$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/424D6EC4ACBC11EBB0651B63C4F9AE02.roa File: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (raw, json) Hash identifier: wPApGnIDUUIw+paWqOTD+NVz9Wuy48NMTWVunCo6jtA= Subject key identifier: 22:29:60:A6:B9:00:76:0E:04:FF:EF:EB:C1:3C:6C:97:DC:CC:79:BC Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 08CF Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/424D6EC4ACBC11EBB0651B63C4F9AE02.roa Signing time: Wed 26 Aug 2026 20:41:26 +0000 ROA not before: Wed 26 Aug 2026 20:41:26 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 132825 IP address blocks: 103.153.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2255 (0x8cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Aug 26 20:41:26 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8f4f76-51d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:d5:d7:9b:2a:b8:ea:44:81:9e:ee:2a:27:c2: 9d:f7:fa:33:a6:6a:e4:df:e6:8c:02:19:d8:9b:24: 11:ab:64:4c:11:22:4a:79:a3:fc:9e:d6:4f:32:4d: 41:58:90:53:bc:22:5b:2f:ab:9f:04:e2:08:34:22: f0:23:68:d1:4a:0f:ff:e6:c3:66:4e:42:d6:25:de: 7c:18:74:54:d5:20:e9:46:39:51:3c:01:58:6d:93: 40:a7:b6:36:fe:62:f1:22:23:fe:81:cf:ad:bc:5d: 14:74:9b:bf:33:a5:5a:79:aa:dc:ae:42:06:df:5a: 51:47:e1:9c:30:de:5b:af:5c:91:1c:0d:ca:f6:99: 70:91:84:a1:cc:32:4b:bd:24:ff:ed:35:88:8a:70: 3d:bc:c3:3e:a5:d6:7f:3f:5b:4c:85:69:14:de:f3: 75:32:35:16:90:75:67:f8:6b:19:30:66:f5:32:71: fd:fd:ea:9c:2a:5d:8c:b7:77:09:96:a8:2f:a6:57: 5e:a7:1b:5b:4c:bc:ca:6f:73:b0:75:58:d8:49:4c: ae:a7:fe:cb:8d:bc:6b:e1:86:9e:fc:d1:0c:b7:a5: 4e:36:ea:b7:a8:c8:9d:3c:34:67:b2:98:73:fe:1c: ff:44:5f:f7:2c:19:25:4d:e9:70:fb:e9:07:73:ad: 15:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:29:60:A6:B9:00:76:0E:04:FF:EF:EB:C1:3C:6C:97:DC:CC:79:BC X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/424D6EC4ACBC11EBB0651B63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.138.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:eb:b5:e7:04:a3:d8:66:1e:e0:f2:57:b0:0c:97:51:c3:73: ad:7b:a3:20:eb:ba:32:3a:0c:8d:66:9c:29:1f:01:ad:f3:b0: 56:be:f2:bb:4a:9f:e8:38:9d:9d:c7:fd:9c:b5:be:75:7f:9f: d6:46:8c:ec:04:49:33:47:c8:7a:2d:62:b9:d2:1d:4e:0a:86: 6e:27:8a:8e:a6:89:38:53:00:b0:9d:8e:8e:25:39:64:e4:9a: 57:6b:81:ea:05:48:13:53:3d:c5:44:81:db:39:ac:75:c8:5b: 7a:25:4e:d8:85:27:43:33:53:05:4d:45:a6:f2:bd:de:14:bc: a6:e2:9e:b0:1f:db:cb:cd:33:59:cc:65:29:20:4f:63:94:7f: 0d:51:91:e5:dc:66:63:bc:1b:ee:e5:4f:66:cb:ce:da:93:70: 6a:15:40:be:ff:f8:c9:19:53:91:98:9c:98:30:df:f9:e1:50: 4e:39:98:77:a8:0c:6d:a9:3f:e4:6e:c1:70:41:09:d3:fe:8c: b4:c7:ee:a8:7d:68:02:b0:a2:5d:27:75:8e:3e:5b:d2:55:da: 79:9f:c2:30:a4:f6:31:99:6d:40:7e:fc:82:67:fe:12:9a:69: 6b:31:16:3d:60:19:a2:9a:8e:ef:d1:1d:6a:c6:49:b7:52:f7: 62:46:fa:4c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjYwODI2MjA0MTI2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmNGY3Ni01MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/NXXmyq46kSBnu4qJ8Kd9/ozpmrk3+aMAhnYmyQRq2RMESJKeaP8ntZPMk1B WJBTvCJbL6ufBOIINCLwI2jRSg//5sNmTkLWJd58GHRU1SDpRjlRPAFYbZNAp7Y2 /mLxIiP+gc+tvF0UdJu/M6VaearcrkIG31pRR+GcMN5br1yRHA3K9plwkYShzDJL vST/7TWIinA9vMM+pdZ/P1tMhWkU3vN1MjUWkHVn+GsZMGb1MnH9/eqcKl2Mt3cJ lqgvpldepxtbTLzKb3OwdVjYSUyup/7Ljbxr4Yae/NEMt6VONuq3qMidPDRnsphz /hz/RF/3LBklTelw++kHc60V9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCIpYKa5 AHYOBP/v68E8bJfczHm8MB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQwNzIvM0E0MTg5MzZGQkU2MTFFQUIzNTM2NjBDQzRGOUFFMDIvNDI0RDZFQzRB Q0JDMTFFQkIwNjUxQjYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5mKMA0GCSqGSIb3DQEBCwUAA4IBAQBa67XnBKPYZh7g8lewDJdR w3Ote6Mg67oyOgyNZpwpHwGt87BWvvK7Sp/oOJ2dx/2ctb51f5/WRozsBEkzR8h6 LWK50h1OCoZuJ4qOpok4UwCwnY6OJTlk5JpXa4HqBUgTUz3FRIHbOax1yFt6JU7Y hSdDM1MFTUWm8r3eFLym4p6wH9vLzTNZzGUpIE9jlH8NUZHl3GZjvBvu5U9my87a k3BqFUC+//jJGVORmJyYMN/54VBOOZh3qAxtqT/kbsFwQQnT/oy0x+6ofWgCsKJd J3WOPlvSVdp5n8IwpPYxmW1AfvyCZ/4SmmlrMRY9YBmimo7v0R1qxkm3UvdiRvpM -----END CERTIFICATE-----Generated at Tue Sep 22 10:28:26 2026 by rpki-client