$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/5DC57C34693911F18A70725D6747A888.roa File: 5DC57C34693911F18A70725D6747A888.roa (raw, json) Hash identifier: Q1jEQutJW+UDOf1ARhhn/ls0vuW1BtzzkdSA42DY4hQ= Subject key identifier: 24:F6:DA:28:79:3A:C6:2F:07:D6:7F:FF:9C:D5:BF:D1:38:5F:10:42 Certificate issuer: /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Certificate serial: 017B Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/5DC57C34693911F18A70725D6747A888.roa Signing time: Tue 01 Sep 2026 05:55:36 +0000 ROA not before: Tue 01 Sep 2026 05:55:36 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 151634 IP address blocks: 103.168.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Validity Not Before: Sep 1 05:55:36 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a9668d8-7287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:bc:9c:19:49:d7:1e:5c:65:fe:6e:a3:b6: 6d:e0:bc:2a:03:4b:10:08:dd:ac:8e:ce:f4:04:7f: 5c:4b:0b:28:95:ee:1c:c2:ca:c8:1a:5e:f1:b7:3e: 58:4e:98:81:2f:95:ae:34:17:60:8d:4f:c4:68:93: f8:3d:8f:d7:e4:1c:79:59:2a:8a:b1:49:28:96:8d: 8e:88:33:ff:f7:60:1a:f8:7c:b1:58:93:2c:ac:2d: a1:83:34:b0:13:07:1a:2f:24:aa:c8:ff:65:e9:76: 05:70:ea:a0:55:3a:7d:e3:1d:02:0e:9f:36:8d:db: 53:ad:87:f6:e8:02:2b:7e:cd:8a:e3:22:04:7d:27: bb:1f:4a:16:e9:e9:41:52:a8:ae:c0:3d:15:23:5b: 84:4a:2e:69:a1:d9:42:52:8c:62:a4:69:a6:60:80: 72:02:ca:10:0b:da:74:c5:e4:ce:c9:ee:da:7b:69: 4c:fc:e3:eb:91:ee:f4:95:0b:e8:5e:30:de:c4:5a: fe:53:f1:6b:ff:b9:56:04:a0:25:45:03:2f:a0:24: e0:fe:29:df:2b:39:4b:e9:d3:db:d2:64:dc:3b:1c: 2c:6c:f1:2f:9e:b6:71:30:c4:ba:94:72:f3:9e:f6: d5:8b:b6:e8:46:a2:c7:56:b1:d1:ed:98:e8:89:f7: d9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F6:DA:28:79:3A:C6:2F:07:D6:7F:FF:9C:D5:BF:D1:38:5F:10:42 X509v3 Authority Key Identifier: keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/5DC57C34693911F18A70725D6747A888.roa sbgp-ipAddrBlock: critical IPv4: 103.168.43.0/24 Signature Algorithm: sha256WithRSAEncryption b9:2e:19:ed:72:54:41:de:9e:b2:31:85:e3:15:a2:01:82:ce: d6:1b:50:e4:3a:ec:f1:5a:53:22:6d:eb:f3:60:0d:5f:68:ff: 2a:9d:3a:56:46:fd:93:ed:a3:22:9f:5a:11:8f:6a:0d:11:5f: e5:96:2d:5e:a6:2e:d1:d9:4a:55:50:63:52:c1:cd:d2:95:c3: aa:de:73:ca:0e:49:8d:25:94:a0:18:b0:7b:f9:59:f8:09:58: 63:00:2d:86:42:fd:10:31:3b:23:b9:f3:c1:85:e0:fc:9c:46: 55:28:f5:a8:00:82:0c:26:a5:88:46:bf:b5:ab:6b:82:d3:4b: e2:e5:71:71:cd:5c:19:24:57:f3:6b:9e:cf:cc:48:2d:d2:37: 8a:a1:18:f0:00:df:c7:07:c3:5d:85:5e:1b:c0:65:6c:da:fe: ac:dd:4e:40:4f:f5:79:01:32:59:50:80:14:c1:65:c2:2d:2b: 61:a5:b2:5b:8b:88:a0:64:5c:1d:ca:c3:33:e5:eb:1b:89:04: 2d:7f:b5:b1:39:5a:80:a9:57:e7:44:89:a0:a5:f8:b4:27:e0: 71:8b:63:24:bf:1f:5b:c8:83:02:20:74:78:ec:23:89:bd:da: 73:60:d7:a3:02:a5:04:43:53:8c:94:6a:27:14:44:4f:c1:c2: a2:eb:3a:24 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ4NDAxMTAvBgNVBAUTKDlDRjcxNDc4QkY1OUIwMDhCMUI1NDJGQTkzQTdDMTBF RkI3RjRENjIwHhcNMjYwOTAxMDU1NTM2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2NjhkOC03Mjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxO8nBlJ1x5cZf5uo7Zt4LwqA0sQCN2sjs70BH9cSwsole4cwsrIGl7xtz5Y TpiBL5WuNBdgjU/EaJP4PY/X5Bx5WSqKsUkolo2OiDP/92Aa+HyxWJMsrC2hgzSw EwcaLySqyP9l6XYFcOqgVTp94x0CDp82jdtTrYf26AIrfs2K4yIEfSe7H0oW6elB UqiuwD0VI1uESi5podlCUoxipGmmYIByAsoQC9p0xeTOye7ae2lM/OPrke70lQvo XjDexFr+U/Fr/7lWBKAlRQMvoCTg/infKzlL6dPb0mTcOxwsbPEvnrZxMMS6lHLz nvbVi7boRqLHVrHR7ZjoiffZXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCT22ih5 OsYvB9Z//5zVv9E4XxBCMB8GA1UdIwQYMBaAFJz3FHi/WbAIsbVC+pOnwQ77f01i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDg0MC8zNDJGODBEMDlG QzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNBaXh0VUw2azZmQkR2dF9U V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ4NDAvMzQyRjgwRDA5RkM0MTFFRjk2MzFGODM2QzRGOUFFMDIvNURDNTdDMzQ2 OTM5MTFGMThBNzA3MjVENjc0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ6grMA0GCSqGSIb3DQEBCwUAA4IBAQC5LhntclRB3p6yMYXjFaIB gs7WG1DkOuzxWlMibevzYA1faP8qnTpWRv2T7aMin1oRj2oNEV/lli1epi7R2UpV UGNSwc3SlcOq3nPKDkmNJZSgGLB7+Vn4CVhjAC2GQv0QMTsjufPBheD8nEZVKPWo AIIMJqWIRr+1q2uC00vi5XFxzVwZJFfza57PzEgt0jeKoRjwAN/HB8NdhV4bwGVs 2v6s3U5AT/V5ATJZUIAUwWXCLSthpbJbi4igZFwdysMz5esbiQQtf7WxOVqAqVfn RImgpfi0J+Bxi2Mkvx9byIMCIHR47COJvdpzYNejAqUEQ1OMlGonFERPwcKi6zok -----END CERTIFICATE-----Generated at Sat Sep 26 20:43:45 2026 by rpki-client