$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31137FAA5E7311EB8B143F3BC4F9AE02.roa File: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (raw, json) Hash identifier: OuyC5TmVNJMLDabcwM8A0FwhQBrfR/VlGDzUJTCn8/U= Subject key identifier: 6A:60:29:7A:04:6B:27:0E:2D:68:B6:F5:2F:F3:9A:88:E7:36:AA:22 Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Certificate serial: 07B9 Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31137FAA5E7311EB8B143F3BC4F9AE02.roa Signing time: Sun 26 Jul 2026 22:42:34 +0000 ROA not before: Sun 26 Jul 2026 22:42:34 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 131447 IP address blocks: 43.254.132.0/22 maxlen: 22 103.246.16.0/22 maxlen: 22 2401:5700::/32 maxlen: 32 2401:5700:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 21:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Validity Not Before: Jul 26 22:42:34 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a668d5a-e00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f5:ed:14:1e:67:82:54:22:81:c8:a1:65:94: 5b:25:d0:87:dc:f8:94:7c:f3:6f:ce:44:49:0d:52: 0d:7c:30:54:fb:16:b6:f3:c3:54:fa:6b:09:29:c5: fa:56:6f:55:ca:74:6c:5d:64:02:d5:ee:2d:78:eb: b1:fa:ae:8f:73:ff:bc:98:60:3c:7d:f8:90:c4:ac: 34:c2:29:0f:e6:ac:bd:e5:45:e5:b7:f5:03:9f:71: 94:67:92:b6:a8:03:4d:9b:16:cb:79:82:ae:bc:d8: a5:6c:1e:8c:25:fd:0a:e6:f4:cb:35:9d:9f:82:90: 32:50:30:87:50:9b:a3:8c:d8:47:c0:64:2a:6d:2c: 0c:cb:89:a7:0b:a2:98:55:e9:c4:67:cf:d7:f4:b7: 38:2d:64:de:7f:e4:ae:c9:ae:3c:99:18:06:a3:67: 9d:d0:09:46:5b:7c:c4:09:c3:fa:92:ec:76:81:89: 83:43:25:2b:9e:1b:1c:8f:1a:0c:ed:97:5b:e2:cd: c7:2d:26:9a:6b:50:6e:6e:a4:06:19:df:f4:be:ab: 92:39:63:1c:35:b3:0e:a5:46:6c:f0:91:62:ae:ba: 6a:4f:04:ab:c8:d6:ef:18:1c:c8:b5:bc:b1:67:47: 66:7d:37:56:10:2e:15:b3:06:53:ce:92:56:98:86: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:60:29:7A:04:6B:27:0E:2D:68:B6:F5:2F:F3:9A:88:E7:36:AA:22 X509v3 Authority Key Identifier: keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31137FAA5E7311EB8B143F3BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.254.132.0/22 103.246.16.0/22 IPv6: 2401:5700::/32 Signature Algorithm: sha256WithRSAEncryption c9:31:71:6a:93:c3:70:36:5e:07:69:4f:02:91:b6:7d:e8:38: ea:c9:f2:18:ff:d4:30:a4:01:90:ea:8d:d6:dc:04:90:82:d0: ff:1c:ea:b5:95:06:3b:2f:82:44:24:1c:bb:d5:fe:a5:52:ef: e2:fe:7a:96:2a:4b:c3:c5:61:8c:de:78:3a:6f:16:ef:12:1d: fc:78:9c:7a:ed:a6:b9:f3:fe:da:0b:33:39:a8:c2:3b:56:b5: 92:f6:88:d7:b3:cc:37:5f:d1:73:dd:b8:2c:b8:16:81:06:39: 1e:73:28:5a:5d:f6:2e:bd:f6:2c:91:bc:5e:b4:7f:a3:26:e9: 99:8b:40:af:06:81:3d:d2:42:24:fa:53:31:e6:c1:a8:77:38: eb:06:55:e2:e5:35:0d:72:df:07:f0:03:5b:16:3f:42:d6:c2: 98:ae:46:bb:fc:2a:1c:47:95:0a:94:5a:a8:fb:33:ba:f4:0f: 3d:d5:01:23:18:ea:eb:9b:47:ba:97:1b:ca:a2:c9:3e:35:3d: e5:75:cc:03:b2:8b:98:06:a8:78:12:ce:43:a6:4c:c7:29:c2: c1:09:be:e8:b6:3a:ad:52:cc:15:16:e3:09:10:6b:42:cd:38: 52:b6:32:d7:0a:42:00:f2:14:2b:61:27:9a:ef:a7:75:92:3b: 53:1b:fe:96 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0MzgxMTAvBgNVBAUTKEIxQzM0NzQ1NkU1NEE0NjYyRTEwOTdFQ0QzMzRBQzEx QzAyQ0UwMEIwHhcNMjYwNzI2MjI0MjM0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY2OGQ1YS1lMDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/XtFB5nglQigcihZZRbJdCH3PiUfPNvzkRJDVINfDBU+xa288NU+msJKcX6 Vm9VynRsXWQC1e4teOux+q6Pc/+8mGA8ffiQxKw0wikP5qy95UXlt/UDn3GUZ5K2 qANNmxbLeYKuvNilbB6MJf0K5vTLNZ2fgpAyUDCHUJujjNhHwGQqbSwMy4mnC6KY VenEZ8/X9Lc4LWTef+Suya48mRgGo2ed0AlGW3zECcP6kux2gYmDQyUrnhscjxoM 7Zdb4s3HLSaaa1BubqQGGd/0vquSOWMcNbMOpUZs8JFirrpqTwSryNbvGBzItbyx Z0dmfTdWEC4VswZTzpJWmIYXpwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGpgKXoE aycOLWi29S/zmojnNqoiMB8GA1UdIwQYMBaAFLHDR0VuVKRmLhCX7NM0rBHALOAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQzOC9DNDUwOUQ1NDVF NzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBHWXVFSmZzMHpTc0VjQXM0 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjTkhSVzVVcEdZdUVKZnMwelNzRWNBczRBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA0MzgvQzQ1MDlENTQ1RTcxMTFFQjg0OUMzMzNBQzRGOUFFMDIvMzExMzdGQUE1 RTczMTFFQjhCMTQzRjNCQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/6EAwQCZ/YQMA0EAgACMAcDBQAkAVcAMA0GCSqGSIb3DQEBCwUA A4IBAQDJMXFqk8NwNl4HaU8CkbZ96DjqyfIY/9QwpAGQ6o3W3ASQgtD/HOq1lQY7 L4JEJBy71f6lUu/i/nqWKkvDxWGM3ng6bxbvEh38eJx67aa58/7aCzM5qMI7VrWS 9ojXs8w3X9Fz3bgsuBaBBjkecyhaXfYuvfYskbxetH+jJumZi0CvBoE90kIk+lMx 5sGodzjrBlXi5TUNct8H8ANbFj9C1sKYrka7/CocR5UKlFqo+zO69A891QEjGOrr m0e6lxvKosk+NT3ldcwDsouYBqh4Es5DpkzHKcLBCb7otjqtUswVFuMJEGtCzThS tjLXCkIA8hQrYSea76d1kjtTG/6W -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:19 2026 by rpki-client