$ rpki-client -vvvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa File: D25A6970F40911EA8A5C9E70C4F9AE02.roa (raw, json) Hash identifier: VzNHPDyNPjJrfEn9y9Z7yeh8SM3dlt1jCHWbJvG6eYc= Subject key identifier: 18:3A:9D:C7:05:A6:69:40:2D:23:3D:FC:5C:DE:6A:D1:72:69:67:21 Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Certificate serial: 08E4 Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa Signing time: Thu 24 Sep 2026 20:41:02 +0000 ROA not before: Thu 24 Sep 2026 20:41:02 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 141155 IP address blocks: 103.155.119.0/24 maxlen: 24 2406:6dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Validity Not Before: Sep 24 20:41:02 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab58ade-d67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ce:d7:37:0f:60:8a:f7:37:f6:3b:99:f4:db: 9f:67:31:cc:88:bf:5c:75:6b:5d:ad:20:a1:bf:86: 72:59:22:65:24:5e:8e:6b:ee:ab:6d:eb:08:8f:e4: 73:bb:8a:22:d3:99:a2:c0:ae:3b:52:26:e7:57:53: d7:47:44:f5:7f:44:9c:35:6d:b1:09:c9:19:52:d1: c7:ed:0b:7b:cd:86:48:85:d2:49:77:06:63:8a:29: fd:17:ce:cd:e9:57:ab:0a:87:33:77:7b:cf:49:fc: ec:da:ed:c6:80:14:69:a8:ea:43:b0:31:de:a4:8b: d3:b9:82:a3:17:64:68:af:36:26:4f:33:4e:17:3b: 77:7c:90:f5:9c:b6:dc:2b:3a:5c:cf:b8:78:96:6a: 9a:da:ef:ea:80:9f:9c:b4:7a:9e:06:de:06:18:b9: 27:c6:1f:09:c6:03:64:cc:13:71:91:56:6e:03:49: 57:be:69:80:fb:3a:06:36:74:55:70:e5:94:f9:d8: d4:c9:4a:92:f2:46:d2:11:45:f8:58:52:95:b2:a1: 82:00:9c:86:a9:5f:cd:31:3f:73:9c:01:f6:3b:b5: e3:cf:df:a7:31:82:c8:90:de:ec:08:6f:b1:4a:83: e1:1f:a2:ec:ee:ec:3c:4d:fb:c0:e0:89:54:f0:63: 9a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3A:9D:C7:05:A6:69:40:2D:23:3D:FC:5C:DE:6A:D1:72:69:67:21 X509v3 Authority Key Identifier: keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.155.119.0/24 IPv6: 2406:6dc0::/32 Signature Algorithm: sha256WithRSAEncryption 94:73:ff:91:9e:54:09:d9:c5:73:d3:30:d1:4e:e9:e7:85:42: a8:35:e7:f5:c8:a1:98:d8:4d:43:b6:1e:4b:49:20:3f:5c:de: 68:33:19:cc:3d:3c:e4:6e:cc:0c:a2:a1:a6:a9:57:84:73:5f: 98:01:24:18:1e:53:e4:e1:66:35:b8:17:2f:f8:70:2e:ef:7f: 99:8f:29:88:a5:d5:0d:28:7b:b6:ac:c1:e4:d2:c0:f5:7f:6c: c4:86:04:56:2f:44:1e:9b:e9:3b:8a:3f:39:a8:b2:56:be:1a: e3:eb:5c:02:a4:f8:80:21:65:a1:18:56:67:00:3e:62:83:09: 9e:55:9b:55:5d:62:e9:8b:21:04:36:a6:9f:3a:be:e2:4f:54: cd:70:ac:29:8a:d9:ef:33:a5:3f:cd:3c:1b:2f:cc:66:3c:9d: 52:75:9a:62:ef:f6:39:e5:e0:4a:ed:48:8a:20:d6:95:0c:96: 7e:da:47:44:33:ad:02:64:ea:b0:64:46:c5:11:8f:96:1e:ba: 1d:24:7b:cf:61:53:25:61:b1:04:4b:07:61:5f:e1:5e:c6:7d: e1:90:dc:19:83:d8:6a:9f:44:18:59:37:9c:d5:e0:65:71:84: 6c:22:32:ff:df:ce:e0:47:17:f2:19:10:ef:fa:22:4f:8a:3b: 8c:d1:5e:4c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0 MjFBQUU1RkUwHhcNMjYwOTI0MjA0MTAyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1OGFkZS1kNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn87XNw9givc39juZ9NufZzHMiL9cdWtdrSChv4ZyWSJlJF6Oa+6rbesIj+Rz u4oi05miwK47UibnV1PXR0T1f0ScNW2xCckZUtHH7Qt7zYZIhdJJdwZjiin9F87N 6VerCoczd3vPSfzs2u3GgBRpqOpDsDHepIvTuYKjF2RorzYmTzNOFzt3fJD1nLbc Kzpcz7h4lmqa2u/qgJ+ctHqeBt4GGLknxh8JxgNkzBNxkVZuA0lXvmmA+zoGNnRV cOWU+djUyUqS8kbSEUX4WFKVsqGCAJyGqV/NMT9znAH2O7Xjz9+nMYLIkN7sCG+x SoPhH6Ls7uw8TfvA4IlU8GOalwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBg6nccF pmlALSM9/FzeatFyaWchMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0 MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVEMkIvOEI2NzAwQTZGNDA4MTFFQTkwQUM1NjZGQzRGOUFFMDIvRDI1QTY5NzBG NDA5MTFFQThBNUM5RTcwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAZ5t3MA0EAgACMAcDBQAkBm3AMA0GCSqGSIb3DQEBCwUAA4IBAQCU c/+RnlQJ2cVz0zDRTunnhUKoNef1yKGY2E1Dth5LSSA/XN5oMxnMPTzkbswMoqGm qVeEc1+YASQYHlPk4WY1uBcv+HAu73+ZjymIpdUNKHu2rMHk0sD1f2zEhgRWL0Qe m+k7ij85qLJWvhrj61wCpPiAIWWhGFZnAD5igwmeVZtVXWLpiyEENqafOr7iT1TN cKwpitnvM6U/zTwbL8xmPJ1SdZpi7/Y55eBK7UiKINaVDJZ+2kdEM60CZOqwZEbF EY+WHrodJHvPYVMlYbEESwdhX+Fexn3hkNwZg9hqn0QYWTec1eBlcYRsIjL/387g RxfyGRDv+iJPijuM0V5M -----END CERTIFICATE-----Generated at Sun Sep 27 03:16:49 2026 by rpki-client