$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/210A4EBAC0F211EE99FFBA21C4F9AE02.roa File: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (raw, json) Hash identifier: EnDDWuZHL62S0BPn5UnWaSBwzsCmr35SdWgaj/fTSDE= Subject key identifier: 07:10:F4:C4:D3:9A:FF:8B:2D:F7:1C:95:D4:BA:78:E7:2C:C0:E7:FD Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Certificate serial: 023C Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/210A4EBAC0F211EE99FFBA21C4F9AE02.roa Signing time: Fri 25 Sep 2026 03:53:06 +0000 ROA not before: Fri 25 Sep 2026 03:53:06 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 31898 IP address blocks: 103.255.96.0/24 maxlen: 24 103.255.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Validity Not Before: Sep 25 03:53:06 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab5f022-a58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:02:b5:1c:3a:69:14:2a:6a:6e:b5:f1:9c: a0:e9:72:8d:76:a0:65:20:3d:cb:24:25:3a:5f:00: 57:90:e5:50:24:1e:cd:93:44:be:4b:01:03:83:6f: 1c:1e:76:f1:2b:db:ae:43:25:b2:85:39:06:29:30: 08:de:2a:ef:75:0e:d7:62:73:4d:17:0e:ed:c5:a1: 00:bb:63:83:3b:24:d3:be:72:08:07:fe:04:b8:43: 16:16:72:78:02:75:2d:66:bb:ea:07:34:b5:c4:70: b5:60:16:65:8f:12:07:65:1a:b2:68:66:69:26:52: 1b:70:72:fd:b4:3a:1a:32:e0:5c:80:59:00:a2:c2: ee:eb:53:64:2b:27:e2:79:7f:55:14:2d:2c:67:90: 00:b7:64:1e:19:23:a0:95:96:bd:ae:2c:30:d9:d6: 2a:6a:1c:68:6c:50:91:9f:2e:8a:73:eb:cb:b1:07: 73:9f:ed:37:8c:ed:49:0f:ba:3e:92:f2:41:5a:8a: 7e:24:6b:af:4d:91:ca:14:31:43:eb:e1:72:b4:09: be:99:c5:ad:d8:05:32:86:33:b3:f5:c1:62:88:b2: 56:72:60:3a:a4:a7:5c:33:41:b4:5c:aa:2a:79:15: 39:d5:8a:2b:2b:e1:db:0d:99:6a:f5:82:26:82:89: 78:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:10:F4:C4:D3:9A:FF:8B:2D:F7:1C:95:D4:BA:78:E7:2C:C0:E7:FD X509v3 Authority Key Identifier: keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/210A4EBAC0F211EE99FFBA21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.255.96.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:d6:2a:65:e7:a0:5a:b8:61:f5:b1:2b:8e:ef:b7:cd:87:d4: a3:5c:03:3f:25:54:43:a7:4c:0d:54:e4:aa:73:66:56:12:33: 74:99:87:4b:1c:ae:ff:0f:1f:a7:a0:c3:7f:cd:e5:e9:37:23: ca:32:71:f6:60:6d:d0:9e:ae:53:4a:0e:f7:63:ee:30:17:68: 6a:75:ff:55:b5:3d:4a:f5:44:aa:8c:4e:97:ee:cd:09:fc:a8: d7:b7:9c:58:59:95:6a:9a:7c:ce:9c:6b:5a:6d:8c:02:57:7a: 4a:eb:c9:b5:f2:82:5c:dd:1a:a9:5d:da:f0:60:27:18:a2:fa: c2:36:d8:45:ac:4f:02:51:94:7f:7a:1f:54:2b:70:98:82:49: 75:9a:4f:54:1b:99:40:2b:8b:cc:00:f4:4d:d2:35:96:d0:c8: b0:e5:e6:ca:61:88:46:2c:08:1d:b8:0a:ba:77:b7:0e:22:4e: 91:4b:86:a2:0f:5b:a1:13:f8:78:41:de:28:07:c2:cd:a4:9e: 6f:2b:a9:eb:2b:e5:e6:33:a9:47:92:19:e9:4a:c5:19:a0:c2: cf:a7:6c:fa:03:ab:39:fa:e1:2d:16:f4:7b:a6:df:10:84:c1: bd:9f:3f:d9:2d:98:10:db:ec:8e:bb:a5:b4:69:50:b0:e9:27: 43:43:64:2c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDMzMxMTAvBgNVBAUTKEFGMkVFMDQ0MTIzNTZBQkZEOEUxOUFFMkMxQjIyQTcz N0NERjVFOUUwHhcNMjYwOTI1MDM1MzA2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1ZjAyMi1hNThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEMCtRw6aRQqam618Zyg6XKNdqBlID3LJCU6XwBXkOVQJB7Nk0S+SwEDg28c HnbxK9uuQyWyhTkGKTAI3irvdQ7XYnNNFw7txaEAu2ODOyTTvnIIB/4EuEMWFnJ4 AnUtZrvqBzS1xHC1YBZljxIHZRqyaGZpJlIbcHL9tDoaMuBcgFkAosLu61NkKyfi eX9VFC0sZ5AAt2QeGSOglZa9riww2dYqahxobFCRny6Kc+vLsQdzn+03jO1JD7o+ kvJBWop+JGuvTZHKFDFD6+FytAm+mcWt2AUyhjOz9cFiiLJWcmA6pKdcM0G0XKoq eRU51YorK+HbDZlq9YImgol42wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAcQ9MTT mv+LLfccldS6eOcswOf9MB8GA1UdIwQYMBaAFK8u4EQSNWq/2OGa4sGyKnN8316e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEMzMy85NTZDQjA4Njk4 MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFyX1k0WnJpd2JJcWMzemZY cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J5N2dSQkkxYXJfWTRacml3YklxYzN6ZlhwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhDMzMvOTU2Q0IwODY5ODFCMTFFRUFCMEZDOTIyQzRGOUFFMDIvMjEwQTRFQkFD MEYyMTFFRTk5RkZCQTIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ/9gMA0GCSqGSIb3DQEBCwUAA4IBAQAK1ipl56BauGH1sSuO77fN h9SjXAM/JVRDp0wNVOSqc2ZWEjN0mYdLHK7/Dx+noMN/zeXpNyPKMnH2YG3Qnq5T Sg73Y+4wF2hqdf9VtT1K9USqjE6X7s0J/KjXt5xYWZVqmnzOnGtabYwCV3pK68m1 8oJc3RqpXdrwYCcYovrCNthFrE8CUZR/eh9UK3CYgkl1mk9UG5lAK4vMAPRN0jWW 0Miw5ebKYYhGLAgduAq6d7cOIk6RS4aiD1uhE/h4Qd4oB8LNpJ5vK6nrK+XmM6lH khnpSsUZoMLPp2z6A6s5+uEtFvR7pt8QhMG9nz/ZLZgQ2+yOu6W0aVCw6SdDQ2Qs -----END CERTIFICATE-----Generated at Fri Sep 25 17:37:02 2026 by rpki-client