$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/9B2C760CD89B11EF8D75534EC4F9AE02.roa File: 9B2C760CD89B11EF8D75534EC4F9AE02.roa (raw, json) Hash identifier: lBIjDRlaF1AUIhAiwffFDhxJmJTHR3IaXL7KutcWyXI= Subject key identifier: 10:34:1D:17:1C:DB:79:BF:BB:D8:5B:6E:62:C3:85:5E:5A:D1:4A:D0 Certificate issuer: /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16 Certificate serial: 0246 Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/9B2C760CD89B11EF8D75534EC4F9AE02.roa Signing time: Sat 29 Aug 2026 02:54:43 +0000 ROA not before: Sat 29 Aug 2026 02:54:43 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 55734 IP address blocks: 43.245.0.0/22 maxlen: 24 103.232.184.0/22 maxlen: 24 223.27.120.0/22 maxlen: 24 2401:4ce0::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188CCC, serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16 Validity Not Before: Aug 29 02:54:43 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9249f3-01bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:7a:cc:ec:d6:9a:8b:c1:59:35:b0:75:2c: 93:c2:21:94:13:fb:c7:fb:1e:5a:77:a6:70:5b:6b: 73:61:e5:49:00:75:7d:ce:31:a5:25:27:d8:bb:2d: 67:10:b9:03:0f:24:5a:b9:e8:06:08:d3:ad:a6:6f: c9:cb:da:83:54:d2:6c:62:2a:71:dd:16:84:a7:0c: 9e:1a:6e:d6:85:08:ae:69:7d:03:c5:7e:a1:2c:43: ab:ce:4c:16:98:b4:ea:57:5d:44:35:25:dc:85:c5: 8b:58:bf:c2:fc:55:22:89:5c:37:67:49:fa:04:96: 21:d6:89:9e:c5:d8:d9:39:5f:5a:fd:8b:67:21:17: 09:0a:ef:39:24:94:2e:11:a0:18:72:58:ea:93:9c: 9d:d0:ab:f3:65:84:9b:53:97:5a:82:c2:05:1b:1f: 0f:12:ee:c5:4e:80:b3:22:48:7c:23:7d:ba:18:c6: 0d:ee:a4:60:0a:10:1a:f1:1d:2c:25:10:bc:b4:53: b8:09:10:b9:8c:33:ca:d9:75:c0:01:fc:b2:7c:7f: 98:8b:7a:40:7c:37:ce:71:48:bb:cd:64:0a:85:f2: 44:3c:5d:59:3d:0f:6e:34:bb:9a:29:b0:05:8a:e1: 0e:1f:0a:7e:1a:6d:07:9d:a4:54:5b:5f:73:cf:42: 3b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:1D:17:1C:DB:79:BF:BB:D8:5B:6E:62:C3:85:5E:5A:D1:4A:D0 X509v3 Authority Key Identifier: keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/9B2C760CD89B11EF8D75534EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.0.0/22 103.232.184.0/22 223.27.120.0/22 IPv6: 2401:4ce0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:41:ae:b2:63:18:19:94:7a:3f:be:f7:59:88:2e:d0:c4:cc: a7:54:ef:53:a9:19:a3:fe:b7:05:90:7a:c6:06:7a:c0:00:43: 01:3b:95:fe:f6:01:1b:62:c3:83:4c:36:14:3e:00:c7:38:24: dd:96:f5:26:61:60:ae:7a:2f:7d:50:4a:c3:c7:0d:2c:61:10: 65:70:c2:0a:41:dc:d3:29:31:19:61:c5:cc:a9:6f:a7:f6:d4: 30:cc:b2:dc:08:9a:aa:ba:cc:e3:05:2d:be:8a:24:6a:50:ad: 0b:9e:41:f6:5c:b6:89:59:6c:ff:a5:7a:dd:7c:d2:a6:10:8c: c3:f0:51:86:b6:92:5e:eb:53:e5:8d:25:9b:6e:a6:ea:2e:0c: 97:d8:8c:65:9b:e7:ac:91:db:de:79:3a:9a:9b:fb:d4:41:2d: 9a:99:4d:c3:67:0e:8d:6e:80:c6:78:26:75:8d:74:2c:cd:40: 94:47:07:b3:92:36:3c:0a:3b:5d:7c:51:cc:23:98:6a:76:5d: 50:48:c8:6b:1c:d0:9b:f4:e8:69:5f:ef:7f:b2:1b:1d:f1:0a: e8:50:6b:19:1d:17:16:98:e8:16:04:fe:76:35:cc:3d:eb:c9: a1:0e:40:d7:e6:09:f3:77:cf:9a:af:4f:6f:20:50:92:94:94: 7e:61:55:a8 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhDQ0MxMTAvBgNVBAUTKEUyMzFEMzA5MjdFNDlBNkEyMkQ5RjZBQ0Q3MDYxMDNC RTNFNURDMTYwHhcNMjYwODI5MDI1NDQzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkyNDlmMy0wMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+R6zOzWmovBWTWwdSyTwiGUE/vH+x5ad6ZwW2tzYeVJAHV9zjGlJSfYuy1n ELkDDyRauegGCNOtpm/Jy9qDVNJsYipx3RaEpwyeGm7WhQiuaX0DxX6hLEOrzkwW mLTqV11ENSXchcWLWL/C/FUiiVw3Z0n6BJYh1omexdjZOV9a/YtnIRcJCu85JJQu EaAYcljqk5yd0KvzZYSbU5dagsIFGx8PEu7FToCzIkh8I326GMYN7qRgChAa8R0s JRC8tFO4CRC5jDPK2XXAAfyyfH+Yi3pAfDfOcUi7zWQKhfJEPF1ZPQ9uNLuaKbAF iuEOHwp+Gm0HnaRUW19zz0I7wQIDAQABo4ICezCCAncwHQYDVR0OBBYEFBA0HRcc 23m/u9hbbmLDhV5a0UrQMB8GA1UdIwQYMBaAFOIx0wkn5JpqItn2rNcGEDvj5dwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OENDQy83RTZFMDAxNDQ1 NDcxMUVFQUNEMzVGNDFDNEY5QUUwMi80akhUQ1Nma21tb2kyZmFzMXdZUU8tUGwz QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqSFRDU2ZrbW1vaTJmYXMxd1lRTy1QbDNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhDQ0MvN0U2RTAwMTQ0NTQ3MTFFRUFDRDM1RjQxQzRGOUFFMDIvOUIyQzc2MENE ODlCMTFFRjhENzU1MzRFQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK/UAAwQCZ+i4AwQC3xt4MA0EAgACMAcDBQAkAUzgMA0GCSqGSIb3 DQEBCwUAA4IBAQAuQa6yYxgZlHo/vvdZiC7QxMynVO9TqRmj/rcFkHrGBnrAAEMB O5X+9gEbYsODTDYUPgDHOCTdlvUmYWCuei99UErDxw0sYRBlcMIKQdzTKTEZYcXM qW+n9tQwzLLcCJqquszjBS2+iiRqUK0LnkH2XLaJWWz/pXrdfNKmEIzD8FGGtpJe 61PljSWbbqbqLgyX2Ixlm+eskdveeTqam/vUQS2amU3DZw6NboDGeCZ1jXQszUCU RwezkjY8CjtdfFHMI5hqdl1QSMhrHNCb9OhpX+9/shsd8QroUGsZHRcWmOgWBP52 Ncw968mhDkDX5gnzd8+ar09vIFCSlJR+YVWo -----END CERTIFICATE-----Generated at Tue Sep 22 10:43:32 2026 by rpki-client