$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa File: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (raw, json) Hash identifier: 5W92E32XU1AG2SE7ILAomrNCfIvth1YE0xyocchPZ5Y= Subject key identifier: 5B:BD:42:B7:22:34:48:01:41:76:9C:7E:B6:7C:AB:A3:CE:54:DF:1E Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0273 Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa Signing time: Tue 15 Sep 2026 15:44:08 +0000 ROA not before: Tue 15 Sep 2026 15:44:08 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 132366 IP address blocks: 103.242.8.0/23 maxlen: 23 103.242.8.0/24 maxlen: 24 103.242.9.0/24 maxlen: 24 2401:1d20::/48 maxlen: 48 2401:1d20:4::/48 maxlen: 48 2401:1d20:5::/48 maxlen: 48 2401:1d20:6::/48 maxlen: 48 2401:1d20:7::/48 maxlen: 48 2401:1d20:8::/48 maxlen: 48 2401:1d20:9::/48 maxlen: 48 2401:1d20:b::/48 maxlen: 48 2401:1d20:c::/48 maxlen: 48 2401:1d20:d::/48 maxlen: 48 2401:1d20:e::/48 maxlen: 48 2401:1d20:f::/48 maxlen: 48 2401:1d20:10::/48 maxlen: 48 2401:1d20:11::/48 maxlen: 48 2401:1d20:12::/48 maxlen: 48 2401:1d20:13::/48 maxlen: 48 2401:1d20:14::/48 maxlen: 48 2401:1d20:15::/48 maxlen: 48 2401:1d20:16::/48 maxlen: 48 2401:1d20:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Sep 15 15:44:08 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6aa967c8-706d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:e3:2c:f3:40:c8:2f:dc:e5:1f:22:97:eb: 20:61:cf:68:fa:56:57:27:64:b9:bd:66:df:bb:ec: 9c:1c:50:b4:42:0a:5f:98:f6:9d:30:cb:b4:a0:1b: f2:a6:3e:62:94:94:e1:69:4a:2e:66:33:64:88:21: f7:da:57:19:ef:dd:95:36:1d:4c:7c:d4:1f:34:b9: 08:00:96:d2:02:47:f1:9f:5c:f1:c9:22:45:e7:b6: f0:a7:8b:0c:34:b9:9d:e1:a8:b9:63:9e:52:07:23: 4f:7a:fd:0d:a8:e6:76:26:13:63:8f:0b:48:17:c8: 5c:65:b6:58:69:b5:69:0f:7d:68:9b:2e:06:f6:53: 06:7b:73:04:7a:58:8a:9e:49:97:df:3e:73:6e:1a: bc:c5:2d:d8:95:44:2e:80:42:86:72:03:af:fb:2f: e7:0b:43:92:8c:70:e2:a5:00:c5:43:e7:2d:6b:c0: 34:22:27:0e:0c:38:cc:8b:7c:77:04:05:33:1a:72: fc:59:eb:e5:0d:e3:9c:e8:47:e6:a8:9d:3c:04:21: ea:93:81:a0:a5:af:b4:bd:98:f7:31:e8:0c:44:a1: c8:8a:58:37:d6:20:46:a3:a4:8d:2c:62:a5:4e:09: a8:0f:22:a1:95:00:20:3b:a6:aa:fb:2e:b3:dc:6d: 75:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BD:42:B7:22:34:48:01:41:76:9C:7E:B6:7C:AB:A3:CE:54:DF:1E X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.242.8.0/23 