$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/C40CFBDED7E011EFBC9A924AC4F9AE02.roa File: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (raw, json) Hash identifier: Ruc3bU3gpIxz3HYlzBYpbLLjahTTstxDfWWCXB7D9q4= Subject key identifier: 70:92:8B:06:6B:AE:BB:AB:1B:FF:E3:E2:22:14:7B:E3:0F:31:48:B0 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0EB5 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/C40CFBDED7E011EFBC9A924AC4F9AE02.roa Signing time: Wed 30 Sep 2026 10:50:33 +0000 ROA not before: Wed 30 Sep 2026 10:50:33 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 137449 IP address blocks: 43.246.202.0/23 maxlen: 24 103.109.58.0/24 maxlen: 24 103.111.12.0/24 maxlen: 24 103.111.13.0/24 maxlen: 24 2402:76c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 17:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3765 (0xeb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Sep 30 10:50:33 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6abce979-9d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:11:1b:18:df:69:84:3a:0f:f8:02:4a:24: 2b:ee:cf:68:9f:14:bc:a9:3b:8e:f5:8d:5d:e3:4e: 7f:22:94:a2:c0:9b:64:5f:51:d1:33:2a:11:b3:12: 09:cb:ef:88:8a:9b:ec:21:54:dc:7d:13:70:94:97: 99:8f:8b:49:e6:1e:03:19:b8:66:22:95:90:09:3f: b7:81:1c:61:a9:96:fe:1b:df:9c:21:06:3a:89:6b: fb:cb:30:0d:14:cb:99:33:63:7b:69:e7:c5:54:da: 5c:f8:cf:fd:b7:f1:40:2e:3c:26:2c:2f:63:d7:1b: 5d:0c:29:f2:27:b3:45:04:c1:4c:60:6d:fa:58:b7: 4f:ea:be:5f:0c:dd:4e:4d:6c:26:e7:f8:2d:24:54: 2c:50:a7:a8:65:b0:16:fa:66:20:67:93:0a:a2:87: 6e:fa:70:8f:54:c4:57:97:35:fb:d6:d5:d1:a2:0f: 75:39:64:db:1d:85:d8:ae:75:20:b5:2c:23:65:ac: 25:c0:da:26:11:63:58:27:41:4a:ac:7c:51:f4:22: 6c:80:90:f6:cd:2e:00:72:a2:03:06:f9:6b:55:fc: 1f:53:02:5f:24:42:df:9c:6b:45:0a:79:9b:71:19: f7:dc:b5:11:dd:2d:f6:4c:4e:83:b0:51:98:7d:b7: 67:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:92:8B:06:6B:AE:BB:AB:1B:FF:E3:E2:22:14:7B:E3:0F:31:48:B0 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/C40CFBDED7E011EFBC9A924AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.202.0/23 103.109.58.0/24 103.111.12.0/23 IPv6: 2402:76c0::/32 Signature Algorithm: sha256WithRSAEncryption a5:65:42:67:b8:61:bf:10:a8:8c:5b:e6:5b:9a:07:db:95:8f: 79:a3:cf:c1:a5:40:c9:05:c9:6b:df:1f:9d:d4:89:08:d9:f0: 91:5f:00:45:82:d5:13:05:f8:6c:d7:62:0d:ac:f1:78:ee:83: ff:f7:cf:3d:89:7f:fe:0b:f2:b9:4b:10:a9:44:ec:ed:50:5b: 16:83:6a:07:ea:0c:d0:78:8c:78:1a:8a:40:3d:ba:83:a6:6d: f1:8c:1c:6f:e0:bd:70:07:25:3b:98:73:87:b0:4b:9a:8c:56: 66:9f:e4:18:29:2c:12:e6:be:18:01:5d:17:0f:89:de:79:4c: b6:f2:4b:61:3d:ed:98:b5:4a:56:23:28:71:38:fe:bd:2f:03: 09:43:c7:26:91:c7:61:78:97:b3:fa:38:53:f2:71:2b:4b:d8: f3:a9:21:c3:34:df:88:b8:1f:43:af:4c:f5:8c:10:3f:df:6e: df:97:67:74:21:f8:3b:04:4d:90:08:6b:ce:c7:33:33:cd:9f: c8:42:91:29:13:5f:89:ea:1e:9e:3b:96:93:44:86:d8:3f:69: c5:95:ff:ec:41:3a:2c:60:19:67:f5:25:1a:77:b1:36:12:0c: 90:b8:1d:4b:0d:c4:7d:d3:5d:4c:4f:a5:ad:02:b1:a3:c3:c3: 5b:82:8f:50 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICDrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjYwOTMwMTA1MDMzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YWJjZTk3OS05ZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOQRGxjfaYQ6D/gCSiQr7s9onxS8qTuO9Y1d405/IpSiwJtkX1HRMyoRsxIJ y++IipvsIVTcfRNwlJeZj4tJ5h4DGbhmIpWQCT+3gRxhqZb+G9+cIQY6iWv7yzAN FMuZM2N7aefFVNpc+M/9t/FALjwmLC9j1xtdDCnyJ7NFBMFMYG36WLdP6r5fDN1O TWwm5/gtJFQsUKeoZbAW+mYgZ5MKoodu+nCPVMRXlzX71tXRog91OWTbHYXYrnUg tSwjZawlwNomEWNYJ0FKrHxR9CJsgJD2zS4AcqIDBvlrVfwfUwJfJELfnGtFCnmb cRn33LUR3S32TE6DsFGYfbdnGwIDAQABo4ICezCCAncwHQYDVR0OBBYEFHCSiwZr rrurG//j4iIUe+MPMUiwMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg4NDcvRERGQkIwQjhENzgxMTFFOUI0MjNBQzRCQzRGOUFFMDIvQzQwQ0ZCREVE N0UwMTFFRkJDOUE5MjRBQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQBK/bKAwQAZ206AwQBZ28MMA0EAgACMAcDBQAkAnbAMA0GCSqGSIb3 DQEBCwUAA4IBAQClZUJnuGG/EKiMW+ZbmgfblY95o8/BpUDJBclr3x+d1IkI2fCR XwBFgtUTBfhs12INrPF47oP/9889iX/+C/K5SxCpROztUFsWg2oH6gzQeIx4GopA PbqDpm3xjBxv4L1wByU7mHOHsEuajFZmn+QYKSwS5r4YAV0XD4neeUy28kthPe2Y tUpWIyhxOP69LwMJQ8cmkcdheJez+jhT8nErS9jzqSHDNN+IuB9Dr0z1jBA/327f l2d0Ifg7BE2QCGvOxzMzzZ/IQpEpE1+J6h6eO5aTRIbYP2nFlf/sQTosYBln9SUa d7E2EgyQuB1LDcR9011MT6WtArGjw8Nbgo9Q -----END CERTIFICATE-----Generated at Thu Oct 8 22:00:25 2026 by rpki-client