$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A21C38148A7711F1AB794FA34311F970.roa File: A21C38148A7711F1AB794FA34311F970.roa (raw, json) Hash identifier: MgmaY4WXVm0HStO9rP6clArnD5jB26XfguusZC63Eq0= Subject key identifier: 1A:AA:97:30:0B:09:FD:C7:D5:88:1F:A1:B4:4A:F6:57:0D:E0:08:AC Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Certificate serial: 0281 Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A21C38148A7711F1AB794FA34311F970.roa Signing time: Tue 28 Jul 2026 11:29:45 +0000 ROA not before: Tue 28 Jul 2026 11:29:45 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 133370 IP address blocks: 103.225.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 03:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Validity Not Before: Jul 28 11:29:45 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a6892a9-561b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:43:8f:93:07:37:be:21:12:0d:62:07:2b:0e: e0:dc:7f:ec:ed:c4:d4:0d:b2:17:b9:28:fa:ae:94: ac:9b:4f:69:15:28:99:e5:1f:f3:97:12:21:81:a4: 5a:56:1f:76:7f:27:41:11:85:37:2b:24:4d:f4:41: 02:7c:3d:70:e2:2e:31:13:54:08:97:11:83:a3:8d: c5:16:54:60:27:39:c5:5c:de:05:0d:32:08:e7:23: f1:a4:ea:4d:85:f4:8b:7e:7e:e8:3b:af:f4:c7:39: cd:91:54:1c:74:1f:62:ab:fe:b2:24:1b:f3:fb:8c: 5b:c4:b3:56:e7:05:71:63:0c:d2:37:11:6f:1e:7f: b8:8d:81:6b:f3:2d:62:81:6f:35:36:00:88:54:27: 36:18:4b:5d:1e:fe:34:ff:d2:bc:96:dc:f1:ff:89: b6:4c:e7:d4:28:65:ff:91:09:31:0d:cf:ee:e1:4e: c2:c1:01:44:f8:6e:19:00:af:96:be:13:e3:70:20: be:71:9b:9f:be:26:e6:db:c0:81:7c:1d:e4:ae:30: af:a6:58:f3:76:b3:70:71:5c:e0:78:27:c2:20:4d: 2a:2f:b0:17:c4:6a:4b:95:13:8f:0e:65:6b:39:3b: 73:52:81:8a:2b:e5:af:fe:1b:0f:74:14:52:e9:b8: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AA:97:30:0B:09:FD:C7:D5:88:1F:A1:B4:4A:F6:57:0D:E0:08:AC X509v3 Authority Key Identifier: keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A21C38148A7711F1AB794FA34311F970.roa sbgp-ipAddrBlock: critical IPv4: 103.225.210.0/23 Signature Algorithm: sha256WithRSAEncryption 17:4c:cc:0e:5d:47:af:aa:f3:11:8d:d6:9e:ad:59:14:17:fd: c8:16:31:97:4c:be:91:21:86:98:ca:0c:41:17:98:0c:6d:99: c3:a9:b5:da:94:55:15:e6:85:52:f4:a3:9f:fd:1c:10:23:eb: 1f:1e:54:ff:3a:8b:af:86:b0:2a:cf:d1:2e:52:c8:7f:7c:6f: d8:60:1f:08:c8:29:3a:ab:45:22:a4:13:f8:49:77:9b:ca:eb: d0:b9:64:85:13:04:a9:89:48:7b:82:87:49:c1:44:7b:01:1d: aa:61:2d:88:cf:e5:91:ab:f8:52:bf:c7:37:7e:39:61:54:c0: 1e:93:b4:93:a3:4b:ec:0e:d3:40:89:26:b6:32:b8:44:a7:09: 49:f2:28:22:22:2e:29:cd:69:e9:20:6b:5d:74:8d:35:a3:2e: 38:63:bd:90:3b:47:40:9f:de:d5:c3:5e:c9:b8:c6:23:c7:0e: 88:0b:17:12:4a:c6:a6:aa:74:c9:a3:68:c0:94:34:c7:f7:70: b4:82:c9:c3:5f:a4:71:dc:d7:ba:19:ee:c0:8b:5f:1a:cd:b3: 91:f9:94:b6:d5:f8:2a:41:28:ba:cc:01:e5:a1:56:35:e2:fa: a5:7e:4b:b1:0d:50:1d:44:04:3e:39:ae:f8:35:d5:34:e3:b1: 4e:33:2e:b8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCRDcxMTAvBgNVBAUTKDZCNDk1NzY2MkFENEMyMUJENDIyQTg3REI0MUI4QkNG QzlENkREOEUwHhcNMjYwNzI4MTEyOTQ1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4OTJhOS01NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kOPkwc3viESDWIHKw7g3H/s7cTUDbIXuSj6rpSsm09pFSiZ5R/zlxIhgaRa Vh92fydBEYU3KyRN9EECfD1w4i4xE1QIlxGDo43FFlRgJznFXN4FDTII5yPxpOpN hfSLfn7oO6/0xznNkVQcdB9iq/6yJBvz+4xbxLNW5wVxYwzSNxFvHn+4jYFr8y1i gW81NgCIVCc2GEtdHv40/9K8ltzx/4m2TOfUKGX/kQkxDc/u4U7CwQFE+G4ZAK+W vhPjcCC+cZufvibm28CBfB3krjCvpljzdrNwcVzgeCfCIE0qL7AXxGpLlROPDmVr OTtzUoGKK+Wv/hsPdBRS6bjyVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBqqlzAL Cf3H1YgfobRK9lcN4AisMB8GA1UdIwQYMBaAFGtJV2Yq1MIb1CKofbQbi8/J1t2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUJENy84QTYyQzgyQUM5 NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdodlVJcWg5dEJ1THo4blcz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EwbFhaaXJVd2h2VUlxaDl0QnVMejhuVzNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVCRDcvOEE2MkM4MkFDOTU4MTFFRDkxOEU4QzM0QzRGOUFFMDIvQTIxQzM4MTQ4 QTc3MTFGMUFCNzk0RkEzNDMxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+HSMA0GCSqGSIb3DQEBCwUAA4IBAQAXTMwOXUevqvMRjdaerVkU F/3IFjGXTL6RIYaYygxBF5gMbZnDqbXalFUV5oVS9KOf/RwQI+sfHlT/OouvhrAq z9EuUsh/fG/YYB8IyCk6q0UipBP4SXebyuvQuWSFEwSpiUh7godJwUR7AR2qYS2I z+WRq/hSv8c3fjlhVMAek7STo0vsDtNAiSa2MrhEpwlJ8igiIi4pzWnpIGtddI01 oy44Y72QO0dAn97Vw17JuMYjxw6ICxcSSsamqnTJo2jAlDTH93C0gsnDX6Rx3Ne6 Ge7Ai18azbOR+ZS21fgqQSi6zAHloVY14vqlfkuxDVAdRAQ+Oa74NdU047FOMy64 -----END CERTIFICATE-----Generated at Wed Jul 29 10:25:42 2026 by rpki-client