$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/609B8BC27D7B11EDB6B77173C4F9AE02.roa File: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (raw, json) Hash identifier: Acj9RyH9roAZNNSpv5KzYhjPW0JcPwWCRJhozSEHt84= Subject key identifier: D9:6D:A0:79:75:1D:EB:73:BF:FA:2C:9D:C8:44:BF:23:0E:95:3B:E5 Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E Certificate serial: 1991 Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/609B8BC27D7B11EDB6B77173C4F9AE02.roa Signing time: Sun 04 Oct 2026 16:29:50 +0000 ROA not before: Sun 04 Oct 2026 16:29:50 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 60064 IP address blocks: 43.239.140.0/24 maxlen: 24 43.239.141.0/24 maxlen: 24 43.239.142.0/24 maxlen: 24 43.239.143.0/24 maxlen: 24 103.71.175.0/24 maxlen: 24 103.194.170.0/24 maxlen: 24 103.252.220.0/24 maxlen: 24 103.252.221.0/24 maxlen: 24 103.252.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6545 (0x1991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E Validity Not Before: Oct 4 16:29:50 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac27efe-da20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a9:ab:a5:a9:94:4c:cc:27:2d:7e:05:af:cc: 80:fa:51:0a:21:b4:99:a0:b6:c8:a3:01:1c:17:8f: 8e:e1:18:e5:0e:64:6d:a8:3c:d6:9f:25:0e:48:89: 7e:6c:e9:30:65:38:01:bd:ca:d6:4d:22:d5:67:44: 89:f3:6e:51:50:b2:24:0a:d1:88:36:2c:39:1f:47: ab:39:5c:20:f4:16:ed:76:14:2f:57:c9:be:59:17: e5:ab:e2:4b:dc:5e:ad:91:02:48:56:24:e7:db:f7: 87:ed:0c:ab:3e:55:7e:bc:97:d8:6f:11:18:fe:2a: 5a:fa:d0:c3:44:75:b9:8f:0b:d5:c6:88:16:6a:a7: 12:35:43:84:05:5e:80:cc:2b:b4:29:65:0f:22:6b: 1c:32:4e:f7:57:fd:e3:56:ef:07:3f:11:2a:3d:bf: 8b:18:f6:4b:e7:ff:0f:fb:7a:dd:09:a3:a6:03:db: 07:99:e7:7b:a6:77:c7:6d:df:14:1e:fe:9f:af:9c: b9:11:04:ca:17:db:cc:1e:df:a2:f3:f6:23:c2:51: 78:a1:ac:2d:d3:ff:8b:57:6d:cc:01:2f:a8:6c:20: eb:52:be:6f:4d:41:14:a7:a4:b6:30:e9:b0:41:f3: b6:fe:34:05:fa:05:d8:b4:fe:dc:74:46:28:ca:f2: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6D:A0:79:75:1D:EB:73:BF:FA:2C:9D:C8:44:BF:23:0E:95:3B:E5 X509v3 Authority Key Identifier: keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/609B8BC27D7B11EDB6B77173C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.140.0/22 103.71.175.0/24 103.194.170.0/24 103.252.220.0-103.252.222.255 Signature Algorithm: sha256WithRSAEncryption aa:2a:45:69:2d:6b:32:65:b6:6e:98:82:15:d0:74:99:a9:61: 4a:41:65:a4:bc:be:93:aa:d9:ca:28:a2:9e:03:9a:d4:c4:c7: d7:68:b5:44:34:8e:0c:37:71:7b:13:09:e9:14:a1:3f:a1:cb: fd:73:b4:d5:a4:af:d2:4c:97:64:b5:8c:b9:dd:4d:57:5f:53: b4:ef:a7:a1:5e:a4:14:e0:20:22:20:44:29:ea:4b:4b:e3:6a: 97:c5:14:62:46:28:b6:26:3a:5d:71:3e:6c:82:8f:94:4b:1e: 08:35:41:e1:ce:9b:4e:53:c8:14:ce:73:8d:ac:7a:81:03:b0: 58:87:5a:7b:2f:6c:43:71:d3:f6:38:d6:34:56:8f:13:2f:35: ef:11:3f:35:44:d6:ef:73:b8:59:7e:35:84:d4:eb:2a:88:b5: 6f:82:f6:8a:65:c5:7a:66:4c:fd:e7:cc:87:af:3c:5f:a7:13: 4b:6f:b4:66:01:67:3b:3c:97:89:cb:f7:74:5f:5a:7b:96:a8: 0e:f6:a4:4f:46:4f:13:2f:0c:f7:86:d4:01:39:71:03:61:d5: af:dd:43:7d:0f:ad:88:51:c7:13:44:f5:1a:85:64:6f:3a:ea: 4e:50:54:af:c4:8f:6b:0f:9c:c6:87:2c:ad:43:a1:7c:f1:ab: c0:b9:4c:22 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICGZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI1QkQxMTAvBgNVBAUTKDIyRTgxQjMyN0NCMUZCMzUwMUUwNUFGQUI5NDEyMTkx OEZEQjVCNUUwHhcNMjYxMDA0MTYyOTUwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyN2VmZS1kYTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5amrpamUTMwnLX4Fr8yA+lEKIbSZoLbIowEcF4+O4RjlDmRtqDzWnyUOSIl+ bOkwZTgBvcrWTSLVZ0SJ825RULIkCtGINiw5H0erOVwg9BbtdhQvV8m+WRflq+JL 3F6tkQJIViTn2/eH7QyrPlV+vJfYbxEY/ipa+tDDRHW5jwvVxogWaqcSNUOEBV6A zCu0KWUPImscMk73V/3jVu8HPxEqPb+LGPZL5/8P+3rdCaOmA9sHmed7pnfHbd8U Hv6fr5y5EQTKF9vMHt+i8/YjwlF4oawt0/+LV23MAS+obCDrUr5vTUEUp6S2MOmw QfO2/jQF+gXYtP7cdEYoyvKGAQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFNltoHl1 Hetzv/osnchEvyMOlTvlMB8GA1UdIwQYMBaAFCLoGzJ8sfs1AeBa+rlBIZGP21te MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjVCRC8zM0NCMTE3QUI1 QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16VUI0RnI2dVVFaGtZX2JX MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1Z2JNbnl4LXpVQjRGcjZ1VUVoa1lfYlcxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI1QkQvMzNDQjExN0FCNUE5MTFFNzlDNzRDQjcyQzRGOUFFMDIvNjA5QjhCQzI3 RDdCMTFFREI2Qjc3MTczQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQCK++MAwQAZ0evAwQAZ8KqMAwDBAJn/NwDBABn/N4wDQYJKoZIhvcN AQELBQADggEBAKoqRWktazJltm6YghXQdJmpYUpBZaS8vpOq2cooop4DmtTEx9do tUQ0jgw3cXsTCekUoT+hy/1ztNWkr9JMl2S1jLndTVdfU7Tvp6FepBTgICIgRCnq S0vjapfFFGJGKLYmOl1xPmyCj5RLHgg1QeHOm05TyBTOc42seoEDsFiHWnsvbENx 0/Y41jRWjxMvNe8RPzVE1u9zuFl+NYTU6yqItW+C9oplxXpmTP3nzIevPF+nE0tv tGYBZzs8l4nL93RfWnuWqA72pE9GTxMvDPeG1AE5cQNh1a/dQ30PrYhRxxNE9RqF ZG866k5QVK/Ej2sPnMaHLK1DoXzxq8C5TCI= -----END CERTIFICATE-----Generated at Sat Oct 10 12:33:18 2026 by rpki-client