$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/832F7D72B20E11EBB73B4E2FC4F9AE02.roa File: 832F7D72B20E11EBB73B4E2FC4F9AE02.roa (raw, json) Hash identifier: 33cjA1RvA5gjWHup4RT3IWMJhD2iy6XVqVKeUTo08Zg= Subject key identifier: 37:E0:99:E7:29:D5:36:88:61:FA:6D:FC:E9:E5:4E:D3:85:C8:A1:3C Certificate issuer: /CN=A9128298/serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3 Certificate serial: 06E4 Authority key identifier: E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/832F7D72B20E11EBB73B4E2FC4F9AE02.roa Signing time: Tue 22 Sep 2026 22:43:38 +0000 ROA not before: Tue 22 Sep 2026 22:43:38 +0000 ROA not after: Tue 30 Sep 2031 00:00:00 +0000 asID: 140971 IP address blocks: 103.154.14.0/23 maxlen: 23 103.154.14.0/24 maxlen: 24 103.154.15.0/24 maxlen: 24 2001:df4:6480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1764 (0x6e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128298, serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3 Validity Not Before: Sep 22 22:43:38 2026 GMT Not After : Sep 30 00:00:00 2031 GMT Subject: CN=6ab3049a-a0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:b6:72:b0:ef:d5:84:d3:9c:91:e5:76:14: 00:2f:b0:6f:ef:d2:d0:fb:96:e8:54:94:8b:67:76: 77:75:54:25:34:5f:a2:41:b0:d8:0f:3e:80:31:2e: 71:7e:84:fe:25:8c:ee:6c:24:0c:d8:82:e4:24:f6: 97:1e:cd:17:54:c9:ab:8e:5f:26:b6:06:ed:99:c8: 53:c7:9c:ca:dd:f7:8d:73:f3:e6:ce:bd:4e:23:7b: 34:07:c3:6d:27:40:09:51:73:1a:80:9d:bc:cb:d8: 8f:1e:ca:45:a4:c8:6c:bb:72:c4:c1:ab:1d:be:11: a6:49:00:78:6d:f2:a0:30:b0:41:ac:eb:56:8d:12: ba:22:e9:b3:4b:00:95:f3:59:c4:ba:1b:d7:7c:39: e8:bc:69:64:9c:e7:66:39:99:ab:47:f1:61:4d:4a: 6f:a0:09:a9:f1:c3:b6:57:af:8a:0e:ca:02:3e:ba: 7c:ac:32:2d:43:47:25:32:6d:58:05:82:e1:5b:28: f3:48:ec:05:3a:39:84:3c:ca:14:33:c3:82:fa:d3: 7b:d3:66:7e:7e:bf:d3:59:8b:10:bd:f0:d0:a1:a2: f2:c4:1b:05:1b:f2:6d:fa:5c:b6:ba:b9:82:52:74: df:b9:74:83:be:e4:64:37:c4:7a:13:51:f3:c1:9b: e6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E0:99:E7:29:D5:36:88:61:FA:6D:FC:E9:E5:4E:D3:85:C8:A1:3C X509v3 Authority Key Identifier: keyid:E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/832F7D72B20E11EBB73B4E2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.14.0/23 IPv6: 2001:df4:6480::/48 Signature Algorithm: sha256WithRSAEncryption 46:83:06:e4:b8:52:1a:96:23:48:b9:6f:9b:94:5a:fe:b7:49: 