$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa File: EF2F0372C9F211E986C3B486C4F9AE02.roa (raw, json) Hash identifier: jEFOEvIk0nYx9CfGPZRFUfcAER2zwNLf6Owd/4i26TA= Subject key identifier: 47:4A:2C:90:21:33:79:30:42:C7:1B:D6:A9:40:59:F8:9A:AB:55:DD Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1F14 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa Signing time: Thu 22 Oct 2026 18:49:56 +0000 ROA not before: Thu 22 Oct 2026 18:49:56 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 63989 IP address blocks: 103.58.148.0/24 maxlen: 24 103.58.149.0/24 maxlen: 24 103.58.150.0/24 maxlen: 24 103.58.151.0/24 maxlen: 24 103.82.248.0/24 maxlen: 24 103.82.249.0/24 maxlen: 24 103.82.250.0/24 maxlen: 24 103.82.251.0/24 maxlen: 24 202.9.89.0/24 maxlen: 24 202.9.90.0/24 maxlen: 24 202.94.166.0/24 maxlen: 24 2402:6880:1000::/48 maxlen: 48 2402:6880:2000::/48 maxlen: 48 2402:6880:2100::/48 maxlen: 48 2402:6880:3000::/48 maxlen: 48 2402:6880:4000::/48 maxlen: 48 2402:6880:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 16:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7956 (0x1f14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Oct 22 18:49:56 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6ada5ad4-7dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:c2:46:b7:cb:e6:fb:87:26:d9:0d:47:6b: ba:1c:0a:a9:e2:c8:0a:09:a3:7f:48:3b:66:63:89: 50:d9:24:df:77:a1:e0:67:61:99:6d:0a:a9:fd:7e: 97:75:1b:b3:8f:2d:d3:59:4d:ce:26:42:3c:c8:74: bd:f8:7a:61:bf:56:be:77:c7:7d:aa:26:4f:7d:8a: c1:29:82:40:86:f1:70:01:88:06:5e:53:1d:aa:de: 1d:0d:39:33:31:ce:44:69:5c:f9:1c:2a:44:4f:87: de:0f:56:43:e6:ca:39:d2:21:ab:89:22:21:1e:94: c5:bd:29:ab:0b:d1:03:fb:c1:e1:a2:72:06:17:d6: e6:d7:f1:c3:2d:61:46:3b:f4:0a:be:37:51:8e:09: df:39:a1:cd:09:1f:6b:d5:26:4e:81:26:36:e0:23: b3:36:d4:38:74:04:ee:01:11:b0:17:2d:58:24:cf: 48:5c:b9:58:aa:92:1e:1b:15:bb:48:22:c4:5f:77: da:e9:19:9f:a2:31:1c:26:8d:1f:df:a6:5c:b0:95: a7:3d:26:1e:70:47:42:be:ec:bc:87:2c:22:65:95: 68:46:1f:b1:3b:3b:93:48:80:38:c9:cb:dd:99:bc: 36:33:cf:29:f2:b9:f8:b4:88:14:48:82:21:03:72: 2a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4A:2C:90:21:33:79:30:42:C7:1B:D6:A9:40:59:F8:9A:AB:55:DD X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.58.148.0/22 103.82.248.0/22 202.9.89.0-202.9.90.255 202.94.166.0/24 IPv6: 2402:6880:1000::/48 2402:6880:2000::/48 