$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa File: 29BE072046FF11EF9A76C461C4F9AE02.roa (raw, json) Hash identifier: wv1tyKuy/cicAUFUJJPD31RZZ+1M78UqwWGMEmbqF+4= Subject key identifier: 25:65:6E:7F:F8:BD:F6:05:20:39:A0:B8:34:76:20:B9:DA:55:A1:F0 Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Certificate serial: 09EC Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa Signing time: Wed 02 Sep 2026 20:40:21 +0000 ROA not before: Wed 02 Sep 2026 20:40:21 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 139468 IP address blocks: 45.116.134.0/23 maxlen: 23 45.116.134.0/24 maxlen: 24 103.9.94.0/23 maxlen: 23 103.28.28.0/22 maxlen: 22 103.37.132.0/22 maxlen: 22 103.37.134.0/23 maxlen: 23 103.40.216.0/22 maxlen: 22 103.240.12.0/22 maxlen: 22 103.240.13.0/24 maxlen: 24 103.245.4.0/22 maxlen: 22 103.245.4.0/23 maxlen: 23 103.245.7.0/24 maxlen: 24 2405:9e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2540 (0x9ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Validity Not Before: Sep 2 20:40:21 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9889b5-41c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:45:94:cb:4f:3e:b4:32:62:15:e4:f8:c4: 3c:64:88:65:3d:ae:42:a2:03:06:0c:31:e0:b7:19: 0a:77:c3:26:20:93:74:67:75:52:0b:4f:45:01:f4: 70:4d:15:16:6b:d2:dd:8b:52:58:d9:df:8c:8f:dc: c3:48:8a:ca:0a:b7:20:85:ce:50:73:8f:7e:0c:60: 73:f7:2f:76:62:38:60:80:15:fd:74:9e:9b:65:57: 87:66:a0:b2:bc:4a:5d:4f:aa:27:9c:ca:81:0d:64: 11:e9:5d:e1:ff:8e:65:fc:fa:36:ec:e5:b1:13:59: 18:c6:3f:77:fb:07:24:1b:8a:05:7b:a7:62:fd:c0: 27:87:44:8a:91:95:e6:3c:eb:91:98:ab:11:0d:ab: 7c:cf:8f:f1:d4:cf:7f:8c:cd:ec:3f:98:a9:18:50: 1e:75:63:60:61:82:c1:7a:3c:09:66:bf:08:d3:52: 4b:9e:92:f2:17:11:2a:74:ad:08:27:15:ac:35:fb: 26:9d:1b:69:11:3b:c5:d6:67:bb:b2:3e:f1:f2:33: 5b:d3:05:d1:ae:b2:95:90:aa:b7:76:b4:47:54:63: e7:3e:f3:3a:b1:44:f6:0f:eb:65:91:ed:a4:fa:0b: 95:10:04:da:66:3a:15:03:90:7f:d8:6a:1e:57:68: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:65:6E:7F:F8:BD:F6:05:20:39:A0:B8:34:76:20:B9:DA:55:A1:F0 X509v3 Authority Key Identifier: keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.116.134.0/23 103.9.94.0/23 103.28.28.0/22 103.37.132.0/22 103.40.216.0/22 103.240.12.0/22 103.245.4.0/22 IPv6: 2405:9e40::/32 Signature Algorithm: sha256WithRSAEncryption 71:cd:52:0b:75:a2:29:48:7d:64:8b:82:69:3a:8a:46:37:96: 42:69:ff:df:22:6e:17:0c:5c:b0:e3:42:09:ba:2a:7a:bd:fb: 53:87:cb:71:9d:e2:a7:97:3b:79:8c:a7:3e:bd:ee:fa:99:43: 4c:51:e2:31:dc:d1:f6:4f:b9:9e:c4:51:80:f7:e0:fb:d1:67: ea:5e:79:82:da:df:13:a0:68:82:4a:4b:4a:cf:8d:73:58:d1: db:5b:d7:32:39:f6:db:62:48:cc:4c:be:23:d3:a5:d8:a9:b4: 3b:db:a0:c8:f4:05:07:77:68:ce:6d:09:bc:d5:c5:43:7c:7a: c6:a9:d7:fc:e7:7b:17:e8:92:08:3a:7e:f6:24:a4:27:f2:96: 19:a5:c5:c3:a6:5e:b3:eb:51:83:46:df:61:68:ed:eb:49:5b: 1c:50:09:d0:f3:db:56:f5:0b:1b:86:18:cf:d5:bd:16:c2:2e: e4:27:e2:75:ed:76:67:80:69:2f:88:eb:c3:87:94:80:08:c1: ff:75:9d:42:87:95:86:39:ad:e6:9e:8e:8b:a3:f0:88:a3:4f: da:0d:df:a1:0f:4f:cb:55:a8:46:29:5d:1d:19:f1:3d:6f:17: a0:a8:23:ed:29:15:00:5b:38:1f:67:41:0e:5a:fc:73:99:d7: 45:e8:a3:01 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICCewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2 RUY2Qzk1MTcwHhcNMjYwOTAyMjA0MDIxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ODliNS00MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0FFlMtPPrQyYhXk+MQ8ZIhlPa5CogMGDDHgtxkKd8MmIJN0Z3VSC09FAfRw TRUWa9Ldi1JY2d+Mj9zDSIrKCrcghc5Qc49+DGBz9y92YjhggBX9dJ6bZVeHZqCy vEpdT6onnMqBDWQR6V3h/45l/Po27OWxE1kYxj93+wckG4oFe6di/cAnh0SKkZXm POuRmKsRDat8z4/x1M9/jM3sP5ipGFAedWNgYYLBejwJZr8I01JLnpLyFxEqdK0I JxWsNfsmnRtpETvF1me7sj7x8jNb0wXRrrKVkKq3drRHVGPnPvM6sUT2D+tlke2k +guVEATaZjoVA5B/2GoeV2i7twIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFCVlbn/4 vfYFIDmguDR2ILnaVaHwMB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJDQjEvRDAwREQ0OThCQzAyMTFFQUI4Qzc5MDQ4QzRGOUFFMDIvMjlCRTA3MjA0 NkZGMTFFRjlBNzZDNDYxQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQBLXSGAwQBZwleAwQCZxwcAwQCZyWEAwQCZyjYAwQCZ/AMAwQCZ/UE MA0EAgACMAcDBQAkBZ5AMA0GCSqGSIb3DQEBCwUAA4IBAQBxzVILdaIpSH1ki4Jp OopGN5ZCaf/fIm4XDFyw40IJuip6vftTh8txneKnlzt5jKc+ve76mUNMUeIx3NH2 T7mexFGA9+D70WfqXnmC2t8ToGiCSktKz41zWNHbW9cyOfbbYkjMTL4j06XYqbQ7 26DI9AUHd2jObQm81cVDfHrGqdf853sX6JIIOn72JKQn8pYZpcXDpl6z61GDRt9h aO3rSVscUAnQ89tW9QsbhhjP1b0Wwi7kJ+J17XZngGkviOvDh5SACMH/dZ1Ch5WG Oa3mno6Lo/CIo0/aDd+hD0/LVahGKV0dGfE9bxegqCPtKRUAWzgfZ0EOWvxzmddF 6KMB -----END CERTIFICATE-----Generated at Tue Sep 22 08:06:06 2026 by rpki-client