$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/897E89B4D56B11EFBE0EB053C4F9AE02.roa File: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (raw, json) Hash identifier: n8oxLBBwwccj9M627OWnQmKjD6Ge8U2OEqxzAgLG+0o= Subject key identifier: 47:2C:B2:76:80:02:A9:AF:25:4C:22:B2:F2:95:0F:7A:C4:21:7A:F9 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 042D Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/897E89B4D56B11EFBE0EB053C4F9AE02.roa Signing time: Wed 09 Sep 2026 00:50:26 +0000 ROA not before: Wed 09 Sep 2026 00:50:26 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 153494 IP address blocks: 43.239.164.0/22 maxlen: 24 103.35.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Sep 9 00:50:26 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa0ad52-2a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:8d:52:6e:a0:84:ff:5d:53:4e:40:0e:7e: 22:c7:92:8d:21:a6:6f:d8:7e:5c:ce:a3:c3:bc:d9: ac:93:12:6e:72:2c:bb:11:4c:f6:c4:9d:72:08:9f: b5:62:ba:e9:c5:50:d3:20:b0:c0:5f:ff:a9:49:f4: 81:93:d6:c0:b7:ce:bf:dd:15:37:0e:ee:77:db:1c: c0:bd:06:9a:ce:dd:bd:b6:f2:a4:3c:62:2d:43:45: 1d:03:d0:f4:8e:aa:c7:3a:77:41:b3:18:d0:2c:dc: 93:2b:09:80:0f:a7:db:c8:37:f4:1b:7e:15:11:6b: 6e:32:1e:e0:56:e0:dd:a6:78:32:3a:6b:a5:7f:89: ee:81:b4:5a:4c:94:f0:94:79:d9:70:f7:d6:82:92: 6e:47:0e:58:95:1e:08:bf:cd:b1:9e:9b:5d:1c:7c: 89:a8:59:cb:9e:0c:15:96:8d:9b:de:08:2f:92:5e: eb:b7:df:2e:1a:47:92:50:40:ae:06:e1:35:d0:6e: 36:1b:50:fe:f9:0f:0e:ae:6f:4e:5e:c7:f0:06:8e: 12:a8:31:4a:26:85:84:c2:b4:ad:a8:d8:6f:dc:d6: b8:fb:53:ad:b4:89:3e:12:41:2a:4e:83:49:e0:69: 22:1e:0c:a0:4b:e8:de:79:5c:99:2b:1b:26:08:44: 12:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2C:B2:76:80:02:A9:AF:25:4C:22:B2:F2:95:0F:7A:C4:21:7A:F9 X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/897E89B4D56B11EFBE0EB053C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.164.0/22 103.35.84.0/22 Signature Algorithm: sha256WithRSAEncryption 17:61:8a:32:b0:0b:32:3b:a8:70:0c:65:5a:f8:a6:eb:f4:5b: ea:c2:64:35:fe:c8:86:12:c2:3d:34:a5:7d:f0:e9:ef:63:ed: 24:b4:d5:5f:c0:65:fe:36:14:13:21:ab:88:33:34:97:5f:bd: 3d:83:1b:97:97:f7:c0:d1:a3:e3:16:9d:65:df:90:01:25:0b: d1:36:64:5a:78:89:a7:8b:28:f9:ad:32:4f:6d:4a:eb:01:27: 71:ec:cc:07:0d:d7:24:4e:09:ba:d5:4a:ca:e8:01:77:71:3b: 3d:5a:f2:a6:96:05:93:9e:4d:de:0f:e0:63:de:d1:c6:95:36: b5:09:61:f3:ae:a2:6f:6c:ea:e2:e5:9a:7a:58:f0:c3:86:3a: bf:3d:d3:75:03:ed:2e:eb:95:04:72:44:95:a0:1d:4b:42:14: 01:0d:7b:b8:e5:56:c0:a1:23:70:46:4d:ca:4c:68:41:9b:ae: 9e:62:ea:79:8b:e2:43:0d:d9:60:86:71:45:74:a8:73:5e:59: c2:e0:fe:ff:8f:3c:6f:e6:1c:2d:a7:bc:43:c0:f2:fa:ab:ac: fa:fd:71:19:40:81:a0:32:29:56:a0:72:e9:65:33:45:64:ce: c8:b9:c8:74:e5:d4:6e:1e:43:13:87:4c:fc:ac:4c:0e:da:19: 87:35:ad:b2 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjYwOTA5MDA1MDI2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwYWQ1Mi0yYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwSNUm6ghP9dU05ADn4ix5KNIaZv2H5czqPDvNmskxJuciy7EUz2xJ1yCJ+1 YrrpxVDTILDAX/+pSfSBk9bAt86/3RU3Du532xzAvQaazt29tvKkPGItQ0UdA9D0 jqrHOndBsxjQLNyTKwmAD6fbyDf0G34VEWtuMh7gVuDdpngyOmulf4nugbRaTJTw lHnZcPfWgpJuRw5YlR4Iv82xnptdHHyJqFnLngwVlo2b3ggvkl7rt98uGkeSUECu BuE10G42G1D++Q8Orm9OXsfwBo4SqDFKJoWEwrStqNhv3Na4+1OttIk+EkEqToNJ 4GkiHgygS+jeeVyZKxsmCEQSqQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEcssnaA AqmvJUwisvKVD3rEIXr5MB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQxQTQvMUVCOUUzQTZDNkMwMTFFQzk2QzBERDIzQzRGOUFFMDIvODk3RTg5QjRE NTZCMTFFRkJFMEVCMDUzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK++kAwQCZyNUMA0GCSqGSIb3DQEBCwUAA4IBAQAXYYoysAsyO6hw DGVa+Kbr9FvqwmQ1/siGEsI9NKV98OnvY+0ktNVfwGX+NhQTIauIMzSXX709gxuX l/fA0aPjFp1l35ABJQvRNmRaeImniyj5rTJPbUrrASdx7MwHDdckTgm61UrK6AF3 cTs9WvKmlgWTnk3eD+Bj3tHGlTa1CWHzrqJvbOri5Zp6WPDDhjq/PdN1A+0u65UE ckSVoB1LQhQBDXu45VbAoSNwRk3KTGhBm66eYup5i+JDDdlghnFFdKhzXlnC4P7/ jzxv5hwtp7xDwPL6q6z6/XEZQIGgMilWoHLpZTNFZM7Iuch05dRuHkMTh0z8rEwO 2hmHNa2y -----END CERTIFICATE-----Generated at Tue Sep 22 07:50:42 2026 by rpki-client