$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8A65797E7BF511F0BEBF8326C4F9AE02.roa File: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (raw, json) Hash identifier: bJw6aITse+eniewVtF8bgjXkhRkSrrBco5fghncx6Cg= Subject key identifier: 3E:61:B1:67:D5:80:0B:41:9B:38:DC:69:14:3B:7E:73:70:9D:45:EE Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: D9 Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8A65797E7BF511F0BEBF8326C4F9AE02.roa Signing time: Thu 03 Sep 2026 01:57:50 +0000 ROA not before: Thu 03 Sep 2026 01:57:50 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 45158 IP address blocks: 103.251.172.0/22 maxlen: 23 120.29.240.0/21 maxlen: 21 120.29.245.0/24 maxlen: 24 120.29.246.0/24 maxlen: 24 2407:1e00::/32 maxlen: 32 2407:1e00::/33 maxlen: 40 2407:1e00:1003::/48 maxlen: 48 2407:1e00:8000::/33 maxlen: 37 2407:1e00:8000::/34 maxlen: 40 2407:1e00:c000::/35 maxlen: 40 2407:1e00:e000::/36 maxlen: 40 2407:1e00:f000::/37 maxlen: 40 2407:1e00:f800::/38 maxlen: 38 2407:1e00:f800::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Sep 3 01:57:50 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a98d41e-7703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7c:cb:76:b3:4c:ab:e8:c4:63:9f:ec:cd:f7: 85:84:f1:9f:1c:6c:6c:36:e0:16:d4:80:84:e4:11: c4:da:3d:62:99:5f:2d:e1:3d:80:ae:80:1b:0f:22: ea:9e:8f:bd:f5:7f:e1:84:bb:38:71:99:d7:38:9b: d0:54:70:df:0a:69:35:d5:d3:3d:fe:67:08:19:37: a1:ac:f3:b1:2d:2e:2f:a7:f1:de:0d:36:8d:f1:2b: 90:22:aa:fb:4f:fc:f4:04:43:2a:1e:a0:c0:78:aa: 9a:e9:38:1f:ca:bf:51:3f:69:43:37:59:0b:13:8f: e9:1d:4f:e6:ca:c8:29:dc:6e:19:2d:b3:67:0c:01: bc:c4:c0:f0:cc:3d:6c:ea:d9:cf:12:78:60:f3:80: 9e:9a:eb:7a:1d:29:36:fc:5c:36:5a:c5:ed:0e:17: 04:a7:fd:1b:aa:4b:52:c5:9d:ee:0f:b6:62:15:fd: 74:08:f9:1c:47:bf:2d:56:30:8a:6f:11:57:b5:78: de:ac:05:7d:5a:3a:03:83:49:5d:18:59:d4:1e:07: 15:4b:96:4d:40:8b:81:2f:90:27:06:ea:ef:78:19: 17:09:38:40:61:18:88:97:26:5c:2c:05:69:5f:fb: d8:4f:51:cf:85:d1:74:72:04:38:5b:c3:94:64:c8: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:61:B1:67:D5:80:0B:41:9B:38:DC:69:14:3B:7E:73:70:9D:45:EE X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8A65797E7BF511F0BEBF8326C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.251.172.0/22 120.29.240.0/21 IPv6: 2407:1e00::/32 Signature Algorithm: sha256WithRSAEncryption 16:d3:7d:62:de:6f:a8:16:9e:ba:49:75:9a:2d:c8:a5:fb:9d: ae:2e:1d:4d:94:e5:34:e1:31:2c:39:41:31:3a:a7:39:cc:f8: 06:01:4a:d2:71:98:44:3e:39:25:c4:b7:83:36:38:af:1a:b8: bd:f4:81:3a:e0:ee:7a:92:5a:60:b0:a1:7b:a2:b6:a7:c0:26: 68:f1:93:86:d3:3f:b7:2d:a9:db:ec:64:8a:d1:28:e7:61:e6: 42:72:1c:cd:33:8a:7d:01:91:a8:55:46:51:0a:60:f2:53:17: 8d:da:35:2f:4d:0f:04:a2:c0:cf:26:3a:d2:69:b5:09:ef:54: c6:cb:dc:c9:e8:39:6f:13:34:18:e1:d2:15:07:c1:01:8e:a4: 81:eb:b8:19:b0:17:93:36:cc:4a:38:13:d4:96:a2:ac:a4:67: fc:21:3d:fc:55:b2:8b:c5:89:c1:ce:6e:dd:28:e3:d6:9e:d9: c7:bb:cd:7e:a5:71:33:62:c9:cc:db:70:62:de:3d:92:83:3f: 6e:b3:1f:41:1a:2a:48:12:be:0c:05:72:a3:5e:3b:2a:8a:15: cc:05:fd:dd:f4:a2:02:96:c8:29:3e:0c:bd:3a:bf:cd:09:cb: 77:3c:6e:cc:96:61:c8:22:8e:0e:f1:fb:54:d2:c4:ff:d7:03: 51:3e:3e:86 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1ODgxMTAvBgNVBAUTKDg4Mjg1OUQ1MjMwMUYwMTU3MUQ5RDRDRjk1M0Y0NUUw NzVFMDlBOTgwHhcNMjYwOTAzMDE1NzUwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZDQxZS03NzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XzLdrNMq+jEY5/szfeFhPGfHGxsNuAW1ICE5BHE2j1imV8t4T2AroAbDyLq no+99X/hhLs4cZnXOJvQVHDfCmk11dM9/mcIGTehrPOxLS4vp/HeDTaN8SuQIqr7 T/z0BEMqHqDAeKqa6Tgfyr9RP2lDN1kLE4/pHU/mysgp3G4ZLbNnDAG8xMDwzD1s 6tnPEnhg84Cemut6HSk2/Fw2WsXtDhcEp/0bqktSxZ3uD7ZiFf10CPkcR78tVjCK bxFXtXjerAV9WjoDg0ldGFnUHgcVS5ZNQIuBL5AnBurveBkXCThAYRiIlyZcLAVp X/vYT1HPhdF0cgQ4W8OUZMi/9wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFD5hsWfV gAtBmzjcaRQ7fnNwnUXuMB8GA1UdIwQYMBaAFIgoWdUjAfAVcdnUz5U/ReB14JqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU4OC9CRjdENUU3NjdC RjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhCVngyZFRQbFQ5RjRIWGdt cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ1ODgvQkY3RDVFNzY3QkYzMTFGMEEwNUZBRDgyQzRGOUFFMDIvOEE2NTc5N0U3 QkY1MTFGMEJFQkY4MzI2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ/usAwQDeB3wMA0EAgACMAcDBQAkBx4AMA0GCSqGSIb3DQEBCwUA A4IBAQAW031i3m+oFp66SXWaLcil+52uLh1NlOU04TEsOUExOqc5zPgGAUrScZhE PjklxLeDNjivGri99IE64O56klpgsKF7oranwCZo8ZOG0z+3Lanb7GSK0SjnYeZC chzNM4p9AZGoVUZRCmDyUxeN2jUvTQ8EosDPJjrSabUJ71TGy9zJ6DlvEzQY4dIV B8EBjqSB67gZsBeTNsxKOBPUlqKspGf8IT38VbKLxYnBzm7dKOPWntnHu81+pXEz YsnM23Bi3j2Sgz9usx9BGipIEr4MBXKjXjsqihXMBf3d9KIClsgpPgy9Or/NCct3 PG7MlmHIIo4O8ftU0sT/1wNRPj6G -----END CERTIFICATE-----Generated at Tue Sep 22 11:13:48 2026 by rpki-client