$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/3058390A7C4511E984DEA431C4F9AE02.roa File: 3058390A7C4511E984DEA431C4F9AE02.roa (raw, json) Hash identifier: 3kUNC/wjLPIz5nEeskZvJBAM3o5IVslROrboCLKObX8= Subject key identifier: AB:33:45:85:79:7D:E0:A4:8C:4B:1B:9D:FE:BD:86:D7:28:C4:96:42 Certificate issuer: /CN=A9132DF5/serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7 Certificate serial: 0FF6 Authority key identifier: 57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/3058390A7C4511E984DEA431C4F9AE02.roa Signing time: Mon 31 Aug 2026 17:34:54 +0000 ROA not before: Mon 31 Aug 2026 17:34:54 +0000 ROA not after: Fri 01 Jan 2027 00:00:00 +0000 asID: 136474 IP address blocks: 42.156.32.0/22 maxlen: 24 103.89.180.0/22 maxlen: 22 103.89.180.0/24 maxlen: 24 103.89.181.0/24 maxlen: 24 103.89.182.0/24 maxlen: 24 103.89.183.0/24 maxlen: 24 2400:f240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 17:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4086 (0xff6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132DF5, serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7 Validity Not Before: Aug 31 17:34:54 2026 GMT Not After : Jan 1 00:00:00 2027 GMT Subject: CN=6a95bb3e-3d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:82:8e:9e:9e:f2:5f:8c:75:ec:0f:13:ee:f6: 03:10:cd:58:0d:cd:70:3a:09:13:c3:96:40:7e:98: f3:15:20:ba:37:ec:7d:8f:c5:16:49:f3:d2:f4:57: bf:a5:4b:11:83:4b:fb:ea:1e:d5:77:5e:d0:a0:64: 53:f8:75:32:63:df:5d:29:57:ab:34:7c:1d:39:f6: cc:60:47:dd:1f:2f:4b:79:c0:30:da:cd:d5:a3:fb: ee:05:94:7b:d8:63:8a:b5:35:aa:49:6f:e0:32:ac: af:1c:3f:4b:af:ca:ef:96:e8:9a:9b:23:0c:29:5f: 8b:be:e1:9e:3b:e5:c8:7e:50:b6:98:3d:97:e3:3b: 4c:63:53:a9:08:90:47:7a:ea:d1:4f:50:fb:ae:e0: 64:9b:17:40:0d:dc:c2:93:36:b7:75:85:ec:88:90: ce:67:00:03:d1:fa:a8:76:3d:d0:7f:ad:3b:b1:7f: a3:c3:2b:ef:ad:69:ae:6c:41:f9:87:a5:94:c6:97: 15:fc:c5:bf:1d:14:d7:b6:98:b1:1f:8b:d5:ad:cb: aa:2c:7c:57:db:94:5c:ef:45:aa:32:ce:72:81:4f: 5d:61:dc:00:fa:fd:7e:a4:7b:76:e2:54:bf:02:c5: d4:e1:28:02:d9:a4:98:4a:e2:2b:d2:5e:45:69:a5: 87:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:33:45:85:79:7D:E0:A4:8C:4B:1B:9D:FE:BD:86:D7:28:C4:96:42 X509v3 Authority Key Identifier: keyid:57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/3058390A7C4511E984DEA431C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 42.156.32.0/22 103.89.180.0/22 IPv6: 2400:f240::/32 Signature Algorithm: sha256WithRSAEncryption 8b:44:39:e7:6f:89:3a:0e:93:50:d9:d5:48:0f:59:82:c4:1c: 