IPv6: 2401:1d20::/48 2401:1d20:4::-2401:1d20:9:ffff:ffff:ffff:ffff:ffff 2401:1d20:b::-2401:1d20:17:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 34:5e:b2:bf:3e:fa:aa:da:fa:12:9a:03:d7:e5:77:0a:0e:ec: 89:11:66:74:10:a8:63:18:c9:d7:6c:b6:52:a4:9f:ca:fd:81: 7a:53:71:fe:e0:d3:ea:16:35:7e:5e:4c:85:9c:d5:38:89:15: 4f:6d:06:e9:db:a6:f7:98:bf:07:b1:c6:05:9b:c1:c7:d5:b7: f7:0e:d9:75:58:e9:ab:a6:bd:33:2a:8f:1f:72:57:1c:a6:a2: 23:a8:c5:de:18:58:aa:c0:39:d8:d4:07:42:1f:4d:5c:e6:6d: f6:69:09:23:4d:d1:95:01:f9:2c:49:b2:af:2c:ca:fb:0e:be: 79:3e:94:6b:96:a6:d8:05:ae:62:6d:81:6e:8a:7d:52:04:dc: e8:66:47:fd:b1:0b:94:1c:40:d8:11:af:00:eb:07:67:a1:e1: 5f:8b:bf:0b:91:1d:a8:d8:c2:6d:3b:1c:59:a5:a8:f6:9e:87: e2:43:6b:d2:11:20:f5:e9:ab:ed:28:e9:bb:38:de:d7:9c:28: 68:8b:f9:76:e9:95:d9:a5:df:80:0d:5b:31:1a:69:d6:ed:52: 11:de:14:bd:60:45:f5:b4:dd:b4:86:03:70:59:ea:78:c6:5b: db:9c:92:41:1f:36:b4:8e:b0:cc:a7:bb:6a:31:65:9a:65:a8: d8:c3:26:83 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjYwOTE1MTU0NDA4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE5NjdjOC03MDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAounjLPNAyC/c5R8il+sgYc9o+lZXJ2S5vWbfu+ycHFC0QgpfmPadMMu0oBvy pj5ilJThaUouZjNkiCH32lcZ792VNh1MfNQfNLkIAJbSAkfxn1zxySJF57bwp4sM NLmd4ai5Y55SByNPev0NqOZ2JhNjjwtIF8hcZbZYabVpD31omy4G9lMGe3MEeliK nkmX3z5zbhq8xS3YlUQugEKGcgOv+y/nC0OSjHDipQDFQ+cta8A0IicODDjMi3x3 BAUzGnL8WevlDeOc6EfmqJ08BCHqk4Ggpa+0vZj3MegMRKHIilg31iBGo6SNLGKl TgmoDyKhlQAgO6aq+y6z3G11vQIDAQABo4ICmTCCApUwHQYDVR0OBBYEFFu9Qrci NEgBQXacfrZ8q6POVN8eMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIwMTcvREU3NUYyMjIyQTEzMTFFRTk1RDU4QTY2QzRGOUFFMDIvMUQxMUZGRDQz NTJEMTFFRTk1NDNCNTJGQzRGOUFFMDIucm9hMFgGCCsGAQUFBwEHAQH/BEkwRzAM BAIAATAGAwQBZ/IIMDcEAgACMDEDBwAkAR0gAAAwEgMHAiQBHSAABAMHASQBHSAA CDASAwcAJAEdIAALAwcDJAEdIAAQMA0GCSqGSIb3DQEBCwUAA4IBAQA0XrK/Pvqq 2voSmgPX5XcKDuyJEWZ0EKhjGMnXbLZSpJ/K/YF6U3H+4NPqFjV+XkyFnNU4iRVP bQbp26b3mL8HscYFm8HH1bf3Dtl1WOmrpr0zKo8fclccpqIjqMXeGFiqwDnY1AdC H01c5m32aQkjTdGVAfksSbKvLMr7Dr55PpRrlqbYBa5ibYFuin1SBNzoZkf9sQuU HEDYEa8A6wdnoeFfi78LkR2o2MJtOxxZpaj2nofiQ2vSESD16avtKOm7ON7XnCho i/l26ZXZpd+ADVsxGmnW7VIR3hS9YEX1tN20hgNwWep4xlvbnJJBHza0jrDMp7tq MWWaZajYwyaD -----END CERTIFICATE-----Generated at Fri Sep 25 18:17:50 2026 by rpki-client