$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/AF88A400F15711EC846A5F29C4F9AE02.roa File: AF88A400F15711EC846A5F29C4F9AE02.roa (raw, json) Hash identifier: Od7o5R9/y9/+Xuc2axEdR7oTUW3FoJM9yoJzVrm/s9E= Subject key identifier: 41:3A:60:65:DC:10:DD:B7:1D:AE:4C:3A:5B:B4:0A:67:9D:3F:4F:13 Certificate issuer: /CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75 Certificate serial: 03BA Authority key identifier: 45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/AF88A400F15711EC846A5F29C4F9AE02.roa Signing time: Mon 31 Aug 2026 00:53:31 +0000 ROA not before: Mon 31 Aug 2026 00:53:31 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 149980 IP address blocks: 103.189.242.0/23 maxlen: 23 103.189.242.0/24 maxlen: 24 103.189.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BD68, serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75 Validity Not Before: Aug 31 00:53:31 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a94d08a-b47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:90:9a:a2:4e:5a:b1:79:de:ea:ca:2e:ea: 86:f6:cd:1a:e2:f8:64:fb:f4:a6:be:ff:e3:09:93: 30:9c:61:82:80:61:92:63:dd:32:61:96:38:cf:68: 32:8e:7e:10:20:b3:e4:c7:4a:40:c2:52:8b:e9:6d: 01:2a:bd:92:e3:09:f0:e7:a8:da:11:ab:3b:af:92: 03:61:c4:fc:d1:28:39:f2:82:f7:46:f9:33:5a:f1: 94:6c:c6:e1:74:9d:90:c9:01:1e:04:ba:8b:ff:93: f0:41:98:df:5b:34:c4:c2:cb:81:2b:f9:91:2e:7f: 86:38:1e:9f:78:81:b6:d1:ea:0d:18:6e:4d:54:98: 7e:99:c8:8c:79:29:3f:d6:2e:d6:00:59:a3:c1:74: b4:a1:4e:cb:23:64:14:07:39:c5:3a:02:d7:90:5d: 63:73:e2:11:48:09:9a:96:f2:a8:f3:1a:e9:5a:ca: 24:1c:ab:6f:78:1d:0e:91:90:63:a1:b0:e9:9a:63: 12:b3:2e:ee:dc:68:e0:ac:79:b6:bc:48:bb:c8:f0: f0:17:48:f5:43:3f:93:a6:ad:40:39:fd:d3:59:d3: a5:88:a6:4a:37:fd:2c:d1:92:9d:ef:5a:8f:01:2f: a6:08:38:fa:63:e5:06:aa:07:db:47:7f:6c:12:47: 81:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3A:60:65:DC:10:DD:B7:1D:AE:4C:3A:5B:B4:0A:67:9D:3F:4F:13 X509v3 Authority Key Identifier: keyid:45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/AF88A400F15711EC846A5F29C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.189.242.0/23 Signature Algorithm: sha256WithRSAEncryption bf:df:8f:90:e1:5f:65:2e:5a:c1:80:d5:45:6e:53:80:29:06: 6a:98:dd:6f:64:b3:2e:87:fd:26:61:08:78:ff:76:4a:d7:6d: 03:03:a6:13:c5:40:30:93:d5:69:c4:82:df:c5:90:68:a4:ac: 49:a7:90:74:c0:2e:33:34:13:ff:54:69:e4:2a:fe:a5:b6:5d: 78:07:be:89:f1:d6:78:7c:55:09:93:17:bb:c0:bc:f5:94:de: 1e:5f:6b:d5:7d:ec:36:02:df:d8:8e:4c:db:c5:30:eb:cd:a4: cb:9a:82:64:0f:ab:00:e8:90:67:6d:08:f5:3f:3c:ac:1a:ed: 31:ca:70:18:e4:85:f7:3c:14:1a:1d:b5:9c:f4:63:0d:79:e4: 77:28:24:0a:d8:bc:ac:1f:b4:8e:00:02:f1:a3:9f:5b:71:e1: a3:84:d0:dd:ee:2f:53:f6:65:78:ac:3c:cb:3a:99:de:04:7e: 85:a7:e7:13:f0:45:b4:11:92:76:cf:13:ff:03:bf:91:4f:63: 26:78:f7:f9:09:03:3e:3b:f5:7b:a1:ae:72:21:db:52:07:92: ad:52:5b:17:d4:80:ee:68:03:f8:11:1c:76:59:c3:21:be:f8: 9d:ce:2b:b8:e9:81:ea:e8:7d:81:78:fc:5c:0d:2f:0a:1f:ce: 20:7d:cd:81 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JENjgxMTAvBgNVBAUTKDQ1NjMyMEZFOTcwRjVDQTRCRkQ3NzU2RkMzRTI3RTA2 QjMwOEJFNzUwHhcNMjYwODMxMDA1MzMxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0ZDA4YS1iNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXmQmqJOWrF53urKLuqG9s0a4vhk+/Smvv/jCZMwnGGCgGGSY90yYZY4z2gy jn4QILPkx0pAwlKL6W0BKr2S4wnw56jaEas7r5IDYcT80Sg58oL3RvkzWvGUbMbh dJ2QyQEeBLqL/5PwQZjfWzTEwsuBK/mRLn+GOB6feIG20eoNGG5NVJh+mciMeSk/ 1i7WAFmjwXS0oU7LI2QUBznFOgLXkF1jc+IRSAmalvKo8xrpWsokHKtveB0OkZBj obDpmmMSsy7u3GjgrHm2vEi7yPDwF0j1Qz+Tpq1AOf3TWdOliKZKN/0s0ZKd71qP AS+mCDj6Y+UGqgfbR39sEkeBKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEE6YGXc EN23Ha5MOlu0CmedP08TMB8GA1UdIwQYMBaAFEVjIP6XD1ykv9d1b8PifgazCL51 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkQ2OC8wNEQ3NEI1MEYx NTMxMUVDQjA3QzlGMjZDNEY5QUUwMi9SV01nX3BjUFhLU18xM1Z2dy1KLUJyTUl2 blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXTWdfcGNQWEtTXzEzVnZ3LUotQnJNSXZuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JENjgvMDRENzRCNTBGMTUzMTFFQ0IwN0M5RjI2QzRGOUFFMDIvQUY4OEE0MDBG MTU3MTFFQzg0NkE1RjI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ73yMA0GCSqGSIb3DQEBCwUAA4IBAQC/34+Q4V9lLlrBgNVFblOA KQZqmN1vZLMuh/0mYQh4/3ZK120DA6YTxUAwk9VpxILfxZBopKxJp5B0wC4zNBP/ VGnkKv6ltl14B76J8dZ4fFUJkxe7wLz1lN4eX2vVfew2At/YjkzbxTDrzaTLmoJk D6sA6JBnbQj1PzysGu0xynAY5IX3PBQaHbWc9GMNeeR3KCQK2LysH7SOAALxo59b ceGjhNDd7i9T9mV4rDzLOpneBH6Fp+cT8EW0EZJ2zxP/A7+RT2MmePf5CQM+O/V7 oa5yIdtSB5KtUlsX1IDuaAP4ERx2WcMhvvidziu46YHq6H2BePxcDS8KH84gfc2B -----END CERTIFICATE-----Generated at Fri Sep 25 04:48:38 2026 by rpki-client