$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/3D69458C9E2111E9BCDFAE69C4F9AE02.roa File: 3D69458C9E2111E9BCDFAE69C4F9AE02.roa (raw, json) Hash identifier: umEVpZQh5Zn5h1uBm40z4biTuVmeTS9+R11J/cVrVLw= Subject key identifier: 86:41:D6:54:AC:57:AC:55:F9:1A:88:76:5A:28:74:DB:35:76:03:35 Certificate issuer: /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Certificate serial: 0F6B Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/3D69458C9E2111E9BCDFAE69C4F9AE02.roa Signing time: Wed 26 Aug 2026 17:35:16 +0000 ROA not before: Wed 26 Aug 2026 17:35:15 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 62707 IP address blocks: 103.140.164.0/23 maxlen: 24 2404:ffc0::/32 maxlen: 32 2404:ffc0::/48 maxlen: 48 2404:ffc0:1::/48 maxlen: 48 2404:ffc0:2::/48 maxlen: 48 2404:ffc0:3::/48 maxlen: 48 2404:ffc0:4::/48 maxlen: 48 2404:ffc0:5::/48 maxlen: 48 2404:ffc0:6::/48 maxlen: 48 2404:ffc0:7::/48 maxlen: 48 2404:ffc0:8::/48 maxlen: 48 2404:ffc0:9::/48 maxlen: 48 2404:ffc0:a::/48 maxlen: 48 2404:ffc0:b::/48 maxlen: 48 2404:ffc0:c::/48 maxlen: 48 2404:ffc0:d::/48 maxlen: 48 2404:ffc0:e::/48 maxlen: 48 2404:ffc0:f::/48 maxlen: 48 2404:ffc0:10::/48 maxlen: 48 2404:ffc0:11::/48 maxlen: 48 2404:ffc0:12::/48 maxlen: 48 2404:ffc0:13::/48 maxlen: 48 2404:ffc0:14::/48 maxlen: 48 2404:ffc0:15::/48 maxlen: 48 2404:ffc0:16::/48 maxlen: 48 2404:ffc0:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 16:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3947 (0xf6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EAE6, serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Validity Not Before: Aug 26 17:35:15 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a8f23d3-773e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:c4:d9:b7:b9:4f:62:a3:fa:f6:b3:83:37: 9d:d2:cc:ee:73:16:00:13:ea:2b:31:d4:3a:0b:91: 37:34:45:ac:9e:61:2e:b2:07:33:63:17:34:8d:03: a9:09:cf:f7:f7:78:a1:34:73:45:26:ff:d7:e8:0d: 29:10:c3:d0:28:d1:f3:3d:46:d5:cd:53:c4:f1:26: 21:6a:d7:92:d9:ee:8c:6f:c2:d9:8a:8e:b6:03:f4: 8d:40:73:c2:15:9f:45:19:b3:a3:31:af:62:56:65: fa:3b:fc:7d:a0:78:b7:a5:4b:6d:34:52:23:d2:69: 87:db:9f:46:fc:99:0a:b4:ae:56:82:ed:47:94:65: 2c:03:ad:20:30:d0:c2:88:89:c8:26:33:5b:2f:27: 9b:8c:31:ea:5e:3e:a5:14:9a:29:c5:f5:60:a3:76: 75:44:c4:18:49:4b:d8:98:39:c4:f7:ce:df:f8:12: bc:51:2c:b0:27:a9:08:91:4c:f5:b4:43:f8:1b:d4: 5c:87:ba:8a:85:9f:97:5d:d1:67:b9:fd:9b:14:e5: f4:ad:84:72:0a:97:3a:6b:b7:24:2d:81:e9:a6:98: e6:e5:9f:56:00:d1:37:bf:53:38:c7:59:c5:9b:fb: b8:bb:ab:80:db:b8:24:e5:54:74:f9:d0:95:9e:f1: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:41:D6:54:AC:57:AC:55:F9:1A:88:76:5A:28:74:DB:35:76:03:35 X509v3 Authority Key Identifier: keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/3D69458C9E2111E9BCDFAE69C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.164.0/23 IPv6: 2404:ffc0::/32 Signature Algorithm: sha256WithRSAEncryption 35:95:dc:80:27:5a:d5:4d:aa:f4:51:3f:2a:78:4c:27:82:de: e9:bf:00:42:c3:b5:f1:36:21:73:aa:14:45:f2:15:2b:4a:5d: b5:5a:81:78:16:0f:c3:ae:2f:fe:b0:57:45:90:92:af:c3:d6: 33:a5:09:21:44:7a:6e:91:2f:56:5d:00:cd:d4:ba:a7:b5:52: f2:2f:22:ce:ce:f5:e6:14:21:c6:cf:1d:85:a9:6a:64:15:4c: 64:98:b8:25:fd:18:e6:12:a6:87:0d:4c:53:f5:c6:91:dc:d6: 3d:50:db:23:49:e5:0e:20:4d:5b:59:83:eb:c4:17:f7:63:47: 2b:5e:8f:9d:11:f4:c3:39:24:ed:a2:4c:4f:a0:00:0a:f7:af: 04:02:3d:06:72:a7:5f:6c:6d:f2:8c:3d:c9:d5:29:28:f9:c6: 62:80:dc:03:03:b7:60:7d:8c:1a:f2:9a:86:cc:b8:94:75:6e: fd:5e:01:9a:10:7c:d7:c2:3f:b4:de:7c:eb:6c:d9:f2:7f:46: 7c:62:df:ee:8c:45:8a:95:e7:26:4e:2e:bc:4d:77:c3:b4:7e: f9:4f:f5:b3:dc:2f:c4:75:14:e3:d8:bc:5a:d3:56:44:0f:6a: 0c:be:95:bc:c1:58:a1:95:34:5b:e2:ab:d0:f6:be:81:0e:ae: 13:03:2c:46 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICD2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBRTYxMTAvBgNVBAUTKDNEMzRGMUVBNTlFREIwODZGMTczMzRENTk5RTkzMTBE NzFGRTA3NDQwHhcNMjYwODI2MTczNTE1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmMjNkMy03NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArInE2be5T2Kj+vazgzed0szucxYAE+orMdQ6C5E3NEWsnmEusgczYxc0jQOp Cc/393ihNHNFJv/X6A0pEMPQKNHzPUbVzVPE8SYhateS2e6Mb8LZio62A/SNQHPC FZ9FGbOjMa9iVmX6O/x9oHi3pUttNFIj0mmH259G/JkKtK5Wgu1HlGUsA60gMNDC iInIJjNbLyebjDHqXj6lFJopxfVgo3Z1RMQYSUvYmDnE987f+BK8USywJ6kIkUz1 tEP4G9Rch7qKhZ+XXdFnuf2bFOX0rYRyCpc6a7ckLYHpppjm5Z9WANE3v1M4x1nF m/u4u6uA27gk5VR0+dCVnvGKQwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFIZB1lSs V6xV+RqIdloodNs1dgM1MB8GA1UdIwQYMBaAFD008epZ7bCG8XM01ZnpMQ1x/gdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUFFNi83QkMyOTMyNjlC RjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJYnhjelRWbWVreERYSC1C MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUVHg2bG50c0lieGN6VFZtZWt4RFhILUIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VBRTYvN0JDMjkzMjY5QkY5MTFFOUFBNkQ4NDUzQzRGOUFFMDIvM0Q2OTQ1OEM5 RTIxMTFFOUJDREZBRTY5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4ykMA0EAgACMAcDBQAkBP/AMA0GCSqGSIb3DQEBCwUAA4IBAQA1 ldyAJ1rVTar0UT8qeEwngt7pvwBCw7XxNiFzqhRF8hUrSl21WoF4Fg/Dri/+sFdF kJKvw9YzpQkhRHpukS9WXQDN1LqntVLyLyLOzvXmFCHGzx2FqWpkFUxkmLgl/Rjm EqaHDUxT9caR3NY9UNsjSeUOIE1bWYPrxBf3Y0crXo+dEfTDOSTtokxPoAAK968E Aj0GcqdfbG3yjD3J1Sko+cZigNwDA7dgfYwa8pqGzLiUdW79XgGaEHzXwj+03nzr bNnyf0Z8Yt/ujEWKlecmTi68TXfDtH75T/Wz3C/EdRTj2Lxa01ZED2oMvpW8wVih lTRb4qvQ9r6BDq4TAyxG -----END CERTIFICATE-----Generated at Sun Oct 4 21:51:35 2026 by rpki-client