$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/A42EF8A6D8CB11F1A6C2D4BBA1EE528E.roa File: A42EF8A6D8CB11F1A6C2D4BBA1EE528E.roa (raw, json) Hash identifier: gbTYW102kc0ZkUEkSku3zb8qaCs8QM10iyqqbpEsRq4= Subject key identifier: 15:64:FC:B1:EB:E1:57:0B:3D:AD:4B:DD:56:80:B3:C1:56:00:B1:F0 Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Certificate serial: 02DF Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/A42EF8A6D8CB11F1A6C2D4BBA1EE528E.roa Signing time: Thu 05 Nov 2026 03:47:38 +0000 ROA not before: Thu 05 Nov 2026 03:47:38 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150423 IP address blocks: 103.38.250.0/23 maxlen: 24 2001:df1:88c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 01:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Validity Not Before: Nov 5 03:47:38 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6aebfc59-7373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:42:c4:9c:eb:40:eb:69:ba:1d:f4:ea:19: fe:93:e8:84:aa:53:9c:54:7d:78:e1:0a:f2:39:93: e2:84:02:1c:40:4d:8d:b5:dd:11:7f:19:f6:82:19: cb:c0:a2:9f:77:ee:46:89:c3:a8:ce:58:45:9e:73: b0:ad:84:5c:95:95:69:01:71:e5:a4:16:78:76:e2: 2f:2f:91:34:02:7d:b9:89:4c:62:ee:bf:43:7d:3b: 5f:9a:cb:61:88:2e:e9:dc:ee:12:8d:17:60:d7:72: b2:7f:d6:12:f5:fd:a0:b2:fe:8f:20:23:1b:5a:14: 37:6e:af:99:57:04:14:65:16:46:b5:2c:69:d5:d2: 60:d8:4c:be:38:37:33:e6:d8:b8:56:52:2d:d5:eb: 05:df:42:8e:ae:60:9c:f6:cd:1b:ac:7d:5b:4b:cc: 92:d1:78:f9:7e:da:95:fc:36:e7:e2:69:18:4a:3d: e2:3a:d8:b9:53:63:fb:ce:b5:64:9e:88:1f:ca:b9: 3e:83:bf:c3:0f:fe:7e:50:0b:2b:f5:ac:e6:bd:ea: 1f:08:26:36:31:dc:22:7d:af:b0:f5:1c:e5:a6:3f: 91:c5:9f:25:51:04:ae:99:84:3a:0d:ec:48:bb:bc: 6d:1a:7d:71:5f:3f:86:0c:6f:4c:d9:8d:81:1a:21: 0c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:64:FC:B1:EB:E1:57:0B:3D:AD:4B:DD:56:80:B3:C1:56:00:B1:F0 X509v3 Authority Key Identifier: keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/A42EF8A6D8CB11F1A6C2D4BBA1EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.38.250.0/23 IPv6: 2001:df1:88c0::/48 Signature Algorithm: sha256WithRSAEncryption 0b:7f:0d:d9:73:e3:65:4b:9d:5e:8b:e1:af:c7:f6:1f:a1:72: ff:72:24:8b:19:bf:7d:74:57:58:60:28:f7:dc:a9:cb:57:28: 11:74:1a:81:76:f0:08:fe:19:11:f9:f3:e7:2f:0a:19:85:d7: f9:65:88:1d:e3:95:5d:fc:a7:0e:21:52:03:e2:81:56:89:ea: e6:ea:2b:2c:59:72:ba:30:2e:1f:18:2a:94:63:84:4b:a5:d8: ba:6c:8b:3e:6a:ce:14:9e:fa:d2:cb:18:6d:97:85:61:7e:7b: 35:78:86:b4:02:60:23:16:47:a7:45:ad:9e:92:6a:d3:7c:f7: 29:33:d3:f0:71:7c:d0:15:59:4f:46:e3:bd:e4:bc:be:0f:09: 92:26:22:03:60:12:2c:11:ae:aa:a2:af:68:d1:0c:e4:c4:95: 87:79:f9:23:0a:f1:e0:5d:2f:40:26:01:01:ee:09:57:e9:f8: db:6b:e6:8a:08:7c:29:3d:88:c3:f9:fb:08:56:c9:a6:c2:28: 80:ce:91:b0:fb:1f:6c:0f:2d:d0:65:64:f1:62:d8:21:11:fa: 14:29:43:e7:b7:7a:f7:bf:3b:4c:61:4d:27:c5:74:b1:46:22: 37:7c:09:69:58:08:19:05:d7:ed:8d:14:24:c9:be:8a:fc:a1: 95:36:fe:f8 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFEMzYxMTAvBgNVBAUTKEMwQUVGNjI1QUY5RDUwNEFFODQ3RjY5MjNEQTg5MTA2 OUM5MDAzRjQwHhcNMjYxMTA1MDM0NzM4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YWViZmM1OS03MzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDJCxJzrQOtpuh306hn+k+iEqlOcVH144QryOZPihAIcQE2Ntd0Rfxn2ghnL wKKfd+5GicOozlhFnnOwrYRclZVpAXHlpBZ4duIvL5E0An25iUxi7r9DfTtfmsth iC7p3O4SjRdg13Kyf9YS9f2gsv6PICMbWhQ3bq+ZVwQUZRZGtSxp1dJg2Ey+ODcz 5ti4VlIt1esF30KOrmCc9s0brH1bS8yS0Xj5ftqV/Dbn4mkYSj3iOti5U2P7zrVk nogfyrk+g7/DD/5+UAsr9azmveofCCY2Mdwifa+w9Rzlpj+RxZ8lUQSumYQ6DexI u7xtGn1xXz+GDG9M2Y2BGiEM3wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBVk/LHr 4VcLPa1L3VaAs8FWALHwMB8GA1UdIwQYMBaAFMCu9iWvnVBK6Ef2kj2okQackAP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQzNi9GQzEzQTNFNDkx QUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVFcm9SX2FTUGFpUkJweVFB X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzJKYS1kVUVyb1JfYVNQYWlSQnB5UUFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFEMzYvRkMxM0EzRTQ5MUFBMTFFRDgwQzE3QTVFQzRGOUFFMDIvQTQyRUY4QTZE OENCMTFGMUE2QzJENEJCQTFFRTUyOEUucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZyb6MA8EAgACMAkDBwAgAQ3xiMAwDQYJKoZIhvcNAQELBQADggEB AAt/Ddlz42VLnV6L4a/H9h+hcv9yJIsZv310V1hgKPfcqctXKBF0GoF28Aj+GRH5 8+cvChmF1/lliB3jlV38pw4hUgPigVaJ6ubqKyxZcrowLh8YKpRjhEul2Lpsiz5q zhSe+tLLGG2XhWF+ezV4hrQCYCMWR6dFrZ6SatN89ykz0/BxfNAVWU9G473kvL4P CZImIgNgEiwRrqqir2jRDOTElYd5+SMK8eBdL0AmAQHuCVfp+Ntr5ooIfCk9iMP5 +whWyabCKIDOkbD7H2wPLdBlZPFi2CER+hQpQ+e3eve/O0xhTSfFdLFGIjd8CWlY CBkF1+2NFCTJvor8oZU2/vg= -----END CERTIFICATE-----Generated at Sun Nov 15 08:04:56 2026 by rpki-client