$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/359388D8006511F1AA0FA34B566F56BC.roa File: 359388D8006511F1AA0FA34B566F56BC.roa (raw, json) Hash identifier: HMqZBNwrxTcuMmYlLGxAR+N05VWqUTaNNhb33k53Zd0= Subject key identifier: 1B:26:D8:AC:07:70:17:A0:27:50:FA:FC:2F:FD:4D:01:B1:5F:6B:C4 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 0A34 Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/359388D8006511F1AA0FA34B566F56BC.roa Signing time: Wed 16 Sep 2026 20:40:00 +0000 ROA not before: Wed 16 Sep 2026 20:40:00 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 139351 IP address blocks: 103.141.158.0/24 maxlen: 24 103.141.159.0/24 maxlen: 24 2400:17a0::/48 maxlen: 48 2400:17a0:1::/48 maxlen: 48 2400:17a0:2::/48 maxlen: 48 2400:17a0:3::/48 maxlen: 48 2400:17a0:4::/48 maxlen: 48 2400:17a0:5::/48 maxlen: 48 2400:17a0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: Sep 16 20:40:00 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aaafea0-5c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:07:38:ef:39:cb:93:6c:59:94:a8:2e:c3:ac: f7:f5:4a:26:18:54:27:16:c7:cc:cb:7c:e6:1a:2e: 22:a3:17:7d:66:8f:40:0f:f9:ea:cc:58:87:45:34: a1:20:df:ff:f4:94:dc:28:70:6c:6d:66:89:1f:30: 82:b3:b4:d5:e3:d4:d9:2d:26:9f:04:83:2b:a9:4a: 8c:f6:31:90:6d:b2:05:ec:27:6e:9e:6a:9b:2b:30: ef:d3:02:df:97:79:48:90:12:ba:1d:d8:25:87:bb: 38:76:95:01:d0:36:96:1f:c2:a9:b7:1a:ff:36:39: 84:9e:8f:fd:fd:78:03:88:e0:6d:88:28:63:37:a5: a5:5b:77:9e:31:fa:78:79:23:e9:fd:4b:01:29:c2: 23:3b:e5:88:a1:a9:0a:4f:36:e1:69:39:4c:97:cb: ba:a0:9b:5f:ba:44:07:53:04:5d:8e:53:9e:c0:fd: ce:56:8a:80:1f:42:97:de:a5:ce:be:10:6e:71:3c: 5e:90:22:d0:58:69:61:48:8b:7f:68:82:16:c2:28: 46:50:58:b0:fd:ed:59:e3:48:8a:f0:8d:ac:7a:9d: 82:e9:eb:23:d2:50:95:2b:d9:d6:47:56:0e:ac:4c: 8a:3a:59:c5:68:7f:4d:c3:c1:e8:9e:35:a1:33:00: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:26:D8:AC:07:70:17:A0:27:50:FA:FC:2F:FD:4D:01:B1:5F:6B:C4 X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/359388D8006511F1AA0FA34B566F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.141.158.0/23 IPv6: 2400:17a0::-2400:17a0:5:ffff:ffff:ffff:ffff:ffff 2400:17a0:9::/48 Signature Algorithm: sha256WithRSAEncryption 33:4b:f6:13:42:86:60:7c:5d:4d:ac:71:0d:df:d1:8d:6a:31: 4d:63:9a:dd:58:25:d8:b8:99:f7:26:1d:4d:75:57:6a:73:51: f6:36:43:39:2a:52:b1:07:16:de:d0:02:9c:86:cf:5e:29:e9: 31:f6:68:75:c5:82:3d:ec:21:d2:46:9f:f5:b4:fc:fe:1b:d9: a9:9d:25:da:3a:be:ab:79:58:d9:e9:57:d0:88:b3:c8:a5:7f: 7f:95:19:ef:1c:b4:dd:a3:ab:a3:34:3d:96:9a:9e:5b:c6:ff: 17:7f:d5:eb:7b:b3:1c:75:46:0e:f6:3c:13:74:1d:76:5e:de: f4:91:0c:eb:7f:9c:e7:a5:e2:19:b1:26:64:b0:62:97:85:c3: ce:56:0e:ad:63:85:c6:4c:2b:9e:b4:e0:f2:6e:d0:9d:51:13: b3:8a:82:12:3d:83:33:b4:a8:81:e0:85:08:e6:52:a4:e4:4b: 82:38:28:b6:26:50:40:f3:4f:89:15:db:9c:7a:ae:16:78:dd: 11:22:60:61:d2:c5:19:a6:8c:a3:a4:91:68:78:53:5a:80:6d: 5a:63:87:38:16:e6:37:65:bb:f4:4c:dd:70:b2:92:75:e7:ce: 0f:65:a4:0c:f3:d3:e3:75:d9:c9:28:60:07:0b:f1:06:8c:ff: eb:18:be:1b -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjYwOTE2MjA0MDAwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhZmVhMC01YzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ac47znLk2xZlKguw6z39UomGFQnFsfMy3zmGi4ioxd9Zo9AD/nqzFiHRTSh IN//9JTcKHBsbWaJHzCCs7TV49TZLSafBIMrqUqM9jGQbbIF7CdunmqbKzDv0wLf l3lIkBK6Hdglh7s4dpUB0DaWH8Kptxr/NjmEno/9/XgDiOBtiChjN6WlW3eeMfp4 eSPp/UsBKcIjO+WIoakKTzbhaTlMl8u6oJtfukQHUwRdjlOewP3OVoqAH0KX3qXO vhBucTxekCLQWGlhSIt/aIIWwihGUFiw/e1Z40iK8I2sep2C6esj0lCVK9nWR1YO rEyKOlnFaH9Nw8HonjWhMwCfaQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFBsm2KwH cBegJ1D6/C/9TQGxX2vEMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJCQzkvODNGRjlGRUNBQTgxMTFFQUI0MkEwNDMzQzRGOUFFMDIvMzU5Mzg4RDgw MDY1MTFGMUFBMEZBMzRCNTY2RjU2QkMucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAM BAIAATAGAwQBZ42eMCEEAgACMBswEAMFBSQAF6ADBwEkABegAAQDBwAkABegAAkw DQYJKoZIhvcNAQELBQADggEBADNL9hNChmB8XU2scQ3f0Y1qMU1jmt1YJdi4mfcm HU11V2pzUfY2QzkqUrEHFt7QApyGz14p6TH2aHXFgj3sIdJGn/W0/P4b2amdJdo6 vqt5WNnpV9CIs8ilf3+VGe8ctN2jq6M0PZaanlvG/xd/1et7sxx1Rg72PBN0HXZe 3vSRDOt/nOel4hmxJmSwYpeFw85WDq1jhcZMK5604PJu0J1RE7OKghI9gzO0qIHg hQjmUqTkS4I4KLYmUEDzT4kV25x6rhZ43REiYGHSxRmmjKOkkWh4U1qAbVpjhzgW 5jdlu/RM3XCyknXnzg9lpAzz0+N12ckoYAcL8QaM/+sYvhs= -----END CERTIFICATE-----Generated at Wed Sep 23 23:18:55 2026 by rpki-client