$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/2A23164A9F9711F19B115F094411F970.roa File: 2A23164A9F9711F19B115F094411F970.roa (raw, json) Hash identifier: NnIG7XSOCJWmPtwlTSlZ0/zNRsexl7ybGGJ/J6cm5Ic= Subject key identifier: 53:5D:DA:CC:ED:00:D6:B7:8F:F8:9D:E9:A0:69:C8:0D:8C:B7:15:FA Certificate issuer: /CN=A9121E1E/serialNumber=67CCA8B256627D92D17036143BFF6A10A7B6D9EC Certificate serial: 02 Authority key identifier: 67:CC:A8:B2:56:62:7D:92:D1:70:36:14:3B:FF:6A:10:A7:B6:D9:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8yoslZifZLRcDYUO_9qEKe22ew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/2A23164A9F9711F19B115F094411F970.roa Signing time: Mon 24 Aug 2026 08:38:22 +0000 ROA not before: Mon 24 Aug 2026 08:38:22 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 18356 IP address blocks: 103.60.185.0/24 maxlen: 24 202.8.78.0/23 maxlen: 24 2407:a500::/40 maxlen: 40 2407:a500:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.crl rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8yoslZifZLRcDYUO_9qEKe22ew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E1E, serialNumber=67CCA8B256627D92D17036143BFF6A10A7B6D9EC Validity Not Before: Aug 24 08:38:22 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a8c02fe-96ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:7a:d7:3f:50:79:33:89:61:d6:8f:90:81: 25:63:22:43:db:57:e2:eb:fd:ec:f0:3c:34:e9:b8: a3:80:7f:86:b7:ab:5c:02:52:e5:e4:e3:67:86:15: 92:dd:88:70:e9:4e:fa:13:06:0b:d2:99:8c:76:14: 0c:0f:fb:1e:ad:22:39:94:16:59:a6:7f:aa:32:27: 0a:ef:0d:ca:59:fc:15:55:cd:6c:1a:6b:67:a3:25: fd:05:ba:d5:c9:d9:f3:57:12:c0:07:ed:e9:66:d7: d6:48:02:8d:42:cd:0a:a7:6d:4b:19:dd:d7:f9:fa: 7d:a1:35:a3:38:fe:fe:cd:51:e2:77:ce:5f:a9:5c: fd:ea:06:74:44:3c:cb:26:1d:e6:f7:fe:cc:36:3b: 4c:32:0e:29:d7:2e:48:22:9a:3e:5e:32:27:6a:7a: ba:5c:3b:99:68:62:ff:b9:49:ed:81:2a:42:61:40: 01:f2:95:a1:04:8d:ac:8b:3a:61:f1:99:13:74:9a: 98:c2:50:56:42:22:57:05:0b:fc:16:24:d6:c0:71: 1e:a5:02:b9:1e:f6:f9:b1:b8:1c:94:c3:78:85:0b: 20:34:47:be:17:fa:00:1b:c4:34:8f:4f:5d:bc:2f: 15:85:f6:fd:c7:95:e1:ba:e4:e3:6f:1c:67:36:ae: 57:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5D:DA:CC:ED:00:D6:B7:8F:F8:9D:E9:A0:69:C8:0D:8C:B7:15:FA X509v3 Authority Key Identifier: keyid:67:CC:A8:B2:56:62:7D:92:D1:70:36:14:3B:FF:6A:10:A7:B6:D9:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8yoslZifZLRcDYUO_9qEKe22ew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/2A23164A9F9711F19B115F094411F970.roa sbgp-ipAddrBlock: critical IPv4: 