$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa File: EF2F0372C9F211E986C3B486C4F9AE02.roa (raw, json) Hash identifier: RROYOUUPLvax3cmbs4qKsEl0RGd9SJbJvz0BOU3WyuM= Subject key identifier: 53:1D:1A:E9:4B:3D:13:E5:AC:B2:EE:B5:BB:F2:E6:76:E9:F5:E0:77 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1EF2 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa Signing time: Sun 06 Sep 2026 09:30:57 +0000 ROA not before: Sun 06 Sep 2026 09:30:57 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 63989 IP address blocks: 103.58.148.0/24 maxlen: 24 103.58.149.0/24 maxlen: 24 103.58.150.0/24 maxlen: 24 103.58.151.0/24 maxlen: 24 202.9.89.0/24 maxlen: 24 202.9.90.0/24 maxlen: 24 202.94.166.0/24 maxlen: 24 2402:6880:1000::/48 maxlen: 48 2402:6880:2000::/48 maxlen: 48 2402:6880:2100::/48 maxlen: 48 2402:6880:3000::/48 maxlen: 48 2402:6880:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7922 (0x1ef2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Sep 6 09:30:57 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a9d32d1-b376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dd:47:da:5b:09:ec:63:59:7f:b0:65:f4:8d: 6c:fe:e6:5d:71:d0:73:30:0a:57:1a:14:d3:71:7b: de:d8:24:a5:05:d8:e5:36:86:18:45:67:d5:ef:c6: 69:43:ae:05:29:3a:e5:77:2b:0f:82:d4:cb:17:0f: df:50:4c:61:1b:e4:5b:0c:78:4b:6e:ac:97:fc:09: d6:e3:59:94:2b:25:b9:88:be:68:6b:60:21:58:39: d7:38:b2:20:d6:b4:53:85:57:77:06:a0:0b:39:af: 8c:8a:8d:37:ab:7e:2a:4e:e7:0c:59:3d:ad:3b:7a: b8:83:64:07:c6:cb:8f:6a:73:c7:41:ff:33:39:1e: f3:9c:29:c1:32:f6:8e:b1:8d:b5:81:57:41:c8:2a: e4:71:06:b0:9d:a7:2b:7a:79:82:75:bb:da:41:b5: c8:e7:1f:41:1d:d1:e6:fb:dd:4d:38:cc:b9:80:5a: bb:e3:6f:ca:91:7e:52:a7:ce:6a:ae:b1:17:f7:55: ac:ed:ea:40:5a:d6:18:57:6a:44:a5:0d:e1:35:07: ea:ce:91:73:53:b0:f4:83:7c:be:b5:70:17:7b:f6: 46:d5:9c:2f:86:6f:18:c6:a1:7e:25:0a:ee:1f:49: 96:6b:c9:1e:c3:8a:00:f6:c4:38:ca:5c:7c:f4:46: 75:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1D:1A:E9:4B:3D:13:E5:AC:B2:EE:B5:BB:F2:E6:76:E9:F5:E0:77 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.58.148.0/22 202.9.89.0-202.9.90.255 202.94.166.0/24 IPv6: 2402:6880:1000::/48 2402:6880:2000::/48 2402:6880:2100::/48 2402:6880:3000::/48 2402:6880:4000::/48 Signature Algorithm: sha256WithRSAEncryption d9:b2:c0:04:c2:59:83:44:ba:42:43:21:9d:fd:9a:c0:cb:17: 3d:36:97:ab:c0:58:07:2d:ea:f5:b5:73:5f:ad:2b:3e:69:ec: 52:cf:c9:da:4e:a6:ca:bd:80:ed:de:16:14:e2:f5:5c:0f:56: 5c:a4:dd:53:93:18:fd:f6:28:b4:bb:c9:60:b4:0f:c7:06:01: 5c:f0:93:3d:c9:14:af:40:e8:ac:b6:8d:01:ce:cd:f9:74:68: cd:df:31:72:73:eb:87:d0:40:cf:52:05:7b:d1:7c:5e:b3:ad: 7b:12:b1:7d:d1:44:da:38:ea:c6:fd:24:3f:96:19:e4:2b:98: 0f:7f:5e:d3:3d:d9:cc:e7:3a:8c:46:6e:fb:cb:c9:1b:a5:10: 13:b7:6b:90:e5:0b:a0:33:f9:86:0d:f1:14:86:cd:f7:86:62: de:f6:bb:14:30:5b:7a:70:f3:7c:35:e7:7b:77:86:e7:c3:37: 32:a1:10:79:21:d4:1b:4a:59:e9:80:24:20:d7:5b:07:93:74: 49:81:84:6f:9d:31:17:16:79:ba:ca:bc:7e:4c:a9:86:17:15: 18:f4:93:cb:a1:fa:f8:ff:b2:57:cd:ce:c3:b0:ac:08:80:62: 87:22:6a:e4:24:b1:6f:a1:4a:fa:76:84:1c:90:a6:13:65:76: d0:c2:03:36 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICHvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjYwOTA2MDkzMDU3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlkMzJkMS1iMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg91H2lsJ7GNZf7Bl9I1s/uZdcdBzMApXGhTTcXve2CSlBdjlNoYYRWfV78Zp Q64FKTrldysPgtTLFw/fUExhG+RbDHhLbqyX/AnW41mUKyW5iL5oa2AhWDnXOLIg 1rRThVd3BqALOa+Mio03q34qTucMWT2tO3q4g2QHxsuPanPHQf8zOR7znCnBMvaO sY21gVdByCrkcQawnacrenmCdbvaQbXI5x9BHdHm+91NOMy5gFq742/KkX5Sp85q rrEX91Ws7epAWtYYV2pEpQ3hNQfqzpFzU7D0g3y+tXAXe/ZG1Zwvhm8YxqF+JQru H0mWa8kew4oA9sQ4ylx89EZ1bQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFFMdGulL PRPlrLLutbvy5nbp9eB3MB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRBRDcvRTM3RUM4RTY4RjRFMTFFNjhFRTdDRTZFQzRGOUFFMDIvRUYyRjAzNzJD OUYyMTFFOTg2QzNCNDg2QzRGOUFFMDIucm9hMGgGCCsGAQUFBwEHAQH/BFkwVzAg BAIAATAaAwQCZzqUMAwDBADKCVkDBADKCVoDBADKXqYwMwQCAAIwLQMHACQCaIAQ AAMHACQCaIAgAAMHACQCaIAhAAMHACQCaIAwAAMHACQCaIBAADANBgkqhkiG9w0B AQsFAAOCAQEA2bLABMJZg0S6QkMhnf2awMsXPTaXq8BYBy3q9bVzX60rPmnsUs/J 2k6myr2A7d4WFOL1XA9WXKTdU5MY/fYotLvJYLQPxwYBXPCTPckUr0DorLaNAc7N +XRozd8xcnPrh9BAz1IFe9F8XrOtexKxfdFE2jjqxv0kP5YZ5CuYD39e0z3ZzOc6 jEZu+8vJG6UQE7drkOULoDP5hg3xFIbN94Zi3va7FDBbenDzfDXne3eG58M3MqEQ eSHUG0pZ6YAkINdbB5N0SYGEb50xFxZ5usq8fkyphhcVGPSTy6H6+P+yV83Ow7Cs CIBihyJq5CSxb6FK+naEHJCmE2V20MIDNg== -----END CERTIFICATE-----Generated at Mon Sep 21 05:16:56 2026 by rpki-client