$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/F696778AFE6C11EF8DF5DD5FC4F9AE02.roa File: F696778AFE6C11EF8DF5DD5FC4F9AE02.roa (raw, json) Hash identifier: GAnMe2Hm7sGYl5a5xsqy0vKkI4AsAshbLVbItmS9pNk= Subject key identifier: 54:5B:26:DD:A2:F5:23:42:EC:7F:62:75:A3:76:AE:C7:F3:5A:3F:F4 Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Certificate serial: 025D Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/F696778AFE6C11EF8DF5DD5FC4F9AE02.roa Signing time: Fri 09 Oct 2026 03:51:39 +0000 ROA not before: Fri 09 Oct 2026 03:51:39 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 138677 IP address blocks: 103.134.200.0/23 maxlen: 23 103.134.200.0/24 maxlen: 24 103.134.201.0/24 maxlen: 24 119.235.11.0/24 maxlen: 24 2402:1120::/32 maxlen: 32 2402:1120::/48 maxlen: 48 2402:1120:1::/48 maxlen: 48 2402:1120:2::/48 maxlen: 48 2402:1120:3::/48 maxlen: 48 2402:1120:4::/48 maxlen: 48 2402:1120:5::/48 maxlen: 48 2402:1120:6::/48 maxlen: 48 2402:1120:7::/48 maxlen: 48 2402:1120:8::/48 maxlen: 48 2402:1120:9::/48 maxlen: 48 2402:1120:a::/48 maxlen: 48 2402:1120:b::/48 maxlen: 48 2402:1120:c::/48 maxlen: 48 2402:1120:d::/48 maxlen: 48 2402:1120:e::/48 maxlen: 48 2402:1120:f::/48 maxlen: 48 2402:1120:10::/48 maxlen: 48 2402:1120:11::/48 maxlen: 48 2402:1120:12::/48 maxlen: 48 2402:1120:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C04E, serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Validity Not Before: Oct 9 03:51:39 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac864cb-ce14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:d4:d7:dc:59:a8:e0:8c:96:ed:34:f1:00: 1c:b0:70:04:7a:88:43:73:37:d5:61:e5:27:d9:fb: ce:30:e0:94:ea:2e:99:09:63:83:21:3c:18:a5:dc: 8e:06:10:f5:1c:88:15:f9:5b:a4:6a:fe:18:0b:f8: a6:49:68:92:5a:66:f1:da:0e:00:0e:2a:db:9c:33: fb:1b:e9:c0:c8:ae:75:cb:52:5d:f2:00:28:92:56: d1:f1:49:6f:cd:66:16:13:ab:38:6e:c9:8f:64:a6: 56:2e:93:80:2c:9e:37:31:e8:e1:83:47:c1:c9:81: dd:92:db:32:4d:de:46:f9:85:88:5e:b9:c2:60:48: 2d:bc:43:25:fa:88:8d:3b:88:38:97:fd:cb:17:c6: 47:dc:4a:9b:e1:63:80:a6:dc:2a:fa:5e:94:07:a3: 7d:b3:95:50:71:39:60:90:83:15:2c:08:ca:07:19: 3e:c7:af:4d:90:a2:5e:ed:0a:82:c1:cc:b3:98:b0: 64:c0:6d:62:5a:01:b0:9a:de:84:db:54:ce:42:e7: 37:9a:0c:58:cf:20:e9:4a:b4:9d:fd:15:64:51:f4: 5d:63:cb:55:23:0b:7e:0f:10:c6:39:39:64:ac:41: 94:38:ce:75:95:95:39:79:ef:38:68:ef:ff:5d:56: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5B:26:DD:A2:F5:23:42:EC:7F:62:75:A3:76:AE:C7:F3:5A:3F:F4 X509v3 Authority Key Identifier: keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/F696778AFE6C11EF8DF5DD5FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.200.0/23 