$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/8AF33E36160E11F195136F2C2B3D8C67.roa File: 8AF33E36160E11F195136F2C2B3D8C67.roa (raw, json) Hash identifier: Z9Sj3tjoXvHAguDjXbALg3NY/Nd04X4OP7AAtAJAUtM= Subject key identifier: 60:4C:2F:1E:77:05:03:9E:04:0D:1C:12:56:A0:CD:55:04:6C:E6:EC Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Certificate serial: 0933 Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/8AF33E36160E11F195136F2C2B3D8C67.roa Signing time: Wed 16 Sep 2026 20:41:09 +0000 ROA not before: Wed 16 Sep 2026 20:41:09 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 2764 IP address blocks: 103.154.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Validity Not Before: Sep 16 20:41:09 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aaafee5-547e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:79:df:5d:c1:72:31:89:6c:0e:2a:ca:57: 9f:27:cc:71:b2:7a:86:39:e0:37:97:e3:72:27:64: 73:14:f7:70:20:1f:0f:96:4c:a5:c7:12:36:1b:f0: b7:f5:92:59:13:68:49:9f:4b:cd:88:16:11:dd:b6: 45:ae:87:a3:a8:30:a6:20:f1:6d:56:c0:79:92:11: ba:db:11:ec:fb:07:bf:7f:76:b2:b4:15:eb:a0:67: 6f:19:9e:ec:27:9d:d5:9c:d7:a8:43:7e:42:32:e6: 16:30:b3:86:67:5b:df:ea:d7:29:77:d9:5d:fe:41: 4d:7e:24:91:c2:21:f5:ee:55:a9:97:43:95:6c:3c: 97:c7:73:1d:b5:1c:16:1d:45:52:3d:ba:b9:84:a7: dc:16:0d:7c:e2:97:c4:6d:e8:74:f1:e6:fa:a3:dc: 5b:b2:57:45:73:19:ab:09:43:69:d7:f6:3e:58:57: 76:b1:05:ce:2c:24:64:33:29:a2:20:fc:cf:a3:d1: c2:b5:7f:62:0e:2b:b3:76:2d:99:80:5c:2e:f1:e2: 42:0f:04:46:a0:7b:c0:15:57:48:87:7b:66:31:35: e5:02:ad:e3:3b:1c:06:b7:da:15:3c:4e:3c:6a:ed: 65:75:cb:cc:6b:a0:06:c2:56:00:45:d8:c6:d0:ee: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4C:2F:1E:77:05:03:9E:04:0D:1C:12:56:A0:CD:55:04:6C:E6:EC X509v3 Authority Key Identifier: keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/8AF33E36160E11F195136F2C2B3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.154.28.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:22:87:c0:4a:b4:40:c2:d9:0c:d1:3c:69:f1:99:f6:e3:50: e1:b9:ef:43:07:3d:8b:ca:34:28:7b:03:b0:45:ef:9b:9f:16: 04:56:e9:3e:7b:b5:47:50:3a:42:53:86:1e:98:8b:5e:d8:8e: 08:b8:ea:78:7c:14:7f:55:58:3e:bf:16:ff:c1:11:9a:7b:45: c7:c2:8a:f5:7f:3b:be:14:86:b9:98:bf:58:c1:85:8c:c3:84: 88:42:d7:6b:96:cf:d1:62:e3:e4:e5:b5:02:63:8f:de:27:e4: 4a:93:73:bf:b2:ba:13:67:5d:5f:0c:86:25:d3:a2:cc:6d:a1: 68:01:10:8a:5f:f9:df:9f:ca:2b:0e:a7:3b:f2:b8:6c:bf:91: cb:f7:8c:8a:0d:ce:ab:de:c0:71:15:2b:53:bf:45:69:f1:7d: 8b:1a:a3:25:97:51:11:24:8e:0a:26:e8:90:12:b5:a0:fb:4f: 41:8a:43:2c:a1:7c:67:66:59:3b:0f:21:ff:aa:2c:16:92:ff: d2:44:77:61:2d:55:de:bc:e8:55:1b:74:68:c8:34:00:58:73: 46:4d:94:e3:ca:d7:df:cf:b7:21:b3:47:3e:8c:9d:11:49:c2: a0:2a:0c:b5:ca:0e:20:c0:7f:ad:f6:bc:28:cc:91:aa:99:b7: 32:27:8c:8a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MzMxMTAvBgNVBAUTKDFBMUEyREI2MjI3MDQ5ODYwRDFDQjZGQjM4MUQwMzVG N0NEREZFNzkwHhcNMjYwOTE2MjA0MTA5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhZmVlNS01NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+p5313BcjGJbA4qylefJ8xxsnqGOeA3l+NyJ2RzFPdwIB8PlkylxxI2G/C3 9ZJZE2hJn0vNiBYR3bZFroejqDCmIPFtVsB5khG62xHs+we/f3aytBXroGdvGZ7s J53VnNeoQ35CMuYWMLOGZ1vf6tcpd9ld/kFNfiSRwiH17lWpl0OVbDyXx3MdtRwW HUVSPbq5hKfcFg184pfEbeh08eb6o9xbsldFcxmrCUNp1/Y+WFd2sQXOLCRkMymi IPzPo9HCtX9iDiuzdi2ZgFwu8eJCDwRGoHvAFVdIh3tmMTXlAq3jOxwGt9oVPE48 au1ldcvMa6AGwlYARdjG0O41PQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGBMLx53 BQOeBA0cElagzVUEbObsMB8GA1UdIwQYMBaAFBoaLbYicEmGDRy2+zgdA1983f55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkzMy9GRDk1MjFCMkRD NTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZWU5ITGI3T0IwRFgzemRf bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dob3R0aUp3U1lZTkhMYjdPQjBEWDN6ZF9uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M5MzMvRkQ5NTIxQjJEQzU3MTFFQTgzRThFQzY3QzRGOUFFMDIvOEFGMzNFMzYx NjBFMTFGMTk1MTM2RjJDMkIzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ5ocMA0GCSqGSIb3DQEBCwUAA4IBAQAfIofASrRAwtkM0Txp8Zn2 41Dhue9DBz2LyjQoewOwRe+bnxYEVuk+e7VHUDpCU4YemIte2I4IuOp4fBR/VVg+ vxb/wRGae0XHwor1fzu+FIa5mL9YwYWMw4SIQtdrls/RYuPk5bUCY4/eJ+RKk3O/ sroTZ11fDIYl06LMbaFoARCKX/nfn8orDqc78rhsv5HL94yKDc6r3sBxFStTv0Vp 8X2LGqMll1ERJI4KJuiQErWg+09BikMsoXxnZlk7DyH/qiwWkv/SRHdhLVXevOhV G3RoyDQAWHNGTZTjytffz7chs0c+jJ0RScKgKgy1yg4gwH+t9rwozJGqmbcyJ4yK -----END CERTIFICATE-----Generated at Mon Sep 21 18:59:51 2026 by rpki-client