72:0e:1a:a6:32:03:df:c8:c4:4e:e6:d6:f0:44:b0:1f:73:f1: aa:db:aa:97:ba:a9:1f:71:35:66:08:fa:3e:9c:76:d3:0c:f5: ea:de:0b:18:81:9f:8d:dd:72:a4:35:f2:e8:b2:3f:b6:b1:50: 33:88:f6:96:7e:0b:7f:0a:2a:54:76:92:9e:78:95:e2:ee:f7: 19:44:30:70:09:36:43:fd:39:9f:a8:55:24:9f:6c:33:b7:56: b3:fd:39:3e:19:34:4a:6d:cc:b1:b4:35:b5:0f:e2:81:4d:0d: 78:44:3e:64:e6:c8:60:94:51:02:d5:dc:40:90:2b:46:51:0d: 3a:b5:37:52:cd:87:de:e3:0d:66:cf:9f:2a:d2:92:ae:cd:87: 9d:cb:47:e0:f2:07:d5:b8:65:2e:4b:d2:da:31:38:d0:98:67: 42:20:b3:e0:7d:ee:1e:43:31:52:71:0d:b0:8e:92:07:1e:04: 19:64:7c:4a:1c:80:96:55:05:1d:16:b5:4b:c9:31:f7:06:20: df:40:7a:0f:fe:3c:32:56:7c:fe:07:1a:70:37:be:9d:33:8a: 08:0a:da:d1:d1:1f:2b:1e:74:aa:f9:3b:b2:3e:2b:f8:43:d1: 65:9d:9a:a6 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgyOTgxMTAvBgNVBAUTKEUzOEUwRDc5RjNGRDI5MjMxRUMzRjNFMzAyOUQzOTNG NDMyNzdDQjMwHhcNMjYwOTIyMjI0MzM4WhcNMzEwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzMDQ5YS1hMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Pu2crDv1YTTnJHldhQAL7Bv79LQ+5boVJSLZ3Z3dVQlNF+iQbDYDz6AMS5x foT+JYzubCQM2ILkJPaXHs0XVMmrjl8mtgbtmchTx5zK3feNc/Pmzr1OI3s0B8Nt J0AJUXMagJ28y9iPHspFpMhsu3LEwasdvhGmSQB4bfKgMLBBrOtWjRK6IumzSwCV 81nEuhvXfDnovGlknOdmOZmrR/FhTUpvoAmp8cO2V6+KDsoCPrp8rDItQ0clMm1Y BYLhWyjzSOwFOjmEPMoUM8OC+tN702Z+fr/TWYsQvfDQoaLyxBsFG/Jt+ly2urmC UnTfuXSDvuRkN8R6E1HzwZvmYQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDfgmecp 1TaIYfpt/OnlTtOFyKE8MB8GA1UdIwQYMBaAFOOODXnz/SkjHsPz4wKdOT9DJ3yz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODI5OC83MjI0NzY2QUIy MEMxMUVCQUM4ODZBMkNDNEY5QUUwMi80NDROZWZQOUtTTWV3X1BqQXAwNVAwTW5m TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0NE5lZlA5S1NNZXdfUGpBcDA1UDBNbmZMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjgyOTgvNzIyNDc2NkFCMjBDMTFFQkFDODg2QTJDQzRGOUFFMDIvODMyRjdENzJC MjBFMTFFQkI3M0I0RTJGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5oOMA8EAgACMAkDBwAgAQ30ZIAwDQYJKoZIhvcNAQELBQADggEB AEaDBuS4UhqWI0i5b5uUWv63SXIOGqYyA9/IxE7m1vBEsB9z8arbqpe6qR9xNWYI +j6cdtMM9ereCxiBn43dcqQ18uiyP7axUDOI9pZ+C38KKlR2kp54leLu9xlEMHAJ NkP9OZ+oVSSfbDO3VrP9OT4ZNEptzLG0NbUP4oFNDXhEPmTmyGCUUQLV3ECQK0ZR DTq1N1LNh97jDWbPnyrSkq7Nh53LR+DyB9W4ZS5L0toxONCYZ0Igs+B97h5DMVJx DbCOkgceBBlkfEocgJZVBR0WtUvJMfcGIN9Aeg/+PDJWfP4HGnA3vp0ziggK2tHR HysedKr5O7I+K/hD0WWdmqY= -----END CERTIFICATE-----Generated at Fri Sep 25 02:54:41 2026 by rpki-client