119.235.11.0/24 IPv6: 2402:1120::/32 Signature Algorithm: sha256WithRSAEncryption 63:32:9e:e1:5b:73:bc:80:1e:21:81:02:6f:53:75:3a:7b:17: f0:c9:92:0c:df:b1:60:c6:05:ca:2f:a3:81:10:50:e5:42:0d: 23:a5:56:c2:1f:e2:35:58:87:fa:54:0a:53:ba:2a:2b:01:66: c9:3b:e4:c9:66:80:78:84:37:e0:bf:ad:36:1d:e9:72:57:26: 84:4a:b5:78:7b:69:51:93:d7:8d:b8:8e:7e:61:2c:f2:0d:56: d7:39:51:3f:05:e8:20:63:10:09:ca:fc:82:4f:17:4f:97:cc: 9f:0c:50:fd:39:5b:12:78:c2:38:fa:30:16:69:18:db:b2:b1: b3:36:b1:1d:66:e2:a0:7c:64:57:66:43:e3:88:d7:95:54:59: a7:da:8d:4c:1d:24:6b:86:43:90:6c:17:ae:6b:d5:db:43:b6: 21:9a:6b:57:f2:86:9f:f0:5a:7a:36:b2:45:75:63:2d:36:1b: 55:d1:d8:24:65:87:76:cc:be:62:3f:33:c6:e9:03:69:73:d1: 2c:3a:b9:78:9e:ee:c9:da:cb:86:0d:33:65:32:2d:1f:45:1f: 1a:16:d0:1a:8a:99:a5:89:f6:45:58:b3:98:1a:a5:9d:72:f8: e3:79:3b:e7:52:39:92:d4:51:21:16:1d:05:89:2e:60:70:eb: 39:51:f8:cc -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwNEUxMTAvBgNVBAUTKEFBRENEQjg5RTU0QjY3N0M0MTA0NjM3OTlGOTU4Njgx NUM0MEZBNEIwHhcNMjYxMDA5MDM1MTM5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM4NjRjYi1jZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnHU19xZqOCMlu008QAcsHAEeohDczfVYeUn2fvOMOCU6i6ZCWODITwYpdyO BhD1HIgV+Vukav4YC/imSWiSWmbx2g4ADirbnDP7G+nAyK51y1Jd8gAoklbR8Ulv zWYWE6s4bsmPZKZWLpOALJ43Mejhg0fByYHdktsyTd5G+YWIXrnCYEgtvEMl+oiN O4g4l/3LF8ZH3Eqb4WOAptwq+l6UB6N9s5VQcTlgkIMVLAjKBxk+x69NkKJe7QqC wcyzmLBkwG1iWgGwmt6E21TOQuc3mgxYzyDpSrSd/RVkUfRdY8tVIwt+DxDGOTlk rEGUOM51lZU5ee84aO//XVbOiwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFRbJt2i 9SNC7H9idaN2rsfzWj/0MB8GA1UdIwQYMBaAFKrc24nlS2d8QQRjeZ+VhoFcQPpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA0RS8yMkU2ODUyNjUx MzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFozeEJCR041bjVXR2dWeEEt a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F0emJpZVZMWjN4QkJHTjVuNVdHZ1Z4QS1rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0MwNEUvMjJFNjg1MjY1MTMyMTFFRTk2NENDRjVCQzRGOUFFMDIvRjY5Njc3OEFG RTZDMTFFRjhERjVERDVGQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ4bIAwQAd+sLMA0EAgACMAcDBQAkAhEgMA0GCSqGSIb3DQEBCwUA A4IBAQBjMp7hW3O8gB4hgQJvU3U6exfwyZIM37FgxgXKL6OBEFDlQg0jpVbCH+I1 WIf6VApTuiorAWbJO+TJZoB4hDfgv602HelyVyaESrV4e2lRk9eNuI5+YSzyDVbX OVE/BeggYxAJyvyCTxdPl8yfDFD9OVsSeMI4+jAWaRjbsrGzNrEdZuKgfGRXZkPj iNeVVFmn2o1MHSRrhkOQbBeua9XbQ7YhmmtX8oaf8Fp6NrJFdWMtNhtV0dgkZYd2 zL5iPzPG6QNpc9EsOrl4nu7J2suGDTNlMi0fRR8aFtAaipmlifZFWLOYGqWdcvjj eTvnUjmS1FEhFh0FiS5gcOs5UfjM -----END CERTIFICATE-----Generated at Mon Oct 12 22:00:25 2026 by rpki-client