$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/A11D7694261F11EAA88CE128C4F9AE02.roa File: A11D7694261F11EAA88CE128C4F9AE02.roa (raw, json) Hash identifier: 8MsHT5cME+aXOO22Fl9mgN6gd3hK0r/r9Fuzk0/CIyA= Subject key identifier: 47:6C:60:2B:20:69:74:10:A9:DA:AE:AA:57:E0:33:D1:45:24:0B:89 Certificate issuer: /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF Certificate serial: 0CA7 Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/A11D7694261F11EAA88CE128C4F9AE02.roa Signing time: Wed 30 Sep 2026 19:36:14 +0000 ROA not before: Wed 30 Sep 2026 19:36:14 +0000 ROA not after: Sat 30 Jan 2027 00:00:00 +0000 asID: 135307 IP address blocks: 103.113.84.0/22 maxlen: 22 103.113.84.0/24 maxlen: 24 103.113.85.0/24 maxlen: 24 103.113.86.0/24 maxlen: 24 103.113.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166F0E, serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF Validity Not Before: Sep 30 19:36:14 2026 GMT Not After : Jan 30 00:00:00 2027 GMT Subject: CN=6abd64ae-99e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:b2:02:7f:5f:f1:fb:0f:26:90:b0:11:de: 41:33:30:3a:d8:4a:52:ba:ab:ea:76:73:bd:13:a0: 32:05:36:f5:3e:7e:a7:15:e7:25:68:6c:c9:0b:e7: 02:67:72:7f:8d:d8:7e:cc:e4:70:6d:da:f8:c4:a3: a6:dd:02:cb:68:97:f1:8c:5a:68:b8:80:b0:78:e2: 9a:00:77:e2:c7:00:c8:fc:88:6c:71:46:ff:43:61: 04:90:5e:bc:b6:cd:6a:cd:cc:99:a4:e7:04:83:21: f0:b3:0a:be:9a:a6:f8:09:10:20:63:11:83:5a:32: 97:52:ee:48:41:45:80:60:fe:33:84:71:98:6a:09: 66:33:43:7a:7a:2e:75:c6:14:2b:b6:91:ce:11:7b: 1f:bd:3c:bb:a4:1d:5f:f7:9e:39:30:b0:89:ac:97: e9:83:c2:7a:e5:25:c3:da:5f:fe:89:62:79:68:33: 62:19:15:6b:61:41:cb:51:6c:62:9f:a5:65:1f:3e: 92:cb:70:b4:58:1b:06:51:32:49:cf:02:3d:bc:70: 03:f5:46:87:22:a7:f2:6a:11:63:5b:89:db:7d:9d: ca:3d:c6:3b:ef:7c:0c:d8:7b:1b:b2:95:aa:cd:c5: 69:bf:89:49:8e:77:99:91:b3:04:f5:62:83:eb:73: ce:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6C:60:2B:20:69:74:10:A9:DA:AE:AA:57:E0:33:D1:45:24:0B:89 X509v3 Authority Key Identifier: keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/A11D7694261F11EAA88CE128C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.113.84.0/22 Signature Algorithm: sha256WithRSAEncryption b5:53:5f:fe:73:59:50:0b:41:67:6b:04:92:39:20:08:94:59: 0d:32:a2:d4:69:13:0e:5c:d0:a5:ee:fb:e0:e0:02:24:68:ad: 67:fb:f5:d7:9f:6e:8f:90:3d:a4:85:80:c8:5d:c2:fe:56:bd: 3f:1a:0f:00:98:be:c1:38:57:a8:a2:ce:73:22:92:57:9d:d5: b8:7e:79:98:ca:0c:7f:b1:a2:59:28:e9:b4:2b:8a:28:62:17: 63:7b:94:4f:50:d0:01:a0:68:13:e0:9f:5d:f6:15:c1:ec:9d: 54:7e:9c:2b:ab:a8:7c:aa:98:5b:c1:e3:57:90:ed:8f:3a:5c: 13:9f:eb:01:48:09:62:cf:88:f0:3e:f9:48:32:da:b5:02:c0: f4:05:55:03:df:0f:84:f7:1d:81:c8:13:2d:b7:ae:ff:72:f1: a1:fc:d7:dd:96:3f:77:1e:56:c6:3b:c4:44:bb:b0:5f:0a:ed: 0f:9e:ba:32:a9:e6:51:e2:2e:2f:ce:23:cc:6e:a8:60:0c:d2: 6e:46:21:fa:55:af:81:34:da:b8:e9:15:80:72:4c:22:b1:6c: ee:45:b6:82:17:e8:1a:b9:13:af:25:48:ea:c5:0c:77:ad:7c: 92:1f:30:d0:dc:2a:57:56:34:b7:87:41:c7:a7:cf:37:7e:32: 71:d2:cf:db -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZGMEUxMTAvBgNVBAUTKDNENDVDNUEzM0JGOURENEQzQTFFREE3RUQyNjQwNjU4 RTFGODMxRkYwHhcNMjYwOTMwMTkzNjE0WhcNMjcwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkNjRhZS05OWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppSyAn9f8fsPJpCwEd5BMzA62EpSuqvqdnO9E6AyBTb1Pn6nFeclaGzJC+cC Z3J/jdh+zORwbdr4xKOm3QLLaJfxjFpouICweOKaAHfixwDI/IhscUb/Q2EEkF68 ts1qzcyZpOcEgyHwswq+mqb4CRAgYxGDWjKXUu5IQUWAYP4zhHGYaglmM0N6ei51 xhQrtpHOEXsfvTy7pB1f9545MLCJrJfpg8J65SXD2l/+iWJ5aDNiGRVrYUHLUWxi n6VlHz6Sy3C0WBsGUTJJzwI9vHAD9UaHIqfyahFjW4nbfZ3KPcY773wM2HsbspWq zcVpv4lJjneZkbME9WKD63POdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEdsYCsg aXQQqdquqlfgM9FFJAuJMB8GA1UdIwQYMBaAFD1FxaM7+d1NOh7aftJkBljh+DH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkYwRS8xQTc1OEIwRTI2 MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNVMDZIdHAtMG1RR1dPSDRN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVWEZvenY1M1UwNkh0cC0wbVFHV09INE1mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjZGMEUvMUE3NThCMEUyNjFGMTFFQUFFMkU4RjI4QzRGOUFFMDIvQTExRDc2OTQy NjFGMTFFQUE4OENFMTI4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3FUMA0GCSqGSIb3DQEBCwUAA4IBAQC1U1/+c1lQC0FnawSSOSAI lFkNMqLUaRMOXNCl7vvg4AIkaK1n+/XXn26PkD2khYDIXcL+Vr0/Gg8AmL7BOFeo os5zIpJXndW4fnmYygx/saJZKOm0K4ooYhdje5RPUNABoGgT4J9d9hXB7J1Ufpwr q6h8qphbweNXkO2POlwTn+sBSAliz4jwPvlIMtq1AsD0BVUD3w+E9x2ByBMtt67/ cvGh/Nfdlj93HlbGO8REu7BfCu0PnroyqeZR4i4vziPMbqhgDNJuRiH6Va+BNNq4 6RWAckwisWzuRbaCF+gauROvJUjqxQx3rXySHzDQ3CpXVjS3h0HHp883fjJx0s/b -----END CERTIFICATE-----Generated at Sun Oct 4 15:22:28 2026 by rpki-client