$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/8E3128B4837D11EDB082012FC4F9AE02.roa File: 8E3128B4837D11EDB082012FC4F9AE02.roa (raw, json) Hash identifier: ZZZ9fBv/ymPhUilT+b7u+jHJy78yDtecTBcF5lQprHE= Subject key identifier: 0D:F1:80:28:AC:6B:2D:8A:97:DE:59:FA:E7:7F:A2:8D:33:5B:B8:5A Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Certificate serial: 02C2 Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/8E3128B4837D11EDB082012FC4F9AE02.roa Signing time: Thu 03 Sep 2026 01:52:05 +0000 ROA not before: Thu 03 Sep 2026 01:52:05 +0000 ROA not after: Fri 01 Jan 2027 00:00:00 +0000 asID: 150692 IP address blocks: 103.59.162.0/23 maxlen: 23 103.59.162.0/24 maxlen: 24 103.59.163.0/24 maxlen: 24 2400:cea0::/32 maxlen: 32 2400:cea0::/36 maxlen: 36 2400:cea0:1000::/36 maxlen: 36 2400:cea0:2000::/36 maxlen: 36 2400:cea0:3000::/36 maxlen: 36 2400:cea0:4000::/36 maxlen: 36 2400:cea0:5000::/36 maxlen: 36 2400:cea0:6000::/36 maxlen: 36 2400:cea0:7000::/36 maxlen: 36 2400:cea0:8000::/36 maxlen: 36 2400:cea0:9000::/36 maxlen: 36 2400:cea0:a000::/36 maxlen: 36 2400:cea0:b000::/36 maxlen: 36 2400:cea0:c000::/36 maxlen: 36 2400:cea0:d000::/36 maxlen: 36 2400:cea0:e000::/36 maxlen: 36 2400:cea0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B2D, serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Validity Not Before: Sep 3 01:52:05 2026 GMT Not After : Jan 1 00:00:00 2027 GMT Subject: CN=6a98d2c5-4f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:3a:f6:08:38:ff:51:8c:08:35:0a:29:58: 2d:76:bc:29:db:73:eb:8d:36:6e:78:1a:c9:17:f6: 86:1b:a7:7a:00:cf:4c:72:fd:2d:d2:1e:3a:05:86: 27:3a:e3:49:42:6d:c0:5a:f3:87:11:2b:a9:18:dc: 2c:40:9f:0b:7b:f9:5c:19:3f:31:01:3e:57:29:4f: 08:5c:56:8b:d8:19:47:05:44:1d:b0:fd:f9:76:00: e6:4f:d6:98:d4:d7:34:84:01:32:76:34:a4:c1:d6: a7:fc:0f:65:ee:a7:ed:0e:6e:45:67:ef:21:e6:96: cd:ee:7c:28:21:53:58:f4:52:6d:a5:4e:e7:1f:ad: 5f:a2:93:ac:8a:51:19:d6:ac:04:33:d4:22:e5:84: 4b:0a:30:55:a3:1b:5a:d3:b0:b2:52:59:84:2f:3e: 80:46:7a:61:94:fd:19:3b:cb:d1:cc:ba:72:c5:66: e6:09:94:8a:fa:58:2e:0c:b5:80:48:cd:cd:19:14: c8:54:fb:f5:5f:a8:c3:96:ff:20:d6:ee:71:24:d9: bb:81:23:88:cd:78:18:10:25:2f:95:66:ec:67:88: 98:c1:e5:b8:6a:2c:f6:98:16:cc:34:4d:06:a5:47: e8:b7:23:92:61:ce:44:4f:40:e9:76:1b:af:a2:19: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F1:80:28:AC:6B:2D:8A:97:DE:59:FA:E7:7F:A2:8D:33:5B:B8:5A X509v3 Authority Key Identifier: keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/8E3128B4837D11EDB082012FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.59.162.0/23 