$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa File: 52EF768073C511EB98AF9867C4F9AE02.roa (raw, json) Hash identifier: U0UfKFnSTH2SOPynV4UKw0BvC8rEp1gKL/x7J0qbm2Y= Subject key identifier: A9:DC:B6:96:2E:BE:2E:C5:EE:C9:6F:48:B7:D7:6F:18:BF:8F:2F:02 Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 078E Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa Signing time: Thu 24 Sep 2026 21:42:44 +0000 ROA not before: Thu 24 Sep 2026 21:42:44 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 132347 IP address blocks: 43.224.120.0/24 maxlen: 24 43.224.121.0/24 maxlen: 24 43.224.122.0/24 maxlen: 24 43.224.123.0/24 maxlen: 24 103.14.140.0/24 maxlen: 24 103.14.141.0/24 maxlen: 24 103.14.142.0/24 maxlen: 24 103.14.143.0/24 maxlen: 24 2404:ab00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Sep 24 21:42:44 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab59954-cb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:9c:56:3b:bd:99:5b:00:f4:c1:7d:4f:20: b2:ee:d7:0b:7f:89:5c:24:6c:a7:f5:80:1e:46:5e: 69:51:62:76:74:8d:3b:36:62:fc:fa:bb:52:e9:98: 42:72:0c:59:5b:0b:74:bf:de:27:c0:ed:e3:39:f0: eb:9f:7e:7b:b2:fc:13:5f:40:ac:ba:7a:7c:d7:6c: 91:09:71:9b:c0:de:03:fa:c4:cf:34:31:58:e9:86: 7c:ae:b6:dc:aa:16:46:4e:2c:ae:db:bf:24:32:c9: 36:76:8e:23:7f:2f:a2:b8:20:3e:8b:3d:fb:53:a9: 3b:94:bc:36:03:78:54:07:38:77:07:0a:c1:78:81: a4:06:c7:75:79:0f:10:e6:f6:7a:70:af:f4:09:25: 1f:f1:1c:a9:7c:ca:2e:87:c0:39:0b:7e:4a:21:d2: 7e:0d:26:c5:59:49:79:1a:94:ad:ff:16:a3:ab:f5: af:21:c1:41:69:85:a2:be:ab:92:f5:32:98:72:cf: 7c:a1:a0:12:c7:77:7b:0f:e9:22:ce:54:5a:23:60: fa:2c:ce:b9:3c:b7:2d:6b:60:b6:ba:6a:bb:5d:14: c2:8e:6a:14:07:5a:15:df:c2:f9:97:a7:c2:a6:9b: 79:74:d8:9b:b1:ed:20:38:f3:d9:69:2b:47:7b:f1: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DC:B6:96:2E:BE:2E:C5:EE:C9:6F:48:B7:D7:6F:18:BF:8F:2F:02 X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.120.0/22 103.14.140.0/22 IPv6: 2404:ab00::/32 Signature Algorithm: sha256WithRSAEncryption 22:6a:cb:6a:35:6f:e5:e4:db:00:cb:e3:f7:37:51:f9:84:ea: b2:ba:42:5e:52:c3:08:46:c4:a1:6b:b1:a9:7b:62:51:1a:1a: 6b:3e:e4:16:82:c5:49:85:03:5e:58:62:a0:8a:37:7f:fd:7c: 80:39:46:8b:98:a9:c8:f6:23:78:dd:9a:d4:c7:cd:f8:f0:e5: 99:9e:5d:fe:10:bb:34:54:3d:a2:7d:60:cf:4c:c1:fa:4f:f5: ac:d0:6b:98:25:e2:4f:c7:f2:a4:8a:5b:ca:9a:38:3c:17:20: b6:7e:87:15:86:d0:94:ed:1a:20:c0:b3:01:64:71:2a:28:87: c8:a6:c5:bb:6e:c4:0d:85:e4:8e:1e:ad:95:5a:ca:f2:1b:49: 79:b4:fc:04:c3:47:5c:ca:04:63:b3:58:8b:17:76:ac:ba:5a: ed:6a:46:72:60:7d:55:e6:3a:d8:1b:9d:4c:9a:f3:21:a9:1f: d2:fe:b3:87:30:4b:18:3c:18:90:97:de:0d:ba:28:09:db:87: a9:b9:19:ec:96:5d:c6:0e:6a:18:48:78:5b:ce:05:3c:ba:2d: 25:c5:d9:a5:63:02:ee:f2:7c:1b:5b:63:0a:a7:84:f5:30:20: c5:b2:b7:f0:13:67:c4:80:c4:46:10:63:15:60:cd:9e:68:c4: da:82:a7:d7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjYwOTI0MjE0MjQ0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1OTk1NC1jYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnD2cVju9mVsA9MF9TyCy7tcLf4lcJGyn9YAeRl5pUWJ2dI07NmL8+rtS6ZhC cgxZWwt0v94nwO3jOfDrn357svwTX0Csunp812yRCXGbwN4D+sTPNDFY6YZ8rrbc qhZGTiyu278kMsk2do4jfy+iuCA+iz37U6k7lLw2A3hUBzh3BwrBeIGkBsd1eQ8Q 5vZ6cK/0CSUf8RypfMouh8A5C35KIdJ+DSbFWUl5GpSt/xajq/WvIcFBaYWivquS 9TKYcs98oaASx3d7D+kizlRaI2D6LM65PLcta2C2umq7XRTCjmoUB1oV38L5l6fC ppt5dNibse0gOPPZaStHe/EZcwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFKnctpYu vi7F7slvSLfXbxi/jy8CMB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVGODIvNDA5MUJDNzA3M0MzMTFFQkI4MzlFNjY0QzRGOUFFMDIvNTJFRjc2ODA3 M0M1MTFFQjk4QUY5ODY3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+B4AwQCZw6MMA0EAgACMAcDBQAkBKsAMA0GCSqGSIb3DQEBCwUA A4IBAQAiastqNW/l5NsAy+P3N1H5hOqyukJeUsMIRsSha7Gpe2JRGhprPuQWgsVJ hQNeWGKgijd//XyAOUaLmKnI9iN43ZrUx8348OWZnl3+ELs0VD2ifWDPTMH6T/Ws 0GuYJeJPx/KkilvKmjg8FyC2focVhtCU7RogwLMBZHEqKIfIpsW7bsQNheSOHq2V WsryG0l5tPwEw0dcygRjs1iLF3asulrtakZyYH1V5jrYG51MmvMhqR/S/rOHMEsY PBiQl94NuigJ24epuRnsll3GDmoYSHhbzgU8ui0lxdmlYwLu8nwbW2MKp4T1MCDF srfwE2fEgMRGEGMVYM2eaMTagqfX -----END CERTIFICATE-----Generated at Fri Sep 25 11:19:21 2026 by rpki-client