$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/78D1DAC8E45E11E681F82341C4F9AE02.roa File: 78D1DAC8E45E11E681F82341C4F9AE02.roa (raw, json) Hash identifier: fu8aqz2qC0IRge3VzkVYPSLpgO4YrZ7RAtHHbr5S85w= Subject key identifier: 67:17:87:67:2C:CD:47:7D:78:79:6C:F6:07:AC:E1:C0:24:F1:6B:E9 Certificate issuer: /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Certificate serial: 1D32 Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/78D1DAC8E45E11E681F82341C4F9AE02.roa Signing time: Tue 04 Aug 2026 05:57:12 +0000 ROA not before: Tue 04 Aug 2026 05:57:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132167 IP address blocks: 43.224.84.0/22 maxlen: 22 43.224.84.0/24 maxlen: 24 43.224.85.0/24 maxlen: 24 43.224.86.0/24 maxlen: 24 103.242.96.0/22 maxlen: 22 103.242.97.0/24 maxlen: 24 103.242.98.0/24 maxlen: 24 103.242.99.0/24 maxlen: 24 2407:f300::/32 maxlen: 32 2407:f300:100::/44 maxlen: 44 2407:f300:100::/48 maxlen: 48 2407:f300:101::/48 maxlen: 48 2407:f300:108::/48 maxlen: 48 2407:f300:110::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 16:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7474 (0x1d32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Validity Not Before: Aug 4 05:57:12 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a717f38-9102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:83:ec:af:2f:59:34:2a:7d:71:8e:60:6e:2b: e9:7e:ed:04:c8:df:ae:26:a0:28:9d:ac:7e:63:db: 72:10:82:ff:f2:e4:34:93:32:87:a6:10:12:92:23: 25:4a:2a:4a:d8:ee:bf:6b:ce:8d:c8:37:89:53:1d: 70:38:69:4c:16:c4:f0:0a:cf:fa:16:84:2e:26:a7: be:70:c0:a2:3e:72:69:9b:d3:21:2a:93:14:8d:e9: 49:8a:88:2f:7d:e4:a8:de:da:1c:71:c1:15:f0:c3: b9:a4:f8:db:71:76:ae:ef:a6:82:5b:5a:0e:02:c3: 7d:7b:93:82:83:43:e2:40:e8:90:ad:fd:09:9e:93: c6:7f:c9:c9:2a:54:bc:10:53:0a:e1:08:66:45:11: fc:d2:b5:c4:95:e4:b4:4b:f6:25:69:54:84:0b:2b: 6d:4f:ff:09:ef:5e:f5:8e:18:d2:7f:0b:81:20:e8: 7f:62:34:70:cd:9f:86:9b:ca:a5:db:ae:df:0a:de: 4f:a0:0a:61:3b:61:74:de:5d:ab:c9:a8:d6:1a:39: c4:f0:e6:19:64:2e:4e:99:eb:c0:39:c4:3e:cc:3b: 35:bf:12:e1:ec:59:34:4d:7a:a3:ee:20:a1:f2:b1: 6b:a5:81:67:db:da:73:c9:2f:bb:48:64:e9:06:5f: fd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:17:87:67:2C:CD:47:7D:78:79:6C:F6:07:AC:E1:C0:24:F1:6B:E9 X509v3 Authority Key Identifier: keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/78D1DAC8E45E11E681F82341C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.84.0/22 103.242.96.0/22 IPv6: 2407:f300::/32 