$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/8DB89FC2572311EA9D4ED562C4F9AE02.roa File: 8DB89FC2572311EA9D4ED562C4F9AE02.roa (raw, json) Hash identifier: WrhXIjDluIPR+YvDNiNqfhOvohO4rctBokbo+n4UGLY= Subject key identifier: A1:99:4B:9A:F2:E7:81:A5:13:14:4B:C5:A0:18:B6:4C:F5:8B:32:94 Certificate issuer: /CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1 Certificate serial: 0BC9 Authority key identifier: F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/8DB89FC2572311EA9D4ED562C4F9AE02.roa Signing time: Wed 02 Sep 2026 19:39:42 +0000 ROA not before: Wed 02 Sep 2026 19:39:42 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 27471 IP address blocks: 103.246.36.0/24 maxlen: 24 103.246.37.0/24 maxlen: 24 103.246.38.0/24 maxlen: 24 103.246.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3017 (0xbc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EAFB, serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1 Validity Not Before: Sep 2 19:39:42 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a987b7e-0939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:03:8f:bd:e5:2b:54:68:51:29:e4:bd:da: 2c:af:51:e4:79:24:8e:90:3d:d2:df:e3:b2:3c:09: 79:ea:20:5b:ef:c2:ed:d3:d8:a3:a9:a0:f6:28:e8: 7f:a9:94:27:e1:41:2c:6a:8e:fb:96:3d:cf:6c:48: e8:f9:71:3e:13:f1:31:05:f4:3c:8f:9a:be:29:3c: ce:68:04:0a:4e:19:c9:e1:85:bc:e9:66:5c:02:c5: 56:51:a5:87:0e:9e:dd:02:44:47:6b:0c:ab:5b:cf: 77:0b:14:de:b7:b4:d2:da:ba:f6:3b:73:ad:85:bb: 28:20:b7:cd:41:a6:c0:5c:dc:0a:79:6d:89:2b:d9: 36:da:f7:5f:ff:e5:9d:dd:26:06:d5:52:16:b4:d4: 6b:2e:e1:f3:33:5c:2b:fc:b6:df:49:5d:61:6b:2a: 90:ab:d1:dd:16:c7:9d:7e:75:cf:f8:af:a2:72:7e: df:f1:58:34:9d:8e:10:8a:21:7a:99:6c:44:e8:f5: 65:81:62:a9:be:fe:be:15:56:ea:3f:e4:e4:dd:4c: f4:5e:fb:a7:4c:84:4d:fc:a5:d6:e3:7e:92:68:c6: bc:c2:04:82:c3:52:fe:9d:78:4a:42:2a:36:8a:35: 74:ec:19:e9:ba:5d:b8:da:ce:0b:8c:b5:e2:ed:e7: 14:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:99:4B:9A:F2:E7:81:A5:13:14:4B:C5:A0:18:B6:4C:F5:8B:32:94 X509v3 Authority Key Identifier: keyid:F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/8DB89FC2572311EA9D4ED562C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.246.36.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:ec:b9:8f:ce:b9:80:f8:50:19:a1:d5:f1:3a:2a:c0:24:43: 0d:f6:96:25:78:f7:f2:ef:e5:9b:e9:c2:d0:dd:44:cd:67:ed: 7c:5a:be:d6:97:f0:27:c8:1a:95:0a:c8:0c:f6:cc:69:89:aa: 9b:43:ac:aa:e2:a7:a1:c0:50:52:ce:c4:3e:f7:f5:04:64:02: d9:d0:eb:91:cb:8b:f0:28:ec:09:d4:8f:14:0f:d7:d7:95:82: ea:e3:f3:1f:fc:c0:7a:48:44:cd:11:67:a1:6e:1c:fb:1e:3d: c6:5f:8c:bb:d8:7e:ba:d5:ad:4e:f9:7b:84:26:8a:b2:33:e8: 27:77:4a:0a:e6:de:fd:b4:55:c5:8d:8e:45:16:94:52:d9:80: c1:1b:17:b4:f5:6a:d2:a4:92:85:ae:14:2e:ba:5a:02:20:77: d1:ff:42:98:53:1e:7c:56:27:af:25:aa:a0:cf:ad:55:54:65: b2:d7:64:e3:54:e2:35:4a:ed:6e:d9:d1:46:d8:4d:d0:e9:82: 4d:c4:98:d6:48:bb:27:4a:8e:57:e7:22:97:47:4e:b5:12:3f: d2:3a:ce:a8:9b:77:16:41:a7:b7:21:5e:c5:9b:2b:81:fe:fa: 5b:a7:82:21:55:bf:a1:55:26:1b:dd:bf:32:4e:f9:74:1e:47: 2c:1e:63:63 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVBRkIxMTAvBgNVBAUTKEY2MUZCQUE2MTkyOUQxMDBGQTk5REJENDgwQ0U4QzJD NEVFNzNGRjEwHhcNMjYwOTAyMTkzOTQyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4N2I3ZS0wOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArccDj73lK1RoUSnkvdosr1HkeSSOkD3S3+OyPAl56iBb78Lt09ijqaD2KOh/ qZQn4UEsao77lj3PbEjo+XE+E/ExBfQ8j5q+KTzOaAQKThnJ4YW86WZcAsVWUaWH Dp7dAkRHawyrW893CxTet7TS2rr2O3OthbsoILfNQabAXNwKeW2JK9k22vdf/+Wd 3SYG1VIWtNRrLuHzM1wr/LbfSV1hayqQq9HdFsedfnXP+K+icn7f8Vg0nY4QiiF6 mWxE6PVlgWKpvv6+FVbqP+Tk3Uz0XvunTIRN/KXW436SaMa8wgSCw1L+nXhKQio2 ijV07Bnpul242s4LjLXi7ecUbQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKGZS5ry 54GlExRLxaAYtkz1izKUMB8GA1UdIwQYMBaAFPYfuqYZKdEA+pnb1IDOjCxO5z/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUFGQi8wOTRGNzQ2RTU0 RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBRRDZtZHZVZ002TUxFN25Q X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloLTZwaGtwMFFENm1kdlVnTTZNTEU3blBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVBRkIvMDk0Rjc0NkU1NEY3MTFFQTgzOEZBODRGQzRGOUFFMDIvOERCODlGQzI1 NzIzMTFFQTlENEVENTYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/YkMA0GCSqGSIb3DQEBCwUAA4IBAQAM7LmPzrmA+FAZodXxOirA JEMN9pYlePfy7+Wb6cLQ3UTNZ+18Wr7Wl/AnyBqVCsgM9sxpiaqbQ6yq4qehwFBS zsQ+9/UEZALZ0OuRy4vwKOwJ1I8UD9fXlYLq4/Mf/MB6SETNEWehbhz7Hj3GX4y7 2H661a1O+XuEJoqyM+gnd0oK5t79tFXFjY5FFpRS2YDBGxe09WrSpJKFrhQuuloC IHfR/0KYUx58VievJaqgz61VVGWy12TjVOI1Su1u2dFG2E3Q6YJNxJjWSLsnSo5X 5yKXR061Ej/SOs6om3cWQae3IV7FmyuB/vpbp4IhVb+hVSYb3b8yTvl0HkcsHmNj -----END CERTIFICATE-----Generated at Tue Sep 22 12:57:46 2026 by rpki-client