$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/CE042A841E5611EFBEDD1F39C4F9AE02.roa File: CE042A841E5611EFBEDD1F39C4F9AE02.roa (raw, json) Hash identifier: v3gv5CNHLWW5UshzYs4rNpaWhY2TSlf04/ycCL18LnA= Subject key identifier: 3F:FE:52:84:9D:7F:B4:16:49:A6:A3:A6:F8:BB:C6:96:CF:64:F5:74 Certificate issuer: /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Certificate serial: 01B9 Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/CE042A841E5611EFBEDD1F39C4F9AE02.roa Signing time: Tue 15 Sep 2026 04:53:29 +0000 ROA not before: Tue 15 Sep 2026 04:53:29 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 17893 IP address blocks: 103.159.28.0/23 maxlen: 24 202.124.224.0/20 maxlen: 24 2404:7800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192698, serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Validity Not Before: Sep 15 04:53:29 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa8cf49-7c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:b4:84:e6:f6:46:cd:6b:1f:99:d5:51:3e: a2:2b:fb:24:d4:5b:45:71:8a:85:85:54:21:7f:7e: 24:be:0f:0c:00:8e:21:a4:2d:14:9b:e0:25:e3:7a: 1d:a9:9a:8d:6d:e6:0f:e5:af:25:75:97:c6:04:37: b1:33:b9:0e:7b:79:53:c9:97:7f:25:b8:38:0a:50: 35:be:7e:3a:1f:09:4b:7c:cf:0a:8a:31:90:fd:f1: 42:92:93:dc:7f:0f:4f:7d:b2:10:90:80:01:b8:41: 87:13:d3:f0:79:fa:83:f0:0c:14:ef:d8:41:0d:6b: 78:3d:1e:a9:07:6b:e7:1c:3c:00:8a:45:81:60:51: 90:eb:73:3a:c0:c4:e0:1f:61:85:ea:15:0d:22:70: 8a:50:39:84:50:a3:2f:fe:f7:be:fd:ec:5a:3f:02: 4e:a8:da:59:3d:f8:dd:99:89:fb:55:0e:4f:92:c7: be:73:a7:74:ae:57:57:51:6f:46:ad:55:90:db:5c: c0:5b:b6:82:4b:22:0a:e5:f7:10:6a:28:19:5e:8b: 76:7d:a0:8f:d6:48:42:66:50:08:0f:52:16:2a:ad: 33:c7:a6:a7:3e:e5:a3:c6:03:a0:4d:78:42:c3:33: 93:dd:71:f4:a4:5c:20:ce:2c:64:35:45:61:84:7c: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FE:52:84:9D:7F:B4:16:49:A6:A3:A6:F8:BB:C6:96:CF:64:F5:74 X509v3 Authority Key Identifier: keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/CE042A841E5611EFBEDD1F39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.159.28.0/23 202.124.224.0/20 IPv6: 2404:7800::/32 Signature Algorithm: sha256WithRSAEncryption 1c:0b:55:5a:07:1c:89:2e:db:75:9e:d3:6f:48:b0:2b:af:d7: 1a:12:70:75:f0:2c:a1:d6:8d:43:74:af:e5:f4:9e:4b:2e:71: b4:9c:b3:33:d9:47:00:22:9c:8d:1f:d3:85:88:30:77:8f:bb: 57:c8:73:30:75:a4:78:10:8b:e1:bf:85:1d:e8:0c:23:2a:45: a8:e6:0c:fb:28:94:79:b8:b2:e7:b3:b8:db:36:ba:be:ab:9e: 30:ac:db:f8:d2:d5:93:a1:4d:3e:f9:99:83:ba:17:6b:84:c7: d4:b0:b8:ce:22:f0:68:cc:13:2c:75:0a:ca:db:65:ef:3a:34: 21:b8:b7:bc:6c:15:cf:d0:42:4b:5b:89:40:e7:4d:59:ed:36: 0f:74:ed:52:a7:aa:50:8d:de:53:41:a8:84:fd:cc:8d:9a:41: 9d:bb:79:e3:74:4f:4c:7b:91:a8:c7:d9:02:d7:56:d6:37:26: b5:08:7a:a7:cb:87:45:77:a5:f9:5d:2e:7d:a0:4a:99:b5:e9: a9:75:f8:9e:c5:9f:0e:6d:f1:ba:69:b0:b1:26:58:f4:d6:87: 0b:1b:80:64:f8:3d:ad:e7:10:72:c0:0e:4a:d4:c9:a4:d8:79: 3d:d3:cf:5f:d0:01:e5:69:d2:d7:4d:cf:aa:3d:08:df:ee:57: 80:5f:24:74 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI2OTgxMTAvBgNVBAUTKERCMDYzMDc4RjdCOTc3NTJGQjgxRDAwRkE5QkQ3QzUy M0IxQzk3MDMwHhcNMjYwOTE1MDQ1MzI5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4Y2Y0OS03YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5y0hOb2Rs1rH5nVUT6iK/sk1FtFcYqFhVQhf34kvg8MAI4hpC0Um+Al43od qZqNbeYP5a8ldZfGBDexM7kOe3lTyZd/Jbg4ClA1vn46HwlLfM8KijGQ/fFCkpPc fw9PfbIQkIABuEGHE9PwefqD8AwU79hBDWt4PR6pB2vnHDwAikWBYFGQ63M6wMTg H2GF6hUNInCKUDmEUKMv/ve+/exaPwJOqNpZPfjdmYn7VQ5Pkse+c6d0rldXUW9G rVWQ21zAW7aCSyIK5fcQaigZXot2faCP1khCZlAID1IWKq0zx6anPuWjxgOgTXhC wzOT3XH0pFwgzixkNUVhhHykzwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFD/+UoSd f7QWSaajpvi7xpbPZPV0MB8GA1UdIwQYMBaAFNsGMHj3uXdS+4HQD6m9fFI7HJcD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjY5OC9EM0MwRUNFMjFF NTUxMUVGQUM5NTlGMTlDNEY5QUUwMi8yd1l3ZVBlNWQxTDdnZEFQcWIxOFVqc2Ns d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3WXdlUGU1ZDFMN2dkQVBxYjE4VWpzY2x3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTI2OTgvRDNDMEVDRTIxRTU1MTFFRkFDOTU5RjE5QzRGOUFFMDIvQ0UwNDJBODQx RTU2MTFFRkJFREQxRjM5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ58cAwQEynzgMA0EAgACMAcDBQAkBHgAMA0GCSqGSIb3DQEBCwUA A4IBAQAcC1VaBxyJLtt1ntNvSLArr9caEnB18Cyh1o1DdK/l9J5LLnG0nLMz2UcA IpyNH9OFiDB3j7tXyHMwdaR4EIvhv4Ud6AwjKkWo5gz7KJR5uLLns7jbNrq+q54w rNv40tWToU0++ZmDuhdrhMfUsLjOIvBozBMsdQrK22XvOjQhuLe8bBXP0EJLW4lA 501Z7TYPdO1Sp6pQjd5TQaiE/cyNmkGdu3njdE9Me5Gox9kC11bWNya1CHqny4dF d6X5XS59oEqZtempdfiexZ8ObfG6abCxJlj01ocLG4Bk+D2t5xBywA5K1Mmk2Hk9 089f0AHladLXTc+qPQjf7leAXyR0 -----END CERTIFICATE-----Generated at Tue Sep 22 16:57:54 2026 by rpki-client