IPv6: 2400:cea0::/32 Signature Algorithm: sha256WithRSAEncryption 1a:47:79:c1:9a:3e:51:54:fa:a8:69:8d:22:4b:7b:33:ec:e4: e8:4b:5c:3c:df:d7:19:84:c8:b9:c1:3c:42:7b:c5:f7:00:9e: da:a3:df:f6:c8:f1:86:c1:ef:18:10:18:d0:93:82:de:6b:8c: fb:17:02:46:f9:d4:fe:ab:37:56:3e:08:2c:7b:5c:55:7f:af: 6c:ae:50:e0:b1:63:ec:4d:71:66:68:cc:99:15:96:f0:be:b5: 99:2f:72:15:5b:d9:59:3a:76:c3:84:66:a5:15:a8:96:a1:b2: 77:be:17:02:89:92:3d:51:fa:07:8e:c7:d0:b7:00:e4:39:ad: 6c:cd:b2:1a:f7:08:49:ca:08:7f:82:46:3f:2b:3a:5a:e4:ce: 3f:16:15:a5:a1:44:0b:a2:82:f2:ea:95:35:7d:07:b9:e0:68: 18:c4:6a:d3:ec:17:f6:d4:1b:e5:4b:67:57:eb:99:07:38:64: e8:e5:20:b6:40:5f:71:03:3d:76:5d:f3:47:56:30:15:14:3c: 9f:7d:1b:d3:67:a1:d7:10:b9:8a:a9:32:af:e3:10:3f:31:72: 35:d3:9a:03:e0:06:0f:2a:bc:e1:79:47:2b:84:49:84:e4:29: 00:d2:6b:f8:ba:e8:f3:e9:9d:39:a9:7b:9b:c1:aa:90:98:df: ac:bf:15:a7 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCMkQxMTAvBgNVBAUTKEQ2Qjc1MTRDQkYwQkUyMDQ2QzEzQ0EwRDdGNUQyMjM1 MkZEQTU4RUUwHhcNMjYwOTAzMDE1MjA1WhcNMjcwMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZDJjNS00ZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsO469gg4/1GMCDUKKVgtdrwp23PrjTZueBrJF/aGG6d6AM9Mcv0t0h46BYYn OuNJQm3AWvOHESupGNwsQJ8Le/lcGT8xAT5XKU8IXFaL2BlHBUQdsP35dgDmT9aY 1Nc0hAEydjSkwdan/A9l7qftDm5FZ+8h5pbN7nwoIVNY9FJtpU7nH61fopOsilEZ 1qwEM9Qi5YRLCjBVoxta07CyUlmELz6ARnphlP0ZO8vRzLpyxWbmCZSK+lguDLWA SM3NGRTIVPv1X6jDlv8g1u5xJNm7gSOIzXgYECUvlWbsZ4iYweW4aiz2mBbMNE0G pUfotyOSYc5ET0DpdhuvohmYCQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFA3xgCis ay2Kl95Z+ud/oo0zW7haMB8GA1UdIwQYMBaAFNa3UUy/C+IEbBPKDX9dIjUv2lju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEIyRC8wMzFGNDUxRTgz N0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRnUnNFOG9OZjEwaU5TX2FX TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyZFJUTDhMNGdSc0U4b05mMTBpTlNfYVdPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRCMkQvMDMxRjQ1MUU4MzdCMTFFRDgwNUQ0MDJFQzRGOUFFMDIvOEUzMTI4QjQ4 MzdEMTFFREIwODIwMTJGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZzuiMA0EAgACMAcDBQAkAM6gMA0GCSqGSIb3DQEBCwUAA4IBAQAa R3nBmj5RVPqoaY0iS3sz7OToS1w839cZhMi5wTxCe8X3AJ7ao9/2yPGGwe8YEBjQ k4Lea4z7FwJG+dT+qzdWPggse1xVf69srlDgsWPsTXFmaMyZFZbwvrWZL3IVW9lZ OnbDhGalFaiWobJ3vhcCiZI9UfoHjsfQtwDkOa1szbIa9whJygh/gkY/Kzpa5M4/ FhWloUQLooLy6pU1fQe54GgYxGrT7Bf21BvlS2dX65kHOGTo5SC2QF9xAz12XfNH VjAVFDyffRvTZ6HXELmKqTKv4xA/MXI105oD4AYPKrzheUcrhEmE5CkA0mv4uujz 6Z05qXubwaqQmN+svxWn -----END CERTIFICATE-----Generated at Mon Sep 21 23:32:49 2026 by rpki-client