$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/C7C28CAC4A0711EEBE153131C4F9AE02.roa File: C7C28CAC4A0711EEBE153131C4F9AE02.roa (raw, json) Hash identifier: yNOYm4zO/+eL5oLtMMxCtKeD5e5Jq1Mm2bfCjtMoQ6Y= Subject key identifier: 12:20:BF:5E:6D:E0:79:31:52:19:58:11:39:2F:68:FE:A4:D6:C1:4F Certificate issuer: /CN=A911EA9E/serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799 Certificate serial: 0238 Authority key identifier: D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/C7C28CAC4A0711EEBE153131C4F9AE02.roa Signing time: Sat 29 Aug 2026 02:55:07 +0000 ROA not before: Sat 29 Aug 2026 02:55:07 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 151650 IP address blocks: 103.249.198.0/23 maxlen: 23 103.249.198.0/24 maxlen: 24 103.249.199.0/24 maxlen: 24 2401:2260::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA9E, serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799 Validity Not Before: Aug 29 02:55:07 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a924a0b-8b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:d9:a8:50:d8:ae:28:e8:44:b2:49:8f:c3: ab:6a:f3:f7:63:95:d8:81:3f:bb:48:54:0e:3e:7f: 8c:62:3d:51:6f:52:3d:35:e8:63:73:59:74:a8:2d: 53:24:30:04:d0:fc:d0:d5:2e:91:ac:70:c4:55:e2: 58:36:33:08:9f:ad:30:f1:3c:ac:3e:54:e7:5a:c4: d5:ba:2a:83:44:15:21:23:e9:be:10:74:fa:df:66: eb:74:cd:df:11:69:bc:ba:ea:41:78:df:bd:4e:2c: ab:e7:83:3a:9c:2f:d3:b0:7c:d6:e6:aa:05:e1:d4: 67:25:42:32:78:4f:a5:4f:94:ab:d2:19:98:fc:59: 2f:6b:7d:46:80:68:3b:b8:bb:b7:3a:ce:5e:82:dd: cf:08:5e:e9:a2:60:a9:a8:be:b0:d3:55:fe:3d:08: 16:24:1f:51:99:1b:6e:d1:22:86:aa:92:a1:cd:db: 37:47:43:5e:25:d3:6a:cc:68:c5:e2:cd:57:df:13: ec:9d:c2:0a:0f:56:9d:be:ef:e4:ea:a7:2b:60:d0: 04:41:50:45:39:eb:3f:a7:30:60:12:a6:bb:dc:28: 87:13:37:74:91:2b:aa:a0:16:bd:6e:95:5f:ca:49: af:e0:37:b3:d4:57:15:6e:fe:a5:fd:13:c2:03:c4: 2b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:20:BF:5E:6D:E0:79:31:52:19:58:11:39:2F:68:FE:A4:D6:C1:4F X509v3 Authority Key Identifier: keyid:D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/C7C28CAC4A0711EEBE153131C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.249.198.0/23 IPv6: 2401:2260::/32 Signature Algorithm: sha256WithRSAEncryption 4f:ce:2e:86:2e:ce:61:66:32:63:ca:fa:95:06:1d:56:bb:7a: ab:83:b5:80:23:fc:d7:05:7d:22:d2:03:fd:36:be:db:c3:71: 48:7b:d4:c1:59:5a:99:7e:22:8f:54:c0:e4:f3:09:5c:47:4b: fe:20:29:a0:97:4c:e7:64:6d:f5:da:2e:5e:cb:6e:48:9f:a2: f0:06:5d:b5:72:cd:1f:89:1b:be:d1:58:a4:c9:2d:b1:88:cd: 34:14:0d:55:65:ca:0a:2c:1d:fd:e1:4b:c1:43:a7:04:b0:06: ff:bc:5c:b2:ca:34:bf:76:a6:c3:63:09:d1:a3:8e:84:e3:e9: a9:da:79:1c:c6:41:37:2e:c2:a9:01:14:53:30:97:79:c7:95: 6e:b4:8f:56:e6:5e:a1:52:bd:a5:86:0b:1a:c6:b9:1c:30:8e: 91:6e:17:86:78:78:4a:e5:50:5b:80:38:72:d6:1a:e4:5b:d4: c5:74:b6:06:f7:ec:e2:04:26:9e:fb:97:d9:54:48:83:f5:84: f4:8e:0f:8c:f1:8d:1d:0b:ab:f2:4c:a6:01:32:1d:4f:86:6f: f1:b5:e7:22:80:e9:dc:33:ef:60:a2:15:8b:60:9d:75:87:94: 23:3d:ba:64:58:6a:b8:84:22:61:61:74:6c:ee:a0:e7:bd:b2: 7d:e8:b5:51 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBOUUxMTAvBgNVBAUTKEQ2NzU3RkMzMjQwOURCQzJGMjJCNjJDMzE5QjlFNDRE QjlFQTA3OTkwHhcNMjYwODI5MDI1NTA3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkyNGEwYi04YjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIDZqFDYrijoRLJJj8OravP3Y5XYgT+7SFQOPn+MYj1Rb1I9Nehjc1l0qC1T JDAE0PzQ1S6RrHDEVeJYNjMIn60w8TysPlTnWsTVuiqDRBUhI+m+EHT632brdM3f EWm8uupBeN+9Tiyr54M6nC/TsHzW5qoF4dRnJUIyeE+lT5Sr0hmY/Fkva31GgGg7 uLu3Os5egt3PCF7pomCpqL6w01X+PQgWJB9RmRtu0SKGqpKhzds3R0NeJdNqzGjF 4s1X3xPsncIKD1advu/k6qcrYNAEQVBFOes/pzBgEqa73CiHEzd0kSuqoBa9bpVf ykmv4Dez1FcVbv6l/RPCA8QrOQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBIgv15t 4HkxUhlYETkvaP6k1sFPMB8GA1UdIwQYMBaAFNZ1f8MkCdvC8itiwxm55E256geZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUE5RS82NkUwQzYzODRB MDcxMUVFQTFCRjUwMzBDNEY5QUUwMi8xblZfd3lRSjI4THlLMkxER2Jua1RibnFC NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFuVl93eVFKMjhMeUsyTERHYm5rVGJucUI1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVBOUUvNjZFMEM2Mzg0QTA3MTFFRUExQkY1MDMwQzRGOUFFMDIvQzdDMjhDQUM0 QTA3MTFFRUJFMTUzMTMxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ/nGMA0EAgACMAcDBQAkASJgMA0GCSqGSIb3DQEBCwUAA4IBAQBP zi6GLs5hZjJjyvqVBh1Wu3qrg7WAI/zXBX0i0gP9Nr7bw3FIe9TBWVqZfiKPVMDk 8wlcR0v+ICmgl0znZG312i5ey25In6LwBl21cs0fiRu+0VikyS2xiM00FA1VZcoK LB394UvBQ6cEsAb/vFyyyjS/dqbDYwnRo46E4+mp2nkcxkE3LsKpARRTMJd5x5Vu tI9W5l6hUr2lhgsaxrkcMI6RbheGeHhK5VBbgDhy1hrkW9TFdLYG9+ziBCae+5fZ VEiD9YT0jg+M8Y0dC6vyTKYBMh1Phm/xtecigOncM+9gohWLYJ11h5QjPbpkWGq4 hCJhYXRs7qDnvbJ96LVR -----END CERTIFICATE-----Generated at Sun Oct 4 16:14:03 2026 by rpki-client