$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa File: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (raw, json) Hash identifier: yN4FKiAdlnBt1JowgvEdn1MVCETWC1L2L5EoSc4hXIA= Subject key identifier: 2B:72:C7:A4:88:A0:E7:42:4F:71:15:E1:98:DC:39:B4:9B:3D:59:A0 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 029C Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa Signing time: Sun 11 Oct 2026 02:51:16 +0000 ROA not before: Sun 11 Oct 2026 02:51:16 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 139609 IP address blocks: 103.142.98.0/24 maxlen: 24 103.142.99.0/24 maxlen: 24 2001:df1:3b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 01:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: Oct 11 02:51:16 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6acaf9a4-fcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:95:c6:08:07:e3:56:5e:e7:a9:70:33:b3:d2: a8:96:d4:40:66:36:7d:ed:1a:e3:10:4b:74:e4:82: f6:5e:fb:98:50:cc:e9:99:65:34:13:d1:3c:a5:50: 86:fd:55:59:e1:13:68:29:cb:a4:44:1e:29:99:39: f2:ac:80:8b:e7:17:1f:94:76:f4:27:cd:45:d0:db: 91:25:4c:a8:85:29:1d:db:dd:25:b3:1f:2d:9b:df: b1:0d:cd:76:5b:77:ee:c4:6a:7a:42:63:d6:94:5b: bd:24:28:1e:ed:0b:fb:d6:62:34:12:90:28:47:41: 00:ef:3f:3d:dc:a5:e3:f5:c1:5f:2f:06:19:01:2e: 09:47:48:79:9f:74:a3:09:3e:63:8a:c3:1f:e7:77: b9:db:64:2e:d5:b0:67:4a:61:9d:84:e8:3c:5b:3f: f3:5d:18:48:da:79:f5:47:a5:8d:6e:b2:11:0b:90: c9:a4:33:12:fa:19:7a:99:08:7c:c9:38:fd:1c:c7: bc:a2:ec:28:5d:fb:6f:c9:a0:4e:4a:25:3f:1b:05: 47:ea:eb:3e:84:7a:71:5b:5c:f8:b8:57:0a:bc:4e: 26:fa:a2:2e:cf:a5:17:10:4e:69:6b:49:e0:52:84: 24:45:6a:67:78:83:d8:8a:65:e1:61:2b:53:f4:dc: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:72:C7:A4:88:A0:E7:42:4F:71:15:E1:98:DC:39:B4:9B:3D:59:A0 X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.142.98.0/23 IPv6: 2001:df1:3b80::/48 Signature Algorithm: sha256WithRSAEncryption 6e:25:5c:fe:12:3b:ac:26:f6:3b:b0:80:3c:f1:98:00:e9:f5: 82:ff:58:bc:cd:71:cb:46:45:bb:8b:83:0d:79:0b:d2:8e:5b: 2b:fa:a0:3c:66:65:37:82:ec:f3:f1:89:6d:81:dc:90:a6:76: 87:c6:19:4c:c6:a4:88:7f:97:c8:ec:ba:ae:b3:73:02:db:d6: ea:ac:44:1b:26:46:b5:f7:32:74:c4:78:29:92:5d:49:24:35: 5d:62:7f:c5:2f:64:f7:34:e9:98:8b:49:ca:74:a7:4b:bd:96: 61:a1:b6:6f:2f:a5:75:a8:23:82:4c:ec:5f:17:aa:50:a1:6e: 21:53:85:eb:8d:d3:f5:69:14:9b:8c:82:cd:7b:7b:77:1c:ca: 44:4d:ac:2c:db:6d:d1:af:4b:ba:da:d0:27:30:8f:31:ef:86: 5f:a0:31:b0:4e:97:e5:40:af:6c:c3:7e:99:f3:7d:7d:e2:4c: 73:17:25:d6:a6:37:c9:f2:1e:28:cb:b1:d8:49:5a:77:f1:6c: ca:cf:94:4a:04:63:61:9e:1e:ec:d3:97:57:c6:99:0f:e5:7a: d0:72:e6:d6:0c:16:86:1f:7c:76:cf:ff:9f:5f:1b:f0:98:1b: b0:50:e8:cd:72:28:66:46:b7:eb:7f:44:72:11:9b:9c:ea:20: c9:e2:b6:0f -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjYxMDExMDI1MTE2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhZjlhNC1mY2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5XGCAfjVl7nqXAzs9KoltRAZjZ97RrjEEt05IL2XvuYUMzpmWU0E9E8pVCG /VVZ4RNoKcukRB4pmTnyrICL5xcflHb0J81F0NuRJUyohSkd290lsx8tm9+xDc12 W3fuxGp6QmPWlFu9JCge7Qv71mI0EpAoR0EA7z893KXj9cFfLwYZAS4JR0h5n3Sj CT5jisMf53e522Qu1bBnSmGdhOg8Wz/zXRhI2nn1R6WNbrIRC5DJpDMS+hl6mQh8 yTj9HMe8ouwoXftvyaBOSiU/GwVH6us+hHpxW1z4uFcKvE4m+qIuz6UXEE5pa0ng UoQkRWpneIPYimXhYStT9NzFrQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCtyx6SI oOdCT3EV4ZjcObSbPVmgMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTdERDIvMTAxRURBRUFEMUM4MTFFREFDQzgxQjdDQzRGOUFFMDIvMjg3MURCOUVE MUNCMTFFREJFMkYwRDdFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ45iMA8EAgACMAkDBwAgAQ3xO4AwDQYJKoZIhvcNAQELBQADggEB AG4lXP4SO6wm9juwgDzxmADp9YL/WLzNcctGRbuLgw15C9KOWyv6oDxmZTeC7PPx iW2B3JCmdofGGUzGpIh/l8jsuq6zcwLb1uqsRBsmRrX3MnTEeCmSXUkkNV1if8Uv ZPc06ZiLScp0p0u9lmGhtm8vpXWoI4JM7F8XqlChbiFTheuN0/VpFJuMgs17e3cc ykRNrCzbbdGvS7ra0CcwjzHvhl+gMbBOl+VAr2zDfpnzfX3iTHMXJdamN8nyHijL sdhJWnfxbMrPlEoEY2GeHuzTl1fGmQ/letBy5tYMFoYffHbP/59fG/CYG7BQ6M1y KGZGt+t/RHIRm5zqIMnitg8= -----END CERTIFICATE-----Generated at Sun Nov 15 12:53:52 2026 by rpki-client