103.60.185.0/24 202.8.78.0/23 IPv6: 2407:a500::/39 Signature Algorithm: sha256WithRSAEncryption 1f:9a:45:72:ce:12:5d:51:80:68:68:ec:65:db:46:f7:c6:d0: c7:32:37:bf:d5:62:cb:b3:de:c1:fe:86:f4:52:4b:92:c6:86: 4e:f7:66:fb:df:35:0f:e2:fb:83:c4:a4:bf:6d:97:8b:51:c9: 4f:7b:3a:60:e2:b1:73:de:d4:c0:b9:12:05:d3:d8:4b:42:d1: c4:81:a1:a1:59:ec:6c:6a:b7:9d:7f:d4:eb:87:4e:6f:8d:da: f8:12:a0:ea:c1:67:cc:30:ef:df:ce:7d:55:8c:e1:b3:68:4c: f3:81:07:53:82:67:41:67:fd:92:78:8b:1d:8e:84:02:bb:0e: 59:2b:04:29:c1:22:e6:b5:46:d1:85:75:c8:6f:16:e7:5d:3a: 93:0b:f1:7c:9c:59:19:98:94:8f:0c:52:ad:94:b8:69:20:c9: d5:2d:14:c8:9e:c8:24:42:50:0a:46:83:d7:3a:7e:07:61:7d: ea:b6:68:29:71:e4:94:4d:b6:48:70:e5:7f:97:63:4f:cc:73: 51:cd:f3:f5:33:2e:c9:08:a4:de:22:53:3c:89:2a:25:31:c0: 1a:db:1c:14:e3:52:94:32:b4:95:d8:c3:c2:3d:cc:2d:fa:fd: 56:e4:ab:83:99:aa:25:8c:7a:8e:c0:63:0d:36:64:dd:5c:eb: 73:ad:fe:0b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MUUxRTExMC8GA1UEBRMoNjdDQ0E4QjI1NjYyN0Q5MkQxNzAzNjE0M0JGRjZBMTBB N0I2RDlFQzAeFw0yNjA4MjQwODM4MjJaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOGMwMmZlLTk2YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOoXrXP1B5M4lh1o+QgSVjIkPbV+Lr/ezwPDTpuKOAf4a3q1wCUuXk42eGFZLd iHDpTvoTBgvSmYx2FAwP+x6tIjmUFlmmf6oyJwrvDcpZ/BVVzWwaa2ejJf0FutXJ 2fNXEsAH7elm19ZIAo1CzQqnbUsZ3df5+n2hNaM4/v7NUeJ3zl+pXP3qBnREPMsm Heb3/sw2O0wyDinXLkgimj5eMidqerpcO5loYv+5Se2BKkJhQAHylaEEjayLOmHx mRN0mpjCUFZCIlcFC/wWJNbAcR6lArke9vmxuByUw3iFCyA0R74X+gAbxDSPT128 LxWF9v3HleG65ONvHGc2rlefAgMBAAGjggJ2MIICcjAdBgNVHQ4EFgQUU13azO0A 1reP+J3poGnIDYy3FfowHwYDVR0jBBgwFoAUZ8yoslZifZLRcDYUO/9qEKe22eww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxRTFFLzhDOUREOTY0OUY5 NjExRjFBMEMwMDZGNTQzMTFGOTcwL1o4eW9zbFppZlpMUmNEWVVPXzlxRUtlMjJl dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjh5b3NsWmlmWkxSY0RZVU9fOXFFS2UyMmV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUUxRS84QzlERDk2NDlGOTYxMUYxQTBDMDA2RjU0MzExRjk3MC8yQTIzMTY0QTlG OTcxMUYxOUIxMTVGMDk0NDExRjk3MC5yb2EwNQYIKwYBBQUHAQcBAf8EJjAkMBIE AgABMAwDBABnPLkDBAHKCE4wDgQCAAIwCAMGASQHpQAAMA0GCSqGSIb3DQEBCwUA A4IBAQAfmkVyzhJdUYBoaOxl20b3xtDHMje/1WLLs97B/ob0UkuSxoZO92b73zUP 4vuDxKS/bZeLUclPezpg4rFz3tTAuRIF09hLQtHEgaGhWexsaredf9Trh05vjdr4 EqDqwWfMMO/fzn1VjOGzaEzzgQdTgmdBZ/2SeIsdjoQCuw5ZKwQpwSLmtUbRhXXI bxbnXTqTC/F8nFkZmJSPDFKtlLhpIMnVLRTInsgkQlAKRoPXOn4HYX3qtmgpceSU TbZIcOV/l2NPzHNRzfP1My7JCKTeIlM8iSolMcAa2xwU41KUMrSV2MPCPcwt+v1W 5KuDmaoljHqOwGMNNmTdXOtzrf4L -----END CERTIFICATE-----Generated at Sun Sep 20 18:36:42 2026 by rpki-client