$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/4625A21A68B511EA9EF7951AC4F9AE02.roa File: 4625A21A68B511EA9EF7951AC4F9AE02.roa (raw, json) Hash identifier: 0siYH+ngb9Vw3waf4JZmEzwqdvrjCQEL3iCYs6nr71s= Subject key identifier: 4A:6D:DB:79:A0:1C:0E:23:DC:A4:C3:40:FF:FE:59:B4:2E:A5:76:55 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 35A4 Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/4625A21A68B511EA9EF7951AC4F9AE02.roa Signing time: Fri 04 Sep 2026 15:17:06 +0000 ROA not before: Fri 04 Sep 2026 15:17:06 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 38229 IP address blocks: 103.77.64.0/22 maxlen: 22 116.206.180.0/22 maxlen: 22 2401:dd00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13732 (0x35a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Sep 4 15:17:06 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9ae0f2-336b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:08:28:8c:04:b8:bb:53:d9:54:69:af:63: b0:fc:bd:43:a5:5b:04:51:30:0d:52:1a:3e:00:d9: d5:f0:7f:f4:cb:2c:b5:97:f8:94:e7:96:69:60:fe: 2f:5e:bc:2d:dd:ea:29:aa:dc:67:cf:b9:70:c2:f6: a9:4a:60:bf:66:ff:d5:54:f0:ba:8f:41:a2:63:17: 6a:54:62:64:6f:da:2e:b3:3f:a5:d5:4d:e1:e8:fa: bd:f6:37:e9:81:c2:d9:72:f4:7c:9d:b9:b4:f9:e5: 0b:d2:28:63:20:c3:28:56:22:6d:8a:48:e2:7b:a1: 30:28:e3:c6:f7:6b:c2:2a:2a:57:1f:16:44:0e:ce: 84:5c:8c:33:66:5c:5e:e7:df:fb:55:c3:a3:02:39: 36:82:6b:14:7e:f5:34:69:33:f2:35:88:b3:eb:26: 96:c3:b6:ef:00:88:5d:40:3e:c5:30:63:65:ac:58: 63:9f:25:ac:45:f8:e4:ac:e4:ce:8a:d4:cc:ff:42: f9:3c:d3:99:4b:b7:80:f5:3c:c0:85:8c:94:24:90: a8:6b:44:4f:52:97:0a:d8:c2:19:c6:15:f4:4b:5f: 62:2a:3e:16:a9:72:f6:6e:2a:20:ca:bb:25:15:46: b3:57:8d:11:1d:e6:7f:1d:9d:21:df:a1:5d:16:24: 45:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6D:DB:79:A0:1C:0E:23:DC:A4:C3:40:FF:FE:59:B4:2E:A5:76:55 X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/4625A21A68B511EA9EF7951AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.77.64.0/22 116.206.180.0/22 IPv6: 2401:dd00::/32 Signature Algorithm: sha256WithRSAEncryption c1:85:50:6a:06:a4:7f:18:4e:6c:b8:57:ee:2b:c6:6e:aa:2b: 05:b3:34:bb:a4:1b:63:77:d2:53:4a:05:4d:6d:97:ae:4a:d9: ba:c3:7c:42:17:d9:a3:8c:dd:10:55:4e:54:67:38:95:8c:15: 5d:c8:4e:92:73:a3:e1:71:24:75:74:bf:38:75:cf:ff:e0:a2: 44:79:1f:f1:3b:91:13:d9:be:dc:9e:5d:2a:be:0b:80:af:f5: a9:c7:83:a4:b1:56:7c:c3:d0:4e:06:a9:78:dc:33:ef:bd:79: 04:4f:4c:79:ad:3f:b1:4e:01:a0:7f:96:0c:ae:d5:b5:1d:82: 62:9e:36:24:04:97:74:1e:97:59:65:1a:4b:ac:01:62:7e:11: 68:fb:19:9a:ea:52:70:f7:7b:dd:dd:41:48:b4:a6:b8:47:8e: fe:50:0d:f2:1a:a9:df:ca:76:5d:a0:ed:24:fe:3e:60:67:43: 0b:a5:50:dd:9d:0a:1a:75:90:33:1a:e3:c3:84:c4:7c:df:30: 73:01:82:d2:fc:80:4b:2f:38:8e:c5:01:77:06:8c:3c:45:20: b4:c1:4c:44:f0:d3:73:9a:6f:3c:17:c7:3a:76:c8:62:9a:15: 5e:c2:cd:8f:d6:36:c2:0b:7a:f4:67:44:6f:57:78:c4:86:67: a1:f6:87:3b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICNaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjYwOTA0MTUxNzA2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlhZTBmMi0zMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRgIKIwEuLtT2VRpr2Ow/L1DpVsEUTANUho+ANnV8H/0yyy1l/iU55ZpYP4v Xrwt3eopqtxnz7lwwvapSmC/Zv/VVPC6j0GiYxdqVGJkb9ousz+l1U3h6Pq99jfp gcLZcvR8nbm0+eUL0ihjIMMoViJtikjie6EwKOPG92vCKipXHxZEDs6EXIwzZlxe 59/7VcOjAjk2gmsUfvU0aTPyNYiz6yaWw7bvAIhdQD7FMGNlrFhjnyWsRfjkrOTO itTM/0L5PNOZS7eA9TzAhYyUJJCoa0RPUpcK2MIZxhX0S19iKj4WqXL2biogyrsl FUazV40RHeZ/HZ0h36FdFiRFjwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFEpt23mg HA4j3KTDQP/+WbQupXZVMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBDMkYvNzA1RjUyRkMxRDk5MTFFMjg1QzlFRDg1MDhCMDJDRDIvNDYyNUEyMUE2 OEI1MTFFQTlFRjc5NTFBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ01AAwQCdM60MA0EAgACMAcDBQAkAd0AMA0GCSqGSIb3DQEBCwUA A4IBAQDBhVBqBqR/GE5suFfuK8ZuqisFszS7pBtjd9JTSgVNbZeuStm6w3xCF9mj jN0QVU5UZziVjBVdyE6Sc6PhcSR1dL84dc//4KJEeR/xO5ET2b7cnl0qvguAr/Wp x4OksVZ8w9BOBql43DPvvXkET0x5rT+xTgGgf5YMrtW1HYJinjYkBJd0HpdZZRpL rAFifhFo+xma6lJw93vd3UFItKa4R47+UA3yGqnfynZdoO0k/j5gZ0MLpVDdnQoa dZAzGuPDhMR83zBzAYLS/IBLLziOxQF3Bow8RSC0wUxE8NNzmm88F8c6dshimhVe ws2P1jbCC3r0Z0RvV3jEhmeh9oc7 -----END CERTIFICATE-----Generated at Mon Sep 21 17:08:42 2026 by rpki-client