$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/D6138A3C292A11EB9CEDCC26C4F9AE02.roa File: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (raw, json) Hash identifier: 4W1AMLtPIJWXDmSDlQKbcJdkhAxzytpHT4452Y9YBVY= Subject key identifier: 15:1F:E1:F7:2B:83:9B:62:55:E0:C1:7A:71:C1:BA:EE:61:3B:11:A7 Certificate issuer: /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Certificate serial: 085F Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/D6138A3C292A11EB9CEDCC26C4F9AE02.roa Signing time: Mon 02 Nov 2026 21:40:42 +0000 ROA not before: Mon 02 Nov 2026 21:40:42 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 55752 IP address blocks: 27.121.88.0/22 maxlen: 24 103.225.140.0/22 maxlen: 22 103.225.140.0/24 maxlen: 24 103.225.141.0/24 maxlen: 24 103.225.142.0/24 maxlen: 24 103.225.143.0/24 maxlen: 24 122.102.110.0/23 maxlen: 24 175.158.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2143 (0x85f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Validity Not Before: Nov 2 21:40:42 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ae9035a-9a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2e:ec:0c:17:9c:11:67:5b:0e:03:63:31:23: f2:79:df:52:5a:45:d6:a4:97:f9:c8:f1:c8:65:76: 8f:41:b4:cc:ba:fe:a0:76:36:b5:d3:34:07:dd:e7: b3:cc:2d:f8:03:7e:a0:34:8a:7f:2d:81:d8:b8:14: 03:e6:97:33:dc:a2:bb:67:d6:bb:91:2a:f7:36:2a: 4d:1a:7a:8a:18:28:66:84:0b:42:f2:c7:b6:fb:0c: c3:61:db:69:f8:9a:60:5a:1b:73:1b:56:2d:52:c0: 07:ce:5a:6c:b7:d5:4a:6f:f4:c3:de:f6:db:ea:80: f7:27:c3:90:66:df:7b:c5:07:ff:ab:68:3a:22:91: f2:0f:e3:c3:87:ea:6a:e8:bc:7e:08:80:74:9d:26: ca:9c:25:10:99:bb:12:e6:c3:84:de:a0:db:7f:e0: e9:52:b7:55:7f:f5:07:ed:6d:d2:94:80:e1:d6:f9: 6e:58:51:5e:63:87:7e:5d:df:5c:53:e7:b2:81:0b: 94:e7:67:f7:ab:bc:f8:da:e0:ca:c8:b1:f0:a9:f8: c3:56:42:63:39:1a:3d:88:30:53:e7:2a:d3:8c:2e: 25:e5:ca:5f:8c:49:69:d1:73:e2:7c:ee:bf:c9:f3: 64:65:54:08:d6:04:63:1b:e5:2a:ea:97:c9:c7:36: eb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1F:E1:F7:2B:83:9B:62:55:E0:C1:7A:71:C1:BA:EE:61:3B:11:A7 X509v3 Authority Key Identifier: keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/D6138A3C292A11EB9CEDCC26C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.121.88.0/22 103.225.140.0/22 122.102.110.0/23 175.158.108.0/22 Signature Algorithm: sha256WithRSAEncryption 42:a3:43:3e:d6:06:09:0b:72:be:ca:df:fe:b7:90:b5:e3:43: b2:1e:5b:4d:5d:15:97:62:dd:90:b2:71:d1:05:0d:26:f2:3e: f8:87:c8:21:fa:e4:73:7c:fd:41:b5:50:64:d0:05:c7:37:24: d3:92:ce:c7:da:57:9e:44:5e:3d:4d:a1:ba:b3:07:68:39:9a: 07:82:fc:53:b9:d1:ec:a2:b7:35:71:0a:f5:85:cc:41:78:76: f9:ab:85:fa:19:aa:c9:f3:2c:2d:67:1f:65:72:e6:68:97:c6: 5c:e6:a8:15:1c:1b:29:cb:14:76:d2:e3:d1:d6:a8:f5:f4:a6: ab:af:fd:ce:58:6f:af:0a:39:0b:22:3b:17:8c:0b:78:6a:3f: b0:51:fb:e9:b7:e5:24:67:cf:68:f4:f8:06:76:96:87:04:72: 7a:29:dd:50:a3:8d:1c:38:f0:08:88:e9:84:dd:9b:0d:b4:53: 66:1f:9b:be:77:cf:69:e2:cf:b6:19:97:c3:13:65:fb:60:e0: 76:0e:5d:dc:96:aa:6c:92:f2:72:01:b6:7a:ee:e5:1d:f2:f1: 75:3d:ad:f1:a9:5c:d0:b8:22:66:50:60:e5:71:6c:fd:46:e5: b8:e9:6a:17:85:6f:fc:f6:01:38:c4:39:90:35:7b:d6:11:79: 22:97:98:7f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFNzgxMTAvBgNVBAUTKDVFRTdDRjQzOUE0MjIzMjMyOTgyQTJDQjRERTU0RjM3 QzcyMDVBQTkwHhcNMjYxMTAyMjE0MDQyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU5MDM1YS05YTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArS7sDBecEWdbDgNjMSPyed9SWkXWpJf5yPHIZXaPQbTMuv6gdja10zQH3eez zC34A36gNIp/LYHYuBQD5pcz3KK7Z9a7kSr3NipNGnqKGChmhAtC8se2+wzDYdtp +JpgWhtzG1YtUsAHzlpst9VKb/TD3vbb6oD3J8OQZt97xQf/q2g6IpHyD+PDh+pq 6Lx+CIB0nSbKnCUQmbsS5sOE3qDbf+DpUrdVf/UH7W3SlIDh1vluWFFeY4d+Xd9c U+eygQuU52f3q7z42uDKyLHwqfjDVkJjORo9iDBT5yrTjC4l5cpfjElp0XPifO6/ yfNkZVQI1gRjG+Uq6pfJxzbrtQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFBUf4fcr g5tiVeDBenHBuu5hOxGnMB8GA1UdIwQYMBaAFF7nz0OaQiMjKYKiy03lTzfHIFqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3OC9GMUY0RDNDRTI5 MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5TXBncUxMVGVWUE44Y2dX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1ZlBRNXBDSXlNcGdxTExUZVZQTjhjZ1dxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFNzgvRjFGNEQzQ0UyOTI5MTFFQjk0RTM4RDI2QzRGOUFFMDIvRDYxMzhBM0My OTJBMTFFQjlDRURDQzI2QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCG3lYAwQCZ+GMAwQBemZuAwQCr55sMA0GCSqGSIb3DQEBCwUAA4IB AQBCo0M+1gYJC3K+yt/+t5C140OyHltNXRWXYt2QsnHRBQ0m8j74h8gh+uRzfP1B tVBk0AXHNyTTks7H2leeRF49TaG6swdoOZoHgvxTudHsorc1cQr1hcxBeHb5q4X6 GarJ8ywtZx9lcuZol8Zc5qgVHBspyxR20uPR1qj19Karr/3OWG+vCjkLIjsXjAt4 aj+wUfvpt+UkZ89o9PgGdpaHBHJ6Kd1Qo40cOPAIiOmE3ZsNtFNmH5u+d89p4s+2 GZfDE2X7YOB2Dl3clqpskvJyAbZ67uUd8vF1Pa3xqVzQuCJmUGDlcWz9RuW46WoX hW/89gE4xDmQNXvWEXkil5h/ -----END CERTIFICATE-----Generated at Sun Nov 15 19:01:00 2026 by rpki-client