$ rpki-client -vvvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0A8890FE2F4C11EDB0375D6CC4F9AE02.roa File: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (raw, json) Hash identifier: 0BLD4N54sJf12GQPNfD7Y9gCmbVzCAvBVn1yMQZJ+Gw= Subject key identifier: 60:2F:34:71:4E:EE:DC:21:BD:0A:B0:B1:14:8C:38:B1:30:9F:2E:B8 Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Certificate serial: 09DB Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0A8890FE2F4C11EDB0375D6CC4F9AE02.roa Signing time: Sun 06 Sep 2026 20:40:33 +0000 ROA not before: Sun 06 Sep 2026 20:40:33 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 6939 IP address blocks: 103.253.24.0/24 maxlen: 24 103.253.25.0/24 maxlen: 24 103.253.26.0/24 maxlen: 24 103.253.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2523 (0x9db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Validity Not Before: Sep 6 20:40:33 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9dcfc1-8253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:90:e2:14:b8:a6:91:a7:32:cf:66:d7:7d: 30:41:b8:1f:7a:75:fa:30:6d:9a:f6:25:0d:94:0f: 1f:66:7b:c2:66:88:cc:28:b4:d8:6a:09:0b:27:ea: 43:ae:e5:9c:dd:9d:0c:ae:25:06:be:56:c3:a5:ea: a1:dd:c9:e2:52:14:9a:a8:42:0c:8c:f7:b7:7c:c4: 8c:aa:b1:13:62:2a:0f:76:ce:04:58:a6:30:18:70: 0b:f1:25:a7:e4:3e:c5:cb:b3:cf:73:b0:07:b2:5d: eb:e8:4d:30:43:70:e6:da:9c:c8:7c:e3:30:79:a7: 84:7d:4d:f2:0b:e1:e5:73:e7:05:ae:92:bc:16:df: 28:f0:11:54:30:19:b2:05:cf:0a:87:27:b4:b2:ed: dd:29:23:d2:b5:3e:0c:f4:e2:28:80:ee:d7:3d:b1: 92:8c:c2:9c:20:fd:e2:7c:c3:1e:a3:ef:4a:b9:5a: 23:37:bb:69:2d:88:1e:eb:1e:be:31:09:e9:df:6c: cb:23:a8:3d:b6:2d:be:08:32:73:cb:18:db:08:e7: 01:07:a6:b3:f7:a5:3c:d8:0f:3b:af:1c:c4:30:a2: 42:e7:7d:22:70:0e:79:5a:41:47:70:f9:39:72:86: 40:a5:18:7f:46:81:05:38:99:05:5b:9e:03:47:d1: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2F:34:71:4E:EE:DC:21:BD:0A:B0:B1:14:8C:38:B1:30:9F:2E:B8 X509v3 Authority Key Identifier: keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0A8890FE2F4C11EDB0375D6CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.253.24.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:b3:ba:1d:2d:f8:3e:58:3a:b7:f5:b8:d5:db:dc:da:37:f0: 81:1c:44:73:81:a2:84:b7:b1:3b:77:0d:38:cb:7a:1e:52:13: 1e:69:aa:48:90:e0:f7:50:f9:ea:a7:c0:06:93:1f:06:fd:c6: a4:d7:b7:4c:ce:7b:21:99:be:9c:18:b0:04:2d:0b:9f:15:94: 76:24:db:73:9d:b6:05:45:af:28:9b:37:14:64:56:14:44:99: ed:f8:31:3c:b2:9a:8e:83:71:ac:89:85:96:42:89:e2:75:4f: f1:b2:e0:09:c0:ab:02:e4:ed:44:8f:e0:d1:1c:7f:ba:fa:ef: ae:f2:7e:d8:64:e0:30:5b:f7:a3:07:bb:07:f7:3e:6c:96:17: 91:aa:08:f3:94:6b:2d:64:b3:9b:0a:3b:cd:12:ac:37:11:8b: 24:45:30:70:d6:eb:27:30:0b:e1:2e:a3:70:d9:a0:27:93:50: 2f:78:3e:28:99:39:03:37:d6:04:ff:3c:a5:c3:8f:7c:57:c0: 25:33:94:19:62:05:a8:c4:c0:96:6b:77:b3:6b:32:6d:de:f9: cb:8a:5b:a6:13:d7:76:49:d1:fd:03:f1:6a:f0:2a:26:28:fe: da:be:bd:65:5a:24:ab:f0:7f:08:04:d7:c0:5d:02:bf:49:d8: 04:c4:cc:dc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRjExMTAvBgNVBAUTKDlFRkVBQTcyNEQ3MDhDRkU4MkM2QjZCRjI3MENCQjVE RDQzMDZGMjAwHhcNMjYwOTA2MjA0MDMzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlkY2ZjMS04MjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfGQ4hS4ppGnMs9m130wQbgfenX6MG2a9iUNlA8fZnvCZojMKLTYagkLJ+pD ruWc3Z0MriUGvlbDpeqh3cniUhSaqEIMjPe3fMSMqrETYioPds4EWKYwGHAL8SWn 5D7Fy7PPc7AHsl3r6E0wQ3Dm2pzIfOMweaeEfU3yC+Hlc+cFrpK8Ft8o8BFUMBmy Bc8Khye0su3dKSPStT4M9OIogO7XPbGSjMKcIP3ifMMeo+9KuVojN7tpLYge6x6+ MQnp32zLI6g9ti2+CDJzyxjbCOcBB6az96U82A87rxzEMKJC530icA55WkFHcPk5 coZApRh/RoEFOJkFW54DR9EgyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGAvNHFO 7twhvQqwsRSMOLEwny64MB8GA1UdIwQYMBaAFJ7+qnJNcIz+gsa2vycMu13UMG8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNGMS9EMENBRjM4NEJB NTkxMUVBOTA0RkY5MURDNEY5QUUwMi9udjZxY2sxd2pQNkN4cmFfSnd5N1hkUXdi eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252NnFjazF3alA2Q3hyYV9Kd3k3WGRRd2J5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODEzRjEvRDBDQUYzODRCQTU5MTFFQTkwNEZGOTFEQzRGOUFFMDIvMEE4ODkwRkUy RjRDMTFFREIwMzc1RDZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/0YMA0GCSqGSIb3DQEBCwUAA4IBAQBts7odLfg+WDq39bjV29za N/CBHERzgaKEt7E7dw04y3oeUhMeaapIkOD3UPnqp8AGkx8G/cak17dMznshmb6c GLAELQufFZR2JNtznbYFRa8omzcUZFYURJnt+DE8spqOg3GsiYWWQonidU/xsuAJ wKsC5O1Ej+DRHH+6+u+u8n7YZOAwW/ejB7sH9z5slheRqgjzlGstZLObCjvNEqw3 EYskRTBw1usnMAvhLqNw2aAnk1AveD4omTkDN9YE/zylw498V8AlM5QZYgWoxMCW a3ezazJt3vnLilumE9d2SdH9A/Fq8ComKP7avr1lWiSr8H8IBNfAXQK/SdgExMzc -----END CERTIFICATE-----Generated at Tue Sep 22 07:12:24 2026 by rpki-client