$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/A38F041873C011EEB1A68245C4F9AE02.roa File: A38F041873C011EEB1A68245C4F9AE02.roa (raw, json) Hash identifier: 2xmhwKS1C6Kp8jQEeFADlJcDODIhNqPt2vpgtHqne6w= Subject key identifier: 0E:B6:79:CD:27:25:E6:FD:57:62:C0:BF:98:AA:11:DF:7C:D0:62:53 Certificate issuer: /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Certificate serial: 0221 Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/A38F041873C011EEB1A68245C4F9AE02.roa Signing time: Thu 03 Sep 2026 03:52:17 +0000 ROA not before: Thu 03 Sep 2026 03:52:17 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 151652 IP address blocks: 103.249.203.0/24 maxlen: 24 2001:df2:ca40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD2E3, serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Validity Not Before: Sep 3 03:52:17 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a98eef1-f318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d7:22:fe:a9:83:ef:b3:06:fa:a6:08:f9:5e: 5e:c6:96:80:28:42:58:3c:4d:bd:16:28:fb:cd:bb: 30:25:bd:41:70:bc:fb:30:68:d6:62:01:96:ac:ea: f5:6d:09:bd:51:36:a1:01:11:06:ac:c7:a8:60:dc: 06:f4:64:45:93:c0:b5:28:8a:02:0c:55:4a:0c:c8: d2:f0:ea:58:d3:22:0d:61:12:52:9c:ed:41:99:8b: bb:d8:35:b6:dd:4b:ac:e9:e3:24:aa:b7:01:30:90: 1e:d8:5b:e9:b7:da:8b:c0:34:5d:66:94:98:b2:2a: 1e:10:1a:f0:a9:e4:5c:1a:fd:4a:b3:97:56:00:b7: 61:12:7d:0d:13:64:12:a1:c4:cd:dc:87:05:64:57: 67:bd:c8:0a:54:f3:70:70:56:79:64:b4:4e:f3:cf: 70:cc:ba:f9:06:fe:a4:f9:fc:11:de:8a:77:e0:e3: c5:b9:d1:bb:f9:2a:89:f2:e9:cd:30:ac:60:f1:1b: 87:8c:49:bd:32:07:5b:1b:90:19:e6:b9:0d:fb:93: ad:12:47:cf:c6:a0:32:7e:0c:64:c1:d1:32:65:61: f5:8e:2b:61:2a:0a:08:fc:85:10:8b:95:c2:7f:08: bc:05:ee:b8:9d:df:87:6f:1b:9a:db:4f:30:57:46: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B6:79:CD:27:25:E6:FD:57:62:C0:BF:98:AA:11:DF:7C:D0:62:53 X509v3 Authority Key Identifier: keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/A38F041873C011EEB1A68245C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.249.203.0/24 IPv6: 2001:df2:ca40::/48 Signature Algorithm: sha256WithRSAEncryption 95:de:2a:89:5e:fd:e6:40:3a:58:bd:50:e7:4c:27:41:29:c1: f9:a9:70:82:5b:90:e0:54:23:26:dc:9f:89:62:8c:ad:6e:6c: a8:56:4c:fa:74:42:35:69:43:f6:c1:a7:95:eb:19:1c:2b:99: 7b:13:98:ca:59:5f:23:0b:21:39:21:2a:9f:7c:cf:08:e0:48: 1b:14:a3:26:2c:db:6b:59:a2:b9:53:88:fe:ff:94:f3:ff:2f: ac:69:e2:d6:3b:12:9b:c3:b8:37:d9:09:ba:18:6f:05:26:7a: ac:b5:e2:df:ab:56:5d:99:8e:6f:da:2c:28:d4:bc:58:87:2d: e1:39:f4:b4:c5:83:37:ea:e6:86:35:c4:e3:28:99:88:6f:2e: aa:54:b8:c7:70:d4:b5:72:df:6b:55:fb:04:25:53:94:4b:4a: f0:e9:1c:7d:2b:3e:d2:7f:15:b8:09:fb:6f:59:8d:0b:cf:28: 7e:17:70:de:e4:6f:a8:4c:59:f5:e4:c4:79:23:66:64:01:45: 69:6c:38:18:65:94:72:b3:d4:c4:03:98:b9:33:9e:a9:cb:7a: 5e:18:4a:97:05:59:9d:fe:79:09:be:2e:a9:01:62:85:f4:e8: f4:28:e4:01:90:a6:59:d2:6e:45:1a:69:30:8c:f8:ea:01:0d: d8:81:99:2a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyRTMxMTAvBgNVBAUTKDQ4MTcyMEEyQzhFRTZDRUM5MjQ3Nzc2MTkzMjk5QzEw RkVCN0NBNDQwHhcNMjYwOTAzMDM1MjE3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZWVmMS1mMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAktci/qmD77MG+qYI+V5expaAKEJYPE29Fij7zbswJb1BcLz7MGjWYgGWrOr1 bQm9UTahAREGrMeoYNwG9GRFk8C1KIoCDFVKDMjS8OpY0yINYRJSnO1BmYu72DW2 3Uus6eMkqrcBMJAe2Fvpt9qLwDRdZpSYsioeEBrwqeRcGv1Ks5dWALdhEn0NE2QS ocTN3IcFZFdnvcgKVPNwcFZ5ZLRO889wzLr5Bv6k+fwR3op34OPFudG7+SqJ8unN MKxg8RuHjEm9MgdbG5AZ5rkN+5OtEkfPxqAyfgxkwdEyZWH1jithKgoI/IUQi5XC fwi8Be64nd+Hbxua208wV0bbXwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFA62ec0n Jeb9V2LAv5iqEd980GJTMB8GA1UdIwQYMBaAFEgXIKLI7mzskkd3YZMpnBD+t8pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDJFMy80RjQxNzlBNDcz QzAxMUVFQjgyN0Y0NDRDNEY5QUUwMi9TQmNnb3NqdWJPeVNSM2Roa3ltY0VQNjN5 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NCY2dvc2p1Yk95U1IzZGhreW1jRVA2M3lrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQyRTMvNEY0MTc5QTQ3M0MwMTFFRUI4MjdGNDQ0QzRGOUFFMDIvQTM4RjA0MTg3 M0MwMTFFRUIxQTY4MjQ1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ/nLMA8EAgACMAkDBwAgAQ3yykAwDQYJKoZIhvcNAQELBQADggEB AJXeKole/eZAOli9UOdMJ0EpwfmpcIJbkOBUIybcn4lijK1ubKhWTPp0QjVpQ/bB p5XrGRwrmXsTmMpZXyMLITkhKp98zwjgSBsUoyYs22tZorlTiP7/lPP/L6xp4tY7 EpvDuDfZCboYbwUmeqy14t+rVl2Zjm/aLCjUvFiHLeE59LTFgzfq5oY1xOMomYhv LqpUuMdw1LVy32tV+wQlU5RLSvDpHH0rPtJ/FbgJ+29ZjQvPKH4XcN7kb6hMWfXk xHkjZmQBRWlsOBhllHKz1MQDmLkznqnLel4YSpcFWZ3+eQm+LqkBYoX06PQo5AGQ plnSbkUaaTCM+OoBDdiBmSo= -----END CERTIFICATE-----Generated at Fri Sep 25 17:01:16 2026 by rpki-client