$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/F32DDE98545411EFA3BC6B2BC4F9AE02.roa File: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (raw, json) Hash identifier: SAEXcobn5WfR++eemr4q7u6jryaGVSo+R/HbEDcAQGY= Subject key identifier: D1:E6:DE:4B:91:40:E4:D5:D7:B5:72:01:2A:1B:9B:64:DA:6A:03:E1 Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Certificate serial: 01CD Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/F32DDE98545411EFA3BC6B2BC4F9AE02.roa Signing time: Thu 03 Sep 2026 04:55:35 +0000 ROA not before: Thu 03 Sep 2026 04:55:35 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 138189 IP address blocks: 103.122.40.0/22 maxlen: 22 103.122.40.0/24 maxlen: 24 103.122.41.0/24 maxlen: 24 103.122.42.0/24 maxlen: 24 103.122.43.0/24 maxlen: 24 202.36.32.0/24 maxlen: 24 203.132.4.0/22 maxlen: 24 2001:df6:6500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Validity Not Before: Sep 3 04:55:35 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a98fdc6-4c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:18:de:17:7e:35:90:fb:05:f6:d3:a3:94: aa:47:ee:37:91:d3:21:3c:be:cb:00:1d:6e:9d:d5: 0a:f3:1d:44:bd:e3:e0:85:ac:c5:ba:ba:16:59:6e: fc:be:4e:41:59:03:2c:ed:da:ab:e1:82:a5:45:9d: 41:c7:76:7a:73:c1:ee:a9:ef:fa:b4:ee:b2:73:f8: fd:ee:7d:28:39:f6:7b:48:bb:31:cd:07:47:2a:9a: 0d:5f:c5:09:db:24:75:d5:34:b2:1e:69:21:ce:85: 80:2f:0b:7b:d8:0f:79:f1:50:94:40:3f:76:a3:05: 90:fa:b2:98:74:a4:c2:6e:7f:0c:50:7c:b7:98:da: a4:a3:05:5f:70:a4:48:68:b2:66:cd:25:77:78:ab: 69:c2:a0:39:4f:59:c7:99:20:ab:66:a9:0b:20:e3: 4b:5d:ae:30:07:cd:54:2b:ec:e0:2a:39:b0:a6:06: 68:d5:29:01:5c:9d:26:77:db:0d:00:05:1c:b3:ec: 31:ec:79:28:32:9c:f6:0f:57:de:63:0b:87:ae:73: 5c:5d:21:27:e9:97:a6:6d:99:54:02:7d:1a:7c:05: 96:62:9e:b2:b5:ea:e9:2c:90:59:26:ee:17:d5:62: 45:8a:ee:5d:f1:28:bc:30:f0:82:5b:35:08:8d:a2: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E6:DE:4B:91:40:E4:D5:D7:B5:72:01:2A:1B:9B:64:DA:6A:03:E1 X509v3 Authority Key Identifier: keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/F32DDE98545411EFA3BC6B2BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.122.40.0/22 202.36.32.0/24 203.132.4.0/22 IPv6: 2001:df6:6500::/48 Signature Algorithm: sha256WithRSAEncryption 51:34:2d:a9:2a:9a:50:f3:c4:b9:93:32:14:b8:1c:8e:1b:ab: d5:f5:90:e5:92:50:56:25:54:84:b6:cf:13:42:e2:27:9f:27: 67:53:f4:39:88:0b:1c:ab:c8:ce:b3:17:07:00:b1:c9:3d:87: 37:20:1f:fc:5b:2a:e1:98:5a:87:04:9d:75:98:96:68:a4:94: f7:7c:18:c3:e2:c8:86:31:76:9e:ca:96:aa:1e:df:c9:74:08: df:d0:27:95:ed:5f:fb:81:2a:3f:6d:03:16:4c:21:0f:66:c3: a0:5f:44:ec:a3:a3:62:82:79:f4:fe:81:95:96:67:83:fd:da: ab:24:8a:43:7d:93:84:bd:c7:53:b8:62:2d:e2:76:1c:12:35: 83:22:ed:e8:69:fd:16:ac:6c:fd:e5:4b:4c:e5:21:57:8a:e1: 77:94:fc:94:50:db:43:01:9c:4c:1c:35:9a:0d:1e:4e:1c:7f: 7f:39:0a:93:7f:91:63:24:de:89:69:bd:72:9c:99:77:ad:00: 5d:cb:35:f2:0a:52:a1:16:a1:c6:57:61:fb:06:b8:c1:76:72: 78:cf:4a:2d:c0:01:40:a2:83:7f:d2:95:25:ef:c5:da:bc:f7: 74:27:d5:5c:95:11:6e:3a:20:d3:e9:79:34:ff:bf:9b:e1:61: d8:ab:87:ce -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMxMzQxMTAvBgNVBAUTKDg0NDJEQzQ2MDI0MDA2MDExQUQ1Q0Y0OENEN0U0QzQ4 QkI5N0ExMUUwHhcNMjYwOTAzMDQ1NTM1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZmRjNi00YzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ4Y3hd+NZD7BfbTo5SqR+43kdMhPL7LAB1undUK8x1EvePghazFuroWWW78 vk5BWQMs7dqr4YKlRZ1Bx3Z6c8Huqe/6tO6yc/j97n0oOfZ7SLsxzQdHKpoNX8UJ 2yR11TSyHmkhzoWALwt72A958VCUQD92owWQ+rKYdKTCbn8MUHy3mNqkowVfcKRI aLJmzSV3eKtpwqA5T1nHmSCrZqkLIONLXa4wB81UK+zgKjmwpgZo1SkBXJ0md9sN AAUcs+wx7HkoMpz2D1feYwuHrnNcXSEn6ZembZlUAn0afAWWYp6yterpLJBZJu4X 1WJFiu5d8Si8MPCCWzUIjaLcFwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFNHm3kuR QOTV17VyASobm2TaagPhMB8GA1UdIwQYMBaAFIRC3EYCQAYBGtXPSM1+TEi7l6Ee MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzEzNC9FNjVGQThBMDU0 NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJnRWExYzlJelg1TVNMdVhv UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFTGNSZ0pBQmdFYTFjOUl6WDVNU0x1WG9SNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTMxMzQvRTY1RkE4QTA1NDUzMTFFRjhBRDc3NDA5QzRGOUFFMDIvRjMyRERFOTg1 NDU0MTFFRkEzQkM2QjJCQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQCZ3ooAwQAyiQgAwQCy4QEMA8EAgACMAkDBwAgAQ32ZQAwDQYJKoZI hvcNAQELBQADggEBAFE0LakqmlDzxLmTMhS4HI4bq9X1kOWSUFYlVIS2zxNC4ief J2dT9DmICxyryM6zFwcAsck9hzcgH/xbKuGYWocEnXWYlmiklPd8GMPiyIYxdp7K lqoe38l0CN/QJ5XtX/uBKj9tAxZMIQ9mw6BfROyjo2KCefT+gZWWZ4P92qskikN9 k4S9x1O4Yi3idhwSNYMi7ehp/RasbP3lS0zlIVeK4XeU/JRQ20MBnEwcNZoNHk4c f385CpN/kWMk3olpvXKcmXetAF3LNfIKUqEWocZXYfsGuMF2cnjPSi3AAUCig3/S lSXvxdq893Qn1VyVEW46INPpeTT/v5vhYdirh84= -----END CERTIFICATE-----Generated at Thu Sep 24 15:53:51 2026 by rpki-client