$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa File: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (raw, json) Hash identifier: VcmK6EnZRhzFMJv/oixEp2sj3JEVdIbT31qeLDgClZA= Subject key identifier: 62:C2:ED:5C:DD:99:A0:5D:84:13:93:87:BE:F7:15:AD:F1:65:E4:70 Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Certificate serial: 0933 Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa Signing time: Fri 02 Oct 2026 20:41:20 +0000 ROA not before: Fri 02 Oct 2026 20:41:20 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 45177 IP address blocks: 103.123.164.0/22 maxlen: 22 103.123.164.0/24 maxlen: 24 103.123.165.0/24 maxlen: 24 103.123.166.0/24 maxlen: 24 103.123.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 20:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154FE7, serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Validity Not Before: Oct 2 20:41:20 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac016f0-69c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:d5:6a:a1:0c:06:af:11:55:97:3f:2d:f3: 96:8f:f5:88:fa:10:fb:fd:ee:6f:7f:09:96:25:da: b4:ac:cf:f8:78:d0:be:ec:65:88:3e:10:9e:cc:8e: 62:b6:4d:86:3f:6e:28:9c:59:7a:eb:7a:5f:4a:24: fe:4c:b7:a7:81:4f:86:f2:11:dc:6b:27:1c:2e:9e: e9:ea:3a:98:48:ff:f4:66:d3:31:61:bd:38:49:07: db:e7:87:ec:aa:ca:98:0b:84:fd:7c:47:d0:ed:d9: e5:ff:a4:54:d3:4a:ee:8d:60:76:27:0e:a9:9d:d4: 9d:71:42:98:33:fb:44:02:a2:c3:4e:d9:a4:50:d4: d7:31:44:a2:fd:88:fe:0a:a3:af:8a:76:d0:98:be: 7a:61:89:a4:c6:b2:b7:45:a6:82:d9:cd:ce:85:d5: a8:37:d4:b8:e4:30:42:df:c9:1c:4b:aa:09:32:68: 7b:46:de:f2:9b:87:bc:a6:fe:d4:94:ae:30:13:c5: 11:1a:2a:76:89:ba:29:d5:b1:ae:c2:d0:82:ef:1e: 2c:4a:02:e5:d4:51:bf:00:20:e9:25:89:79:24:d6: 90:4a:ed:9a:37:92:38:33:5c:4d:2a:c9:e6:39:79: 9c:1d:90:29:92:90:44:c8:b5:03:a4:d9:05:3a:e7: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C2:ED:5C:DD:99:A0:5D:84:13:93:87:BE:F7:15:AD:F1:65:E4:70 X509v3 Authority Key Identifier: keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.164.0/22 Signature Algorithm: sha256WithRSAEncryption c6:47:1c:5c:b4:7d:74:5a:56:6b:08:c0:bd:45:27:6c:09:f5: c9:0f:02:41:ec:fd:93:8a:15:23:90:11:67:a0:08:17:2f:c5: cb:ad:53:0b:8a:68:f3:c0:24:5e:02:99:d7:cf:d0:0d:96:b0: c4:54:35:2c:54:85:d5:32:ce:90:d0:12:f6:a8:a4:27:3c:a8: f8:01:3c:b9:e4:9a:5c:91:9b:55:83:70:da:a5:4e:c0:3d:f6: 2b:a2:bd:aa:e2:83:6c:62:59:2b:aa:ac:b8:27:66:b5:7e:bd: bb:e3:da:01:cb:57:d1:f7:ee:15:6d:ab:07:64:b0:40:14:d2: b5:31:5d:ab:2f:78:71:de:3f:ef:2b:dc:5e:4c:1b:ac:bd:0c: 92:e7:d3:6e:2f:91:ed:32:da:ba:5b:1f:64:4b:95:53:a0:9c: a3:fb:c3:aa:b8:af:2a:e7:59:0c:9e:4a:8c:9c:df:60:db:b6: 46:ca:d4:c4:ca:a0:5a:6a:a0:6e:d0:7d:44:7f:31:1b:26:a6: 0a:78:99:8b:89:ea:a1:7f:4e:41:88:6f:ac:ac:52:23:e6:50: 1b:04:6e:5a:b4:8c:1f:8a:7b:38:14:04:13:67:68:ce:3c:7f: f5:d2:9c:f9:50:d3:bc:06:e9:86:a0:d5:ab:47:9c:d1:fd:d5: 2f:0b:e1:0e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRGRTcxMTAvBgNVBAUTKENCRTNEMkExNjVCMTk0Qjk1OEVFQzNCNkE5NDQ1Nzc3 MkEzQTA5MkEwHhcNMjYxMDAyMjA0MTIwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMwMTZmMC02OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlTXVaqEMBq8RVZc/LfOWj/WI+hD7/e5vfwmWJdq0rM/4eNC+7GWIPhCezI5i tk2GP24onFl663pfSiT+TLengU+G8hHcayccLp7p6jqYSP/0ZtMxYb04SQfb54fs qsqYC4T9fEfQ7dnl/6RU00rujWB2Jw6pndSdcUKYM/tEAqLDTtmkUNTXMUSi/Yj+ CqOvinbQmL56YYmkxrK3RaaC2c3OhdWoN9S45DBC38kcS6oJMmh7Rt7ym4e8pv7U lK4wE8URGip2ibop1bGuwtCC7x4sSgLl1FG/ACDpJYl5JNaQSu2aN5I4M1xNKsnm OXmcHZApkpBEyLUDpNkFOucqCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGLC7Vzd maBdhBOTh773Fa3xZeRwMB8GA1UdIwQYMBaAFMvj0qFlsZS5WO7DtqlEV3cqOgkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEZFNy81QTJEODlFQURC N0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxMbFk3c08ycVVSWGR5bzZD U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktUFNvV1d4bExsWTdzTzJxVVJYZHlvNkNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTRGRTcvNUEyRDg5RUFEQjdEMTFFQUJDRjNFQzNFQzRGOUFFMDIvNEIzQUM3REM1 RkM4MTFFRDg2OUE2OTU2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3ukMA0GCSqGSIb3DQEBCwUAA4IBAQDGRxxctH10WlZrCMC9RSds CfXJDwJB7P2TihUjkBFnoAgXL8XLrVMLimjzwCReApnXz9ANlrDEVDUsVIXVMs6Q 0BL2qKQnPKj4ATy55JpckZtVg3DapU7APfYror2q4oNsYlkrqqy4J2a1fr2749oB y1fR9+4VbasHZLBAFNK1MV2rL3hx3j/vK9xeTBusvQyS59NuL5HtMtq6Wx9kS5VT oJyj+8OquK8q51kMnkqMnN9g27ZGytTEyqBaaqBu0H1EfzEbJqYKeJmLieqhf05B iG+srFIj5lAbBG5atIwfins4FAQTZ2jOPH/10pz5UNO8BumGoNWrR5zR/dUvC+EO -----END CERTIFICATE-----Generated at Tue Nov 10 17:09:00 2026 by rpki-client