$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa File: A152FA389E2211E99CA85B6CC4F9AE02.roa (raw, json) Hash identifier: ZJRv5omccilcWlhF2pYWAQXD6U8CAqbk444hCwPsPn4= Subject key identifier: 24:81:AD:4C:E3:63:B2:09:5E:B7:05:85:3C:11:BE:5B:F1:86:8A:D2 Certificate issuer: /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Certificate serial: 0F6A Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa Signing time: Wed 26 Aug 2026 17:35:13 +0000 ROA not before: Wed 26 Aug 2026 17:35:13 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 139267 IP address blocks: 103.140.164.0/23 maxlen: 24 2404:ffc0::/32 maxlen: 32 2404:ffc0::/48 maxlen: 48 2404:ffc0:1::/48 maxlen: 48 2404:ffc0:2::/48 maxlen: 48 2404:ffc0:3::/48 maxlen: 48 2404:ffc0:4::/48 maxlen: 48 2404:ffc0:5::/48 maxlen: 48 2404:ffc0:6::/48 maxlen: 48 2404:ffc0:7::/48 maxlen: 48 2404:ffc0:8::/48 maxlen: 48 2404:ffc0:9::/48 maxlen: 48 2404:ffc0:a::/48 maxlen: 48 2404:ffc0:b::/48 maxlen: 48 2404:ffc0:c::/48 maxlen: 48 2404:ffc0:d::/48 maxlen: 48 2404:ffc0:e::/48 maxlen: 48 2404:ffc0:f::/48 maxlen: 48 2404:ffc0:10::/48 maxlen: 48 2404:ffc0:11::/48 maxlen: 48 2404:ffc0:12::/48 maxlen: 48 2404:ffc0:13::/48 maxlen: 48 2404:ffc0:14::/48 maxlen: 48 2404:ffc0:15::/48 maxlen: 48 2404:ffc0:16::/48 maxlen: 48 2404:ffc0:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 17:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3946 (0xf6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EAE6, serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Validity Not Before: Aug 26 17:35:13 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a8f23d1-7cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:2e:83:33:26:63:9e:52:6f:51:5d:cd:f7: 5c:06:8e:15:2e:75:40:4e:03:67:92:eb:8a:ae:db: 45:20:df:ea:35:7d:7a:38:fa:4b:e5:1b:64:ca:9a: ba:c9:39:8e:2b:47:5b:b6:94:68:e7:48:68:2b:47: 9e:90:91:bd:2f:e6:eb:1b:52:79:f3:06:97:92:f5: 6e:d2:71:43:7a:71:3b:48:5e:2f:52:6e:40:d9:df: 40:97:fb:c7:fd:65:0d:4a:29:73:1b:f5:1c:e1:19: 29:87:37:4b:60:c9:40:cc:8d:44:a5:f9:bc:dc:36: 9a:a6:10:71:36:3e:01:1e:ae:e9:b3:52:ef:6d:09: 51:ca:40:fd:63:b6:c2:cd:22:fc:9f:e3:9a:10:88: af:a8:e6:46:1a:83:95:67:6d:9d:0a:1b:4b:06:cc: 1c:bb:df:9a:56:af:03:b3:f6:03:89:53:8a:3f:56: 2b:69:6e:45:75:63:bd:2a:67:16:52:2e:fa:23:40: d8:96:b4:66:ea:3c:31:70:b7:bd:6e:a3:11:04:a6: fd:50:6d:f1:6f:ea:52:de:77:1f:8e:d8:17:dc:9b: 53:c2:e4:57:26:c4:ab:ea:4f:25:d8:d8:d6:c5:7b: 71:65:7e:75:5c:5e:27:00:4a:74:78:53:fa:e5:e1: 10:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:81:AD:4C:E3:63:B2:09:5E:B7:05:85:3C:11:BE:5B:F1:86:8A:D2 X509v3 Authority Key Identifier: keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.164.0/23 IPv6: 2404:ffc0::/32 Signature Algorithm: sha256WithRSAEncryption 06:8d:9b:0e:77:d5:63:cf:e9:be:4a:3f:08:21:16:e6:61:bb: 9d:ef:c2:3d:81:9a:3d:a6:c6:4d:80:2a:00:20:6d:97:09:3a: 7a:1c:1c:9e:01:14:30:ad:7e:a2:2a:54:38:a4:54:4d:f8:0c: 24:7b:a7:07:25:33:94:72:75:d6:3e:6f:0d:35:5b:f0:5b:4c: 1c:80:49:b1:bd:0d:31:e3:8d:c2:9c:6b:ce:79:c6:8f:fc:a4: f0:93:2f:74:9c:19:a6:dd:45:3f:bc:97:ef:4e:ae:fb:7f:cc: 5b:18:80:be:d0:02:7e:8c:61:b0:49:f5:c2:42:46:5a:ae:9a: d4:0f:5f:95:d9:de:56:a9:4f:1b:35:01:b6:83:d2:99:6a:ff: e7:93:92:71:ce:cb:21:f2:ee:32:ac:46:6b:0b:cd:bf:4e:23: 6f:ce:4e:b3:ca:bb:fc:c0:b9:23:c4:d5:03:dc:3d:74:6f:95: 20:e4:1d:0b:6e:8e:24:b0:94:6b:e5:2c:73:b3:64:85:4b:94: 71:b6:12:61:76:fc:9c:dd:26:cb:f1:82:48:79:4a:ae:98:33: d6:c4:a7:33:f3:a6:9e:ad:db:03:1a:2c:4a:59:6a:02:fb:10: 46:14:32:5d:a0:50:ca:37:6d:b5:7d:53:a2:9e:99:16:3e:06: 08:dd:33:59 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICD2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBRTYxMTAvBgNVBAUTKDNEMzRGMUVBNTlFREIwODZGMTczMzRENTk5RTkzMTBE NzFGRTA3NDQwHhcNMjYwODI2MTczNTEzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmMjNkMS03Y2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurgugzMmY55Sb1FdzfdcBo4VLnVATgNnkuuKrttFIN/qNX16OPpL5Rtkypq6 yTmOK0dbtpRo50hoK0eekJG9L+brG1J58waXkvVu0nFDenE7SF4vUm5A2d9Al/vH /WUNSilzG/Uc4RkphzdLYMlAzI1Epfm83DaaphBxNj4BHq7ps1LvbQlRykD9Y7bC zSL8n+OaEIivqOZGGoOVZ22dChtLBswcu9+aVq8Ds/YDiVOKP1YraW5FdWO9KmcW Ui76I0DYlrRm6jwxcLe9bqMRBKb9UG3xb+pS3ncfjtgX3JtTwuRXJsSr6k8l2NjW xXtxZX51XF4nAEp0eFP65eEQsQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCSBrUzj Y7IJXrcFhTwRvlvxhorSMB8GA1UdIwQYMBaAFD008epZ7bCG8XM01ZnpMQ1x/gdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUFFNi83QkMyOTMyNjlC RjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJYnhjelRWbWVreERYSC1C MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUVHg2bG50c0lieGN6VFZtZWt4RFhILUIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VBRTYvN0JDMjkzMjY5QkY5MTFFOUFBNkQ4NDUzQzRGOUFFMDIvQTE1MkZBMzg5 RTIyMTFFOTlDQTg1QjZDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4ykMA0EAgACMAcDBQAkBP/AMA0GCSqGSIb3DQEBCwUAA4IBAQAG jZsOd9Vjz+m+Sj8IIRbmYbud78I9gZo9psZNgCoAIG2XCTp6HByeARQwrX6iKlQ4 pFRN+Awke6cHJTOUcnXWPm8NNVvwW0wcgEmxvQ0x443CnGvOecaP/KTwky90nBmm 3UU/vJfvTq77f8xbGIC+0AJ+jGGwSfXCQkZarprUD1+V2d5WqU8bNQG2g9KZav/n k5Jxzssh8u4yrEZrC82/TiNvzk6zyrv8wLkjxNUD3D10b5Ug5B0Lbo4ksJRr5Sxz s2SFS5RxthJhdvyc3SbL8YJIeUqumDPWxKcz86aerdsDGixKWWoC+xBGFDJdoFDK N221fVOinpkWPgYI3TNZ -----END CERTIFICATE-----Generated at Sun Oct 4 13:29:26 2026 by rpki-client