$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa File: BB799DA8844011F09054B049C4F9AE02.roa (raw, json) Hash identifier: EiezE1fLAY+PU0Tsr1vkVTWP69qX87KKOYiHmO4wZNA= Subject key identifier: E4:49:E1:B4:DE:BC:3E:38:CD:BC:57:4F:9B:03:02:1F:5F:A1:DE:16 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2C3A Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:46:54 +0000 ROA not before: Fri 02 Oct 2026 15:46:54 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 31898 IP address blocks: 43.245.96.0/22 maxlen: 24 43.245.108.0/22 maxlen: 24 101.100.192.0/18 maxlen: 24 103.9.100.0/22 maxlen: 24 103.11.188.0/22 maxlen: 24 103.15.232.0/22 maxlen: 24 103.104.196.0/24 maxlen: 24 111.235.136.0/22 maxlen: 24 119.31.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 15:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11322 (0x2c3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Oct 2 15:46:54 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abfd1ee-01de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7b:2c:bb:88:75:45:e4:c3:61:a5:ee:00:6d: b0:ff:ca:a6:cd:cf:18:54:39:75:38:7c:e2:1f:60: 2f:82:40:58:c5:af:d6:79:20:46:99:83:0e:c7:ea: 6c:2a:18:78:d0:41:b7:69:fa:ae:bf:d9:69:c9:10: 2e:b1:2d:79:19:44:e4:f7:db:6f:e0:8f:29:27:a0: 22:78:d2:f2:d6:fc:89:33:27:e4:31:91:cb:b5:fd: 93:00:2f:13:9d:c0:de:20:1a:33:12:cf:2c:73:f3: e4:35:56:d3:62:f5:05:64:ca:07:e4:db:40:1f:2e: af:6f:15:59:ca:7e:74:e6:14:5a:71:99:f5:24:f7: 0b:e9:df:c1:07:56:c8:14:7f:25:11:22:d1:a8:d9: 3d:07:1a:99:d1:7f:13:db:d7:61:a6:29:65:b5:7b: b5:97:4a:25:72:f2:18:df:6d:fe:4a:c4:fa:2c:a1: c4:8a:b7:a3:cb:62:b5:17:4f:63:74:3c:a4:b0:d1: 24:09:11:a4:87:14:81:3b:84:66:00:9a:86:3b:cd: 65:9c:43:38:7c:a0:45:36:be:6a:e8:41:33:7c:f0: 7d:77:21:e4:54:79:84:b2:33:fd:c1:da:59:37:03: 69:cf:59:75:8e:4f:0e:e7:90:60:bf:c5:11:0a:7d: c9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:49:E1:B4:DE:BC:3E:38:CD:BC:57:4F:9B:03:02:1F:5F:A1:DE:16 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.96.0/22 43.245.108.0/22 101.100.192.0/18 103.9.100.0/22 103.11.188.0/22 103.15.232.0/22 103.104.196.0/24 111.235.136.0/22 119.31.232.0/21 Signature Algorithm: sha256WithRSAEncryption 11:7a:0c:49:66:8a:3f:74:76:a6:8e:95:5a:e8:95:3f:96:4a: 41:83:d0:5b:57:e8:c4:05:e9:4f:c6:9c:ea:e6:0f:ec:16:c8: c5:51:66:0e:cc:b1:d5:ad:34:0a:06:ec:3b:90:45:a2:d8:b3: c6:7a:36:d6:97:33:ac:ad:68:ca:03:0a:53:65:4c:66:6f:70: 82:45:18:b0:8b:84:ed:a1:15:10:1c:ad:71:e9:78:fd:dc:52: 7e:28:11:5d:4f:e5:2c:f5:d0:cb:0f:4c:81:10:71:c5:36:6a: 1d:59:ee:57:ca:3b:6e:b9:65:9d:59:74:8f:2b:5f:74:d1:12: 25:ba:42:7c:b4:21:dc:3a:4b:09:fb:89:53:b1:42:76:70:de: de:e6:59:5b:f8:22:87:ef:71:ee:38:78:65:f6:61:f3:d9:8d: 77:4b:f9:46:f8:bf:30:39:cc:87:17:c7:d4:3a:b2:61:d3:7e: f9:49:fe:9c:33:24:7c:f5:7d:f0:f2:46:df:d2:0c:77:6c:f9: cd:1f:97:81:cb:27:01:e0:c6:fa:64:a3:fd:ae:da:2e:2e:89: 5d:1c:87:04:7f:d3:1b:a0:ed:89:8b:bb:d3:1c:b8:bc:70:cc: 44:d7:1c:aa:76:18:b4:13:b3:12:c5:be:b4:38:22:2b:ef:48: 88:44:74:f9 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICLDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjYxMDAyMTU0NjU0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmZDFlZS0wMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3ssu4h1ReTDYaXuAG2w/8qmzc8YVDl1OHziH2AvgkBYxa/WeSBGmYMOx+ps Khh40EG3afquv9lpyRAusS15GUTk99tv4I8pJ6AieNLy1vyJMyfkMZHLtf2TAC8T ncDeIBozEs8sc/PkNVbTYvUFZMoH5NtAHy6vbxVZyn505hRacZn1JPcL6d/BB1bI FH8lESLRqNk9BxqZ0X8T29dhpilltXu1l0olcvIY323+SsT6LKHEirejy2K1F09j dDyksNEkCRGkhxSBO4RmAJqGO81lnEM4fKBFNr5q6EEzfPB9dyHkVHmEsjP9wdpZ NwNpz1l1jk8O55Bgv8URCn3JnQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFORJ4bTe vD44zbxXT5sDAh9fod4WMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZFQzUvMkRFQ0FFNTYwRTU2MTFFNEI2RjE5NTNBQzRGOUFFMDIvQkI3OTlEQTg4 NDQwMTFGMDkwNTRCMDQ5QzRGOUFFMDIucm9hME8GCCsGAQUFBwEHAQH/BEAwPjA8 BAIAATA2AwQCK/VgAwQCK/VsAwQGZWTAAwQCZwlkAwQCZwu8AwQCZw/oAwQAZ2jE AwQCb+uIAwQDdx/oMA0GCSqGSIb3DQEBCwUAA4IBAQARegxJZoo/dHamjpVa6JU/ lkpBg9BbV+jEBelPxpzq5g/sFsjFUWYOzLHVrTQKBuw7kEWi2LPGejbWlzOsrWjK AwpTZUxmb3CCRRiwi4TtoRUQHK1x6Xj93FJ+KBFdT+Us9dDLD0yBEHHFNmodWe5X yjtuuWWdWXSPK1900RIlukJ8tCHcOksJ+4lTsUJ2cN7e5llb+CKH73HuOHhl9mHz 2Y13S/lG+L8wOcyHF8fUOrJh0375Sf6cMyR89X3w8kbf0gx3bPnNH5eByycB4Mb6 ZKP9rtouLoldHIcEf9MboO2Ji7vTHLi8cMxE1xyqdhi0E7MSxb60OCIr70iIRHT5 -----END CERTIFICATE-----Generated at Thu Nov 5 18:51:56 2026 by rpki-client