$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/1B258F1CA85511F19DF91DC93F11F970.roa File: 1B258F1CA85511F19DF91DC93F11F970.roa (raw, json) Hash identifier: O/BxMMF7jDLWlrtoBVDlazWajDdVMN8MU/1yOd79+xA= Subject key identifier: BA:6D:07:03:AA:82:77:C5:8C:A0:79:74:E0:B3:A1:17:EB:CE:3D:64 Certificate issuer: /CN=A9170CF8/serialNumber=DB2D80608B2B63CBD1366C12412627070057AE26 Certificate serial: 02 Authority key identifier: DB:2D:80:60:8B:2B:63:CB:D1:36:6C:12:41:26:27:07:00:57:AE:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/1B258F1CA85511F19DF91DC93F11F970.roa Signing time: Fri 04 Sep 2026 11:38:11 +0000 ROA not before: Fri 04 Sep 2026 11:38:11 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 133216 IP address blocks: 103.224.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.crl rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170CF8, serialNumber=DB2D80608B2B63CBD1366C12412627070057AE26 Validity Not Before: Sep 4 11:38:11 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a9aada3-9b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:ad:f3:0c:69:e7:12:9b:8d:a0:66:99:c8: 78:20:b7:47:12:9d:ec:65:57:42:7c:a3:b1:9e:87: 94:a2:4e:98:e9:4b:c0:d7:ce:19:1f:18:66:1a:72: 17:95:9d:24:60:59:24:35:89:2f:6b:ae:fe:64:09: 14:c9:21:2d:69:21:5d:c3:2f:d7:a2:59:8e:54:4d: b8:e5:9f:da:0d:cc:81:dd:b8:9e:1e:31:fb:08:d3: ca:2d:84:1f:02:f0:0c:47:79:7a:42:99:a9:52:28: 06:9b:bf:4c:fe:16:7d:0c:c6:86:13:41:76:48:b3: 6c:28:59:2d:ac:74:49:ef:62:ee:72:1e:7f:b9:7a: b5:28:de:ea:cb:8d:ac:e1:eb:44:1c:57:82:79:0a: 68:f3:ab:57:90:67:3e:b7:65:d7:dd:06:df:27:29: 8f:95:2e:4f:6c:20:6e:72:93:c8:8e:b5:82:7f:a3: 1c:e6:42:ab:07:15:2a:72:01:6e:e2:88:4b:a4:9b: 3f:11:cb:a3:e3:18:9c:0a:09:18:1b:07:3a:c0:53: f2:f8:98:e1:ec:6d:aa:4e:f4:d9:ad:64:4e:a4:f5: b5:5e:37:50:26:c5:21:83:a0:49:95:1b:2b:8f:fb: 93:e1:40:a0:cc:e6:dd:68:32:59:7e:68:3b:7a:c5: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6D:07:03:AA:82:77:C5:8C:A0:79:74:E0:B3:A1:17:EB:CE:3D:64 X509v3 Authority Key Identifier: keyid:DB:2D:80:60:8B:2B:63:CB:D1:36:6C:12:41:26:27:07:00:57:AE:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/1B258F1CA85511F19DF91DC93F11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.224.142.0/24 Signature Algorithm: sha256WithRSAEncryption b0:b2:04:47:11:2c:7e:14:b1:ed:fd:be:6f:43:ea:a8:e9:52: 13:47:88:d8:81:54:6c:b2:ee:b3:cf:6a:84:14:1b:2b:36:5e: 03:2e:1b:42:dd:3b:30:fd:15:c8:22:9c:aa:49:b2:8d:d5:02: d7:a6:73:e8:0c:4e:13:27:9c:de:bf:db:f0:84:e3:d8:3a:03: 1b:5e:49:e6:03:03:12:b3:c4:02:85:55:98:9f:fc:ce:83:30: e0:9d:89:8a:fa:cc:f1:b9:95:c6:3a:c7:14:34:2b:1e:0a:cb: 87:e9:99:bb:dc:76:ea:29:ef:fb:fe:43:49:f7:c4:2d:db:7d: 52:02:09:ab:9b:03:0a:71:6b:d0:6a:fb:aa:4f:ae:e6:7e:3d: 36:e1:72:96:82:0c:29:e3:5f:b2:33:9f:4a:b9:c5:41:f7:ff: 2c:a6:f0:e9:96:1b:33:c5:64:33:5f:c5:6c:9a:13:2e:07:eb: d8:10:0b:d1:67:4d:80:2f:94:16:eb:c1:35:da:03:88:9f:c8: f6:bb:24:a2:fd:87:e7:b1:9a:fe:66:4a:8f:55:e0:6d:06:52: 88:0e:2a:fa:94:36:08:d1:12:b1:db:7a:05:ec:9d:7b:70:07: d1:b2:5b:6a:75:40:83:00:2f:59:59:bd:5d:99:cc:c7:5c:36: 55:6b:60:aa -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MENGODExMC8GA1UEBRMoREIyRDgwNjA4QjJCNjNDQkQxMzY2QzEyNDEyNjI3MDcw MDU3QUUyNjAeFw0yNjA5MDQxMTM4MTFaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOWFhZGEzLTliNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOMa3zDGnnEpuNoGaZyHggt0cSnexlV0J8o7Geh5SiTpjpS8DXzhkfGGYacheV nSRgWSQ1iS9rrv5kCRTJIS1pIV3DL9eiWY5UTbjln9oNzIHduJ4eMfsI08othB8C 8AxHeXpCmalSKAabv0z+Fn0MxoYTQXZIs2woWS2sdEnvYu5yHn+5erUo3urLjazh 60QcV4J5Cmjzq1eQZz63ZdfdBt8nKY+VLk9sIG5yk8iOtYJ/oxzmQqsHFSpyAW7i iEukmz8Ry6PjGJwKCRgbBzrAU/L4mOHsbapO9NmtZE6k9bVeN1AmxSGDoEmVGyuP +5PhQKDM5t1oMll+aDt6xaslAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUum0HA6qC d8WMoHl04LOhF+vOPWQwHwYDVR0jBBgwFoAU2y2AYIsrY8vRNmwSQSYnBwBXriYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwQ0Y4Lzk3NUIwQ0ZDQTg1 NDExRjFCODczNEZDMzNGMTFGOTcwLzJ5MkFZSXNyWTh2Uk5td1NRU1luQndCWHJp WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnkyQVlJc3JZOHZSTm13U1FTWW5Cd0JYcmlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MENGOC85NzVCMENGQ0E4NTQxMUYxQjg3MzRGQzMzRjExRjk3MC8xQjI1OEYxQ0E4 NTUxMUYxOURGOTFEQzkzRjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABn4I4wDQYJKoZIhvcNAQELBQADggEBALCyBEcRLH4Use39vm9D6qjp UhNHiNiBVGyy7rPPaoQUGys2XgMuG0LdOzD9FcginKpJso3VAtemc+gMThMnnN6/ 2/CE49g6AxteSeYDAxKzxAKFVZif/M6DMOCdiYr6zPG5lcY6xxQ0Kx4Ky4fpmbvc duop7/v+Q0n3xC3bfVICCaubAwpxa9Bq+6pPruZ+PTbhcpaCDCnjX7Izn0q5xUH3 /yym8OmWGzPFZDNfxWyaEy4H69gQC9FnTYAvlBbrwTXaA4ifyPa7JKL9h+exmv5m So9V4G0GUogOKvqUNgjRErHbegXsnXtwB9GyW2p1QIMAL1lZvV2ZzMdcNlVrYKo= -----END CERTIFICATE-----Generated at Fri Sep 25 19:00:54 2026 by rpki-client