$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/25C6FD9CAE0511F187A47F574B11F970.roa File: 25C6FD9CAE0511F187A47F574B11F970.roa (raw, json) Hash identifier: tPUksVd0vhsyj5oWFgysZ5c2itueSX3x7L98+NauflU= Subject key identifier: F3:ED:DC:5D:D5:3B:B3:EF:A2:C5:00:CB:49:C7:BC:B9:12:5A:48:22 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 0511 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/25C6FD9CAE0511F187A47F574B11F970.roa Signing time: Fri 11 Sep 2026 17:20:56 +0000 ROA not before: Fri 11 Sep 2026 17:20:56 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 218692 IP address blocks: 103.91.217.0/24 maxlen: 24 103.99.208.0/23 maxlen: 24 103.99.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1297 (0x511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Sep 11 17:20:56 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6aa43878-a4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fe:32:e1:d7:68:41:bf:5a:a0:d4:15:f1:91: 1a:f6:8b:e5:ae:33:e6:6e:a0:88:7c:6f:16:f2:84: be:00:37:e0:97:7d:76:e8:3e:70:fb:30:28:2f:26: 26:79:b6:66:ec:77:b2:c3:eb:ef:31:b2:d6:f8:c3: c8:29:17:13:d1:6b:fa:29:3e:35:52:02:6c:3e:a9: 61:bf:97:7c:5c:15:6d:ad:74:d1:5b:e8:81:ef:44: 29:c4:48:23:93:ba:dd:ef:26:e5:3b:33:04:9c:10: 36:f5:7b:d8:24:c6:18:7f:08:c7:43:03:b9:4c:82: 41:50:a4:a4:16:f9:db:26:49:e2:4e:8d:0b:3e:0f: ab:3e:4c:7f:0c:56:4c:19:f5:43:8c:fc:db:db:1a: 2d:36:d1:5f:b7:5e:a6:70:9c:cf:80:b4:40:26:ad: 5b:40:0b:c3:3e:4f:f2:f4:21:f4:1f:97:a2:42:07: 36:af:ec:f7:89:4b:7e:9f:51:86:09:30:f8:a5:37: f8:5b:b3:5c:f4:c7:fb:41:b2:32:2d:7a:be:66:7c: 04:ad:96:08:59:c3:98:8f:a7:7a:d1:64:3f:3d:63: 5a:2d:10:2c:c0:47:43:22:b6:04:94:bb:ec:aa:9a: 1a:25:af:be:f3:a0:da:ba:48:29:7a:68:e0:3b:d2: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:ED:DC:5D:D5:3B:B3:EF:A2:C5:00:CB:49:C7:BC:B9:12:5A:48:22 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/25C6FD9CAE0511F187A47F574B11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.91.217.0/24 103.99.208.0-103.99.210.255 Signature Algorithm: sha256WithRSAEncryption 31:ca:2f:49:a4:17:b5:a9:17:72:ec:51:8d:a7:08:57:45:ab: 5c:2c:7e:02:d7:67:75:36:9b:93:9d:9e:22:e9:c0:08:a7:90: b2:23:b5:80:8b:50:52:6c:32:13:bc:f5:28:3e:22:55:7f:75: a8:91:f9:2a:6a:28:b6:b2:fd:ae:f5:77:94:4b:6e:f6:a6:71: 13:ed:53:0e:98:45:30:10:87:15:d2:f9:ac:88:58:09:d1:70: 8b:54:03:c0:5b:08:b2:70:3a:0d:84:15:1b:65:bd:d1:49:60: 95:eb:b4:42:f1:2a:2b:b1:98:a5:8a:be:e7:a5:9b:90:37:09: 40:bf:c2:65:92:7b:27:e7:4b:7e:1a:29:76:9d:56:df:90:0d: e5:8d:c5:c6:d9:61:1f:d8:74:d5:35:80:e4:af:48:e6:16:eb: ae:85:2e:51:51:d2:45:ea:ec:90:33:fa:53:0f:0a:a0:ee:4e: a4:4f:2a:e4:6b:43:15:98:68:9a:64:73:34:f9:e3:86:71:a6: 50:3e:1b:18:7b:6c:51:c3:de:66:0c:e2:37:b2:ad:ec:e8:a7: 9e:b9:bc:df:45:55:54:85:ec:84:30:b7:eb:d9:44:81:44:0b: ef:2f:f8:10:31:8e:bd:50:e9:ea:c1:3e:1c:ce:d2:6b:90:ef: 81:ed:25:6e -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjYwOTExMTcyMDU2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE0Mzg3OC1hNGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2v4y4ddoQb9aoNQV8ZEa9ovlrjPmbqCIfG8W8oS+ADfgl3126D5w+zAoLyYm ebZm7Heyw+vvMbLW+MPIKRcT0Wv6KT41UgJsPqlhv5d8XBVtrXTRW+iB70QpxEgj k7rd7yblOzMEnBA29XvYJMYYfwjHQwO5TIJBUKSkFvnbJkniTo0LPg+rPkx/DFZM GfVDjPzb2xotNtFft16mcJzPgLRAJq1bQAvDPk/y9CH0H5eiQgc2r+z3iUt+n1GG CTD4pTf4W7Nc9Mf7QbIyLXq+ZnwErZYIWcOYj6d60WQ/PWNaLRAswEdDIrYElLvs qpoaJa++86DaukgpemjgO9KDuwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFPPt3F3V O7PvosUAy0nHvLkSWkgiMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU5QzEvRUU3MDJGNDQ3QUM5MTFFQzlEQTU1QjQ2QzRGOUFFMDIvMjVDNkZEOUNB RTA1MTFGMTg3QTQ3RjU3NEIxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQAZ1vZMAwDBARnY9ADBABnY9IwDQYJKoZIhvcNAQELBQADggEBADHK L0mkF7WpF3LsUY2nCFdFq1wsfgLXZ3U2m5OdniLpwAinkLIjtYCLUFJsMhO89Sg+ IlV/daiR+SpqKLay/a71d5RLbvamcRPtUw6YRTAQhxXS+ayIWAnRcItUA8BbCLJw Og2EFRtlvdFJYJXrtELxKiuxmKWKvuelm5A3CUC/wmWSeyfnS34aKXadVt+QDeWN xcbZYR/YdNU1gOSvSOYW666FLlFR0kXq7JAz+lMPCqDuTqRPKuRrQxWYaJpkczT5 44ZxplA+Gxh7bFHD3mYM4jeyrezop565vN9FVVSF7IQwt+vZRIFEC+8v+BAxjr1Q 6erBPhzO0muQ74HtJW4= -----END CERTIFICATE-----Generated at Tue Sep 22 23:15:23 2026 by rpki-client