$ rpki-client -vvvf rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/AFADDB38960011F18583530F5711F970.roa File: AFADDB38960011F18583530F5711F970.roa (raw, json) Hash identifier: bGe10TBYBAca5SNsLjK2aIGEmSAIakbZTdRvYFBgU0k= Subject key identifier: E5:1C:9F:FE:31:CE:D0:11:B7:4F:C8:34:98:07:75:2C:6D:51:20:5D Certificate issuer: /CN=A91912D9/serialNumber=218716825DBCF8DF33974485789E47B9B100CB29 Certificate serial: 27 Authority key identifier: 21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/AFADDB38960011F18583530F5711F970.roa Signing time: Fri 09 Oct 2026 09:57:55 +0000 ROA not before: Fri 09 Oct 2026 09:57:55 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 141382 IP address blocks: 103.157.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912D9, serialNumber=218716825DBCF8DF33974485789E47B9B100CB29 Validity Not Before: Oct 9 09:57:55 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac8baa3-8936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:91:4b:a5:0d:d3:26:17:89:53:7d:5e:80: 8a:7a:0a:d3:ba:ac:84:a7:57:5d:cb:cf:16:a3:6f: 90:90:06:99:1c:77:f6:cd:4b:57:b6:0c:61:67:59: 14:1b:25:20:90:2a:85:75:6f:a8:e0:cb:f2:eb:e7: 35:ad:bf:85:ef:66:7e:44:7d:a2:e7:18:86:63:7c: dd:a5:fa:21:ef:97:23:97:dc:e4:4b:64:43:8c:cf: aa:e3:30:37:2f:dd:1c:17:88:4d:d0:8a:80:8e:db: 70:a3:19:7c:95:5c:41:62:66:8a:39:34:a0:0a:1d: 67:01:db:11:70:37:56:78:1e:34:e8:0c:9c:94:05: 4e:66:48:40:4c:80:34:77:a1:8b:b2:6c:de:62:38: 9c:58:55:2d:a2:45:60:cb:55:82:ec:30:5f:80:de: 6b:53:db:c8:7c:00:0b:eb:cf:b9:23:8d:cf:c0:d7: 6d:73:b3:03:a2:c1:7e:9a:4a:c1:45:28:11:4d:f5: 6b:eb:3e:3c:51:c3:f9:cb:e3:3c:4e:0a:0b:74:76: 48:a5:41:4a:74:c9:c3:7d:1c:0c:5a:df:a5:9a:78: d0:e0:11:34:df:2f:67:63:ab:a5:04:a5:f9:39:36: a3:68:7b:52:d6:18:37:b2:8c:88:33:02:13:91:e9: cd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1C:9F:FE:31:CE:D0:11:B7:4F:C8:34:98:07:75:2C:6D:51:20:5D X509v3 Authority Key Identifier: keyid:21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/AFADDB38960011F18583530F5711F970.roa sbgp-ipAddrBlock: critical IPv4: 103.157.252.0/24 Signature Algorithm: sha256WithRSAEncryption 84:1c:72:25:88:a8:da:63:01:c6:6a:d4:28:da:3d:09:ab:72: 38:9f:de:a1:c2:9c:9f:c3:58:fc:3e:e5:ea:6b:d4:c1:48:27: 01:99:65:06:47:4f:85:1e:a4:57:72:cb:bb:d8:d8:54:a6:d1: a6:a2:f9:2e:52:49:81:73:55:8a:01:7d:7c:be:3d:b9:5e:31: 50:69:a5:80:78:ef:39:9e:8b:ec:d0:ee:0d:38:67:ef:d9:06: 19:0e:03:95:6b:1e:a6:37:d3:d2:22:68:fc:d7:f0:06:7c:81: 76:05:55:64:96:1c:27:02:ed:32:31:36:0c:93:b8:45:fa:7e: a7:97:e7:e7:a0:09:41:1b:1b:93:83:1f:45:69:9f:77:5c:5e: 17:4d:d1:5f:77:cb:15:ba:17:9c:ad:1d:3c:da:34:0d:bd:1d: d7:76:ad:d0:85:ef:a6:b7:e3:71:fe:b7:65:74:b1:68:74:b1: ce:7a:02:f4:77:1c:77:0d:9f:11:ad:07:0c:ea:b1:7d:84:3c: 97:55:31:9f:e8:95:77:94:07:a2:c2:6a:9f:0c:37:b1:ea:3c: e4:33:25:0c:70:fe:12:f8:7e:6a:8f:69:a1:d7:bf:40:09:02: 8e:46:47:ed:cc:70:61:19:1f:dd:2d:cb:9d:d4:4e:97:55:14: eb:d1:38:95 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTJEOTExMC8GA1UEBRMoMjE4NzE2ODI1REJDRjhERjMzOTc0NDg1Nzg5RTQ3QjlC MTAwQ0IyOTAeFw0yNjEwMDkwOTU3NTVaFw0yNzEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYzhiYWEzLTg5MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqQZFLpQ3TJheJU31egIp6CtO6rISnV13Lzxajb5CQBpkcd/bNS1e2DGFnWRQb JSCQKoV1b6jgy/Lr5zWtv4XvZn5EfaLnGIZjfN2l+iHvlyOX3ORLZEOMz6rjMDcv 3RwXiE3QioCO23CjGXyVXEFiZoo5NKAKHWcB2xFwN1Z4HjToDJyUBU5mSEBMgDR3 oYuybN5iOJxYVS2iRWDLVYLsMF+A3mtT28h8AAvrz7kjjc/A121zswOiwX6aSsFF KBFN9WvrPjxRw/nL4zxOCgt0dkilQUp0ycN9HAxa36WaeNDgETTfL2djq6UEpfk5 NqNoe1LWGDeyjIgzAhOR6c39AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU5Ryf/jHO 0BG3T8g0mAd1LG1RIF0wHwYDVR0jBBgwFoAUIYcWgl28+N8zl0SFeJ5HubEAyykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMkQ5L0NEQjFBN0NDOTUw NjExRjFBNDZBQjczNjRDMTFGOTcwL0lZY1dnbDI4LU44emwwU0ZlSjVIdWJFQXl5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVljV2dsMjgtTjh6bDBTRmVKNUh1YkVBeXlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJEOS9DREIxQTdDQzk1MDYxMUYxQTQ2QUI3MzY0QzExRjk3MC9BRkFEREIzODk2 MDAxMUYxODU4MzUzMEY1NzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABnnfwwDQYJKoZIhvcNAQELBQADggEBAIQcciWIqNpjAcZq1CjaPQmr cjif3qHCnJ/DWPw+5epr1MFIJwGZZQZHT4UepFdyy7vY2FSm0aai+S5SSYFzVYoB fXy+PbleMVBppYB47zmei+zQ7g04Z+/ZBhkOA5VrHqY309IiaPzX8AZ8gXYFVWSW HCcC7TIxNgyTuEX6fqeX5+egCUEbG5ODH0Vpn3dcXhdN0V93yxW6F5ytHTzaNA29 Hdd2rdCF76a343H+t2V0sWh0sc56AvR3HHcNnxGtBwzqsX2EPJdVMZ/olXeUB6LC ap8MN7HqPOQzJQxw/hL4fmqPaaHXv0AJAo5GR+3McGEZH90ty53UTpdVFOvROJU= -----END CERTIFICATE-----Generated at Tue Oct 13 06:14:09 2026 by rpki-client