$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/8719518C26AD11EDA881874BC4F9AE02.roa File: 8719518C26AD11EDA881874BC4F9AE02.roa (raw, json) Hash identifier: /ktxtWbB7s8SdYX63blnkLDZ0wyoAUYBFnfXmmmpFaQ= Subject key identifier: 17:E0:23:B0:EB:61:04:3C:50:F0:D9:67:30:FB:02:37:8A:1D:E5:9D Certificate issuer: /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF Certificate serial: 0433 Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/8719518C26AD11EDA881874BC4F9AE02.roa Signing time: Thu 01 Oct 2026 00:49:29 +0000 ROA not before: Thu 01 Oct 2026 00:49:29 +0000 ROA not after: Sat 30 Jan 2027 00:00:00 +0000 asID: 149810 IP address blocks: 103.186.240.0/23 maxlen: 23 103.186.240.0/24 maxlen: 24 103.186.241.0/24 maxlen: 24 2400:7620::/32 maxlen: 32 2400:7620::/35 maxlen: 35 2400:7620:2000::/35 maxlen: 35 2400:7620:4000::/35 maxlen: 35 2400:7620:6000::/35 maxlen: 35 2400:7620:8000::/35 maxlen: 35 2400:7620:a000::/35 maxlen: 35 2400:7620:c000::/35 maxlen: 35 2400:7620:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B71, serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF Validity Not Before: Oct 1 00:49:29 2026 GMT Not After : Jan 30 00:00:00 2027 GMT Subject: CN=6abdae19-2a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c5:3d:79:18:74:ce:3b:40:7d:e7:fe:76:06: 7e:b2:17:e7:cc:2c:2d:30:b6:e0:ef:19:6c:df:26: ce:c0:f2:6b:8c:a0:fc:81:69:16:14:a7:9b:49:82: 37:84:c1:03:3b:45:c6:32:2b:c1:be:46:84:e8:11: d9:0b:22:16:31:df:f4:ee:86:90:4a:77:a6:cf:4b: d7:50:e8:25:16:d3:41:d4:c9:93:d7:83:3e:14:4e: c9:19:3c:b7:61:16:5f:63:ef:3b:3e:1f:bd:f8:56: 3a:d8:0a:cf:c7:9c:8d:7e:03:60:bd:30:06:b9:5b: 35:03:a0:45:5a:ce:49:61:30:53:0c:53:51:b6:35: 4c:b5:24:eb:2c:24:65:61:70:6f:32:1b:8b:48:d2: dc:00:4f:84:06:1a:8d:fb:f2:6c:98:a5:b4:be:6f: 03:a4:bb:bf:fd:13:b2:18:11:26:8d:dd:28:26:d1: 10:f6:0c:a8:e5:3b:d6:3b:70:04:17:ed:3b:ca:90: 51:37:22:2a:02:4d:01:7d:e7:06:0f:2b:02:44:1e: d7:ee:46:b4:d5:0a:82:67:d9:8b:ed:17:c3:29:5d: 5a:ec:fa:b6:e0:12:3c:c8:5f:9b:45:ec:02:e1:7b: 0a:74:e4:7b:02:4d:22:0a:0e:e2:87:12:05:cf:3f: 0f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E0:23:B0:EB:61:04:3C:50:F0:D9:67:30:FB:02:37:8A:1D:E5:9D X509v3 Authority Key Identifier: keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/8719518C26AD11EDA881874BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.186.240.0/23 IPv6: 2400:7620::/32 Signature Algorithm: sha256WithRSAEncryption