$ rpki-client -vvvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa File: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (raw, json) Hash identifier: 6RXwgbnN2rBKh/2tqm5RTVGi0Iq1Kc0Yd6NErbg5XT4= Subject key identifier: 4F:16:BC:74:A8:B7:67:6A:BF:7F:21:75:B3:D0:F7:89:37:99:D7:7D Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 09E9 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa Signing time: Wed 02 Sep 2026 20:40:08 +0000 ROA not before: Wed 02 Sep 2026 20:40:08 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 45634 IP address blocks: 103.5.44.0/22 maxlen: 22 103.5.44.0/24 maxlen: 24 103.5.45.0/24 maxlen: 24 103.5.46.0/24 maxlen: 24 103.5.47.0/24 maxlen: 24 103.35.204.0/22 maxlen: 22 103.35.204.0/24 maxlen: 24 103.35.205.0/24 maxlen: 24 103.35.206.0/24 maxlen: 24 103.35.207.0/24 maxlen: 24 103.249.160.0/22 maxlen: 22 103.249.160.0/24 maxlen: 24 103.249.161.0/24 maxlen: 24 103.249.162.0/24 maxlen: 24 103.249.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2537 (0x9e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Sep 2 20:40:08 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9889a8-b0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:e9:10:19:21:47:9e:14:ac:15:43:4d:ce: 2f:3d:60:92:56:86:96:80:02:4d:c1:54:c6:26:ea: b9:6d:e3:7b:8f:76:5e:b7:e4:c1:6f:e6:ed:ec:a0: e3:54:d4:33:02:ed:85:f0:52:4b:33:0e:27:1a:93: 6c:7e:f1:67:1f:8a:64:03:9d:78:7e:d5:43:bb:60: 9a:db:4f:f0:01:fc:a6:b3:20:79:65:b0:c8:a2:79: 67:39:4a:30:98:95:c0:a7:23:0e:94:e3:32:f4:0f: 38:90:de:e6:06:6d:2c:f4:c9:5d:84:f6:c3:c0:30: 50:33:d9:5f:0a:8d:cb:86:38:55:28:18:96:33:da: bc:a8:58:51:5d:79:6d:92:67:d2:d3:3f:3b:e1:47: c8:83:cc:c5:5a:9b:d8:41:e7:b4:4a:e2:d5:6d:37: c3:37:17:83:05:9d:cd:c8:ed:ea:31:20:ae:68:0b: 4b:48:7f:c2:de:57:d1:ea:4a:ac:ef:c9:71:71:6c: 29:bf:ae:9e:6f:01:1c:bf:45:b3:93:ae:fc:13:7d: 3a:91:90:4e:af:db:a7:58:38:dc:d8:ff:18:25:44: 1b:4c:e4:24:eb:d0:84:2d:09:f7:56:a4:7e:e7:5a: a9:61:e8:45:0e:45:31:fb:08:d8:0f:b1:12:92:fd: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:16:BC:74:A8:B7:67:6A:BF:7F:21:75:B3:D0:F7:89:37:99:D7:7D X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.5.44.0/22 103.35.204.0/22 103.249.160.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:f3:d6:e3:6b:b5:73:21:c8:d8:8f:ab:2c:4f:20:a9:02:13: 07:0a:a2:28:04:2a:ae:72:6f:67:84:bf:42:03:42:31:f8:3c: 7d:1f:ef:88:41:05:5d:1e:bb:6f:5e:78:83:ce:9a:76:52:fd: 38:93:79:22:d3:0b:05:ac:e1:97:20:53:b4:be:08:55:db:4d: ca:2f:72:93:d8:5a:5a:f2:4a:2f:34:91:7e:b3:3e:b2:f8:d7: 92:03:85:e5:35:e6:52:5e:19:21:83:b2:47:e5:d6:4a:92:d9: 7a:c8:3f:3b:f1:75:5e:46:a5:86:3a:41:09:d3:82:55:f7:3e: c2:69:70:62:d2:41:3f:9e:73:65:90:38:d0:6d:12:20:74:85: d3:17:e2:52:df:2f:59:44:38:11:79:0d:f5:5c:f3:4b:50:a3: 83:fc:07:6a:02:8b:a4:da:07:98:64:8f:80:12:d6:03:30:1b: 07:90:93:60:c9:70:d2:04:c5:19:6b:75:47:05:68:b9:6a:3e: 6c:7e:77:a0:ce:90:b6:ea:ee:ec:45:03:5b:53:90:8c:e3:c9: 47:1b:ad:db:a4:1d:ea:7f:59:32:02:c3:7d:d7:ad:91:39:6b: 66:c5:f1:d1:9c:33:36:74:fc:bc:28:19:90:19:2c:5a:24:ea: 2b:75:b3:8a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjYwOTAyMjA0MDA4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ODlhOC1iMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/TpEBkhR54UrBVDTc4vPWCSVoaWgAJNwVTGJuq5beN7j3Zet+TBb+bt7KDj VNQzAu2F8FJLMw4nGpNsfvFnH4pkA514ftVDu2Ca20/wAfymsyB5ZbDIonlnOUow mJXApyMOlOMy9A84kN7mBm0s9MldhPbDwDBQM9lfCo3LhjhVKBiWM9q8qFhRXXlt kmfS0z874UfIg8zFWpvYQee0SuLVbTfDNxeDBZ3NyO3qMSCuaAtLSH/C3lfR6kqs 78lxcWwpv66ebwEcv0Wzk678E306kZBOr9unWDjc2P8YJUQbTOQk69CELQn3VqR+ 51qpYehFDkUx+wjYD7ESkv1p+wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFE8WvHSo t2dqv38hdbPQ94k3mdd9MB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxMkYvNEI4QkZGRUNCNDY5MTFFQUFCQTcxQzc1QzRGOUFFMDIvNEM1Q0NFNkVC NDZBMTFFQUI1QTAxMTc2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZwUsAwQCZyPMAwQCZ/mgMA0GCSqGSIb3DQEBCwUAA4IBAQBO89bj a7VzIcjYj6ssTyCpAhMHCqIoBCqucm9nhL9CA0Ix+Dx9H++IQQVdHrtvXniDzpp2 Uv04k3ki0wsFrOGXIFO0vghV203KL3KT2Fpa8kovNJF+sz6y+NeSA4XlNeZSXhkh g7JH5dZKktl6yD878XVeRqWGOkEJ04JV9z7CaXBi0kE/nnNlkDjQbRIgdIXTF+JS 3y9ZRDgReQ31XPNLUKOD/AdqAouk2geYZI+AEtYDMBsHkJNgyXDSBMUZa3VHBWi5 aj5sfnegzpC26u7sRQNbU5CM48lHG63bpB3qf1kyAsN9162ROWtmxfHRnDM2dPy8 KBmQGSxaJOordbOK -----END CERTIFICATE-----Generated at Sat Sep 26 17:06:55 2026 by rpki-client