$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/8FA6DAE02C5B11E99B8B114EC4F9AE02.roa File: 8FA6DAE02C5B11E99B8B114EC4F9AE02.roa (raw, json) Hash identifier: 0OIwhRs4zDuv+mZoozU3H4nWM2v0WxNSIoQmcUeB4dQ= Subject key identifier: 6A:D2:9A:3A:90:2C:A8:5A:92:94:04:7F:FD:72:0F:61:46:59:37:21 Certificate issuer: /CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Certificate serial: 11B2 Authority key identifier: 57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/8FA6DAE02C5B11E99B8B114EC4F9AE02.roa Signing time: Thu 08 Oct 2026 17:33:40 +0000 ROA not before: Thu 08 Oct 2026 17:33:40 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136996 IP address blocks: 103.101.192.0/24 maxlen: 24 2001:df2:a700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 17:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4530 (0x11b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E05B, serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Validity Not Before: Oct 8 17:33:40 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac7d3f4-47ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d2:72:1c:7a:da:11:ff:9a:69:28:66:11:07: a2:51:bd:93:3b:16:42:3b:c5:06:1d:0f:92:75:45: 6a:b6:10:ea:a0:24:ba:57:42:3d:7f:e4:cd:5f:e3: 3a:ca:01:95:df:20:fc:bf:56:89:2a:b4:95:1e:e9: ac:d7:9b:df:e1:6d:3c:0d:c4:b7:1b:43:78:58:a8: bc:a1:db:64:96:80:59:2a:3b:09:c5:f5:58:ba:d0: eb:48:6a:de:2d:81:bf:0e:66:10:fc:eb:63:7c:51: bf:d3:44:72:ff:c1:38:3e:a2:1d:2c:6a:c8:3c:d5: 13:2a:cf:8a:9c:a4:17:50:fb:54:ff:56:8a:f8:36: 67:a4:9c:cc:dd:96:bb:db:a5:47:0e:7f:e2:03:c0: b5:ef:f7:f5:83:01:2f:1a:2c:0e:d9:56:6b:d5:d7: 98:78:08:a5:db:7a:64:92:e6:4a:b5:c3:e6:02:44: 16:60:a0:3a:8f:7e:41:e4:ea:1a:fb:1c:be:34:77: aa:68:4a:6b:69:e9:61:f0:02:51:52:6a:3c:5d:0b: 4f:32:09:00:4e:14:ef:97:61:92:39:f8:61:30:db: c2:19:c1:98:3a:f7:14:0a:40:49:6e:45:88:e1:68: 98:3f:00:2f:a0:9d:e8:d3:07:ba:b0:a4:66:a1:7d: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D2:9A:3A:90:2C:A8:5A:92:94:04:7F:FD:72:0F:61:46:59:37:21 X509v3 Authority Key Identifier: keyid:57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/8FA6DAE02C5B11E99B8B114EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.192.0/24 IPv6: 2001:df2:a700::/48 Signature Algorithm: sha256WithRSAEncryption 23:f9:23:9d:73:62:b9:13:08:b9:5c:6a:0c:63:13:90:f2:d5: 77:94:38:01:91:03:c6:9c:49:b7:c1:c6:62:fa:86:c7:fa:7c: e4:d7:69:ba:59:b2:32:32:f1:4c:56:f6:39:40:0a:aa:8b:12: be:63:2e:f4:91:d4:28:0e:17:8d:e8:24:fd:44:57:8e:e2:98: ad:1a:ca:c1:7d:84:23:90:68:70:f1:eb:83:47:95:f7:ce:9f: 25:0f:ba:64:55:b1:5f:ce:25:50:d5:c1:19:76:27:6a:98:b5: a3:28:86:bb:7b:cd:c3:7e:00:f4:88:77:54:50:e5:57:95:14: 6e:9a:b4:9d:97:3c:1a:98:24:94:15:22:c6:80:2e:1d:71:d3: 1e:c4:8d:27:88:88:7b:9d:69:a0:d2:24:68:00:f0:c7:5f:3f: 27:50:ff:78:3b:27:d3:76:49:47:54:4e:c9:c3:ad:13:54:72: 88:34:d7:b0:03:ab:c4:3a:6b:9c:90:6a:8f:e4:05:ed:fd:18: c6:4f:a5:71:39:af:66:df:a8:d8:13:54:81:8e:af:e6:c1:ed: f5:d7:e8:03:f5:09:cd:85:97:1d:ea:46:c9:95:de:92:5e:34: 80:33:2c:c8:c0:56:e6:68:f8:8d:02:3a:73:88:f2:af:c4:99: 99:e2:ee:e4 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICEbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwNUIxMTAvBgNVBAUTKDU3NThBNDEzNTU2NTgyRjg1OThFMUY0NUZDNjMzNzk5 QTdCMUQxMDcwHhcNMjYxMDA4MTczMzQwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM3ZDNmNC00N2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39JyHHraEf+aaShmEQeiUb2TOxZCO8UGHQ+SdUVqthDqoCS6V0I9f+TNX+M6 ygGV3yD8v1aJKrSVHums15vf4W08DcS3G0N4WKi8odtkloBZKjsJxfVYutDrSGre LYG/DmYQ/OtjfFG/00Ry/8E4PqIdLGrIPNUTKs+KnKQXUPtU/1aK+DZnpJzM3Za7 26VHDn/iA8C17/f1gwEvGiwO2VZr1deYeAil23pkkuZKtcPmAkQWYKA6j35B5Ooa +xy+NHeqaEpraelh8AJRUmo8XQtPMgkAThTvl2GSOfhhMNvCGcGYOvcUCkBJbkWI 4WiYPwAvoJ3o0we6sKRmoX2PcwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGrSmjqQ LKhakpQEf/1yD2FGWTchMB8GA1UdIwQYMBaAFFdYpBNVZYL4WY4fRfxjN5mnsdEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA1Qi9CMzE5NjZDNDJD NUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2aFpqaDlGX0dNM21hZXgw UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YxaWtFMVZsZ3ZoWmpoOUZfR00zbWFleDBRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0UwNUIvQjMxOTY2QzQyQzVBMTFFOTk0M0U5RDRDQzRGOUFFMDIvOEZBNkRBRTAy QzVCMTFFOTlCOEIxMTRFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ2XAMA8EAgACMAkDBwAgAQ3ypwAwDQYJKoZIhvcNAQELBQADggEB ACP5I51zYrkTCLlcagxjE5Dy1XeUOAGRA8acSbfBxmL6hsf6fOTXabpZsjIy8UxW 9jlACqqLEr5jLvSR1CgOF43oJP1EV47imK0aysF9hCOQaHDx64NHlffOnyUPumRV sV/OJVDVwRl2J2qYtaMohrt7zcN+APSId1RQ5VeVFG6atJ2XPBqYJJQVIsaALh1x 0x7EjSeIiHudaaDSJGgA8MdfPydQ/3g7J9N2SUdUTsnDrRNUcog017ADq8Q6a5yQ ao/kBe39GMZPpXE5r2bfqNgTVIGOr+bB7fXX6AP1Cc2Flx3qRsmV3pJeNIAzLMjA VuZo+I0COnOI8q/EmZni7uQ= -----END CERTIFICATE-----Generated at Fri Oct 9 01:50:16 2026 by rpki-client