$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/5E0B2804158811EEA0660D12C4F9AE02.roa File: 5E0B2804158811EEA0660D12C4F9AE02.roa (raw, json) Hash identifier: RN/vw4EhhiGA2b5xq7QYgZp5qwRJ27nDeO7+pr9fwHE= Subject key identifier: CF:0A:17:A6:DE:55:41:36:C2:16:EC:4D:5D:66:CE:25:AA:B5:AC:CB Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 046B Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/5E0B2804158811EEA0660D12C4F9AE02.roa Signing time: Thu 01 Oct 2026 00:49:11 +0000 ROA not before: Thu 01 Oct 2026 00:49:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55424 IP address blocks: 103.17.60.0/22 maxlen: 22 103.17.60.0/23 maxlen: 24 103.17.62.0/23 maxlen: 24 117.104.224.0/21 maxlen: 24 163.47.160.0/22 maxlen: 22 163.47.160.0/24 maxlen: 24 163.47.161.0/24 maxlen: 24 163.47.162.0/24 maxlen: 24 163.47.163.0/24 maxlen: 24 175.106.32.0/22 maxlen: 22 175.106.32.0/24 maxlen: 24 175.106.33.0/24 maxlen: 24 175.106.34.0/24 maxlen: 24 175.106.35.0/24 maxlen: 24 175.106.40.0/23 maxlen: 24 175.106.48.0/24 maxlen: 24 175.106.57.0/24 maxlen: 24 175.106.58.0/24 maxlen: 24 175.106.59.0/24 maxlen: 24 175.106.60.0/24 maxlen: 24 175.106.61.0/24 maxlen: 24 175.106.62.0/24 maxlen: 24 175.106.63.0/24 maxlen: 24 2400:3080::/32 maxlen: 32 2400:3080::/45 maxlen: 45 2400:3080:8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 00:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1131 (0x46b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Oct 1 00:49:11 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6abdae07-2387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:16:99:b4:78:52:b0:19:14:df:6a:15:79: 71:5a:0c:dc:41:07:51:44:46:b6:d6:b9:57:61:26: bd:b1:0d:00:b9:aa:57:c4:e6:65:ca:99:a0:e1:d2: ce:29:68:e4:a1:b7:b1:40:d5:65:35:bc:79:a5:de: 53:28:f1:0b:24:1c:46:3d:c9:7c:8c:89:a4:ff:ac: d4:ea:e2:dc:5f:1e:5e:9c:28:ef:1d:8b:31:16:e8: c5:6a:66:0e:5e:80:2c:8f:2e:44:29:70:ac:29:e7: 47:3b:85:e2:ba:6f:b2:77:03:fa:59:3c:8d:d1:0c: 3b:43:d9:11:e7:d4:bc:09:05:53:36:55:85:1d:d3: 38:7d:b1:d0:92:51:15:a6:ef:2f:69:4c:18:6f:4a: 13:3e:a8:9d:fe:7a:2b:7c:79:8d:61:a5:05:b0:41: 30:b2:fd:89:4f:1d:d2:95:20:2f:aa:8e:93:18:98: 05:a1:45:b6:2e:06:9b:55:e0:b0:e1:eb:eb:01:55: 99:89:76:28:52:66:9c:dd:ad:21:d0:24:41:b0:97: 0f:7f:94:44:3d:81:ce:11:3e:64:ed:b9:4b:2d:f9: d3:89:fc:40:5b:d7:57:6e:8d:fe:63:b6:47:28:81: 1a:e7:93:7b:69:9c:e3:99:1d:99:ca:df:8e:50:b4: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0A:17:A6:DE:55:41:36:C2:16:EC:4D:5D:66:CE:25:AA:B5:AC:CB