71:50:1b:92:51:30:2a:c9:bb:a6:fb:1a:c4:fa:31:9c:7c:14: 70:c8:dc:24:1f:bc:29:d1:a5:c9:fc:ed:f7:b3:a8:63:7f:18: f3:1c:d3:7d:31:2d:47:21:81:c0:bd:16:69:ff:58:1b:bd:d9: 45:49:ab:44:9f:a7:01:3b:47:45:34:b3:73:dd:e2:81:dc:50: 1b:4b:03:70:83:d4:fc:31:65:94:d3:af:67:24:26:73:6e:1e: 4c:83:d3:16:24:09:22:ff:f1:ad:4d:74:6b:1a:a3:1d:2d:a2: 31:db:4f:09:fd:a9:b8:c1:87:44:31:49:d8:52:77:ea:a9:35: dd:96:24:bc:a4:83:9c:89:97:84:64:a5:b7:c7:c0:4c:ab:ed: 47:3b:ce:d7:83:1f:c1:88:a4:3e:28:86:cc:b7:f9:7e:4c:01: 4e:a3:2e:94:6e:f4:49:ab:26:16:7c:0f:eb:3b:2d:fa:c3:c1: 99:4f:34:3c:de:1a:09:27:fe:67:9b:2f:51:08:7c:8d:c0:62: ea:9c:57:d5:1a:5e:54:20:3e:37:53:57:6a:a5:bc:47:56:a5: f6:ba:96:ed:84:77:a9:58:38:70:d4:3c:e5:55:7d:ce:fc:b6: ef:fb:1c:21 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICD/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJERjUxMTAvBgNVBAUTKDU3RkI4OTM5NTM4OTY0MEI2ODY5QTVFMjQwNzRCNDJF NDIxRTJCRDcwHhcNMjYwODMxMTczNDU0WhcNMjcwMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1YmIzZS0zZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAloKOnp7yX4x17A8T7vYDEM1YDc1wOgkTw5ZAfpjzFSC6N+x9j8UWSfPS9Fe/ pUsRg0v76h7Vd17QoGRT+HUyY99dKVerNHwdOfbMYEfdHy9LecAw2s3Vo/vuBZR7 2GOKtTWqSW/gMqyvHD9Lr8rvluiamyMMKV+LvuGeO+XIflC2mD2X4ztMY1OpCJBH eurRT1D7ruBkmxdADdzCkza3dYXsiJDOZwAD0fqodj3Qf607sX+jwyvvrWmubEH5 h6WUxpcV/MW/HRTXtpixH4vVrcuqLHxX25Rc70WqMs5ygU9dYdwA+v1+pHt24lS/ AsXU4SgC2aSYSuIr0l5FaaWHAQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFKszRYV5 feCkjEsbnf69htcoxJZCMB8GA1UdIwQYMBaAFFf7iTlTiWQLaGml4kB0tC5CHivX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkRGNS84MjA3MkU3QTdD NDMxMUU5ODI4NjUxMkNDNEY5QUUwMi9WX3VKT1ZPSlpBdG9hYVhpUUhTMExrSWVL OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZfdUpPVk9KWkF0b2FhWGlRSFMwTGtJZUs5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzJERjUvODIwNzJFN0E3QzQzMTFFOTgyODY1MTJDQzRGOUFFMDIvMzA1ODM5MEE3 QzQ1MTFFOTg0REVBNDMxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCKpwgAwQCZ1m0MA0EAgACMAcDBQAkAPJAMA0GCSqGSIb3DQEBCwUA A4IBAQCLRDnnb4k6DpNQ2dVID1mCxBxxUBuSUTAqybum+xrE+jGcfBRwyNwkH7wp 0aXJ/O33s6hjfxjzHNN9MS1HIYHAvRZp/1gbvdlFSatEn6cBO0dFNLNz3eKB3FAb SwNwg9T8MWWU069nJCZzbh5Mg9MWJAki//GtTXRrGqMdLaIx208J/am4wYdEMUnY UnfqqTXdliS8pIOciZeEZKW3x8BMq+1HO87Xgx/BiKQ+KIbMt/l+TAFOoy6UbvRJ qyYWfA/rOy36w8GZTzQ83hoJJ/5nmy9RCHyNwGLqnFfVGl5UID43U1dqpbxHVqX2 upbthHepWDhw1DzlVX3O/Lbv+xwh -----END CERTIFICATE-----Generated at Tue Sep 29 06:56:46 2026 by rpki-client