$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/290B43C0A79611F1864335344711F970.roa File: 290B43C0A79611F1864335344711F970.roa (raw, json) Hash identifier: nN752nqhRtARbodYQ3u7efmdKu6erwNwIIGPPDmLusE= Subject key identifier: 9E:4C:3F:88:34:8A:F3:F5:D9:BE:8B:95:90:ED:97:1A:63:F8:DE:3E Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0C57 Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/290B43C0A79611F1864335344711F970.roa Signing time: Thu 03 Sep 2026 12:51:20 +0000 ROA not before: Thu 03 Sep 2026 12:51:20 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 2497 IP address blocks: 103.246.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Sep 3 12:51:20 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a996d48-eb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:4e:63:66:ae:33:a7:e5:57:79:92:94:63: 45:91:6a:4b:b5:b6:5a:4c:da:7a:52:88:45:f9:fd: 3f:a4:1d:59:35:dd:77:23:2f:35:7b:ac:e5:e7:5c: 7a:69:80:85:a7:21:44:dc:29:9b:3e:72:64:ba:94: ca:fe:f6:eb:15:e5:15:bd:5f:59:1a:1d:7b:6a:64: db:48:04:8c:0d:1f:e8:a4:c7:8f:58:7e:77:ac:3e: 1e:ce:28:bb:b5:0f:4e:66:c4:81:87:87:5d:58:71: ed:bb:d9:d1:9a:2f:3c:b6:31:28:c5:50:e1:e6:e6: 05:85:f7:52:df:b2:c4:d2:5b:75:8f:64:5f:3d:ea: b2:cb:ef:61:e5:18:12:35:db:2e:8f:8d:fc:85:84: 2b:62:cf:2c:a7:98:3c:97:06:08:8a:28:11:cf:66: 6c:82:a3:91:d9:32:5b:6b:c7:f2:92:05:94:ff:8e: 54:bc:71:a1:e6:ca:cf:6e:6c:de:2c:b3:6d:61:65: d2:61:2c:59:dd:06:5c:89:0c:b1:1d:ff:26:a9:11: cd:eb:73:e3:cd:de:8f:3c:7c:6c:ed:68:63:4b:3d: a6:b2:4d:4f:23:a7:47:6b:6d:99:41:f1:10:c4:40: 1c:9f:ec:9f:12:4f:8c:06:a7:36:e0:16:5d:62:23: dc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4C:3F:88:34:8A:F3:F5:D9:BE:8B:95:90:ED:97:1A:63:F8:DE:3E X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/290B43C0A79611F1864335344711F970.roa sbgp-ipAddrBlock: critical IPv4: 103.246.255.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:3a:97:59:99:5f:63:4b:d0:13:cf:2a:67:68:82:6e:60:f6: ed:de:cc:fe:56:e8:c8:b1:d1:16:b1:d7:89:48:9d:df:4c:f7: 17:48:6c:b9:79:0f:0c:15:7a:ea:65:1a:4d:f5:8c:16:40:e7: 20:c8:45:a8:f4:93:1b:68:28:a8:86:44:09:ad:c2:db:a8:fd: 47:8f:58:4d:69:66:c1:ea:94:e4:e3:50:22:ae:f4:51:85:00: e3:13:50:4a:d6:6e:15:48:9f:b3:0a:85:ce:0c:6a:b0:32:8f: 52:b0:27:3e:70:26:54:56:31:34:79:92:38:a1:45:8f:6a:1d: ae:42:cc:6a:1d:5b:bf:de:92:a0:f9:17:cb:45:95:1c:47:3f: 80:17:9a:e3:8c:e8:66:26:5a:2c:32:3e:4e:04:5a:c9:40:81: 36:ed:f8:a5:3a:5d:06:16:1f:eb:ef:5b:c4:9f:4e:4e:0a:f7: 6d:01:aa:51:89:41:46:3e:69:a6:e7:59:6e:64:b8:e3:90:50: 58:80:fd:37:46:97:fc:59:72:7c:95:22:57:7d:3c:3f:f2:0e: 66:44:a9:cd:f9:5b:8f:9f:0b:cb:0a:01:92:46:2a:29:80:59: 07:a8:d6:5c:03:9d:50:24:60:9c:ba:c9:ac:cb:72:12:a4:d8: 79:f7:31:59 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYwOTAzMTI1MTIwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5NmQ0OC1lYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApytOY2auM6flV3mSlGNFkWpLtbZaTNp6UohF+f0/pB1ZNd13Iy81e6zl51x6 aYCFpyFE3CmbPnJkupTK/vbrFeUVvV9ZGh17amTbSASMDR/opMePWH53rD4ezii7 tQ9OZsSBh4ddWHHtu9nRmi88tjEoxVDh5uYFhfdS37LE0lt1j2RfPeqyy+9h5RgS Ndsuj438hYQrYs8sp5g8lwYIiigRz2ZsgqOR2TJba8fykgWU/45UvHGh5srPbmze LLNtYWXSYSxZ3QZciQyxHf8mqRHN63Pjzd6PPHxs7WhjSz2msk1PI6dHa22ZQfEQ xEAcn+yfEk+MBqc24BZdYiPc0QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ5MP4g0 ivP12b6LlZDtlxpj+N4+MB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNDAvNjE3RjM1MzY0MEUxMTFFQUJDNjJEQjI2QzRGOUFFMDIvMjkwQjQzQzBB Nzk2MTFGMTg2NDMzNTM0NDcxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ/b/MA0GCSqGSIb3DQEBCwUAA4IBAQCbOpdZmV9jS9ATzypnaIJu YPbt3sz+VujIsdEWsdeJSJ3fTPcXSGy5eQ8MFXrqZRpN9YwWQOcgyEWo9JMbaCio hkQJrcLbqP1Hj1hNaWbB6pTk41AirvRRhQDjE1BK1m4VSJ+zCoXODGqwMo9SsCc+ cCZUVjE0eZI4oUWPah2uQsxqHVu/3pKg+RfLRZUcRz+AF5rjjOhmJlosMj5OBFrJ QIE27filOl0GFh/r71vEn05OCvdtAapRiUFGPmmm51luZLjjkFBYgP03Rpf8WXJ8 lSJXfTw/8g5mRKnN+VuPnwvLCgGSRiopgFkHqNZcA51QJGCcusmsy3ISpNh59zFZ -----END CERTIFICATE-----Generated at Mon Sep 21 18:09:17 2026 by rpki-client