$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/2CB0D29E211411EE82DE6110C4F9AE02.roa File: 2CB0D29E211411EE82DE6110C4F9AE02.roa (raw, json) Hash identifier: 4ggPsqL1jXI0lX9HVQgWrAaOdjTYyAFalP1/32kx65I= Subject key identifier: B7:DC:82:87:5A:EA:4C:FB:03:FE:B1:10:8D:B9:A8:C9:15:97:38:89 Certificate issuer: /CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6 Certificate serial: 0524 Authority key identifier: A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/2CB0D29E211411EE82DE6110C4F9AE02.roa Signing time: Sat 12 Sep 2026 23:47:55 +0000 ROA not before: Sat 12 Sep 2026 23:47:54 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 151415 IP address blocks: 103.228.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC75C, serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6 Validity Not Before: Sep 12 23:47:54 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa5e4aa-aef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:42:a1:f7:c0:90:18:77:74:cc:95:3e:1f: 35:54:86:66:31:25:a9:25:60:a0:80:d6:59:56:f5: a3:ac:a8:2f:a4:06:de:52:80:ce:a9:64:3e:0f:5a: 24:28:74:60:e2:77:28:47:63:ef:1d:9b:33:7e:03: ca:6c:05:c0:63:5b:63:8d:f0:36:58:f1:b4:b7:6f: 38:7a:86:d7:23:e5:ac:60:9c:7b:01:f7:fa:5d:3a: 56:31:36:24:15:6a:30:e3:41:60:c1:1c:c9:49:27: 89:12:12:a7:33:2a:f3:20:d3:ea:41:4f:40:ae:9e: 5a:f5:11:c9:6f:47:01:a7:e3:9c:a6:ac:0d:e1:fd: 35:b2:9a:99:6d:6b:4e:8a:01:23:4d:1b:ae:77:f7: bf:f5:80:67:43:52:ee:12:dc:82:3c:b2:77:46:7a: 39:bf:8c:68:07:9c:c3:c1:5a:e3:8e:f6:13:db:a4: f7:ce:4b:11:05:21:7b:06:bf:1a:15:c9:26:24:20: 68:07:bb:10:5c:43:9d:dc:c2:59:8e:32:65:bd:97: 74:dc:74:c4:22:31:b6:c7:02:0f:61:9c:7d:e5:5c: 41:07:5b:27:b2:9b:78:dc:f1:fd:fd:c1:10:0b:41: f5:50:a9:7f:b7:bc:04:6b:e4:db:7d:c2:88:35:5c: 82:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DC:82:87:5A:EA:4C:FB:03:FE:B1:10:8D:B9:A8:C9:15:97:38:89 X509v3 Authority Key Identifier: keyid:A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/2CB0D29E211411EE82DE6110C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.228.124.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:a7:82:11:00:62:6b:6d:c1:2d:92:f2:82:9b:aa:91:c9:d9: 2c:98:08:a6:65:da:27:a7:29:a0:d3:a4:42:a8:fd:af:d5:a0: a4:63:fe:20:cc:f4:ec:e8:84:ac:68:b3:e2:f7:1f:0c:a7:f4: 31:d4:7c:21:cb:78:2e:03:cc:54:66:44:61:9a:9a:68:87:09: 73:8d:be:35:32:97:6f:67:3d:a0:1d:f4:e3:0a:63:53:81:ca: 08:2b:d2:83:4e:59:75:29:6e:00:d4:7b:cb:6d:2e:af:a6:36: e9:8c:0c:4f:c7:d3:79:70:4e:ad:73:ab:49:d5:64:18:e2:aa: 5e:62:b6:12:4c:d2:99:3c:1e:49:ef:aa:dc:90:28:5f:2c:a3: 09:9b:95:f7:9d:c4:12:4d:1e:3e:09:cf:6d:72:f1:2c:e4:55: 9a:af:b2:74:4c:ac:3c:59:5e:c9:02:03:de:e8:6c:d9:95:57: 7d:70:1e:77:a7:a3:99:1f:5f:9a:a1:55:bd:84:26:07:09:fe: d2:55:e0:b9:41:66:36:e5:32:02:5f:10:60:90:39:dc:89:c5: 60:2e:0c:5f:57:8e:82:fc:a6:78:d5:47:f6:13:16:d4:0b:dc: 4a:06:d1:0f:65:61:11:5a:6b:8d:a8:94:b8:8d:a8:9e:5c:9f: a8:bf:5f:f1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM3NUMxMTAvBgNVBAUTKEE1MzZBNTREQjQxRTQ0MURFNzRDMzNGNkY3MzZDNUFE N0E2Njg1QzYwHhcNMjYwOTEyMjM0NzU0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE1ZTRhYS1hZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07NCoffAkBh3dMyVPh81VIZmMSWpJWCggNZZVvWjrKgvpAbeUoDOqWQ+D1ok KHRg4ncoR2PvHZszfgPKbAXAY1tjjfA2WPG0t284eobXI+WsYJx7Aff6XTpWMTYk FWow40FgwRzJSSeJEhKnMyrzINPqQU9Arp5a9RHJb0cBp+OcpqwN4f01spqZbWtO igEjTRuud/e/9YBnQ1LuEtyCPLJ3Rno5v4xoB5zDwVrjjvYT26T3zksRBSF7Br8a FckmJCBoB7sQXEOd3MJZjjJlvZd03HTEIjG2xwIPYZx95VxBB1snspt43PH9/cEQ C0H1UKl/t7wEa+TbfcKINVyCBQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLfcgoda 6kz7A/6xEI25qMkVlziJMB8GA1UdIwQYMBaAFKU2pU20HkQd50wz9vc2xa16ZoXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzc1Qy9BQ0FDMzlCRTY4 NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJCM25URFAyOXpiRnJYcG1o Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUYWxUYlFlUkIzblREUDI5emJGclhwbWhjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REM3NUMvQUNBQzM5QkU2ODcxMTFFQzhCREIzNDZCQzRGOUFFMDIvMkNCMEQyOUUy MTE0MTFFRTgyREU2MTEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ+R8MA0GCSqGSIb3DQEBCwUAA4IBAQAcp4IRAGJrbcEtkvKCm6qR ydksmAimZdonpymg06RCqP2v1aCkY/4gzPTs6ISsaLPi9x8Mp/Qx1Hwhy3guA8xU ZkRhmppohwlzjb41MpdvZz2gHfTjCmNTgcoIK9KDTll1KW4A1HvLbS6vpjbpjAxP x9N5cE6tc6tJ1WQY4qpeYrYSTNKZPB5J76rckChfLKMJm5X3ncQSTR4+Cc9tcvEs 5FWar7J0TKw8WV7JAgPe6GzZlVd9cB53p6OZH1+aoVW9hCYHCf7SVeC5QWY25TIC XxBgkDncicVgLgxfV46C/KZ41Uf2ExbUC9xKBtEPZWERWmuNqJS4jaieXJ+ov1/x -----END CERTIFICATE-----Generated at Mon Sep 21 17:55:59 2026 by rpki-client