$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/CEFC9F4C3EFD11F18502D769C6833773.roa File: CEFC9F4C3EFD11F18502D769C6833773.roa (raw, json) Hash identifier: asADDRBilLEaXG8oF0ClMDpzkYwVXZNb9WKZ3OOCar0= Subject key identifier: 89:09:0D:EB:F4:E6:D8:FE:FA:6D:C1:D0:40:DD:25:85:A0:CF:0F:4C Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0D92 Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/CEFC9F4C3EFD11F18502D769C6833773.roa Signing time: Tue 08 Sep 2026 18:36:26 +0000 ROA not before: Tue 08 Sep 2026 18:36:26 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 136897 IP address blocks: 103.5.42.0/24 maxlen: 24 103.5.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3474 (0xd92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Sep 8 18:36:26 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa055aa-44c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:4d:96:6a:57:64:84:d4:22:80:c9:97:e3: 79:da:e8:6f:38:e3:05:c9:ba:c1:5b:d0:de:73:3c: f8:60:1c:9c:54:a5:9e:f1:36:d0:da:52:ae:4c:c1: 7f:b9:8d:1e:3b:17:83:90:26:41:d1:2a:ba:ce:2a: 66:29:f1:d2:ed:00:12:7e:a0:08:2a:6f:02:7d:82: 01:62:46:b0:74:98:8b:75:17:22:bd:9f:91:9e:18: c5:b9:d8:3c:28:84:1f:5f:59:d8:74:ad:82:6d:2b: 9a:b4:68:31:0c:84:85:f5:a6:29:79:81:0c:9d:ca: 48:fd:6d:aa:d9:07:91:8d:77:46:fa:a2:ca:5a:e7: 5d:b8:77:18:8a:cd:32:7f:d6:f0:77:27:e0:35:c8: 95:a3:bf:b5:ad:0b:a2:90:43:26:f1:52:e3:83:74: 70:70:fb:77:27:1d:23:34:c9:c6:b8:eb:2d:c0:83: e3:de:7a:22:30:30:fa:39:fb:02:84:73:df:08:fb: 22:94:80:75:aa:65:cf:7d:c8:23:ac:c6:c4:e9:49: eb:06:5a:15:2e:55:15:d0:18:1d:7d:58:d4:1e:21: 68:82:c3:de:89:81:be:12:b4:75:01:ed:d4:31:97: 78:81:4a:f8:78:cc:a7:e8:51:6e:1b:eb:a4:1d:2a: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:09:0D:EB:F4:E6:D8:FE:FA:6D:C1:D0:40:DD:25:85:A0:CF:0F:4C X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/CEFC9F4C3EFD11F18502D769C6833773.roa sbgp-ipAddrBlock: critical IPv4: 103.5.42.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:ce:7f:cb:ba:f9:06:2e:d7:8a:cf:ff:8f:cf:cd:1b:16:67: 06:96:7d:b3:14:9d:9e:3a:6f:33:90:ae:b2:03:cd:bd:cb:c3: 9f:5e:f8:5d:d6:71:bd:b2:5d:b7:e3:a3:a7:24:a9:3e:45:52: 00:03:70:54:f9:c3:87:16:eb:01:31:a6:96:a1:49:54:65:01: bb:74:72:c9:0d:65:76:0d:e7:98:80:fd:6f:d1:64:0e:ed:05: 65:69:9c:06:d2:a0:0c:79:06:e1:ea:39:30:74:f1:bf:7c:ce: 04:f8:1b:13:a6:28:d5:1b:d9:a9:d1:de:58:52:b0:96:0c:c8: 25:c7:44:0f:c4:4c:c8:ed:5d:b0:71:70:3a:75:f4:94:1d:5b: 9e:67:9c:25:8f:bf:c9:1e:bc:bf:47:11:3b:86:0c:f0:14:f7: 20:01:a7:3b:ff:84:3f:41:d9:bf:7a:6d:e6:1a:9c:69:79:94: b5:19:43:47:16:51:e1:a7:4a:94:8c:67:ac:47:85:d8:66:c0: 0c:a2:de:35:35:6a:ad:b8:29:b8:3b:83:91:0e:8d:9b:91:fa: e8:4d:6b:c9:1f:ad:cb:dc:3e:bd:26:2d:71:6f:c0:83:b8:12: 4e:96:f0:b2:4f:b9:43:d1:04:58:7f:13:c3:d2:28:a4:3c:24: 7d:7b:13:32 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjYwOTA4MTgzNjI2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwNTVhYS00NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI9NlmpXZITUIoDJl+N52uhvOOMFybrBW9Deczz4YBycVKWe8TbQ2lKuTMF/ uY0eOxeDkCZB0Sq6zipmKfHS7QASfqAIKm8CfYIBYkawdJiLdRcivZ+RnhjFudg8 KIQfX1nYdK2CbSuatGgxDISF9aYpeYEMncpI/W2q2QeRjXdG+qLKWudduHcYis0y f9bwdyfgNciVo7+1rQuikEMm8VLjg3RwcPt3Jx0jNMnGuOstwIPj3noiMDD6OfsC hHPfCPsilIB1qmXPfcgjrMbE6UnrBloVLlUV0BgdfVjUHiFogsPeiYG+ErR1Ae3U MZd4gUr4eMyn6FFuG+ukHSr3BQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIkJDev0 5tj++m3B0EDdJYWgzw9MMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUwMjYvRDZCMjYzMDRGNTZBMTFFOUJGMkFFNjg0QzRGOUFFMDIvQ0VGQzlGNEMz RUZEMTFGMTg1MDJENzY5QzY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZwUqMA0GCSqGSIb3DQEBCwUAA4IBAQBMzn/LuvkGLteKz/+Pz80b FmcGln2zFJ2eOm8zkK6yA829y8OfXvhd1nG9sl2346OnJKk+RVIAA3BU+cOHFusB MaaWoUlUZQG7dHLJDWV2DeeYgP1v0WQO7QVlaZwG0qAMeQbh6jkwdPG/fM4E+BsT pijVG9mp0d5YUrCWDMglx0QPxEzI7V2wcXA6dfSUHVueZ5wlj7/JHry/RxE7hgzw FPcgAac7/4Q/Qdm/em3mGpxpeZS1GUNHFlHhp0qUjGesR4XYZsAMot41NWqtuCm4 O4ORDo2bkfroTWvJH63L3D69Ji1xb8CDuBJOlvCyT7lD0QRYfxPD0iikPCR9exMy -----END CERTIFICATE-----Generated at Thu Sep 24 11:04:05 2026 by rpki-client