$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/1B2A0B7EB16911F1A31C80A75C11F970.roa File: 1B2A0B7EB16911F1A31C80A75C11F970.roa (raw, json) Hash identifier: GKgWvfLzKKfM9BZQQP53kSF9u4H2pgNnBDC8t2IhaVM= Subject key identifier: 28:C9:C1:45:22:EC:1E:F3:F6:E3:49:59:B6:BB:56:69:19:B4:46:F5 Certificate issuer: /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Certificate serial: 09A5 Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/1B2A0B7EB16911F1A31C80A75C11F970.roa Signing time: Wed 16 Sep 2026 00:54:01 +0000 ROA not before: Wed 16 Sep 2026 00:54:01 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 215595 IP address blocks: 103.224.253.0/24 maxlen: 24 103.224.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2469 (0x9a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA297, serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Validity Not Before: Sep 16 00:54:01 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6aa9e8a9-9685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:ff:24:6f:84:0f:ed:f6:02:93:c6:e8:a6: 33:bd:f7:76:cf:ca:96:5b:71:4a:0b:11:40:1a:03: db:4c:b2:46:15:fb:85:10:32:0f:a5:dd:ee:25:10: 4f:e2:8b:45:1e:3c:16:a9:f6:e4:46:fc:b5:7b:04: aa:44:47:ed:c7:01:25:54:04:ac:84:da:75:94:2b: 91:3a:a2:83:9f:59:fc:0c:8f:04:cd:ae:3b:81:d9: 61:00:55:fd:7a:57:aa:2f:27:03:ea:a6:bd:00:da: 78:89:1c:e5:b1:83:6c:43:78:09:96:29:2c:fd:8e: a6:1f:7b:48:20:a1:4a:55:5b:3b:09:59:16:34:e8: 24:1a:ef:a4:f8:e6:5b:e0:3b:ac:26:a9:eb:18:32: 53:07:76:a3:ae:ab:46:25:3c:8e:ff:0c:83:96:e6: 9b:c5:a1:f9:d6:c9:6a:ea:8e:fc:80:24:45:95:b8: 09:54:b5:51:1c:4a:f8:02:91:e8:6a:ad:af:ef:fa: 01:f5:a4:f3:3a:7c:74:0e:8a:d1:ab:6e:ac:23:ba: 4f:4c:76:a4:24:18:43:bc:12:f9:b8:d9:d5:94:b8: ba:b9:b7:66:c7:41:26:bd:e4:79:db:59:c7:46:03: 2c:7b:9b:da:ca:7e:92:4d:e7:3a:ba:3a:0d:7f:5c: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C9:C1:45:22:EC:1E:F3:F6:E3:49:59:B6:BB:56:69:19:B4:46:F5 X509v3 Authority Key Identifier: keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/1B2A0B7EB16911F1A31C80A75C11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.224.253.0/24 103.224.255.0/24 Signature Algorithm: sha256WithRSAEncryption 69:bc:d2:8a:75:ac:a2:c3:86:e6:64:d0:8b:08:2c:19:30:73: 35:8d:61:b3:3e:4c:97:64:37:e4:70:d5:14:2d:65:55:62:38: 84:d7:c3:c0:89:22:32:af:fa:a4:c5:c1:38:c9:69:00:63:e5: c8:06:ae:1b:8d:cc:76:e6:87:28:ff:9b:2c:c7:1e:3d:b9:e1: e5:30:99:0d:4e:20:6b:60:10:85:78:8a:ef:4d:a0:d8:e6:82: 43:1b:d2:3a:d8:ae:bd:f5:fa:dc:07:43:7d:29:d8:7d:ff:a4: 0c:c0:d9:e2:a9:e2:c9:44:74:20:a8:cf:84:8e:64:1d:af:39: bf:a5:24:a7:ba:8b:9c:ed:f0:64:20:eb:da:39:73:5a:24:a4: 3c:5f:c1:ff:77:93:df:e6:60:d2:fd:c9:d3:a4:4d:ce:6a:89: 54:91:ec:f9:d3:64:ff:75:e7:09:c9:0c:3d:44:ec:e7:79:e1: 45:07:0a:64:39:ed:e4:5e:9c:81:6f:43:e2:c0:bf:ba:d8:1f: 91:bf:b2:89:c1:33:da:06:ed:7b:16:f2:9d:9c:af:09:a7:fc: b7:e8:97:42:3a:8b:cf:e0:0c:17:bf:2e:16:f1:0b:8e:78:59: bc:f6:5a:b9:2a:f9:61:5f:61:e4:7d:05:21:2e:64:6b:49:8e: 4d:ae:6d:37 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EyOTcxMTAvBgNVBAUTKDU3REI0MkFCOUVCQkVGQkZFMjEwNzNGNTAwN0ZDMzc2 MkM1RkJCMDgwHhcNMjYwOTE2MDA1NDAxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE5ZThhOS05Njg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqX/JG+ED+32ApPG6KYzvfd2z8qWW3FKCxFAGgPbTLJGFfuFEDIPpd3uJRBP 4otFHjwWqfbkRvy1ewSqREftxwElVASshNp1lCuROqKDn1n8DI8Eza47gdlhAFX9 eleqLycD6qa9ANp4iRzlsYNsQ3gJliks/Y6mH3tIIKFKVVs7CVkWNOgkGu+k+OZb 4DusJqnrGDJTB3ajrqtGJTyO/wyDluabxaH51slq6o78gCRFlbgJVLVRHEr4ApHo aq2v7/oB9aTzOnx0DorRq26sI7pPTHakJBhDvBL5uNnVlLi6ubdmx0EmveR521nH RgMse5vayn6STec6ujoNf1wliwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCjJwUUi 7B7z9uNJWba7VmkZtEb1MB8GA1UdIwQYMBaAFFfbQqueu++/4hBz9QB/w3YsX7sI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5Ny8yNEVEMjE1NkJD MjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3X2lFSFAxQUhfRGRpeGZ1 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y5dENxNTY3NzdfaUVIUDFBSF9EZGl4ZnV3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0EyOTcvMjRFRDIxNTZCQzI4MTFFQTk3Rjk2RDQxQzRGOUFFMDIvMUIyQTBCN0VC MTY5MTFGMUEzMUM4MEE3NUMxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ+D9AwQAZ+D/MA0GCSqGSIb3DQEBCwUAA4IBAQBpvNKKdayiw4bm ZNCLCCwZMHM1jWGzPkyXZDfkcNUULWVVYjiE18PAiSIyr/qkxcE4yWkAY+XIBq4b jcx25oco/5ssxx49ueHlMJkNTiBrYBCFeIrvTaDY5oJDG9I62K699frcB0N9Kdh9 /6QMwNniqeLJRHQgqM+EjmQdrzm/pSSnuouc7fBkIOvaOXNaJKQ8X8H/d5Pf5mDS /cnTpE3OaolUkez502T/decJyQw9ROzneeFFBwpkOe3kXpyBb0PiwL+62B+Rv7KJ wTPaBu17FvKdnK8Jp/y36JdCOovP4AwXvy4W8QuOeFm89lq5KvlhX2HkfQUhLmRr SY5Nrm03 -----END CERTIFICATE-----Generated at Mon Sep 21 13:17:34 2026 by rpki-client