$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/97F31854777011E7BF7EED10C4F9AE02.roa File: 97F31854777011E7BF7EED10C4F9AE02.roa (raw, json) Hash identifier: YBrMpxzuEFlOjdI1gGrwEJ9DCRrkwY/CX5Jm/RVpgHc= Subject key identifier: B1:8D:AE:0B:88:F2:99:3D:45:3B:8F:49:EF:1A:FA:1F:67:A8:94:1A Certificate issuer: /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Certificate serial: 1AB5 Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/97F31854777011E7BF7EED10C4F9AE02.roa Signing time: Wed 02 Sep 2026 16:30:18 +0000 ROA not before: Wed 02 Sep 2026 16:30:18 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 58419 IP address blocks: 103.10.252.0/24 maxlen: 24 103.23.214.0/24 maxlen: 24 103.95.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6837 (0x1ab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Validity Not Before: Sep 2 16:30:18 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a984f1a-a081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:06:ea:c5:7b:41:7b:5b:59:18:e7:08:67: fd:12:d1:f7:5d:4a:75:f5:20:91:7f:f9:68:a8:d7: 41:2e:27:ce:9f:33:c3:32:d3:3a:dd:d3:06:71:70: 8a:7d:3d:65:53:d3:58:d4:da:44:c9:aa:ab:18:53: ae:c1:53:7e:0d:02:60:ec:8c:40:50:37:40:a9:d6: 55:d0:52:9d:1a:21:f2:b0:93:7e:a8:ed:30:25:63: 09:6e:66:a8:71:d8:6e:78:17:ad:c4:61:9e:64:bc: 5c:68:58:e6:2b:22:dc:e5:ef:80:79:ab:19:79:ef: c2:d5:20:6c:4e:1b:de:e0:af:1c:39:27:a5:b1:17: d1:cf:6c:3f:f3:64:21:df:e1:6a:53:b1:34:75:e0: cc:54:15:61:1f:c9:84:d4:4d:38:96:f7:1f:d0:9c: 4e:20:07:22:7c:26:58:e6:f3:73:fd:bd:72:86:75: 91:19:1f:d2:ef:b7:5a:c1:8b:45:1a:24:f6:7b:44: 6a:ec:29:ee:51:95:d3:d5:6c:fe:4e:64:27:c0:59: 1b:a7:f8:0c:48:6a:de:a5:58:d6:53:92:81:4a:5a: 2b:b7:41:24:38:61:5d:91:b0:9b:c2:b8:7d:07:f5: 53:91:aa:91:ec:ac:1f:03:89:95:4e:1e:83:c9:30: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8D:AE:0B:88:F2:99:3D:45:3B:8F:49:EF:1A:FA:1F:67:A8:94:1A X509v3 Authority Key Identifier: keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/97F31854777011E7BF7EED10C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.10.252.0/24 103.23.214.0/24 103.95.193.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:f3:a9:7c:a1:0a:41:50:f9:75:17:64:71:2a:5d:b8:b0:42: ee:9f:f8:30:36:70:75:13:77:9f:60:41:2b:b4:a8:90:73:2e: 3d:31:21:d2:3d:2a:35:e3:d9:a6:7b:ba:69:ce:1a:df:05:79: 68:0c:7a:22:dc:e9:ce:33:46:c0:f1:9a:f0:e8:96:27:04:4e: 28:3f:b1:12:67:e0:29:df:d4:2e:c8:5b:ad:48:51:92:b2:be: e8:54:c4:68:49:9d:b6:96:c9:59:13:a5:3b:d1:3a:8f:6b:5d: 56:79:ab:98:16:d5:e4:9d:21:51:f8:e9:50:d4:00:ad:6d:26: 74:a3:44:7c:cb:28:03:75:bb:fc:21:77:7e:6a:db:e4:e9:8f: 7c:a1:63:38:e4:ab:b2:31:f5:f7:66:b0:ea:19:0a:58:cd:94: ba:8c:d1:6a:18:32:7b:b3:52:6c:e4:e4:c9:2f:62:c2:2e:f0: 0e:79:cd:4a:77:3b:31:0a:fa:30:2f:65:83:f2:55:84:8e:00: 3a:a1:98:28:32:64:77:41:27:50:ae:b1:4c:f2:b6:1f:32:cf: 1d:6a:9a:05:08:8f:65:86:aa:ca:02:04:e1:e3:e1:04:73:e5: d0:0a:29:1f:14:98:53:e9:5d:18:4d:e1:b8:6e:1f:9e:b1:12: a0:2f:cc:91 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICGrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMTMxMTAvBgNVBAUTKEU1NjcyQkJGMThDNENGRUJEM0Y0NzJEMTNCNDg3NzEz NzJEMzRFREYwHhcNMjYwOTAyMTYzMDE4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4NGYxYS1hMDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOgG6sV7QXtbWRjnCGf9EtH3XUp19SCRf/loqNdBLifOnzPDMtM63dMGcXCK fT1lU9NY1NpEyaqrGFOuwVN+DQJg7IxAUDdAqdZV0FKdGiHysJN+qO0wJWMJbmao cdhueBetxGGeZLxcaFjmKyLc5e+AeasZee/C1SBsThve4K8cOSelsRfRz2w/82Qh 3+FqU7E0deDMVBVhH8mE1E04lvcf0JxOIAcifCZY5vNz/b1yhnWRGR/S77dawYtF GiT2e0Rq7CnuUZXT1Wz+TmQnwFkbp/gMSGrepVjWU5KBSlort0EkOGFdkbCbwrh9 B/VTkaqR7KwfA4mVTh6DyTDObQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLGNrguI 8pk9RTuPSe8a+h9nqJQaMB8GA1UdIwQYMBaAFOVnK78YxM/r0/Ry0TtIdxNy007f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMxMy8zQzM0RUMwQTc3 NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXotdlQ5SExSTzBoM0UzTFRU dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVXY3J2eGpFei12VDlITFJPMGgzRTNMVFR0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODczMTMvM0MzNEVDMEE3NzZGMTFFNzgyQUQ2RDBFQzRGOUFFMDIvOTdGMzE4NTQ3 NzcwMTFFN0JGN0VFRDEwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZwr8AwQAZxfWAwQAZ1/BMA0GCSqGSIb3DQEBCwUAA4IBAQCf86l8 oQpBUPl1F2RxKl24sELun/gwNnB1E3efYEErtKiQcy49MSHSPSo149mme7ppzhrf BXloDHoi3OnOM0bA8Zrw6JYnBE4oP7ESZ+Ap39QuyFutSFGSsr7oVMRoSZ22lslZ E6U70TqPa11WeauYFtXknSFR+OlQ1ACtbSZ0o0R8yygDdbv8IXd+atvk6Y98oWM4 5KuyMfX3ZrDqGQpYzZS6jNFqGDJ7s1Js5OTJL2LCLvAOec1KdzsxCvowL2WD8lWE jgA6oZgoMmR3QSdQrrFM8rYfMs8dapoFCI9lhqrKAgTh4+EEc+XQCikfFJhT6V0Y TeG4bh+esRKgL8yR -----END CERTIFICATE-----Generated at Sat Sep 26 09:43:00 2026 by rpki-client