b8:5f:ba:ca:2e:96:b9:7c:3b:1d:49:4b:bd:fe:ca:81:ac:81: d8:3c:d0:a0:a1:aa:fe:28:8a:db:3e:28:22:ee:da:64:41:1c: d4:23:6c:4f:fc:c5:59:ca:01:2a:97:a9:f5:68:25:32:93:2a: 22:e6:62:07:49:16:04:cf:44:6d:44:57:f5:b4:80:2b:ab:10: 07:98:59:68:ba:35:46:58:ab:25:17:56:57:11:c2:25:ec:b6: bd:1f:b0:53:1d:14:d2:8f:c3:0d:30:d1:c1:2b:c7:87:5e:b8: 37:c8:58:49:15:4f:9d:73:fb:a5:7b:53:af:72:81:d4:7d:8c: 54:07:7e:a7:7c:4e:9b:8d:43:29:45:e4:1c:ae:0e:f5:68:78: e7:2f:d9:f5:b3:b7:d6:7d:d8:75:a3:82:68:42:44:87:c5:30: 56:56:e3:39:5a:56:41:ab:2f:fe:c1:08:79:85:f9:8f:fc:a0: 6f:09:49:e7:c3:58:43:2f:f4:bd:0f:ee:e4:50:f5:cd:cb:ae: bd:e2:87:3a:91:ae:ee:01:66:8b:2a:1f:94:35:10:e3:01:ec: e8:0e:d4:72:8c:80:93:a1:4e:f3:31:4b:a2:ae:b7:e5:fc:09: db:6b:29:8f:83:45:c0:57:a1:a2:fb:28:35:ac:28:30:ee:38: a6:ee:69:86 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCNzExMTAvBgNVBAUTKDQ2MzlEMjkwOTg2RjRGMDA1NEZEQzA1OTAxNDQ0MTYy MUQzQUJCRkYwHhcNMjYxMDAxMDA0OTI5WhcNMjcwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkYWUxOS0yYTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAicU9eRh0zjtAfef+dgZ+shfnzCwtMLbg7xls3ybOwPJrjKD8gWkWFKebSYI3 hMEDO0XGMivBvkaE6BHZCyIWMd/07oaQSnemz0vXUOglFtNB1MmT14M+FE7JGTy3 YRZfY+87Ph+9+FY62ArPx5yNfgNgvTAGuVs1A6BFWs5JYTBTDFNRtjVMtSTrLCRl YXBvMhuLSNLcAE+EBhqN+/JsmKW0vm8DpLu//ROyGBEmjd0oJtEQ9gyo5TvWO3AE F+07ypBRNyIqAk0BfecGDysCRB7X7ka01QqCZ9mL7RfDKV1a7Pq24BI8yF+bRewC 4XsKdOR7Ak0iCg7ihxIFzz8PWQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBfgI7Dr YQQ8UPDZZzD7AjeKHeWdMB8GA1UdIwQYMBaAFEY50pCYb08AVP3AWQFEQWIdOrv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3MS9GNTQwN0QxQ0NB QjgxMUVDODc4OTNDNTZDNEY5QUUwMi9Sam5Ta0podlR3QlVfY0JaQVVSQlloMDZ1 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JqblNrSmh2VHdCVV9jQlpBVVJCWWgwNnVfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZCNzEvRjU0MDdEMUNDQUI4MTFFQzg3ODkzQzU2QzRGOUFFMDIvODcxOTUxOEMy NkFEMTFFREE4ODE4NzRCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ7rwMA0EAgACMAcDBQAkAHYgMA0GCSqGSIb3DQEBCwUAA4IBAQC4 X7rKLpa5fDsdSUu9/sqBrIHYPNCgoar+KIrbPigi7tpkQRzUI2xP/MVZygEql6n1 aCUykyoi5mIHSRYEz0RtRFf1tIArqxAHmFloujVGWKslF1ZXEcIl7La9H7BTHRTS j8MNMNHBK8eHXrg3yFhJFU+dc/ule1OvcoHUfYxUB36nfE6bjUMpReQcrg71aHjn L9n1s7fWfdh1o4JoQkSHxTBWVuM5WlZBqy/+wQh5hfmP/KBvCUnnw1hDL/S9D+7k UPXNy6694oc6ka7uAWaLKh+UNRDjAezoDtRyjICToU7zMUuirrfl/AnbaymPg0XA V6Gi+yg1rCgw7jim7mmG -----END CERTIFICATE-----Generated at Wed Oct 7 00:21:22 2026 by rpki-client