2402:6880:2100::/48 2402:6880:3000::/48 2402:6880:4000::/48 2402:6880:5000::/48 Signature Algorithm: sha256WithRSAEncryption 1c:c7:41:9b:84:c6:60:fa:7c:01:fd:2d:4e:89:a2:17:a4:7b: a4:14:e7:c1:2b:52:f0:dd:18:be:b7:09:92:e4:0e:0a:57:79: 65:ad:dc:e0:b4:96:cf:26:4f:45:03:da:5f:88:1f:8e:31:61: f6:f9:af:7b:5b:b9:1a:de:e4:1f:1f:01:20:32:fc:9a:2b:ad: b5:c8:2f:89:3f:a2:7f:0a:31:07:a1:5b:45:c1:3f:f5:7b:b0: 18:a0:07:63:40:67:36:e2:ae:30:15:18:d5:9a:38:cb:d8:69: e4:77:64:3c:35:82:42:a1:e6:5f:5e:41:dd:8c:d1:fc:f4:8f: dd:7b:3c:9e:37:c8:3e:ab:42:06:99:66:20:cb:ba:dc:9a:c9: a5:30:a0:06:e2:fa:b7:a0:b6:3f:54:9a:dd:54:0a:98:7d:f5: 44:e4:7e:1b:43:20:37:c7:20:7f:3e:b3:42:e6:00:b5:b3:37: c5:85:c1:3a:28:b4:68:d4:88:89:6d:dc:d6:f1:6f:b2:44:a9: eb:1c:df:9b:5f:03:e3:2c:4f:96:6b:4c:ab:15:6f:59:8b:16: 1f:65:15:8f:78:c2:9f:45:76:22:8c:74:a2:d9:7e:f6:3c:fe: 7d:2b:9c:1e:62:02:61:82:0c:90:9e:f3:90:3f:45:3f:87:fd: 1a:a2:18:92 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICHxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjYxMDIyMTg0OTU2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRhNWFkNC03ZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwrCRrfL5vuHJtkNR2u6HAqp4sgKCaN/SDtmY4lQ2STfd6HgZ2GZbQqp/X6X dRuzjy3TWU3OJkI8yHS9+Hphv1a+d8d9qiZPfYrBKYJAhvFwAYgGXlMdqt4dDTkz Mc5EaVz5HCpET4feD1ZD5so50iGriSIhHpTFvSmrC9ED+8HhonIGF9bm1/HDLWFG O/QKvjdRjgnfOaHNCR9r1SZOgSY24COzNtQ4dATuARGwFy1YJM9IXLlYqpIeGxW7 SCLEX3fa6RmfojEcJo0f36ZcsJWnPSYecEdCvuy8hywiZZVoRh+xOzuTSIA4ycvd mbw2M88p8rn4tIgUSIIhA3IqpQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFEdKLJAh M3kwQscb1qlAWfiaq1XdMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRBRDcvRTM3RUM4RTY4RjRFMTFFNjhFRTdDRTZFQzRGOUFFMDIvRUYyRjAzNzJD OUYyMTFFOTg2QzNCNDg2QzRGOUFFMDIucm9hMHcGCCsGAQUFBwEHAQH/BGgwZjAm BAIAATAgAwQCZzqUAwQCZ1L4MAwDBADKCVkDBADKCVoDBADKXqYwPAQCAAIwNgMH ACQCaIAQAAMHACQCaIAgAAMHACQCaIAhAAMHACQCaIAwAAMHACQCaIBAAAMHACQC aIBQADANBgkqhkiG9w0BAQsFAAOCAQEAHMdBm4TGYPp8Af0tTomiF6R7pBTnwStS 8N0YvrcJkuQOCld5Za3c4LSWzyZPRQPaX4gfjjFh9vmve1u5Gt7kHx8BIDL8miut tcgviT+ifwoxB6FbRcE/9XuwGKAHY0BnNuKuMBUY1Zo4y9hp5HdkPDWCQqHmX15B 3YzR/PSP3Xs8njfIPqtCBplmIMu63JrJpTCgBuL6t6C2P1Sa3VQKmH31ROR+G0Mg N8cgfz6zQuYAtbM3xYXBOii0aNSIiW3c1vFvskSp6xzfm18D4yxPlmtMqxVvWYsW H2UVj3jCn0V2Iox0otl+9jz+fSucHmICYYIMkJ7zkD9FP4f9GqIYkg== -----END CERTIFICATE-----Generated at Thu Nov 5 12:47:52 2026 by rpki-client