$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa File: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (raw, json) Hash identifier: Q3OkQh6PxZJ04kB9hu0V9CmkgIC0V/Hx0jStxEAar3c= Subject key identifier: 5E:D3:7E:91:8E:57:C4:7C:49:EB:3B:68:63:6C:34:F9:2C:C1:6F:FD Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 129E Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa Signing time: Fri 18 Sep 2026 17:33:43 +0000 ROA not before: Fri 18 Sep 2026 17:33:43 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 24439 IP address blocks: 103.202.148.0/22 maxlen: 22 103.202.148.0/24 maxlen: 24 103.202.149.0/24 maxlen: 24 103.202.150.0/24 maxlen: 24 103.202.151.0/24 maxlen: 24 117.103.88.0/21 maxlen: 21 117.103.88.0/24 maxlen: 24 117.103.89.0/24 maxlen: 24 117.103.90.0/23 maxlen: 23 117.103.92.0/24 maxlen: 24 117.103.93.0/24 maxlen: 24 117.103.94.0/24 maxlen: 24 117.103.95.0/24 maxlen: 24 203.78.152.0/22 maxlen: 22 203.78.152.0/24 maxlen: 24 203.78.153.0/24 maxlen: 24 203.78.154.0/24 maxlen: 24 203.78.155.0/24 maxlen: 24 2405:400::/32 maxlen: 32 2405:400:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4766 (0x129e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Sep 18 17:33:43 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aad75f7-2741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:48:6c:91:db:de:65:bf:00:35:7c:4e:14:f6: 7c:34:24:8a:58:c0:02:5b:16:03:5f:79:cb:df:a3: 87:aa:70:d3:a6:12:ea:38:33:8f:e2:36:5a:18:ed: c2:c3:e6:18:cc:61:e5:d6:09:d2:da:6a:1c:fb:8b: e7:fb:26:31:fa:22:e4:d7:40:1a:54:9e:6a:70:4e: 7c:6d:12:62:93:e4:56:dc:7f:9e:e7:db:29:ac:ca: e8:e3:18:a2:ff:34:bb:9a:f3:93:bb:d6:4b:50:66: 63:e5:41:93:62:11:b1:fa:80:93:ba:d0:64:3f:7d: 3d:f1:4b:77:28:31:17:77:d0:30:10:06:81:dd:b9: ae:00:0a:e3:c3:44:cc:a3:4a:e9:e2:90:b8:04:4c: 06:16:95:f8:77:b6:ce:e7:34:40:20:9a:a7:3e:02: 19:65:31:5d:81:40:ce:6c:df:c3:da:b7:01:67:71: 2c:05:71:2b:97:c1:73:da:2c:8f:b8:2f:cb:df:94: 0f:86:3f:d7:41:a9:8f:eb:e6:c5:83:90:e6:15:a6: 27:29:be:e1:20:74:01:e3:f1:57:04:dd:2d:4f:fe: 8d:7d:63:9f:4a:67:ee:52:46:d9:5a:6b:30:76:b5: b0:5e:89:c7:74:68:ad:f6:95:72:bd:84:f7:c1:52: a3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D3:7E:91:8E:57:C4:7C:49:EB:3B:68:63:6C:34:F9:2C:C1:6F:FD X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.202.148.0/22 117.103.88.0/21 203.78.152.0/22 IPv6: 2405:400::/32 Signature Algorithm: sha256WithRSAEncryption c7:24:16:bf:fe:ab:7b:2d:11:55:8b:0d:aa:ed:e3:c5:9f:b2: a8:5e:ad:3e:c1:d0:3a:0a:c2:85:dd:1b:eb:1f:d6:1e:31:77: 97:03:93:80:ba:8c:43:d5:39:c4:40:0c:da:18:5f:4e:57:89: bd:39:cc:ae:e5:2e:07:81:ab:6a:1a:37:4b:12:51:fe:2a:9c: b0:f0:5b:40:12:72:c1:70:8a:d1:6d:32:31:cd:1d:d3:7c:2f: 20:ce:c3:a6:c9:ef:fe:20:00:7a:7c:fa:6f:07:18:9f:2f:24: 68:fa:4f:63:ec:b3:13:96:99:67:34:10:56:80:f2:64:70:5a: 1e:cf:44:1a:fa:2f:13:ff:61:95:68:bd:07:70:07:88:65:59: 0b:12:54:26:d5:6d:7c:2e:53:9c:eb:d9:17:f3:30:8b:bd:f3: 26:a0:f4:50:46:70:f0:93:ca:c0:7d:64:76:1a:fe:ff:0f:8f: d1:a1:54:86:bd:7e:be:bc:4e:62:0e:84:83:3e:48:96:96:ba: 78:bf:77:0c:18:8f:6a:72:57:2e:19:8e:99:4c:15:d0:20:5e: d5:d2:22:e6:5f:61:dd:5b:e2:3a:9c:04:d0:4f:58:d0:85:ef: 3f:7f:4f:15:1f:af:05:86:2f:1c:2b:ef:52:bf:77:01:65:b4: 66:72:a6:aa -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICEp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjYwOTE4MTczMzQzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFkNzVmNy0yNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20hskdveZb8ANXxOFPZ8NCSKWMACWxYDX3nL36OHqnDTphLqODOP4jZaGO3C w+YYzGHl1gnS2moc+4vn+yYx+iLk10AaVJ5qcE58bRJik+RW3H+e59sprMro4xii /zS7mvOTu9ZLUGZj5UGTYhGx+oCTutBkP3098Ut3KDEXd9AwEAaB3bmuAArjw0TM o0rp4pC4BEwGFpX4d7bO5zRAIJqnPgIZZTFdgUDObN/D2rcBZ3EsBXErl8Fz2iyP uC/L35QPhj/XQamP6+bFg5DmFaYnKb7hIHQB4/FXBN0tT/6NfWOfSmfuUkbZWmsw drWwXonHdGit9pVyvYT3wVKjOwIDAQABo4ICezCCAncwHQYDVR0OBBYEFF7TfpGO V8R8Ses7aGNsNPkswW/9MB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzVCMjQvM0JBNjkxQThGODNEMTFFOEIwRUMzNDQ4QzRGOUFFMDIvNUFDN0Y5ODZG ODNFMTFFOEIxRkE4RjRBQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ8qUAwQDdWdYAwQCy06YMA0EAgACMAcDBQAkBQQAMA0GCSqGSIb3 DQEBCwUAA4IBAQDHJBa//qt7LRFViw2q7ePFn7KoXq0+wdA6CsKF3RvrH9YeMXeX A5OAuoxD1TnEQAzaGF9OV4m9Ocyu5S4HgatqGjdLElH+Kpyw8FtAEnLBcIrRbTIx zR3TfC8gzsOmye/+IAB6fPpvBxifLyRo+k9j7LMTlplnNBBWgPJkcFoez0Qa+i8T /2GVaL0HcAeIZVkLElQm1W18LlOc69kX8zCLvfMmoPRQRnDwk8rAfWR2Gv7/D4/R oVSGvX6+vE5iDoSDPkiWlrp4v3cMGI9qclcuGY6ZTBXQIF7V0iLmX2HdW+I6nATQ T1jQhe8/f08VH68Fhi8cK+9Sv3cBZbRmcqaq -----END CERTIFICATE-----Generated at Tue Sep 22 21:42:17 2026 by rpki-client