$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/37B8851C654F11EFACFE1271C4F9AE02.roa File: 37B8851C654F11EFACFE1271C4F9AE02.roa (raw, json) Hash identifier: ebuDMM7wTsKe1ZcQyfcucvVYD/FpFbQhMixniFaF7qo= Subject key identifier: FA:DE:57:D3:7D:FA:A9:4F:98:B5:4C:1B:34:1E:9E:B9:3D:B4:9C:31 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2A32 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/37B8851C654F11EFACFE1271C4F9AE02.roa Signing time: Sun 06 Sep 2026 16:24:21 +0000 ROA not before: Sun 06 Sep 2026 16:24:21 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 14315 IP address blocks: 103.196.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10802 (0x2a32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Sep 6 16:24:21 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a9d93b5-08ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:c5:69:bb:99:8f:c8:37:ed:10:35:ac:7c: a3:06:cb:80:f3:9d:c2:ce:af:95:f7:ec:ca:d9:09: 88:cb:59:b9:ac:39:40:6c:2a:ef:7a:83:62:61:b5: dc:94:ff:c9:5a:07:9b:ca:5b:b1:95:1d:32:3c:83: 15:70:62:5c:84:7f:ec:4a:87:16:50:d9:d2:2c:e4: 8f:6f:37:6a:39:c9:bd:dd:db:a4:99:08:6b:a7:8a: 8e:b9:0d:64:e9:a1:2a:05:49:a5:7a:e0:6f:c2:c4: 29:96:a4:a4:90:63:06:98:0d:2c:53:83:0e:7d:0d: cd:24:95:f2:6a:88:86:26:cc:16:af:5f:fb:c4:19: 49:3d:59:c3:57:a6:36:f3:4a:19:59:71:47:2d:8c: af:5d:6e:cd:c0:9d:cc:45:79:48:e4:13:da:e1:af: 63:fe:07:06:a8:3a:d5:ce:7f:7e:f3:af:70:32:ed: 40:04:73:99:e7:be:50:cf:17:c6:60:d7:52:7d:6a: 65:a3:2e:55:b9:45:6d:7e:e1:5c:29:24:0b:1e:ba: 60:59:e5:84:76:cb:c6:07:12:54:98:c5:9d:39:73: 8d:b8:1a:da:36:6a:20:18:f3:4f:9e:0f:1e:28:f4: 21:e6:ec:57:fe:3a:b5:f3:be:ff:f8:08:3e:fb:50: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DE:57:D3:7D:FA:A9:4F:98:B5:4C:1B:34:1E:9E:B9:3D:B4:9C:31 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/37B8851C654F11EFACFE1271C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.196.20.0/24 Signature Algorithm: sha256WithRSAEncryption cc:3b:b8:86:ad:24:6e:69:0a:1c:1a:f8:e1:88:04:fc:6c:d6: 29:7b:31:2c:c4:6e:5c:08:41:22:fb:ee:da:99:aa:fd:c7:0f: 82:d8:fa:5c:e5:cb:72:3b:f1:c5:c2:6f:a8:ad:42:ad:bd:f7: 4a:7e:ca:be:f0:f2:62:7d:ae:c1:8e:0a:03:74:d9:a5:a0:ee: d1:41:2d:6d:d5:ef:b8:58:c0:c6:2b:90:4b:4e:97:af:36:e6: af:3f:5c:88:47:3a:da:19:0a:25:78:a7:4f:68:f6:43:03:36: 98:39:9c:66:af:fd:66:a8:ae:7e:d3:53:b9:a8:c3:88:30:92: 63:95:7a:e6:25:71:b9:97:81:a2:75:f2:d5:cc:29:d7:f3:b9: e2:9c:20:93:1c:9c:39:1a:be:46:be:0e:12:fd:61:2b:02:32: c8:ba:6b:d8:b0:cf:d8:57:9e:43:2d:b5:84:8c:20:53:9b:3d: f2:8e:f6:92:c9:d8:b0:b7:3a:db:2c:cc:ca:a7:bd:09:3e:2c: f7:f2:88:83:d0:61:34:47:8e:b3:4e:e0:10:dd:de:ea:af:93: 1b:52:7a:03:40:88:e4:14:07:ab:f6:8e:c4:c5:7f:77:6f:15: f3:8f:af:76:d1:57:c4:7a:5f:10:3b:9c:bb:00:2e:fa:51:71: a2:cf:a0:40 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjYwOTA2MTYyNDIxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlkOTNiNS0wOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgnFabuZj8g37RA1rHyjBsuA853Czq+V9+zK2QmIy1m5rDlAbCrveoNiYbXc lP/JWgebyluxlR0yPIMVcGJchH/sSocWUNnSLOSPbzdqOcm93dukmQhrp4qOuQ1k 6aEqBUmleuBvwsQplqSkkGMGmA0sU4MOfQ3NJJXyaoiGJswWr1/7xBlJPVnDV6Y2 80oZWXFHLYyvXW7NwJ3MRXlI5BPa4a9j/gcGqDrVzn9+869wMu1ABHOZ575QzxfG YNdSfWploy5VuUVtfuFcKSQLHrpgWeWEdsvGBxJUmMWdOXONuBraNmogGPNPng8e KPQh5uxX/jq1877/+Ag++1DCcwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPreV9N9 +qlPmLVMGzQenrk9tJwxMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMzdCODg1MUM2 NTRGMTFFRkFDRkUxMjcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ8QUMA0GCSqGSIb3DQEBCwUAA4IBAQDMO7iGrSRuaQocGvjhiAT8 bNYpezEsxG5cCEEi++7amar9xw+C2Ppc5ctyO/HFwm+orUKtvfdKfsq+8PJifa7B jgoDdNmloO7RQS1t1e+4WMDGK5BLTpevNuavP1yIRzraGQoleKdPaPZDAzaYOZxm r/1mqK5+01O5qMOIMJJjlXrmJXG5l4GidfLVzCnX87ninCCTHJw5Gr5Gvg4S/WEr AjLIumvYsM/YV55DLbWEjCBTmz3yjvaSydiwtzrbLMzKp70JPiz38oiD0GE0R46z TuAQ3d7qr5MbUnoDQIjkFAer9o7ExX93bxXzj6920VfEel8QO5y7AC76UXGiz6BA -----END CERTIFICATE-----Generated at Sat Sep 26 15:36:12 2026 by rpki-client