$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/2A3E123A5A5711E8B29BFE6AC4F9AE02.roa File: 2A3E123A5A5711E8B29BFE6AC4F9AE02.roa (raw, json) Hash identifier: IB5M2B78izwkb2/G4273KZY/mf8AXpCS0Hp75Vkk3Fs= Subject key identifier: 00:CC:55:08:C9:4A:55:20:D3:13:6A:08:38:92:03:55:04:D7:2F:83 Certificate issuer: /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6 Certificate serial: 15F5 Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/2A3E123A5A5711E8B29BFE6AC4F9AE02.roa Signing time: Fri 04 Sep 2026 17:31:08 +0000 ROA not before: Fri 04 Sep 2026 17:31:08 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 63528 IP address blocks: 203.159.68.0/22 maxlen: 22 203.159.70.0/23 maxlen: 24 2001:deb::/48 maxlen: 48 2001:df5:b880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5621 (0x15f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150845, serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6 Validity Not Before: Sep 4 17:31:08 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9b005c-04c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:b7:47:61:3d:60:e5:df:e8:da:f7:a6:d5: ad:e5:18:0e:50:ff:38:d5:ca:67:bc:f0:93:9c:4f: 72:61:99:f2:38:79:89:56:0a:dd:70:5d:f7:9b:6a: 0e:9e:c4:ac:fb:15:f3:59:77:b2:fe:ce:c4:4e:d1: 40:95:e4:65:dc:b5:c5:b8:58:55:0e:88:71:88:60: 74:04:80:6b:c7:e7:96:36:9f:1f:62:4d:58:c1:9f: dc:96:76:df:07:12:60:4d:91:34:30:e2:83:92:39: c0:dd:30:0c:5e:ac:4c:7b:ae:8a:91:8d:ef:5b:dc: f3:54:dd:e4:5b:b6:72:98:6f:f5:11:6a:95:00:52: 45:ed:11:ee:f6:1b:dc:74:1c:43:90:d9:67:9c:26: 56:bf:dc:ea:fe:b3:3b:28:da:d0:11:50:33:7f:bb: 38:3d:61:96:be:8d:6f:5c:80:53:36:3a:78:94:d8: 6e:4e:16:16:5b:47:60:96:42:53:ac:a5:5f:21:c9: 73:6a:3a:c9:51:e2:ec:c8:95:85:3d:24:72:6d:8a: eb:6e:f5:c5:56:a7:e9:e0:37:c8:10:e0:80:c6:c9: e5:00:f5:af:bf:5b:a6:58:6a:d5:0e:21:d2:67:91: d2:67:c1:b3:dc:eb:09:99:13:85:9d:06:08:9f:22: 5f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CC:55:08:C9:4A:55:20:D3:13:6A:08:38:92:03:55:04:D7:2F:83 X509v3 Authority Key Identifier: keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/2A3E123A5A5711E8B29BFE6AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.159.68.0/22 IPv6: 2001:deb::/48 2001:df5:b880::/48 Signature Algorithm: sha256WithRSAEncryption 8e:30:0e:e1:84:27:b4:c5:a8:c7:77:ec:19:ab:97:3a:0f:a0: 4c:cb:6b:b3:ba:a1:c7:46:41:b0:fd:71:74:ad:77:37:bc:8d: 19:d8:79:d6:bf:90:1d:87:f2:9b:61:94:fd:25:da:e6:6c:4b: 04:7f:39:c5:a1:56:f8:13:64:5b:02:a1:97:76:1c:15:55:7e: 99:5f:6b:c9:3d:10:d6:0a:47:e2:47:0e:15:4a:12:cb:da:f4: 66:f2:78:02:d1:74:6a:af:b0:8a:18:2d:ae:d4:bf:ce:d6:2a: e0:83:3a:6c:47:8c:1b:c3:6a:04:3f:f2:83:6f:79:f5:75:e9: f5:5f:f6:4b:c4:28:ff:df:5e:7d:71:3d:01:34:c7:98:e3:c0: 40:c9:79:44:c3:0b:16:d1:a7:12:2b:2f:86:f3:16:79:6d:4b: c8:04:13:f9:de:73:41:2b:9b:2a:e3:58:d4:27:37:97:5b:07: 16:67:3d:3d:33:8d:e5:ad:1f:47:57:e0:81:30:5d:cd:40:65: 82:ee:1a:f3:b4:5a:6d:eb:ce:92:35:fe:ef:a9:d6:33:51:9f: 3c:62:a4:d6:01:65:5a:7c:e0:73:aa:32:43:4e:02:2c:02:72: c6:11:f6:b4:c3:e1:c2:66:71:b1:b3:dd:73:2d:ae:92:6b:eb: 36:eb:25:48 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICFfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4NDUxMTAvBgNVBAUTKEY3RDMzRjQ1NUVEQUJFM0Q0Q0I2M0ZCOTJFNENBMDc2 MTE5QzM0QTYwHhcNMjYwOTA0MTczMTA4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliMDA1Yy0wNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOq3R2E9YOXf6Nr3ptWt5RgOUP841cpnvPCTnE9yYZnyOHmJVgrdcF33m2oO nsSs+xXzWXey/s7ETtFAleRl3LXFuFhVDohxiGB0BIBrx+eWNp8fYk1YwZ/clnbf BxJgTZE0MOKDkjnA3TAMXqxMe66KkY3vW9zzVN3kW7ZymG/1EWqVAFJF7RHu9hvc dBxDkNlnnCZWv9zq/rM7KNrQEVAzf7s4PWGWvo1vXIBTNjp4lNhuThYWW0dglkJT rKVfIclzajrJUeLsyJWFPSRybYrrbvXFVqfp4DfIEOCAxsnlAPWvv1umWGrVDiHS Z5HSZ8Gz3OsJmROFnQYInyJfHwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFADMVQjJ SlUg0xNqCDiSA1UE1y+DMB8GA1UdIwQYMBaAFPfTP0Ve2r49TLY/uS5MoHYRnDSm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg0NS9EQzcxMDBFQTVB NTUxMUU4QkUzRTBCNjhDNEY5QUUwMi85OU1fUlY3YXZqMU10ai01TGt5Z2RoR2NO S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5TV9SVjdhdmoxTXRqLTVMa3lnZGhHY05LWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA4NDUvREM3MTAwRUE1QTU1MTFFOEJFM0UwQjY4QzRGOUFFMDIvMkEzRTEyM0E1 QTU3MTFFOEIyOUJGRTZBQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQCy59EMBgEAgACMBIDBwAgAQ3rAAADBwAgAQ31uIAwDQYJKoZIhvcN AQELBQADggEBAI4wDuGEJ7TFqMd37BmrlzoPoEzLa7O6ocdGQbD9cXStdze8jRnY eda/kB2H8pthlP0l2uZsSwR/OcWhVvgTZFsCoZd2HBVVfplfa8k9ENYKR+JHDhVK Esva9GbyeALRdGqvsIoYLa7Uv87WKuCDOmxHjBvDagQ/8oNvefV16fVf9kvEKP/f Xn1xPQE0x5jjwEDJeUTDCxbRpxIrL4bzFnltS8gEE/nec0ErmyrjWNQnN5dbBxZn PT0zjeWtH0dX4IEwXc1AZYLuGvO0Wm3rzpI1/u+p1jNRnzxipNYBZVp84HOqMkNO AiwCcsYR9rTD4cJmcbGz3XMtrpJr6zbrJUg= -----END CERTIFICATE-----Generated at Tue Sep 29 02:39:06 2026 by rpki-client