$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8938B9DA7BF511F0BEBF8326C4F9AE02.roa File: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (raw, json) Hash identifier: k4KE8zC6lSjJRhlE/re99tOEHbG8sUjwvgrGoKF/M58= Subject key identifier: B0:A2:85:5C:C1:A2:59:AC:FE:34:1F:16:45:23:65:9D:5A:9D:5B:E3 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: D7 Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8938B9DA7BF511F0BEBF8326C4F9AE02.roa Signing time: Thu 03 Sep 2026 01:57:46 +0000 ROA not before: Thu 03 Sep 2026 01:57:46 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 132836 IP address blocks: 103.98.86.0/23 maxlen: 23 103.98.86.0/24 maxlen: 24 103.98.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Sep 3 01:57:46 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a98d41a-c25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9f:fc:c3:b3:6b:8a:db:56:59:99:31:d0:16: 5f:af:86:e5:87:f7:35:f6:e8:0d:be:bd:ef:56:1b: b8:b7:5b:c0:99:7c:8b:10:ec:ea:c1:ed:97:55:55: 8c:5c:e4:f5:fe:f3:a1:4a:88:20:c7:0b:6d:b3:27: e5:c8:15:d9:fe:86:8d:2b:6f:1d:b1:f6:61:03:21: 19:c8:f2:b2:d7:0a:31:8b:0e:df:b0:d8:c6:ce:2b: d1:85:a3:2a:71:a1:15:d6:49:6e:c9:c0:14:02:65: a1:7e:48:63:fe:64:a2:07:fb:50:36:12:d6:5a:77: c1:07:19:b1:51:31:71:f5:60:06:3c:d8:0c:3f:52: 5a:a3:da:35:57:62:93:c4:f1:4c:ae:f9:91:a6:c5: fd:09:1e:0f:b4:6f:03:8d:e3:14:cd:54:c2:b6:2d: 7d:81:32:68:d6:49:4e:d5:ce:b3:b6:15:3a:bf:51: 7b:ae:0c:a4:ad:b9:4a:de:86:c3:46:b8:9d:63:4b: e9:4a:f2:7f:09:36:7d:b8:da:ee:5b:62:9c:2c:aa: 1a:14:b8:08:79:74:1c:c3:00:d7:88:25:93:a8:57: 94:76:ca:3f:8d:b4:ed:e1:9d:6e:b2:f3:2d:8c:22: 07:04:0b:c3:e7:bc:a4:7f:ba:25:15:f2:ab:1b:98: 68:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A2:85:5C:C1:A2:59:AC:FE:34:1F:16:45:23:65:9D:5A:9D:5B:E3 X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8938B9DA7BF511F0BEBF8326C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.98.86.0/23 Signature Algorithm: sha256WithRSAEncryption cd:88:dd:45:4e:61:e3:c1:3d:78:22:ae:a4:5e:01:3d:12:7f: 47:f2:69:23:d3:22:8d:5d:2f:8b:8e:14:39:dc:6d:a7:13:3d: 33:dd:68:32:5a:55:47:ec:b8:fa:99:61:a4:47:a5:15:2a:8c: 3f:e5:1d:df:53:2f:12:30:2a:b8:88:c1:ca:1a:2b:77:49:ef: 0d:0e:55:24:62:72:32:72:8f:7b:99:97:2f:b7:be:14:48:20: 0d:28:a5:17:31:12:c9:36:a7:02:28:32:28:1e:c4:6e:54:51: 87:16:1c:02:34:ad:79:94:7e:d5:d0:9e:7d:d3:c1:a0:82:f0: 53:76:ae:72:39:e0:de:3d:fb:ff:ac:d9:e4:99:e9:c3:30:e8: 72:46:eb:0d:43:b0:45:11:0a:79:0f:ee:59:67:c9:ad:7b:7b: 2f:62:dd:fb:ba:51:d9:dd:7c:dd:d3:29:aa:14:37:d4:bc:b0: 64:79:57:17:b7:8d:14:bc:f5:c2:c9:37:35:21:7e:1b:b5:27: b8:d4:8c:4a:59:01:4f:40:47:4c:4e:a2:e9:00:dd:b6:e5:0c: cb:c2:01:43:3d:11:32:34:5a:00:3c:3e:4e:b9:77:ef:69:a5: 9a:1a:84:f1:79:07:db:b4:66:37:c8:3f:be:01:14:20:69:3c: 31:26:4f:2f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1ODgxMTAvBgNVBAUTKDg4Mjg1OUQ1MjMwMUYwMTU3MUQ5RDRDRjk1M0Y0NUUw NzVFMDlBOTgwHhcNMjYwOTAzMDE1NzQ2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZDQxYS1jMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55/8w7NrittWWZkx0BZfr4blh/c19ugNvr3vVhu4t1vAmXyLEOzqwe2XVVWM XOT1/vOhSoggxwttsyflyBXZ/oaNK28dsfZhAyEZyPKy1woxiw7fsNjGzivRhaMq caEV1kluycAUAmWhfkhj/mSiB/tQNhLWWnfBBxmxUTFx9WAGPNgMP1Jao9o1V2KT xPFMrvmRpsX9CR4PtG8DjeMUzVTCti19gTJo1klO1c6zthU6v1F7rgykrblK3obD RridY0vpSvJ/CTZ9uNruW2KcLKoaFLgIeXQcwwDXiCWTqFeUdso/jbTt4Z1usvMt jCIHBAvD57ykf7olFfKrG5ho3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLCihVzB olms/jQfFkUjZZ1anVvjMB8GA1UdIwQYMBaAFIgoWdUjAfAVcdnUz5U/ReB14JqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU4OC9CRjdENUU3NjdC RjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhCVngyZFRQbFQ5RjRIWGdt cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ1ODgvQkY3RDVFNzY3QkYzMTFGMEEwNUZBRDgyQzRGOUFFMDIvODkzOEI5REE3 QkY1MTFGMEJFQkY4MzI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ2JWMA0GCSqGSIb3DQEBCwUAA4IBAQDNiN1FTmHjwT14Iq6kXgE9 En9H8mkj0yKNXS+LjhQ53G2nEz0z3WgyWlVH7Lj6mWGkR6UVKow/5R3fUy8SMCq4 iMHKGit3Se8NDlUkYnIyco97mZcvt74USCANKKUXMRLJNqcCKDIoHsRuVFGHFhwC NK15lH7V0J5908GggvBTdq5yOeDePfv/rNnkmenDMOhyRusNQ7BFEQp5D+5ZZ8mt e3svYt37ulHZ3Xzd0ymqFDfUvLBkeVcXt40UvPXCyTc1IX4btSe41IxKWQFPQEdM TqLpAN225QzLwgFDPREyNFoAPD5OuXfvaaWaGoTxeQfbtGY3yD++ARQgaTwxJk8v -----END CERTIFICATE-----Generated at Tue Sep 22 21:15:37 2026 by rpki-client