$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/A2FA17E869FB11F1BD4359E86747A888.roa File: A2FA17E869FB11F1BD4359E86747A888.roa (raw, json) Hash identifier: 8h1Puq097u2DO2U0Cp/aa4dNK2IfnuKSlHLUcyn8kpA= Subject key identifier: 0E:25:DB:64:74:9F:C3:08:0C:0A:63:93:72:30:89:EE:51:AD:4D:8A Certificate issuer: /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Certificate serial: 017C Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/A2FA17E869FB11F1BD4359E86747A888.roa Signing time: Tue 01 Sep 2026 05:55:38 +0000 ROA not before: Tue 01 Sep 2026 05:55:38 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 63842 IP address blocks: 43.250.24.0/22 maxlen: 24 103.41.156.0/22 maxlen: 24 203.22.100.0/24 maxlen: 24 203.22.101.0/24 maxlen: 24 203.22.102.0/24 maxlen: 24 203.22.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Validity Not Before: Sep 1 05:55:38 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a9668d9-f2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a9:75:f8:de:b5:2b:ff:bb:86:17:2f:84:19: 3f:28:8c:7f:97:cb:e6:0a:db:a6:cf:82:60:7c:09: 6b:d3:84:80:6e:a5:b6:dc:49:43:74:74:d0:1b:82: 39:4c:ce:df:03:82:d7:d0:f9:ad:33:fb:ec:6f:59: e4:2a:0c:2b:29:4c:ca:08:d1:4f:de:9e:80:64:76: 02:f3:84:e9:f8:d3:5f:42:56:03:fa:8f:de:b3:ff: 2e:09:1f:c1:5b:56:33:72:96:0e:8b:a9:c2:da:2d: 86:d7:7a:16:90:0a:74:18:26:02:65:f8:3c:c5:20: 08:52:f0:55:98:b0:ea:7f:a0:20:a0:f7:26:d5:e7: 4e:94:85:f7:d8:2c:ac:1a:e0:11:af:ac:25:7d:24: cf:88:ef:14:bf:db:71:7c:5e:89:fe:77:7f:90:fc: 79:53:9f:54:cd:e7:b9:61:2e:e5:b4:22:94:3e:2a: 02:c6:a5:9b:60:3e:23:3d:65:fa:9a:be:66:dd:59: c4:2c:3f:54:e1:bd:c6:15:1d:97:86:68:a9:5b:1a: f7:aa:00:2d:4b:a1:00:e0:0b:4a:44:a7:15:00:04: a7:da:c9:64:81:96:76:5e:68:bd:7e:49:4d:9e:b0: c6:20:e6:d3:f4:2d:07:07:5d:11:1f:21:1d:27:c9: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:25:DB:64:74:9F:C3:08:0C:0A:63:93:72:30:89:EE:51:AD:4D:8A X509v3 Authority Key Identifier: keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/A2FA17E869FB11F1BD4359E86747A888.roa sbgp-ipAddrBlock: critical IPv4: 43.250.24.0/22 103.41.156.0/22 203.22.100.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:64:e1:44:16:3d:16:39:60:82:3e:b6:b5:82:3f:bd:c6:e9: e4:d8:9e:1f:5d:cc:bc:6c:71:ab:06:bb:66:fb:61:be:aa:d4: 13:0c:88:ff:41:fb:82:c9:e2:53:cf:1c:c1:5a:83:09:76:91: b9:03:3b:e0:fd:78:1f:b6:05:18:a5:6a:9c:ec:c3:26:a2:31: 24:a9:55:51:9c:d4:db:36:12:e0:3c:0b:b2:3b:35:53:80:3e: 02:07:41:69:be:9c:11:df:3e:de:2b:3d:37:05:2e:ec:c8:f1: 2b:99:cc:d7:87:c9:7c:1b:57:9a:4d:7a:68:13:1e:43:92:eb: a2:0e:26:44:97:60:5a:18:b4:1c:3f:03:31:76:96:0c:4e:f5: 8f:fb:82:c6:f6:be:49:39:37:4b:2f:4a:c9:68:35:15:b6:03: 27:20:6b:a0:d3:10:50:be:cc:52:c1:a7:c4:ca:71:e5:c1:81: ac:d1:00:c2:c9:4a:56:ae:d6:cf:b3:b8:f3:68:1d:82:5d:7b: c9:8d:61:34:72:f0:0a:75:b1:8b:74:98:70:eb:e5:d4:83:fb: d5:7b:62:98:e6:7f:1c:9e:57:88:4a:30:67:52:3f:39:4f:50: bd:8c:82:7d:4d:55:64:9f:e4:4e:e3:c7:63:31:ba:4e:12:81: b0:9d:c4:2d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ4NDAxMTAvBgNVBAUTKDlDRjcxNDc4QkY1OUIwMDhCMUI1NDJGQTkzQTdDMTBF RkI3RjRENjIwHhcNMjYwOTAxMDU1NTM4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2NjhkOS1mMmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66l1+N61K/+7hhcvhBk/KIx/l8vmCtumz4JgfAlr04SAbqW23ElDdHTQG4I5 TM7fA4LX0PmtM/vsb1nkKgwrKUzKCNFP3p6AZHYC84Tp+NNfQlYD+o/es/8uCR/B W1YzcpYOi6nC2i2G13oWkAp0GCYCZfg8xSAIUvBVmLDqf6AgoPcm1edOlIX32Cys GuARr6wlfSTPiO8Uv9txfF6J/nd/kPx5U59Uzee5YS7ltCKUPioCxqWbYD4jPWX6 mr5m3VnELD9U4b3GFR2XhmipWxr3qgAtS6EA4AtKRKcVAASn2slkgZZ2Xmi9fklN nrDGIObT9C0HB10RHyEdJ8nARwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFA4l22R0 n8MIDApjk3Iwie5RrU2KMB8GA1UdIwQYMBaAFJz3FHi/WbAIsbVC+pOnwQ77f01i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDg0MC8zNDJGODBEMDlG QzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNBaXh0VUw2azZmQkR2dF9U V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ4NDAvMzQyRjgwRDA5RkM0MTFFRjk2MzFGODM2QzRGOUFFMDIvQTJGQTE3RTg2 OUZCMTFGMUJENDM1OUU4Njc0N0E4ODgucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/oYAwQCZymcAwQCyxZkMA0GCSqGSIb3DQEBCwUAA4IBAQCPZOFE Fj0WOWCCPra1gj+9xunk2J4fXcy8bHGrBrtm+2G+qtQTDIj/QfuCyeJTzxzBWoMJ dpG5Azvg/XgftgUYpWqc7MMmojEkqVVRnNTbNhLgPAuyOzVTgD4CB0FpvpwR3z7e Kz03BS7syPErmczXh8l8G1eaTXpoEx5DkuuiDiZEl2BaGLQcPwMxdpYMTvWP+4LG 9r5JOTdLL0rJaDUVtgMnIGug0xBQvsxSwafEynHlwYGs0QDCyUpWrtbPs7jzaB2C XXvJjWE0cvAKdbGLdJhw6+XUg/vVe2KY5n8cnleISjBnUj85T1C9jIJ9TVVkn+RO 48djMbpOEoGwncQt -----END CERTIFICATE-----Generated at Fri Sep 25 18:24:59 2026 by rpki-client