$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/0FFD0884E94C11EDB883CD14C4F9AE02.roa File: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (raw, json) Hash identifier: Hjo3E4P+MhgjzOqpzAeOm5/8QhMSnfjBIMZ5RlN8TLQ= Subject key identifier: 08:B1:4F:E6:DD:71:9E:DC:4A:08:A0:9D:42:F9:6D:7D:6F:F4:DE:78 Certificate issuer: /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Certificate serial: 0277 Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/0FFD0884E94C11EDB883CD14C4F9AE02.roa Signing time: Sat 29 Aug 2026 02:52:00 +0000 ROA not before: Sat 29 Aug 2026 02:52:00 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 142579 IP address blocks: 103.170.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B5E, serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Validity Not Before: Aug 29 02:52:00 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a924950-acd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:4a:09:5b:03:b7:c8:25:08:63:ab:ff:04: d4:23:5e:52:df:4e:95:ba:d5:08:e9:5e:15:30:46: e5:6b:31:36:9a:dd:1c:5e:9e:25:51:4e:b9:b6:fc: 6c:c1:83:8c:d1:81:e6:a1:78:17:09:c8:55:b3:ad: 49:2a:fb:25:2f:40:6f:d1:c4:c7:4f:d8:f9:83:4e: 9d:79:e6:9c:de:ab:b3:75:b1:a3:73:f4:01:f3:6c: bc:1f:6e:61:d2:1a:61:fb:99:ed:f5:31:15:5e:df: a4:c4:65:eb:0b:6c:a2:29:b0:f4:61:24:da:bd:2d: 0d:a5:b9:62:ae:a9:bd:d4:f6:f5:3d:ee:38:68:15: e8:0d:ad:07:08:54:d0:2e:71:46:2b:84:ff:d6:89: 5e:5d:db:76:bf:32:f2:06:57:79:ae:e1:de:f7:e8: d0:e7:f3:72:22:a9:db:b7:8d:eb:ba:cf:2c:eb:61: ec:b4:8b:e0:a5:cd:4b:e9:b1:8a:07:7e:f4:16:b9: 59:e2:00:bf:7b:a9:1c:2c:d4:67:7f:15:e1:3f:37: a5:5a:75:14:ae:bb:38:f8:d5:25:19:c3:9a:37:f3: 99:0c:1f:80:c7:e5:10:26:8f:a3:f1:cd:3b:0a:19: 1a:08:31:71:50:35:47:77:12:d0:fd:2c:3e:28:f5: 5d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B1:4F:E6:DD:71:9E:DC:4A:08:A0:9D:42:F9:6D:7D:6F:F4:DE:78 X509v3 Authority Key Identifier: keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/0FFD0884E94C11EDB883CD14C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.170.2.0/24 Signature Algorithm: sha256WithRSAEncryption 95:66:6d:35:29:d6:8d:d0:f1:55:49:de:c0:f0:03:05:15:4d: b3:2d:b2:89:47:e0:6c:7b:59:3b:3a:7e:33:ef:c4:c6:c2:3e: 92:bc:5c:44:a9:35:2e:3c:36:56:2e:53:76:c4:32:a0:96:20: 8a:e8:53:47:ee:e1:2f:da:6a:d1:18:79:dc:02:2f:ce:c5:1e: 03:25:d9:e3:c8:92:ad:ef:8f:b6:28:12:dc:9a:96:28:20:05: 26:41:c7:ca:7d:13:8a:93:64:f5:56:a1:50:f8:59:d6:1f:86: d1:8b:03:9a:c3:f9:cf:09:d2:a5:e7:04:5a:52:07:42:c1:23: 33:ab:49:03:38:00:90:ff:e7:9a:a0:be:5a:d2:29:ed:c5:6a: b6:e5:2d:ec:f9:db:ff:cf:e4:d9:25:eb:27:76:50:6c:72:4b: 45:66:41:83:d1:4c:ad:eb:38:37:e7:e5:5e:31:8a:20:fb:95: 5c:ec:8a:34:6b:b2:42:5c:ba:5d:33:c0:22:21:11:ef:3c:86: e2:dc:73:7d:b7:88:13:64:7e:50:31:80:28:05:b5:6c:d0:e5: 94:ca:a6:38:bd:5b:34:81:e7:cd:ce:5f:7d:bf:97:6d:9d:0a: 53:45:4c:a3:91:b5:4f:bf:e9:8e:7b:18:39:50:1b:02:9c:34: a2:12:35:52 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCNUUxMTAvBgNVBAUTKDNEQkIyMUIzMzU4QjA4NUYwODIxQjREQzA2QTkxQTlD NDVDNDJDQkMwHhcNMjYwODI5MDI1MjAwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkyNDk1MC1hY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjZKCVsDt8glCGOr/wTUI15S306VutUI6V4VMEblazE2mt0cXp4lUU65tvxs wYOM0YHmoXgXCchVs61JKvslL0Bv0cTHT9j5g06deeac3quzdbGjc/QB82y8H25h 0hph+5nt9TEVXt+kxGXrC2yiKbD0YSTavS0Npblirqm91Pb1Pe44aBXoDa0HCFTQ LnFGK4T/1oleXdt2vzLyBld5ruHe9+jQ5/NyIqnbt43rus8s62HstIvgpc1L6bGK B370FrlZ4gC/e6kcLNRnfxXhPzelWnUUrrs4+NUlGcOaN/OZDB+Ax+UQJo+j8c07 ChkaCDFxUDVHdxLQ/Sw+KPVdYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAixT+bd cZ7cSgignUL5bX1v9N54MB8GA1UdIwQYMBaAFD27IbM1iwhfCCG03AapGpxFxCy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI1RS9GODcyM0ZFNEU5 NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENGOElJYlRjQnFrYW5FWEVM THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bic2hzeldMQ0Y4SUliVGNCcWthbkVYRUxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlCNUUvRjg3MjNGRTRFOTQ3MTFFREFEMTA2OTA5QzRGOUFFMDIvMEZGRDA4ODRF OTRDMTFFREI4ODNDRDE0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ6oCMA0GCSqGSIb3DQEBCwUAA4IBAQCVZm01KdaN0PFVSd7A8AMF FU2zLbKJR+Bse1k7On4z78TGwj6SvFxEqTUuPDZWLlN2xDKgliCK6FNH7uEv2mrR GHncAi/OxR4DJdnjyJKt74+2KBLcmpYoIAUmQcfKfROKk2T1VqFQ+FnWH4bRiwOa w/nPCdKl5wRaUgdCwSMzq0kDOACQ/+eaoL5a0intxWq25S3s+dv/z+TZJesndlBs cktFZkGD0Uyt6zg35+VeMYog+5Vc7Io0a7JCXLpdM8AiIRHvPIbi3HN9t4gTZH5Q MYAoBbVs0OWUyqY4vVs0gefNzl99v5dtnQpTRUyjkbVPv+mOexg5UBsCnDSiEjVS -----END CERTIFICATE-----Generated at Wed Sep 23 21:48:03 2026 by rpki-client