Signature Algorithm: sha256WithRSAEncryption 20:cf:9b:f0:44:8c:1f:7b:76:b8:08:34:b6:cb:9d:31:60:dd: d5:58:90:44:d6:5e:8f:3c:f5:a6:95:60:3b:9d:ea:25:f5:e2: 5f:9d:fd:16:3f:6f:61:4b:ea:a5:5c:15:ac:a2:25:2d:bd:42: 7a:08:d1:6b:1b:4a:24:73:96:1f:b4:c3:61:cc:96:99:d3:b2: dc:71:8f:f4:32:5f:e8:3d:a5:6a:bb:91:68:8e:41:6a:98:1e: ab:ba:d9:6b:62:c0:4b:e7:1f:14:8e:eb:6d:b0:da:a2:f7:47: 8b:53:61:44:f0:7b:6a:6b:36:2a:be:49:11:bf:8f:d5:4d:7a: c6:92:c9:63:52:e7:c8:f4:d0:bc:45:13:ec:c7:e8:79:6d:cc: 73:45:e8:be:17:2f:64:97:dc:2f:bd:81:49:af:8b:ad:14:36: d1:ec:b4:10:11:c3:d0:7b:0e:20:c6:10:66:23:04:62:3f:48: 63:13:d2:54:b9:25:7c:a3:9e:bb:46:3f:25:69:df:98:82:d3: 67:3b:ce:45:4e:a8:6d:00:88:73:7b:50:95:9a:66:57:b2:de: 1a:a4:f7:8b:73:7e:d4:1c:06:2d:88:41:b2:c0:b1:4e:42:74: 65:bc:ed:23:80:54:da:5a:41:41:65:07:5b:93:d6:c4:85:4c: c2:a8:93:ea -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDdENkEzMzBGMEQwMTI0OTQyN0M3RkM5RERERENGNEE4 Mjg3NjBCMDYwHhcNMjYwODA0MDU1NzEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcxN2YzOC05MTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IPsry9ZNCp9cY5gbivpfu0EyN+uJqAonax+Y9tyEIL/8uQ0kzKHphASkiMl SipK2O6/a86NyDeJUx1wOGlMFsTwCs/6FoQuJqe+cMCiPnJpm9MhKpMUjelJiogv feSo3tocccEV8MO5pPjbcXau76aCW1oOAsN9e5OCg0PiQOiQrf0JnpPGf8nJKlS8 EFMK4QhmRRH80rXEleS0S/YlaVSECyttT/8J7171jhjSfwuBIOh/YjRwzZ+Gm8ql 267fCt5PoAphO2F03l2ryajWGjnE8OYZZC5OmevAOcQ+zDs1vxLh7Fk0TXqj7iCh 8rFrpYFn29pzyS+7SGTpBl/9OwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGcXh2cs zUd9eHls9ges4cAk8WvpMB8GA1UdIwQYMBaAFH1qMw8NASSUJ8f8nd3c9KgodgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BRDA4QUYyNkU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpKUW54X3lkM2R6MHFDaDJD d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXb3pEdzBCSkpRbnhfeWQzZHowcUNoMkN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU1MTkvQUQwOEFGMjZFNDVDMTFFNjhDRURGQTNFQzRGOUFFMDIvNzhEMURBQzhF NDVFMTFFNjgxRjgyMzQxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+BUAwQCZ/JgMA0EAgACMAcDBQAkB/MAMA0GCSqGSIb3DQEBCwUA A4IBAQAgz5vwRIwfe3a4CDS2y50xYN3VWJBE1l6PPPWmlWA7neol9eJfnf0WP29h S+qlXBWsoiUtvUJ6CNFrG0okc5YftMNhzJaZ07LccY/0Ml/oPaVqu5FojkFqmB6r utlrYsBL5x8UjuttsNqi90eLU2FE8HtqazYqvkkRv4/VTXrGksljUufI9NC8RRPs x+h5bcxzRei+Fy9kl9wvvYFJr4utFDbR7LQQEcPQew4gxhBmIwRiP0hjE9JUuSV8 o567Rj8lad+YgtNnO85FTqhtAIhze1CVmmZXst4apPeLc37UHAYtiEGywLFOQnRl vO0jgFTaWkFBZQdbk9bEhUzCqJPq -----END CERTIFICATE-----Generated at Mon Sep 28 16:17:12 2026 by rpki-client