$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/2EAD49328A4911F1B17FECC73411F970.roa File: 2EAD49328A4911F1B17FECC73411F970.roa (raw, json) Hash identifier: 3ZUQ8ehSMmQlNLkpaHNTJuGlbh9RcIttBaWEBN6l0Q0= Subject key identifier: 57:CD:E9:AF:AC:DB:60:FC:1C:39:D3:CA:E1:A0:CE:D0:D3:61:E6:E2 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 02AB Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/2EAD49328A4911F1B17FECC73411F970.roa Signing time: Wed 23 Sep 2026 01:29:47 +0000 ROA not before: Wed 23 Sep 2026 01:29:46 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 139084 IP address blocks: 103.138.36.0/22 maxlen: 24 2404:bf40::/32 maxlen: 32 2404:bf40:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 02:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Sep 23 01:29:46 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6ab32b8a-9e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:f4:58:3c:f1:b5:a8:85:b6:69:7e:13:79: 19:de:07:f3:ca:e7:41:c8:28:20:a2:ff:99:33:07: 48:73:90:e0:ee:3d:4c:e7:77:59:f2:f8:33:9a:3e: 31:9f:c1:23:b8:13:7a:e3:9c:d0:fc:ae:77:3c:34: 33:3d:4d:65:02:78:cb:97:f7:4a:48:a6:93:b5:51: fa:54:92:9d:c0:f0:f5:f1:4f:3c:f2:5a:7a:cb:18: c9:1b:ea:6a:d1:fa:c7:ea:aa:bc:6c:f9:05:a4:6f: 5f:db:40:4e:ce:7c:6c:e8:0e:6c:0c:95:45:9a:79: 52:71:74:26:c5:ca:44:d4:b0:55:37:fb:65:c5:8f: c9:42:5d:6f:8d:9a:f3:51:2b:55:ed:cc:ce:5c:63: 33:0b:41:62:ba:44:c0:05:fa:e0:ec:99:bf:e6:bd: fa:64:9e:99:78:de:75:bc:eb:ef:73:fc:73:94:a3: bf:1c:88:af:68:bb:1c:89:97:6b:79:96:ca:16:ed: 7e:7a:ac:dd:6c:ac:2a:17:b8:15:23:70:ab:4c:e1: 09:61:4d:d3:97:3b:ea:48:13:7b:05:df:9e:be:c5: 2e:d6:ea:1d:80:4b:80:87:14:32:57:ae:99:cf:b9: a4:22:c5:c3:68:8c:3f:fd:2a:5e:20:9a:60:81:84: 92:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CD:E9:AF:AC:DB:60:FC:1C:39:D3:CA:E1:A0:CE:D0:D3:61:E6:E2 X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/2EAD49328A4911F1B17FECC73411F970.roa sbgp-ipAddrBlock: critical IPv4: 103.138.36.0/22 IPv6: 2404:bf40::/32 Signature Algorithm: sha256WithRSAEncryption 1f:42:ea:d7:60:65:58:3a:b1:36:a6:4c:f2:a6:7a:ff:f4:65: 39:16:c3:34:2b:ce:fe:ec:dd:e5:d2:25:e7:7f:9a:7b:a1:05: 21:8c:52:7b:82:f2:c0:1d:38:63:f9:58:25:0a:0d:b9:b1:c2: fc:0f:2b:96:a2:4f:d9:f2:65:fc:4d:8f:0e:82:b4:e1:f2:66: 29:5c:75:bd:75:9a:1c:15:04:44:4e:1f:33:d2:9e:25:53:d7: eb:40:9f:84:d1:37:77:1b:5e:32:78:60:f5:95:c2:7f:9e:1e: 9b:4b:d2:9b:59:e2:07:43:ee:74:07:37:6a:8d:a2:ef:c8:3c: e7:f5:74:12:7c:85:7c:1b:24:b0:63:8d:36:9f:7a:1e:83:a0: c0:f8:bc:e8:5b:46:4a:ef:fb:6a:94:80:a0:c0:53:2b:18:5b: d2:b1:c6:49:2a:fe:35:85:13:d0:b8:6e:b0:a4:0d:ad:a4:18: 4a:1b:c2:e8:5b:34:3d:58:7d:85:93:f1:ab:bb:56:8e:d2:ab: 94:52:e2:c2:34:65:9c:d2:15:9a:d3:94:cf:d5:88:38:9e:d6: 6d:c6:64:28:01:cf:74:30:ae:01:a3:41:35:1f:0a:fe:79:56: 8f:b2:02:71:6c:9c:9c:b8:85:53:a1:ef:02:bb:0a:3e:fe:7e: e3:62:60:db -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjYwOTIzMDEyOTQ2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzMmI4YS05ZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvD0WDzxtaiFtml+E3kZ3gfzyudByCggov+ZMwdIc5Dg7j1M53dZ8vgzmj4x n8EjuBN645zQ/K53PDQzPU1lAnjLl/dKSKaTtVH6VJKdwPD18U888lp6yxjJG+pq 0frH6qq8bPkFpG9f20BOznxs6A5sDJVFmnlScXQmxcpE1LBVN/tlxY/JQl1vjZrz UStV7czOXGMzC0FiukTABfrg7Jm/5r36ZJ6ZeN51vOvvc/xzlKO/HIivaLsciZdr eZbKFu1+eqzdbKwqF7gVI3CrTOEJYU3TlzvqSBN7Bd+evsUu1uodgEuAhxQyV66Z z7mkIsXDaIw//SpeIJpggYSSMQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFfN6a+s 22D8HDnTyuGgztDTYebiMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0IzRDYvNDZFQzFERTRDRUEzMTFFREIzMDNGNzM4QzRGOUFFMDIvMkVBRDQ5MzI4 QTQ5MTFGMUIxN0ZFQ0M3MzQxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4okMA0EAgACMAcDBQAkBL9AMA0GCSqGSIb3DQEBCwUAA4IBAQAf QurXYGVYOrE2pkzypnr/9GU5FsM0K87+7N3l0iXnf5p7oQUhjFJ7gvLAHThj+Vgl Cg25scL8DyuWok/Z8mX8TY8OgrTh8mYpXHW9dZocFQRETh8z0p4lU9frQJ+E0Td3 G14yeGD1lcJ/nh6bS9KbWeIHQ+50BzdqjaLvyDzn9XQSfIV8GySwY402n3oeg6DA +LzoW0ZK7/tqlICgwFMrGFvSscZJKv41hRPQuG6wpA2tpBhKG8LoWzQ9WH2Fk/Gr u1aO0quUUuLCNGWc0hWa05TP1Yg4ntZtxmQoAc90MK4Bo0E1Hwr+eVaPsgJxbJyc uIVToe8Cuwo+/n7jYmDb -----END CERTIFICATE-----Generated at Fri Sep 25 04:03:50 2026 by rpki-client