$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/782C78F4A65E11F1BAC9D9C2A7EE528E.roa File: 782C78F4A65E11F1BAC9D9C2A7EE528E.roa (raw, json) Hash identifier: Pju7HoIdJiFbAxcT7nRxRIemng5N0Ec78k4EEmF9TnE= Subject key identifier: 45:8B:24:D2:5E:32:B0:6B:72:37:C4:A2:ED:94:59:62:93:CD:00:38 Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 08E9 Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/782C78F4A65E11F1BAC9D9C2A7EE528E.roa Signing time: Thu 10 Sep 2026 20:41:42 +0000 ROA not before: Thu 10 Sep 2026 20:41:42 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 139288 IP address blocks: 103.140.215.0/24 maxlen: 24 2402:6a20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: Sep 10 20:41:42 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa31606-23bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:ce:6a:ca:bb:5a:04:3f:ed:df:42:ca:6c: 66:c5:f0:e4:10:01:1c:3f:38:1d:01:1e:27:1c:c0: de:18:7a:03:1e:ec:18:94:a5:c4:c6:23:3a:e9:fe: 6e:d3:f0:e6:04:bb:dc:7e:0a:2f:b4:bc:d4:15:4a: 3e:4f:2b:bf:45:70:ec:8d:46:77:8e:18:ce:2c:77: 53:9e:a6:fb:9c:c5:12:5d:7e:00:7c:f1:4e:64:7e: 80:38:c8:85:41:14:8a:68:b6:a8:c9:a1:c9:91:ed: d0:dc:f4:f5:ff:f4:cd:3b:13:20:1b:de:78:9e:bc: f7:96:96:90:05:9b:f0:6f:cc:2e:53:a5:db:71:9f: eb:77:57:0d:ec:55:05:98:21:f1:ff:da:fa:5c:fa: 2e:1e:49:a7:6e:5a:9c:1f:9e:7a:a7:1c:3b:c2:b7: 09:5e:b4:cd:6d:d5:f5:d1:ee:76:2c:1d:c7:fb:e4: 6a:8f:07:ef:e6:81:66:16:24:81:57:64:9f:4e:74: c7:8d:e2:04:44:8f:3d:04:2b:27:41:e8:86:42:82: 4a:6d:e2:ba:ea:1d:d6:c1:e8:a3:31:28:ac:68:a9: 40:aa:cc:55:8a:4f:1d:b2:91:ae:29:96:19:1b:68: 95:c5:80:26:f5:2d:42:24:72:ce:53:f3:80:f4:a3: d3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8B:24:D2:5E:32:B0:6B:72:37:C4:A2:ED:94:59:62:93:CD:00:38 X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/782C78F4A65E11F1BAC9D9C2A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.140.215.0/24 IPv6: 2402:6a20::/32 Signature Algorithm: sha256WithRSAEncryption 30:80:54:52:dd:25:49:a8:d8:49:f4:17:7c:15:9c:ad:1f:f3: 79:26:ff:03:a5:a3:69:93:d7:48:ec:9c:5a:04:e9:f2:83:d5: be:95:df:0e:d2:af:21:5d:75:b3:c3:2e:4e:97:d9:93:56:c8: 80:62:b1:81:61:ca:fa:32:cf:49:f9:12:53:89:2d:21:1b:57: 22:a8:1c:e2:50:85:ee:11:fe:22:71:14:68:84:da:1c:9b:5e: ec:c0:b0:54:d8:52:76:10:d6:01:55:42:da:db:78:4d:45:b7: ac:c7:b0:3f:eb:38:aa:3d:45:c5:fa:af:31:4d:17:7d:e7:e0: 27:9d:9f:74:b0:bb:6d:59:a1:1a:9e:bf:c9:c6:53:37:d9:d2: db:51:40:f4:0d:da:7f:6a:31:d3:6c:1b:69:ef:7b:6f:b9:73: 23:0c:44:30:34:6c:09:3a:9f:c5:fd:ad:e5:3e:65:51:56:2c: 3d:60:c6:85:d6:5f:b6:2c:9b:30:59:40:da:3a:ec:a4:3b:e2: d6:f8:29:97:6c:35:f5:e7:ca:96:45:34:75:5a:dc:9b:a4:b7: a7:f1:c3:c0:61:bc:ff:bd:3e:26:9b:8a:fe:0a:ba:b6:4a:a6: 8a:35:95:b6:1a:30:c7:c0:e0:27:7e:0e:1d:4b:5a:dc:c0:5c: bf:0e:fd:bc -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjYwOTEwMjA0MTQyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEzMTYwNi0yM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xLOasq7WgQ/7d9CymxmxfDkEAEcPzgdAR4nHMDeGHoDHuwYlKXExiM66f5u 0/DmBLvcfgovtLzUFUo+Tyu/RXDsjUZ3jhjOLHdTnqb7nMUSXX4AfPFOZH6AOMiF QRSKaLaoyaHJke3Q3PT1//TNOxMgG954nrz3lpaQBZvwb8wuU6XbcZ/rd1cN7FUF mCHx/9r6XPouHkmnblqcH556pxw7wrcJXrTNbdX10e52LB3H++Rqjwfv5oFmFiSB V2SfTnTHjeIERI89BCsnQeiGQoJKbeK66h3WweijMSisaKlAqsxVik8dspGuKZYZ G2iVxYAm9S1CJHLOU/OA9KPTQQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEWLJNJe MrBrcjfEou2UWWKTzQA4MB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhFOTgvMEVCMTJCNDBFQ0M5MTFFQUI4MjU2MjZFQzRGOUFFMDIvNzgyQzc4RjRB NjVFMTFGMUJBQzlEOUMyQTdFRTUyOEUucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAZ4zXMA0EAgACMAcDBQAkAmogMA0GCSqGSIb3DQEBCwUAA4IBAQAw gFRS3SVJqNhJ9Bd8FZytH/N5Jv8DpaNpk9dI7JxaBOnyg9W+ld8O0q8hXXWzwy5O l9mTVsiAYrGBYcr6Ms9J+RJTiS0hG1ciqBziUIXuEf4icRRohNocm17swLBU2FJ2 ENYBVULa23hNRbesx7A/6ziqPUXF+q8xTRd95+AnnZ90sLttWaEanr/JxlM32dLb UUD0Ddp/ajHTbBtp73tvuXMjDEQwNGwJOp/F/a3lPmVRViw9YMaF1l+2LJswWUDa OuykO+LW+CmXbDX158qWRTR1WtybpLen8cPAYbz/vT4mm4r+Crq2SqaKNZW2GjDH wOAnfg4dS1rcwFy/Dv28 -----END CERTIFICATE-----Generated at Sun Sep 20 13:17:49 2026 by rpki-client