$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/28DA447C289B11EAA1EA9B53C4F9AE02.roa File: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (raw, json) Hash identifier: stlIWoi9OczQzT8ChoMV7D08zUJ620ZcN3V7HoLZhUU= Subject key identifier: A8:F1:3B:38:A3:39:E5:02:7E:B7:84:E9:81:05:E4:7F:ED:9E:11:E1 Certificate issuer: /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565 Certificate serial: 108E Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/28DA447C289B11EAA1EA9B53C4F9AE02.roa Signing time: Thu 10 Sep 2026 17:35:45 +0000 ROA not before: Thu 10 Sep 2026 17:35:45 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 138324 IP address blocks: 103.123.75.0/24 maxlen: 24 103.138.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4238 (0x108e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A8BE, serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565 Validity Not Before: Sep 10 17:35:45 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa2ea71-013c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:45:2b:02:3e:96:2e:f4:0c:2a:34:99:5b: 2c:7f:11:d7:39:6c:96:59:db:12:91:df:0b:c1:59: e2:24:f8:c4:ef:aa:9e:43:30:91:79:7c:74:96:0e: 8e:46:ef:67:b7:5f:16:33:da:6f:b8:fc:96:d9:e2: c8:c2:f0:e3:ff:de:b2:41:70:73:87:85:83:a7:a5: 93:fb:01:b8:fd:4d:c2:c2:f9:fc:d9:48:1e:e9:b8: dc:4e:73:b9:60:f6:f0:43:c3:46:d0:5d:fe:67:ea: 29:3b:71:c3:0e:6c:3e:83:9a:a0:0f:09:61:16:60: 3c:0a:9b:02:a2:41:b3:05:c9:3d:9d:58:0a:06:6d: e0:a9:cc:d2:40:70:2b:1c:87:31:2d:d1:9f:df:07: 69:49:d5:47:fb:22:37:71:2f:ed:dd:fd:fc:a3:0f: 54:66:91:7e:c3:68:26:b2:16:fc:f3:93:ff:aa:03: f1:d6:28:7a:44:01:97:d7:19:d4:6e:07:fc:71:24: 97:44:44:d4:9d:a9:85:0b:8f:37:4e:90:19:2a:d7: ce:f9:09:b9:f0:d4:5a:9a:ae:43:15:73:a2:c7:47: 17:05:26:af:db:6b:bd:b3:5b:db:e6:28:4e:cc:38: 7a:58:a1:3f:fa:50:8c:f2:b4:02:1c:b3:6a:94:63: e9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F1:3B:38:A3:39:E5:02:7E:B7:84:E9:81:05:E4:7F:ED:9E:11:E1 X509v3 Authority Key Identifier: keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/28DA447C289B11EAA1EA9B53C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.75.0/24 103.138.11.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:31:fb:0d:69:58:4c:1b:8b:82:50:f2:1b:4b:4d:58:5c:aa: 89:f5:27:b2:78:86:87:d3:f4:bd:a5:f2:20:f8:4f:df:15:21: 43:75:dc:6c:1c:fa:cc:c7:04:79:d2:79:9b:aa:25:f4:a8:93: a0:f6:b8:16:39:eb:ca:80:f4:b7:59:71:79:dc:10:88:1e:14: f5:dd:a2:d2:62:59:fe:89:ab:e4:02:09:99:ee:21:61:49:96: 9d:54:ed:3b:2a:a6:8e:5c:a5:a8:87:5b:af:36:50:33:28:b7: 00:32:d3:a8:41:4c:d4:57:a6:f0:3e:1c:a4:1b:11:9b:3f:de: 24:4d:53:41:33:9b:d0:6d:e3:03:2a:b7:37:10:dd:af:5b:dc: e7:8d:35:39:ae:0e:2f:e7:bd:57:19:14:d3:4b:4e:4a:7c:b2: c8:53:e9:48:98:54:20:08:29:d9:df:53:71:56:d4:7f:81:47: f9:a4:27:e7:b2:f6:b8:1a:00:d8:0d:58:0b:87:52:3b:62:ce: 35:79:e0:55:5d:ae:8d:0f:73:fe:f7:03:0e:24:b2:a7:8a:2f: 8f:1c:a5:42:38:b1:1b:1f:3c:ea:2d:bd:55:e1:b7:59:d7:f6: d2:d7:09:93:88:80:41:9b:fa:aa:be:8a:53:e7:b7:9e:64:27: d4:3b:83:08 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICEI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4QkUxMTAvBgNVBAUTKDg2RjJFQkI0QzFFMkU5MEFEOTAwN0M0MjAzNjc2NjI1 OEQ1NDg1NjUwHhcNMjYwOTEwMTczNTQ1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEyZWE3MS0wMTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRFFKwI+li70DCo0mVssfxHXOWyWWdsSkd8LwVniJPjE76qeQzCReXx0lg6O Ru9nt18WM9pvuPyW2eLIwvDj/96yQXBzh4WDp6WT+wG4/U3Cwvn82Uge6bjcTnO5 YPbwQ8NG0F3+Z+opO3HDDmw+g5qgDwlhFmA8CpsCokGzBck9nVgKBm3gqczSQHAr HIcxLdGf3wdpSdVH+yI3cS/t3f38ow9UZpF+w2gmshb885P/qgPx1ih6RAGX1xnU bgf8cSSXRETUnamFC483TpAZKtfO+Qm58NRamq5DFXOix0cXBSav22u9s1vb5ihO zDh6WKE/+lCM8rQCHLNqlGPpTQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKjxOzij OeUCfreE6YEF5H/tnhHhMB8GA1UdIwQYMBaAFIby67TB4ukK2QB8QgNnZiWNVIVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QThCRS85MDE5RDEyMDY0 MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZRclpBSHhDQTJkbUpZMVVo V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h2THJ0TUhpNlFyWkFIeENBMmRtSlkxVWhXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE4QkUvOTAxOUQxMjA2NDAxMTFFOThFRjZEQzZGQzRGOUFFMDIvMjhEQTQ0N0My ODlCMTFFQUExRUE5QjUzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ3tLAwQAZ4oLMA0GCSqGSIb3DQEBCwUAA4IBAQAsMfsNaVhMG4uC UPIbS01YXKqJ9SeyeIaH0/S9pfIg+E/fFSFDddxsHPrMxwR50nmbqiX0qJOg9rgW OevKgPS3WXF53BCIHhT13aLSYln+iavkAgmZ7iFhSZadVO07KqaOXKWoh1uvNlAz KLcAMtOoQUzUV6bwPhykGxGbP94kTVNBM5vQbeMDKrc3EN2vW9znjTU5rg4v571X GRTTS05KfLLIU+lImFQgCCnZ31NxVtR/gUf5pCfnsva4GgDYDVgLh1I7Ys41eeBV Xa6ND3P+9wMOJLKnii+PHKVCOLEbHzzqLb1V4bdZ1/bS1wmTiIBBm/qqvopT57ee ZCfUO4MI -----END CERTIFICATE-----Generated at Thu Sep 24 23:55:06 2026 by rpki-client