$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/E2891A621EA111F1917EDCD9123D8C67.roa File: E2891A621EA111F1917EDCD9123D8C67.roa (raw, json) Hash identifier: damW1MYpaP8UNTPLWFagNq2fT6GX7rbC21k381wq+0E= Subject key identifier: 1B:31:EF:16:EA:5D:E9:73:B5:CA:60:B8:24:F0:EA:C5:7A:15:A2:E5 Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Certificate serial: 0A78 Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/E2891A621EA111F1917EDCD9123D8C67.roa Signing time: Fri 21 Aug 2026 05:54:36 +0000 ROA not before: Fri 13 Mar 2026 06:02:23 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 132041 IP address blocks: 103.96.24.0/24 maxlen: 24 103.96.25.0/24 maxlen: 24 103.96.27.0/24 maxlen: 24 123.253.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2680 (0xa78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Validity Not Before: Mar 13 06:02:23 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a87e81c-4edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:81:64:da:a3:e3:fd:3d:f6:fa:a1:aa:f0: 61:ff:42:2d:e2:a1:ed:75:fa:e4:99:f2:63:78:6e: cd:d2:ef:a8:d0:ac:19:cc:0f:e2:7e:1d:0c:91:a9: 05:24:9f:47:7c:3d:ae:0e:cc:d5:c5:ae:86:9b:bf: ef:02:56:33:04:96:c3:8e:4b:2e:e9:5e:bf:4b:83: de:16:b2:54:58:39:22:29:65:8d:3c:d5:a6:34:f4: e9:1d:7a:75:1e:96:aa:2e:e6:ed:ea:2a:c4:40:57: ca:7d:5d:27:c3:d3:ae:9c:c2:59:09:a5:f9:d2:0a: 3f:0a:39:5c:3c:dd:40:15:a8:6b:86:3e:c1:59:23: 8d:03:98:2f:8b:b3:01:22:dc:20:7e:f6:9b:19:3b: d9:af:bf:7d:87:72:2f:72:86:87:29:ba:55:f7:cd: f8:79:7b:79:da:d6:96:90:c5:19:40:58:1f:81:9a: 99:d6:2c:34:d9:0f:e9:2c:b1:b0:35:d3:64:36:3c: 85:64:38:c3:5b:ab:f7:25:8f:73:b9:b5:8b:33:79: e5:b0:58:9a:fe:d3:96:c9:bd:c2:74:f3:82:42:32: 8e:ee:3f:65:d2:c8:f3:c3:9e:62:bb:d6:97:01:28: 34:e7:0d:6e:47:2e:4f:8c:1b:e8:94:f7:dd:0f:a8: 0a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:31:EF:16:EA:5D:E9:73:B5:CA:60:B8:24:F0:EA:C5:7A:15:A2:E5 X509v3 Authority Key Identifier: keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/E2891A621EA111F1917EDCD9123D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.96.24.0/23 103.96.27.0/24 123.253.195.0/24 Signature Algorithm: sha256WithRSAEncryption a7:ed:34:0b:b0:20:47:93:e5:f8:6b:9f:85:9c:f3:87:aa:84: 2c:c0:f2:40:1e:65:c1:86:75:0e:cf:f9:e1:74:3a:1e:04:33: b8:67:d9:9e:c4:3d:5b:ea:eb:a2:9b:2b:b6:92:10:34:3c:93: 31:0a:5d:6f:4e:7d:0f:b5:53:2e:53:8b:24:4f:f8:15:0a:2b: d9:8d:c4:ed:ac:e4:62:6a:b7:97:89:c0:f1:c9:a1:a4:1d:f3: b0:c0:ad:e9:a6:fa:1a:e5:ea:b1:ff:5c:c7:80:83:a7:52:7d: cc:52:47:bf:f9:d2:a8:45:05:06:eb:db:f1:b9:07:63:f4:67: 27:7a:c7:64:a8:1d:66:ee:6c:d9:11:9b:dd:38:b7:6b:9f:01: 5a:8c:e4:3e:64:96:73:7e:9d:2c:c3:22:86:1d:fa:0e:fa:ee: 2b:5e:51:cf:11:55:70:1e:fc:64:31:d8:f8:7f:f8:9a:cf:93: 1f:07:fe:dd:c9:44:9c:f9:e0:46:a7:91:34:12:6a:01:80:b6: 9c:93:e5:8b:a8:c6:b9:f8:7d:87:65:b0:35:d7:89:38:e8:f7: 1e:59:3d:79:7a:e3:b9:3d:84:d6:c5:2c:59:80:21:01:12:15: b8:16:b0:dd:81:fb:9e:c4:40:96:8a:c4:27:ce:41:a4:5d:98: bb:8f:cc:18 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3 QTI2REJEMjUwHhcNMjYwMzEzMDYwMjIzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3ZTgxYy00ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Q6BZNqj4/099vqhqvBh/0It4qHtdfrkmfJjeG7N0u+o0KwZzA/ifh0MkakF JJ9HfD2uDszVxa6Gm7/vAlYzBJbDjksu6V6/S4PeFrJUWDkiKWWNPNWmNPTpHXp1 HpaqLubt6irEQFfKfV0nw9OunMJZCaX50go/CjlcPN1AFahrhj7BWSONA5gvi7MB ItwgfvabGTvZr799h3IvcoaHKbpV9834eXt52taWkMUZQFgfgZqZ1iw02Q/pLLGw NdNkNjyFZDjDW6v3JY9zubWLM3nlsFia/tOWyb3CdPOCQjKO7j9l0sjzw55iu9aX ASg05w1uRy5PjBvolPfdD6gK0wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFBsx7xbq XelztcpguCTw6sV6FaLlMB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFGQTQvQjY3ODYyRkFBQjk1MTFFQUIyNTU5QzVCQzRGOUFFMDIvRTI4OTFBNjIx RUExMTFGMTkxN0VEQ0Q5MTIzRDhDNjcucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBZ2AYAwQAZ2AbAwQAe/3DMA0GCSqGSIb3DQEBCwUAA4IBAQCn7TQL sCBHk+X4a5+FnPOHqoQswPJAHmXBhnUOz/nhdDoeBDO4Z9mexD1b6uuimyu2khA0 PJMxCl1vTn0PtVMuU4skT/gVCivZjcTtrORiareXicDxyaGkHfOwwK3ppvoa5eqx /1zHgIOnUn3MUke/+dKoRQUG69vxuQdj9GcnesdkqB1m7mzZEZvdOLdrnwFajOQ+ ZJZzfp0swyKGHfoO+u4rXlHPEVVwHvxkMdj4f/iaz5MfB/7dyUSc+eBGp5E0EmoB gLack+WLqMa5+H2HZbA114k46PceWT15euO5PYTWxSxZgCEBEhW4FrDdgfuexECW isQnzkGkXZi7j8wY -----END CERTIFICATE-----Generated at Sun Oct 4 15:26:13 2026 by rpki-client