$ rpki-client -vvvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/B7ACB272A25611EFACD47A47C4F9AE02.roa File: B7ACB272A25611EFACD47A47C4F9AE02.roa (raw, json) Hash identifier: 4rFmD0hCxsxvkJ6WnFp9sESQyHryCg9xz9+M4sJf7Q4= Subject key identifier: 8B:B5:E1:BB:DD:6F:D0:3F:B6:94:A9:75:AA:53:F6:82:61:FC:AF:FE Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Certificate serial: 09D8 Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/B7ACB272A25611EFACD47A47C4F9AE02.roa Signing time: Sun 06 Sep 2026 20:40:27 +0000 ROA not before: Sun 06 Sep 2026 20:40:27 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 133210 IP address blocks: 103.253.24.0/24 maxlen: 24 103.253.25.0/24 maxlen: 24 103.253.26.0/24 maxlen: 24 103.253.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Validity Not Before: Sep 6 20:40:27 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9dcfbb-1d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f8:32:69:f8:94:34:b4:0c:97:3c:8f:e9:7a: 4b:53:2b:f6:43:b4:ee:c4:60:17:a0:f9:da:51:58: 19:fd:a4:53:65:31:40:07:4d:cd:87:1d:3b:7b:43: 27:32:cb:ab:15:19:d1:6f:5a:cd:a8:7c:71:eb:9c: 1a:ac:4e:37:f4:85:11:9a:49:95:c2:3a:f4:95:25: bf:2c:17:3c:db:34:c3:d8:d7:fe:4b:5e:99:9b:a7: 26:5b:ed:75:9b:96:f0:4d:ae:68:18:3b:55:2f:be: 99:b0:e7:a2:ff:2d:b9:2a:58:42:c6:da:0c:a6:78: 0f:e8:ac:91:de:1e:4c:de:23:ed:cf:2b:a9:29:09: d0:3a:bb:33:3b:09:75:89:29:f1:53:89:26:9a:e3: 72:cd:d8:f7:4a:fb:b8:93:31:38:5f:b8:e8:64:08: bb:07:ef:e7:a9:14:a4:4b:d2:de:be:8d:17:d9:a2: 15:b7:bd:43:ad:de:dd:53:5d:25:aa:7f:03:a0:d8: 55:4e:9d:a6:91:73:11:d4:dd:d6:61:45:b7:5d:a5: f5:d8:85:9f:47:e8:42:a3:e5:2f:c0:01:9c:3f:4d: ee:1d:3c:e9:5f:8a:71:95:55:ce:a4:2f:e5:9f:2e: 2d:e3:46:d0:16:79:d7:97:f7:91:7a:f9:98:54:18: 52:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B5:E1:BB:DD:6F:D0:3F:B6:94:A9:75:AA:53:F6:82:61:FC:AF:FE X509v3 Authority Key Identifier: keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/B7ACB272A25611EFACD47A47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.253.24.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:9a:da:be:b9:c1:1e:aa:6d:62:3d:ad:b0:e5:d0:c2:8b:26: 15:86:9a:cb:df:75:a9:35:90:80:ec:8d:04:b9:07:9a:d0:cc: e6:bf:fb:11:62:87:e8:4b:6c:3d:44:cd:aa:1c:6b:4e:a1:88: 8d:20:f2:00:96:7c:f4:22:f3:2b:d6:5d:73:c6:fe:78:3e:97: f6:50:c7:06:63:9c:6a:8a:79:df:52:04:7b:2e:2f:cd:18:c5: 85:52:b0:e7:64:1c:9d:41:15:6a:80:82:e3:27:1a:8e:18:f0: 5e:25:94:58:71:f2:b3:68:cd:35:53:12:29:85:e0:db:0a:76: b3:9f:87:04:00:2d:8e:ad:c3:c6:ef:c3:21:23:ea:bc:fd:e6: b2:6a:c8:9a:14:cf:f3:06:c1:17:98:66:1e:9d:f3:9e:74:a4: d2:08:42:4b:33:c0:cb:db:1a:6e:3a:81:9a:73:68:a3:99:0d: e1:2f:9a:c9:ae:b5:8c:9b:dd:af:d2:6d:ac:78:47:c6:72:c5: c9:3b:b6:d1:5c:02:56:35:89:1e:04:fc:72:68:16:4b:d4:fb: fe:7b:1d:23:cb:b7:21:8f:9d:31:3c:f7:dc:fb:14:2b:a9:38: 47:86:e6:d7:a0:f9:f0:3a:d0:fd:48:56:f4:20:42:11:4d:ff: 7f:5a:be:8d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRjExMTAvBgNVBAUTKDlFRkVBQTcyNEQ3MDhDRkU4MkM2QjZCRjI3MENCQjVE RDQzMDZGMjAwHhcNMjYwOTA2MjA0MDI3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlkY2ZiYi0xZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkfgyafiUNLQMlzyP6XpLUyv2Q7TuxGAXoPnaUVgZ/aRTZTFAB03Nhx07e0Mn MsurFRnRb1rNqHxx65warE439IURmkmVwjr0lSW/LBc82zTD2Nf+S16Zm6cmW+11 m5bwTa5oGDtVL76ZsOei/y25KlhCxtoMpngP6KyR3h5M3iPtzyupKQnQOrszOwl1 iSnxU4kmmuNyzdj3Svu4kzE4X7joZAi7B+/nqRSkS9Levo0X2aIVt71Drd7dU10l qn8DoNhVTp2mkXMR1N3WYUW3XaX12IWfR+hCo+UvwAGcP03uHTzpX4pxlVXOpC/l ny4t40bQFnnXl/eRevmYVBhSAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIu14bvd b9A/tpSpdapT9oJh/K/+MB8GA1UdIwQYMBaAFJ7+qnJNcIz+gsa2vycMu13UMG8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNGMS9EMENBRjM4NEJB NTkxMUVBOTA0RkY5MURDNEY5QUUwMi9udjZxY2sxd2pQNkN4cmFfSnd5N1hkUXdi eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252NnFjazF3alA2Q3hyYV9Kd3k3WGRRd2J5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODEzRjEvRDBDQUYzODRCQTU5MTFFQTkwNEZGOTFEQzRGOUFFMDIvQjdBQ0IyNzJB MjU2MTFFRkFDRDQ3QTQ3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/0YMA0GCSqGSIb3DQEBCwUAA4IBAQAumtq+ucEeqm1iPa2w5dDC iyYVhprL33WpNZCA7I0EuQea0Mzmv/sRYofoS2w9RM2qHGtOoYiNIPIAlnz0IvMr 1l1zxv54Ppf2UMcGY5xqinnfUgR7Li/NGMWFUrDnZBydQRVqgILjJxqOGPBeJZRY cfKzaM01UxIpheDbCnazn4cEAC2OrcPG78MhI+q8/eayasiaFM/zBsEXmGYenfOe dKTSCEJLM8DL2xpuOoGac2ijmQ3hL5rJrrWMm92v0m2seEfGcsXJO7bRXAJWNYke BPxyaBZL1Pv+ex0jy7chj50xPPfc+xQrqThHhubXoPnwOtD9SFb0IEIRTf9/Wr6N -----END CERTIFICATE-----Generated at Mon Sep 21 13:55:15 2026 by rpki-client