$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/7EF6CB6E24CF11F1AAA533A9A9833773.roa File: 7EF6CB6E24CF11F1AAA533A9A9833773.roa (raw, json) Hash identifier: 9ClY33un4vbfGIdWfe6t84z6KyxGxbfl2d5rqQsmRso= Subject key identifier: 42:DC:64:E3:22:37:BD:A6:02:AB:BB:17:1F:03:57:FF:C0:2E:16:BB Certificate issuer: /CN=A9196AF7/serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2 Certificate serial: 5B Authority key identifier: A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/7EF6CB6E24CF11F1AAA533A9A9833773.roa Signing time: Mon 07 Sep 2026 08:58:50 +0000 ROA not before: Mon 07 Sep 2026 08:58:50 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 133139 IP address blocks: 43.246.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196AF7, serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2 Validity Not Before: Sep 7 08:58:50 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9e7cca-9d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:59:08:ae:11:c6:52:43:0c:41:e8:1b:1a: fc:4a:99:ec:c2:1e:56:83:1d:ff:a0:23:17:46:da: a3:77:94:08:92:f4:ec:18:c9:ba:63:8a:fc:29:77: 26:fe:62:7e:1a:d3:da:b6:c0:74:c2:81:fc:aa:5e: d9:1e:8d:a8:b8:74:b1:a1:0e:fc:56:74:50:12:54: 87:72:84:1b:e1:57:d6:bd:03:68:27:01:84:73:08: 1f:11:1f:69:11:9d:90:ce:57:88:b6:e3:2e:f4:98: 53:a6:a5:e3:b1:0a:5f:cf:be:4b:b2:4b:92:bd:1c: 51:3a:3e:a0:aa:46:74:89:15:b4:c3:3e:57:56:15: 0b:5a:e8:12:fe:bc:70:ef:b0:d5:9a:45:37:57:4d: 46:83:c9:c8:3f:2c:75:b9:86:8d:56:72:03:e8:17: 17:a9:5a:50:f2:4f:90:4a:14:89:88:bd:3c:f5:7b: a1:df:0f:00:6e:3e:2d:63:1c:2f:12:84:36:ef:3a: 69:23:c6:59:74:5a:83:bb:d2:fc:04:a7:14:6d:9a: c1:6b:2c:b0:b2:a5:d0:48:93:b5:73:98:25:5b:df: c1:d5:94:85:9b:7c:b3:8a:02:1c:16:03:5a:78:06: 0a:77:b6:e9:a1:85:1b:fe:98:7d:8e:ba:1c:8a:1f: fb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DC:64:E3:22:37:BD:A6:02:AB:BB:17:1F:03:57:FF:C0:2E:16:BB X509v3 Authority Key Identifier: keyid:A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/7EF6CB6E24CF11F1AAA533A9A9833773.roa sbgp-ipAddrBlock: critical IPv4: 43.246.151.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:5a:35:8a:85:d0:b9:f8:11:ad:4e:c5:a7:cd:05:dc:50:c4: 7e:ff:06:83:a4:3e:f6:12:f9:79:45:e1:a4:e1:09:ef:2e:2d: 79:0f:96:e5:54:fd:03:1a:a9:05:34:28:52:3c:1c:b9:8e:20: 10:45:8e:a8:88:e5:6f:b8:03:27:79:c8:a9:32:26:e6:96:4b: 10:cb:ae:63:96:e8:87:b3:52:4a:23:a7:bf:fb:b6:98:3b:17: 81:5c:38:50:c2:01:dc:f9:b5:2c:58:f0:0f:dc:b0:58:05:bd: c0:e9:3d:b9:94:86:05:7d:72:39:5c:53:48:c3:69:41:c4:9c: 1c:da:1e:08:e9:37:7c:2d:dd:09:d3:8a:09:22:ef:83:7d:7b: aa:06:b2:87:47:78:51:6e:22:11:38:2d:2e:1b:9e:03:c8:6f: 83:d3:0e:ab:03:75:20:2a:0b:97:f4:c0:c6:aa:7d:25:c5:75: 39:e6:69:e8:21:d3:f8:bc:16:b4:17:dc:c4:0e:7a:e4:72:a6: 7e:73:44:90:7c:81:d8:79:b3:1d:fb:1e:38:97:ac:aa:06:df: 80:32:98:ac:fe:e1:f1:40:7e:86:20:e4:61:0b:0d:5c:92:2e: 73:7c:92:ce:e9:7c:64:1f:a2:42:1f:31:14:98:9b:b0:a5:0d: 5d:ac:b6:3c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkFGNzExMC8GA1UEBRMoQTJFMkRGODUwNUZFMkYyQThBQ0RENkRERjFDNTYxRUZG N0REOUVFMjAeFw0yNjA5MDcwODU4NTBaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOWU3Y2NhLTlkN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4VVkIrhHGUkMMQegbGvxKmezCHlaDHf+gIxdG2qN3lAiS9OwYybpjivwpdyb+ Yn4a09q2wHTCgfyqXtkejai4dLGhDvxWdFASVIdyhBvhV9a9A2gnAYRzCB8RH2kR nZDOV4i24y70mFOmpeOxCl/PvkuyS5K9HFE6PqCqRnSJFbTDPldWFQta6BL+vHDv sNWaRTdXTUaDycg/LHW5ho1WcgPoFxepWlDyT5BKFImIvTz1e6HfDwBuPi1jHC8S hDbvOmkjxll0WoO70vwEpxRtmsFrLLCypdBIk7VzmCVb38HVlIWbfLOKAhwWA1p4 Bgp3tumhhRv+mH2OuhyKH/sFAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUQtxk4yI3 vaYCq7sXHwNX/8AuFrswHwYDVR0jBBgwFoAUouLfhQX+LyqKzdbd8cVh7/fdnuIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2QUY3L0NCRTdGMzY4MjRD RTExRjFCQzFGNUI4RUE5ODMzNzczL291TGZoUVgtTHlxS3pkYmQ4Y1ZoN19mZG51 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3VMZmhRWC1MeXFLemRiZDhjVmg3X2ZkbnVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkFGNy9DQkU3RjM2ODI0Q0UxMUYxQkMxRjVCOEVBOTgzMzc3My83RUY2Q0I2RTI0 Q0YxMUYxQUFBNTMzQTlBOTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAAr9pcwDQYJKoZIhvcNAQELBQADggEBAI1aNYqF0Ln4Ea1OxafNBdxQ xH7/BoOkPvYS+XlF4aThCe8uLXkPluVU/QMaqQU0KFI8HLmOIBBFjqiI5W+4Ayd5 yKkyJuaWSxDLrmOW6IezUkojp7/7tpg7F4FcOFDCAdz5tSxY8A/csFgFvcDpPbmU hgV9cjlcU0jDaUHEnBzaHgjpN3wt3QnTigki74N9e6oGsodHeFFuIhE4LS4bngPI b4PTDqsDdSAqC5f0wMaqfSXFdTnmaegh0/i8FrQX3MQOeuRypn5zRJB8gdh5sx37 HjiXrKoG34AymKz+4fFAfoYg5GELDVySLnN8ks7pfGQfokIfMRSYm7ClDV2stjw= -----END CERTIFICATE-----Generated at Tue Sep 22 12:38:00 2026 by rpki-client