$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/DF361B00A5CC11F1A22117043311F970.roa File: DF361B00A5CC11F1A22117043311F970.roa (raw, json) Hash identifier: wfoek4jkokbMCRmukkgm+0nioqtb9Dep7rPilGoQZBY= Subject key identifier: AE:30:74:7B:D9:10:7A:21:16:3C:DC:8E:49:98:9E:2C:31:BA:9F:07 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 35DB Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/DF361B00A5CC11F1A22117043311F970.roa Signing time: Tue 01 Sep 2026 06:17:56 +0000 ROA not before: Tue 01 Sep 2026 06:17:56 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 6939 IP address blocks: 101.0.16.0/24 maxlen: 24 101.0.17.0/24 maxlen: 24 101.0.18.0/24 maxlen: 24 101.0.19.0/24 maxlen: 24 103.46.205.0/24 maxlen: 24 103.46.206.0/24 maxlen: 24 103.46.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13787 (0x35db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Sep 1 06:17:56 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a966e14-3bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:eb:40:b7:fa:65:08:00:8b:84:43:aa:6a: a4:c5:43:ce:76:ee:02:11:4e:fc:1c:fa:49:4a:f1: 28:22:fe:a6:4c:55:be:72:82:45:20:61:c2:ae:e5: bd:eb:64:83:9e:06:d0:a9:d9:1b:f3:7a:1d:5a:79: 63:ae:aa:80:20:18:84:db:f8:42:db:a5:62:09:1f: a1:01:62:56:20:55:bb:6d:0e:57:db:05:05:5c:1e: d4:0c:a6:a8:c0:d4:6e:ec:9d:e4:ab:42:da:fd:9c: 0b:2d:94:74:16:14:3e:1e:25:92:7b:aa:9c:e4:82: 3b:38:26:b9:f2:05:6e:0f:ff:e4:8d:ec:c3:7e:a2: 3b:6a:02:34:71:ec:9f:b9:48:8f:00:28:1f:a1:34: 90:09:b7:57:ba:da:ee:d0:56:8f:f0:51:aa:62:d7: 4e:86:01:e0:7d:9d:bd:f3:2b:a8:67:0f:2d:fe:d6: c6:93:79:83:4a:0d:b1:e9:be:70:65:ea:df:7d:0a: ff:91:9f:e4:a1:d4:86:dc:11:50:cc:57:d5:6a:49: 2a:09:0f:91:e2:a8:3a:fd:94:c7:f4:89:cc:c0:81: f1:e1:4a:9d:8e:a9:85:b0:2b:9f:4d:29:40:b5:24: ad:86:90:7a:e8:e8:6d:89:86:ba:dd:55:b4:ca:e6: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:30:74:7B:D9:10:7A:21:16:3C:DC:8E:49:98:9E:2C:31:BA:9F:07 X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/DF361B00A5CC11F1A22117043311F970.roa sbgp-ipAddrBlock: critical IPv4: 101.0.16.0/22 103.46.205.0-103.46.207.255 Signature Algorithm: sha256WithRSAEncryption 64:68:c4:74:75:63:b9:fd:b5:b0:8d:51:24:c3:90:de:4c:fc: 9c:e5:2f:5a:3a:8a:d2:dd:88:ed:78:dc:8c:3e:6d:09:aa:bc: 23:bd:23:0b:5c:b0:25:38:6b:67:1e:04:ce:70:7e:51:5e:44: 78:f6:b3:90:4f:f0:06:49:b4:2d:37:bb:0d:6a:b5:db:92:c3: 73:e4:4c:f2:c6:8d:a3:8d:a2:0a:c2:44:29:51:16:30:5d:c5: 7f:58:0d:cf:5a:75:4a:53:cf:d8:3e:24:de:63:0a:8f:b9:84: 9c:c6:db:7b:c8:38:6e:56:7e:82:cd:f5:25:6f:0d:e4:c0:b3: fe:86:41:55:79:a4:60:34:a8:b0:03:f0:dc:8d:fe:40:44:ec: 1e:9d:c2:8c:c4:40:ad:47:46:4f:c0:bf:30:47:a8:95:7c:0c: 3d:4d:a0:cb:93:b9:47:3d:dc:9f:aa:06:ac:2d:02:ac:14:d7: 4c:3f:a8:5d:90:61:53:be:38:8b:65:1d:c8:e6:6c:db:1f:3a: 10:03:a7:33:d9:c4:3d:9b:47:95:59:6d:bc:c4:e5:68:26:48: 01:02:33:bb:c9:9a:12:9b:69:5d:e3:63:c1:1b:9a:bd:21:3f: 28:a1:51:6b:fa:10:39:f6:30:fc:86:27:7e:e4:35:af:f3:3c: f1:42:11:b6 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICNdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjYwOTAxMDYxNzU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2NmUxNC0zYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneTrQLf6ZQgAi4RDqmqkxUPOdu4CEU78HPpJSvEoIv6mTFW+coJFIGHCruW9 62SDngbQqdkb83odWnljrqqAIBiE2/hC26ViCR+hAWJWIFW7bQ5X2wUFXB7UDKao wNRu7J3kq0La/ZwLLZR0FhQ+HiWSe6qc5II7OCa58gVuD//kjezDfqI7agI0ceyf uUiPACgfoTSQCbdXutru0FaP8FGqYtdOhgHgfZ298yuoZw8t/tbGk3mDSg2x6b5w ZerffQr/kZ/kodSG3BFQzFfVakkqCQ+R4qg6/ZTH9InMwIHx4UqdjqmFsCufTSlA tSSthpB66OhtiYa63VW0yuaS/QIDAQABo4ICbjCCAmowHQYDVR0OBBYEFK4wdHvZ EHohFjzcjkmYniwxup8HMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvREYzNjFCMDBB NUNDMTFGMUEyMjExNzA0MzMxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQCZQAQMAwDBABnLs0DBARnLsAwDQYJKoZIhvcNAQELBQADggEBAGRo xHR1Y7n9tbCNUSTDkN5M/JzlL1o6itLdiO143Iw+bQmqvCO9IwtcsCU4a2ceBM5w flFeRHj2s5BP8AZJtC03uw1qtduSw3PkTPLGjaONogrCRClRFjBdxX9YDc9adUpT z9g+JN5jCo+5hJzG23vIOG5WfoLN9SVvDeTAs/6GQVV5pGA0qLAD8NyN/kBE7B6d wozEQK1HRk/AvzBHqJV8DD1NoMuTuUc93J+qBqwtAqwU10w/qF2QYVO+OItlHcjm bNsfOhADpzPZxD2bR5VZbbzE5WgmSAECM7vJmhKbaV3jY8Ebmr0hPyihUWv6EDn2 MPyGJ37kNa/zPPFCEbY= -----END CERTIFICATE-----Generated at Mon Sep 21 18:00:41 2026 by rpki-client