$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa File: 39952E50C6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: j2fuKs74NMVEONNKqBYvAGbhe8lbk1AIulWzuYUkGy8= Subject key identifier: CE:3D:9E:E7:48:70:D5:FB:59:06:34:23:07:8C:53:84:29:6A:6F:30 Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 043E Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa Signing time: Sun 11 Oct 2026 00:49:27 +0000 ROA not before: Sun 11 Oct 2026 00:49:27 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132742 IP address blocks: 43.243.64.0/22 maxlen: 24 103.38.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Validity Not Before: Oct 11 00:49:27 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acadd17-3c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ac:39:a1:08:85:9b:8c:9d:57:63:aa:c3:0f: 8d:49:ae:10:da:31:d0:45:06:1f:dd:01:b7:cb:6c: 50:71:14:33:93:8e:34:cf:ed:1d:93:42:bd:35:e3: d1:05:a9:7c:c9:56:5c:7d:07:86:c7:70:b9:a4:01: ba:67:30:d9:9e:6a:aa:e8:db:00:79:cc:d1:60:af: 91:f1:46:8e:af:94:6d:6b:0e:e7:80:99:24:ed:71: 33:d0:4f:9d:98:4d:27:e2:3f:1e:db:f1:4d:cd:78: 49:39:7c:94:9b:c4:a5:00:82:c9:6f:1f:be:e9:2b: f3:c2:8e:46:ee:ba:7c:20:a0:b8:d7:04:48:46:23: 31:21:2e:43:db:79:f0:85:35:76:14:a6:ac:6e:16: e5:bd:af:f1:8a:64:62:8d:6d:9e:eb:cc:c0:65:8e: 7e:be:d6:95:56:b6:df:1b:15:9a:d7:00:ec:de:4d: 8f:72:1c:fb:74:d0:34:93:85:a6:37:9e:c3:0d:18: 9e:1f:e0:3f:25:e9:4c:43:39:ba:b3:fa:ab:92:98: 84:79:8f:4b:69:31:b3:83:20:54:e1:f9:4d:bf:44: 1b:00:13:fc:af:f7:7d:62:66:49:08:e8:99:36:81: 2e:d0:d0:7d:dd:10:b6:2d:fb:08:8d:c6:98:46:3c: b5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3D:9E:E7:48:70:D5:FB:59:06:34:23:07:8C:53:84:29:6A:6F:30 X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.64.0/22 103.38.168.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:86:58:d9:aa:f0:7a:01:ae:32:1d:cd:24:27:8a:b9:c8:ee: a4:3b:46:70:49:ec:1e:70:fb:20:0d:95:8e:71:c1:dc:fb:de: b1:e7:78:44:0e:9b:63:62:7a:0d:2f:53:d2:c7:bf:94:0e:6f: d4:5f:57:82:e3:4c:71:94:1b:7e:4c:e5:10:38:0d:7e:ce:5d: 45:6f:c2:d4:f2:7b:5a:b3:4f:3a:00:9c:71:06:62:97:97:c1: 6c:3a:9d:cf:70:c9:63:c7:ae:49:17:8a:63:6f:ce:4e:32:71: 48:e1:2c:08:8b:4b:78:66:a9:a2:e4:a2:eb:fb:99:6f:ad:ae: 94:3c:27:6b:16:c8:7e:ee:26:ee:0b:cc:79:29:61:ed:0c:4b: 75:f1:96:06:aa:04:70:64:e4:80:18:bf:5f:29:df:74:00:2e: ff:0e:21:b2:1b:b7:bd:21:4f:b3:2c:34:8f:58:5f:eb:06:16: 8e:9f:7b:09:39:d5:65:78:d9:93:5f:82:aa:bb:c9:d0:89:99: ae:16:0e:5b:79:09:3f:50:50:a4:11:c7:c3:c3:9c:bd:20:dd: c4:7a:8e:5d:26:35:4a:df:00:11:7d:fc:a0:27:88:59:1e:d6: 9b:17:40:05:31:08:2c:72:c8:c1:84:72:56:77:8d:66:13:a3: ce:02:21:12 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjYxMDExMDA0OTI3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhZGQxNy0zYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qw5oQiFm4ydV2Oqww+NSa4Q2jHQRQYf3QG3y2xQcRQzk440z+0dk0K9NePR Bal8yVZcfQeGx3C5pAG6ZzDZnmqq6NsAeczRYK+R8UaOr5Rtaw7ngJkk7XEz0E+d mE0n4j8e2/FNzXhJOXyUm8SlAILJbx++6Svzwo5G7rp8IKC41wRIRiMxIS5D23nw hTV2FKasbhblva/ximRijW2e68zAZY5+vtaVVrbfGxWa1wDs3k2Pchz7dNA0k4Wm N57DDRieH+A/JelMQzm6s/qrkpiEeY9LaTGzgyBU4flNv0QbABP8r/d9YmZJCOiZ NoEu0NB93RC2LfsIjcaYRjy13QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFM49nudI cNX7WQY0IweMU4Qpam8wMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBFNTUvN0QzMkE3NEVDNjAwMTFFQzg3MDA1QzdEQzRGOUFFMDIvMzk5NTJFNTBD NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/NAAwQCZyaoMA0GCSqGSIb3DQEBCwUAA4IBAQBvhljZqvB6Aa4y Hc0kJ4q5yO6kO0ZwSewecPsgDZWOccHc+96x53hEDptjYnoNL1PSx7+UDm/UX1eC 40xxlBt+TOUQOA1+zl1Fb8LU8ntas086AJxxBmKXl8FsOp3PcMljx65JF4pjb85O MnFI4SwIi0t4Zqmi5KLr+5lvra6UPCdrFsh+7ibuC8x5KWHtDEt18ZYGqgRwZOSA GL9fKd90AC7/DiGyG7e9IU+zLDSPWF/rBhaOn3sJOdVleNmTX4Kqu8nQiZmuFg5b eQk/UFCkEcfDw5y9IN3Eeo5dJjVK3wARffygJ4hZHtabF0AFMQgscsjBhHJWd41m E6POAiES -----END CERTIFICATE-----Generated at Sun Nov 15 23:40:51 2026 by rpki-client