X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/5E0B2804158811EEA0660D12C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.17.60.0/22 117.104.224.0/21 163.47.160.0/22 175.106.32.0/22 175.106.40.0/23 175.106.48.0/24 175.106.57.0-175.106.63.255 IPv6: 2400:3080::/32 Signature Algorithm: sha256WithRSAEncryption 35:49:bf:fa:d9:a8:c0:19:6d:27:7d:a9:c3:0d:db:24:d2:d0: e5:24:e8:7b:2f:fc:0e:98:92:74:94:f0:ef:fd:18:d2:f6:69: a1:5e:15:76:b0:c9:04:77:fe:6d:39:cb:a8:80:3e:dc:6a:bb: 81:d3:5f:bb:e9:fc:d0:31:1e:dc:62:88:0f:46:a1:87:ec:dd: 80:92:41:19:e2:5d:fb:48:38:4c:7a:e3:b9:d0:ac:ba:b0:a2: d0:c8:6a:8e:f9:3a:d1:7d:13:85:a8:a5:49:a1:38:5b:22:1f: 8a:df:bf:c3:fe:e6:05:51:08:93:5c:92:84:ad:34:cc:08:74: 70:6f:cd:9b:71:1b:ef:f9:8b:ae:97:40:24:27:29:4f:27:58: fd:53:78:5a:1f:01:ab:d1:0b:48:ec:c3:6f:2a:02:aa:40:7c: a2:aa:b0:7d:3c:1d:af:3f:23:40:69:e4:4d:50:6f:cf:65:3c: e1:64:bf:ff:03:1b:b2:fd:b5:6b:dc:32:ee:f5:c1:5b:9b:1b: 03:90:db:dd:84:2e:f0:fa:4b:d1:cb:db:fe:60:b6:63:84:72: 4a:0c:17:75:a0:43:59:79:2c:44:0e:6f:f2:ea:4b:4a:d9:3a: bc:bc:23:3f:8c:b3:cf:a7:63:b7:3f:1b:dd:a7:79:89:70:0e: b6:51:63:c5 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjYxMDAxMDA0OTExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkYWUwNy0yMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVgWmbR4UrAZFN9qFXlxWgzcQQdRREa21rlXYSa9sQ0AuapXxOZlypmg4dLO KWjkobexQNVlNbx5pd5TKPELJBxGPcl8jImk/6zU6uLcXx5enCjvHYsxFujFamYO XoAsjy5EKXCsKedHO4Xium+ydwP6WTyN0Qw7Q9kR59S8CQVTNlWFHdM4fbHQklEV pu8vaUwYb0oTPqid/norfHmNYaUFsEEwsv2JTx3SlSAvqo6TGJgFoUW2LgabVeCw 4evrAVWZiXYoUmac3a0h0CRBsJcPf5REPYHOET5k7blLLfnTifxAW9dXbo3+Y7ZH KIEa55N7aZzjmR2Zyt+OULQDiwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFM8KF6be VUE2whbsTV1mziWqtazLMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAxMzgvNjNBNEQxQkNDNDdBMTFFQzhCMzQ0OTY0QzRGOUFFMDIvNUUwQjI4MDQx NTg4MTFFRUEwNjYwRDEyQzRGOUFFMDIucm9hMFoGCCsGAQUFBwEHAQH/BEswSTA4 BAIAATAyAwQCZxE8AwQDdWjgAwQCoy+gAwQCr2ogAwQBr2ooAwQAr2owMAwDBACv ajkDBAavagAwDQQCAAIwBwMFACQAMIAwDQYJKoZIhvcNAQELBQADggEBADVJv/rZ qMAZbSd9qcMN2yTS0OUk6Hsv/A6YknSU8O/9GNL2aaFeFXawyQR3/m05y6iAPtxq u4HTX7vp/NAxHtxiiA9GoYfs3YCSQRniXftIOEx647nQrLqwotDIao75OtF9E4Wo pUmhOFsiH4rfv8P+5gVRCJNckoStNMwIdHBvzZtxG+/5i66XQCQnKU8nWP1TeFof AavRC0jsw28qAqpAfKKqsH08Ha8/I0Bp5E1Qb89lPOFkv/8DG7L9tWvcMu71wVub GwOQ292ELvD6S9HL2/5gtmOEckoMF3WgQ1l5LEQOb/LqS0rZOry8Iz+Ms8+nY7c/ G92neYlwDrZRY8U= -----END CERTIFICATE-----Generated at Sun Oct 4 17:54:27 2026 by rpki-client