$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa File: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (raw, json) Hash identifier: mCGWaWRzUHJRaXwLJ7OS8pH/qmjVpRMUC92IecXdehw= Subject key identifier: 4E:7B:0D:D6:73:0C:44:97:64:C6:0B:78:9D:89:31:A9:28:F6:48:9D Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 043F Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa Signing time: Sun 11 Oct 2026 00:49:30 +0000 ROA not before: Sun 11 Oct 2026 00:49:30 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 153494 IP address blocks: 43.243.64.0/22 maxlen: 24 103.38.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Validity Not Before: Oct 11 00:49:30 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acadd19-a35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:88:86:64:53:b7:bd:5c:34:f0:de:ff:b7: ea:ec:42:88:cc:97:83:a5:fc:13:cf:87:e5:09:17: 1e:31:d7:3e:1f:5a:bd:9e:e4:89:bd:ad:df:8b:22: bc:9d:1a:49:ce:2e:d8:8b:6a:75:8f:9e:16:cb:85: 55:d7:c4:9f:59:3c:cb:6f:a9:ec:a6:8b:a5:d0:5d: 55:b3:91:cc:32:00:3a:8d:57:bf:e4:22:a8:99:23: 89:6a:99:2e:60:e7:a5:e7:73:d1:f0:fd:71:47:ac: 16:f4:a2:56:fb:c6:28:02:e0:6f:a5:34:0e:3e:26: 4c:00:d5:39:3d:6c:9a:d2:d7:b1:eb:3f:70:82:a9: 87:91:5a:45:7e:3b:5a:e3:eb:3c:ce:59:71:ca:d4: 8b:6c:6d:ef:60:fa:7f:2f:df:b4:e2:9b:15:9a:98: 88:77:53:89:10:72:42:4e:21:e7:64:fa:46:b9:35: 91:d4:65:8a:15:17:5e:7b:c3:b7:b9:44:0f:31:51: f6:a1:1a:e2:3d:14:78:65:a4:1f:96:b8:a1:b6:a0: 44:81:9c:45:0b:d0:da:b5:e2:d5:6b:fe:b8:ac:5b: 0d:8b:dd:00:a1:f9:5e:86:68:9c:50:ef:f8:b7:fb: 22:63:c1:4d:24:ec:81:ab:1d:85:50:b0:b1:28:b2: 40:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7B:0D:D6:73:0C:44:97:64:C6:0B:78:9D:89:31:A9:28:F6:48:9D X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.64.0/22 103.38.168.0/22 Signature Algorithm: sha256WithRSAEncryption a4:bb:76:b1:1e:74:dd:a7:6c:99:78:ed:f4:17:67:3e:7b:4d: d1:7e:9f:d2:a4:50:4e:01:38:29:13:7f:c2:a1:7d:3c:76:90: 29:8c:34:6a:fb:26:02:5a:f5:97:37:b2:17:af:d6:61:fc:e6: fd:b0:8b:11:5e:54:54:a6:b0:a8:9d:09:c5:dd:db:dc:a8:db: e3:55:a2:56:2c:3f:ab:d4:af:bf:c8:b0:a6:ac:0a:8f:dd:3b: 48:d7:a0:29:29:8e:d7:82:4d:0f:fe:32:68:57:5f:12:5a:a6: 51:e9:61:45:da:20:bf:3a:b6:2b:40:ca:cc:c5:3d:56:b9:6b: 5a:a3:13:d3:30:24:a3:7b:63:d0:d6:13:1b:c8:e0:37:61:14: 91:18:93:fe:fc:f2:6a:c2:c7:27:cc:8d:06:04:fc:3c:6c:4f: 70:fb:a5:e7:4b:80:51:d6:93:48:5f:e9:a7:7c:c2:a0:fc:f7: 93:31:3f:83:24:90:b6:67:a7:bd:af:53:14:94:dc:09:85:0f: 5f:4e:0e:f8:fd:92:f8:5c:ca:e4:27:f1:a6:f3:ef:5d:16:82: e8:21:85:73:a1:ea:05:2c:12:40:5e:95:a4:c3:5c:2c:88:f3: bb:48:0c:e4:80:d2:ae:4d:9d:37:cc:2a:7c:e0:b4:ff:ee:5a: 2d:d3:a0:ac -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjYxMDExMDA0OTMwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhZGQxOS1hMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmGIhmRTt71cNPDe/7fq7EKIzJeDpfwTz4flCRceMdc+H1q9nuSJva3fiyK8 nRpJzi7Yi2p1j54Wy4VV18SfWTzLb6nspoul0F1Vs5HMMgA6jVe/5CKomSOJapku YOel53PR8P1xR6wW9KJW+8YoAuBvpTQOPiZMANU5PWya0tex6z9wgqmHkVpFfjta 4+s8zllxytSLbG3vYPp/L9+04psVmpiId1OJEHJCTiHnZPpGuTWR1GWKFRdee8O3 uUQPMVH2oRriPRR4ZaQflrihtqBEgZxFC9DateLVa/64rFsNi90AoflehmicUO/4 t/siY8FNJOyBqx2FULCxKLJAcQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFE57DdZz DESXZMYLeJ2JMako9kidMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBFNTUvN0QzMkE3NEVDNjAwMTFFQzg3MDA1QzdEQzRGOUFFMDIvMkRDM0RDNTRE NTRFMTFFRjhDNUIxNjUxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/NAAwQCZyaoMA0GCSqGSIb3DQEBCwUAA4IBAQCku3axHnTdp2yZ eO30F2c+e03Rfp/SpFBOATgpE3/CoX08dpApjDRq+yYCWvWXN7IXr9Zh/Ob9sIsR XlRUprConQnF3dvcqNvjVaJWLD+r1K+/yLCmrAqP3TtI16ApKY7Xgk0P/jJoV18S WqZR6WFF2iC/OrYrQMrMxT1WuWtaoxPTMCSje2PQ1hMbyOA3YRSRGJP+/PJqwscn zI0GBPw8bE9w+6XnS4BR1pNIX+mnfMKg/PeTMT+DJJC2Z6e9r1MUlNwJhQ9fTg74 /ZL4XMrkJ/Gm8+9dFoLoIYVzoeoFLBJAXpWkw1wsiPO7SAzkgNKuTZ03zCp84LT/ 7lot06Cs -----END CERTIFICATE-----Generated at Sun Nov 15 22:33:30 2026 by rpki-client