$ rpki-client -vvvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/9917A4D6285311ED9DD8324EC4F9AE02.roa File: 9917A4D6285311ED9DD8324EC4F9AE02.roa (raw, json) Hash identifier: iJN1NI2KZh4ltI9vBC/E9gwLyQIoZUAauNmphbTlbv0= Subject key identifier: 22:CB:23:46:02:F6:73:05:1C:88:A7:7A:DD:81:39:4E:4E:35:E3:4A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 0343 Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/9917A4D6285311ED9DD8324EC4F9AE02.roa Signing time: Sun 11 Oct 2026 01:49:34 +0000 ROA not before: Sun 11 Oct 2026 01:49:34 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 150176 IP address blocks: 103.204.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 01:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Oct 11 01:49:34 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6acaeb2d-d151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:a0:b9:b9:ef:7f:2a:73:75:f5:39:1e:e9: 80:ae:5b:f4:66:09:00:b2:90:4e:ab:23:ff:25:bb: b8:4d:bd:64:f4:8c:ea:73:8d:4b:c0:8c:b3:56:1b: 2a:52:21:f7:b4:6f:f2:20:80:27:be:e5:74:8c:20: 6c:19:f8:79:ff:59:1e:27:50:47:8e:5d:9b:3a:d8: 9a:3b:27:c6:90:22:f1:5c:d9:5d:9e:70:69:29:dd: 33:cc:e5:43:33:95:8b:44:c0:46:02:7a:99:1b:6d: 83:90:a7:e8:5f:f0:de:c2:ae:fe:88:a2:3b:d7:0c: 26:08:a8:e7:30:fd:e1:6c:34:0e:bf:66:3a:06:f8: f7:c1:2f:8b:ac:15:31:65:1e:ce:07:42:f6:58:ff: 7c:79:e4:3b:a6:d5:ab:14:08:24:f7:0f:73:a9:48: da:39:3b:7b:14:f6:af:d4:ba:f2:63:d5:4e:b5:d6: 9c:52:ce:fe:c5:f1:6a:58:19:16:fb:fe:f2:90:2a: 66:62:85:53:04:bf:81:cf:cd:79:78:66:cb:a0:eb: 62:c7:ce:d8:e1:21:77:da:d8:bf:e2:ec:fa:4a:17: 30:98:f8:05:b7:90:3d:55:01:02:ba:54:e7:13:e2: 53:5b:c5:51:79:2f:fa:1d:a9:2a:cd:44:87:4e:f5: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CB:23:46:02:F6:73:05:1C:88:A7:7A:DD:81:39:4E:4E:35:E3:4A X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/9917A4D6285311ED9DD8324EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.204.68.0/24 Signature Algorithm: sha256WithRSAEncryption 72:f6:5f:05:52:00:95:d6:c2:30:2b:22:8a:a3:90:1b:14:6d: 7e:22:54:4d:3b:1a:dd:7f:7a:ef:6d:42:6d:2a:3d:1e:cb:b9: 11:b8:cb:5d:77:04:0d:09:ae:49:db:49:bd:d2:d6:6b:9d:0d: bd:5e:92:90:50:6c:be:06:87:b6:79:14:9f:af:df:7e:90:0a: 3f:f7:b0:9c:ef:e4:01:14:71:1b:6e:87:99:3d:23:59:2f:53: 28:7f:0a:d0:36:9f:b1:ed:13:e1:3b:49:32:d2:5b:f6:48:5e: b7:b4:c9:d8:ef:1c:f1:0f:1c:74:2d:24:01:1e:77:40:10:07: 06:c5:51:61:30:10:74:86:cd:c5:bb:c6:89:e3:20:68:3b:fe: 75:4f:fb:b1:b6:a2:d6:18:8a:a5:7f:55:6b:85:8e:35:cb:99: 6a:a1:f4:46:95:94:dc:33:55:b7:1c:85:e8:70:98:a4:8b:19: 34:d7:48:8a:a4:6f:01:88:92:14:18:b2:eb:dd:1a:7c:20:3c: 13:31:ba:5d:12:0c:ac:3a:aa:ca:ae:87:a5:d3:9a:e6:b9:a6: 19:de:3b:55:1a:a9:cf:0e:f9:e8:7e:dd:92:dc:36:31:47:a5: a4:35:6f:ad:08:3d:01:b4:cd:c2:d9:17:2e:5b:ac:17:fe:66: 6b:d7:4a:86 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjYxMDExMDE0OTM0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhZWIyZC1kMTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyugubnvfypzdfU5HumArlv0ZgkAspBOqyP/Jbu4Tb1k9Izqc41LwIyzVhsq UiH3tG/yIIAnvuV0jCBsGfh5/1keJ1BHjl2bOtiaOyfGkCLxXNldnnBpKd0zzOVD M5WLRMBGAnqZG22DkKfoX/Dewq7+iKI71wwmCKjnMP3hbDQOv2Y6Bvj3wS+LrBUx ZR7OB0L2WP98eeQ7ptWrFAgk9w9zqUjaOTt7FPav1LryY9VOtdacUs7+xfFqWBkW +/7ykCpmYoVTBL+Bz815eGbLoOtix87Y4SF32ti/4uz6ShcwmPgFt5A9VQECulTn E+JTW8VReS/6HakqzUSHTvXeewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCLLI0YC 9nMFHIinet2BOU5ONeNKMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4RTEvMTEzMTY2MkMyODUwMTFFRDhDODk3OTRBQzRGOUFFMDIvOTkxN0E0RDYy ODUzMTFFRDlERDgzMjRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ8xEMA0GCSqGSIb3DQEBCwUAA4IBAQBy9l8FUgCV1sIwKyKKo5Ab FG1+IlRNOxrdf3rvbUJtKj0ey7kRuMtddwQNCa5J20m90tZrnQ29XpKQUGy+Boe2 eRSfr99+kAo/97Cc7+QBFHEbboeZPSNZL1MofwrQNp+x7RPhO0ky0lv2SF63tMnY 7xzxDxx0LSQBHndAEAcGxVFhMBB0hs3Fu8aJ4yBoO/51T/uxtqLWGIqlf1VrhY41 y5lqofRGlZTcM1W3HIXocJikixk010iKpG8BiJIUGLLr3Rp8IDwTMbpdEgysOqrK roel05rmuaYZ3jtVGqnPDvnoft2S3DYxR6WkNW+tCD0BtM3C2RcuW6wX/mZr10qG -----END CERTIFICATE-----Generated at Sat Oct 17 01:10:23 2026 by rpki-client