7dh8Znl4FotEJjc1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0ZBMy81OTMwNzMzNjFE OUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBEdDJIeG1lWGdXaTBRbU56 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0SVMyX0ZWUER0Mkh4bWVYZ1dpMFFtTnpVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTdGQTMvNTkzMDczMzYxRDlCMTFFQTg2MEVDQjJEQzRGOUFFMDIvNTM0MDlGODYx RDlDMTFFQUEzRkQ0MDJGQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZx1yAwQAZ4w1MA8EAgACMAkDBwAgAQ3wrIAwDQYJKoZIhvcNAQEL BQADggEBAJQf5KURhplBvykiZU3U1/iUX+D78vjNkeRHyC8+SVk4HEYS47XWWbOW +OiiVDyozPH0wvkI8HmD5mRnGIQ+d/REdbREB/lkpPwUQuaCdkq0KcEnBUIm+efz murbnU6PqdXHtm5whyp4TNEXH4IY+l5rQQaTQinjxP+iRjmxEfMWrpJKcsVUdGpj ZTwJCQ8hwxQcOLH363TfnnzdJ94riuHT7RDeEv6Yh6Tvckl5tV68tPclhqaZvS8Q i9qamm+LMIdSmZBhfoDTouYVjmM0iPmoECboPFpFWEiUC4CNH9GfGFABHX1vL6xq S740wIeM7vUM6D5TOiUMO2UmhWh8+P0= -----END CERTIFICATE-----Generated at Fri Sep 25 22:30:44 2026 by rpki-client