$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/9467361CFEAA11E89E73E75BC4F9AE02.roa File: 9467361CFEAA11E89E73E75BC4F9AE02.roa (raw, json) Hash identifier: rNU2fL2cgYDnmCSc4qzqdrF/DYETyERL6c8NE7KPpLs= Subject key identifier: 9A:BE:63:6B:A9:7C:BE:73:1A:44:C1:75:58:9D:B7:99:86:62:0C:D1 Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Certificate serial: 127A Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/9467361CFEAA11E89E73E75BC4F9AE02.roa Signing time: Fri 04 Sep 2026 17:34:37 +0000 ROA not before: Fri 04 Sep 2026 17:34:37 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 133043 IP address blocks: 43.245.172.0/22 maxlen: 24 103.240.184.0/22 maxlen: 24 2407:c300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4730 (0x127a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Validity Not Before: Sep 4 17:34:37 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9b012c-cd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:61:8e:71:d4:f8:9f:0e:eb:42:82:c6:1c:1a: a6:58:62:9a:00:15:3e:13:e9:e3:70:79:89:2e:2a: 4a:61:59:ea:ea:ee:68:fd:84:10:39:5e:e6:85:64: f1:cc:8e:14:55:98:b3:cc:2e:71:75:85:5c:89:81: d7:c0:7c:e7:f1:c5:3b:46:fa:4e:e0:5c:a2:4f:3e: f7:0e:66:ae:c4:38:82:25:c2:bf:36:3c:54:d3:72: 7b:52:a8:dc:7c:29:4d:4f:b1:68:bb:48:f7:f4:79: 4c:13:a2:62:f2:3d:c0:85:ec:cf:f5:f7:f6:3f:0a: 39:a6:1b:f9:37:05:c5:00:08:8e:bd:ea:b1:0d:8a: 2d:41:1c:7d:01:58:f2:73:d4:56:6c:4a:f2:7e:2f: c3:20:bd:83:15:24:fb:66:11:72:03:a1:ab:b2:66: 18:11:89:74:cd:56:98:f8:9e:c3:e1:78:9f:8b:1a: 3a:8e:d8:b3:d4:60:73:69:f0:7e:32:c1:a4:05:0c: b8:45:7e:8f:1e:60:c3:d6:d0:de:7d:83:2d:96:eb: 3a:23:ce:5d:d6:e7:bf:73:fa:16:79:62:22:64:63: b2:9d:79:3b:72:85:b3:1b:14:9b:a3:4d:74:97:d7: cc:cf:3d:d9:df:fe:b7:bc:87:28:ec:72:59:29:58: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BE:63:6B:A9:7C:BE:73:1A:44:C1:75:58:9D:B7:99:86:62:0C:D1 X509v3 Authority Key Identifier: keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/9467361CFEAA11E89E73E75BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.172.0/22 103.240.184.0/22 IPv6: 2407:c300::/32 Signature Algorithm: sha256WithRSAEncryption 78:9a:19:e7:d1:87:74:1c:db:4b:d0:da:fc:96:d9:20:fa:48: 50:b2:0d:67:9b:47:ab:93:b5:c5:31:63:a5:74:96:46:75:27: f3:24:d6:08:2a:ee:d8:42:93:dd:2a:13:ba:a1:f1:cf:c1:4e: 73:35:de:fd:30:cf:53:56:77:39:ea:11:d6:b0:a1:85:12:15: 76:f8:8d:9b:27:ad:e8:9b:4f:dd:a6:dd:dd:b4:34:3d:04:cd: a0:1c:b1:39:28:57:1a:d9:25:07:02:f9:ef:3b:69:57:bf:60: 9e:ee:8a:c1:64:d5:d6:95:95:65:ff:2e:30:4f:c5:22:57:83: 44:2e:4a:99:8d:05:e2:0b:87:73:fd:59:04:b2:6d:c5:c8:f2: 7c:90:9e:c6:79:7d:d4:64:e7:2d:4a:d4:ab:e6:6e:d5:bf:10: 4b:f9:4c:50:f3:0d:2a:99:4e:ef:0d:ba:90:55:1e:11:46:fc: 50:ba:11:f9:0c:eb:b9:8c:45:f1:21:85:7b:42:ca:79:ef:54: 3e:9e:1a:9d:62:78:9d:51:d3:91:9e:6f:bc:35:c8:c4:ff:51: 34:34:45:fe:62:27:4a:b6:7d:a4:5c:9f:e7:6d:7c:76:35:62: 19:a2:08:9a:48:f0:e4:e0:54:83:01:7c:f0:87:a7:c0:af:b4: fd:46:51:68 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICEnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxRjIxMTAvBgNVBAUTKDA3NTMyQ0Y2RDJCQzRDQTlEOTI3RjMwN0QwRTZCODI4 NzdEOEVFNEQwHhcNMjYwOTA0MTczNDM3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliMDEyYy1jZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmGOcdT4nw7rQoLGHBqmWGKaABU+E+njcHmJLipKYVnq6u5o/YQQOV7mhWTx zI4UVZizzC5xdYVciYHXwHzn8cU7RvpO4FyiTz73DmauxDiCJcK/NjxU03J7Uqjc fClNT7Fou0j39HlME6Ji8j3AhezP9ff2Pwo5phv5NwXFAAiOveqxDYotQRx9AVjy c9RWbEryfi/DIL2DFST7ZhFyA6GrsmYYEYl0zVaY+J7D4Xifixo6jtiz1GBzafB+ MsGkBQy4RX6PHmDD1tDefYMtlus6I85d1ue/c/oWeWIiZGOynXk7coWzGxSbo010 l9fMzz3Z3/63vIco7HJZKVjVAQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJq+Y2up fL5zGkTBdVidt5mGYgzRMB8GA1UdIwQYMBaAFAdTLPbSvEyp2SfzB9DmuCh32O5N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFGMi9BRjMyMUQzQ0ZF N0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRLblpKX01IME9hNEtIZlk3 azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxTXM5dEs4VEtuWkpfTUgwT2E0S0hmWTdrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQxRjIvQUYzMjFEM0NGRTdDMTFFODg2ODlDNjU1QzRGOUFFMDIvOTQ2NzM2MUNG RUFBMTFFODlFNzNFNzVCQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/WsAwQCZ/C4MA0EAgACMAcDBQAkB8MAMA0GCSqGSIb3DQEBCwUA A4IBAQB4mhnn0Yd0HNtL0Nr8ltkg+khQsg1nm0erk7XFMWOldJZGdSfzJNYIKu7Y QpPdKhO6ofHPwU5zNd79MM9TVnc56hHWsKGFEhV2+I2bJ63om0/dpt3dtDQ9BM2g HLE5KFca2SUHAvnvO2lXv2Ce7orBZNXWlZVl/y4wT8UiV4NELkqZjQXiC4dz/VkE sm3FyPJ8kJ7GeX3UZOctStSr5m7VvxBL+UxQ8w0qmU7vDbqQVR4RRvxQuhH5DOu5 jEXxIYV7Qsp571Q+nhqdYnidUdORnm+8NcjE/1E0NEX+YidKtn2kXJ/nbXx2NWIZ ogiaSPDk4FSDAXzwh6fAr7T9RlFo -----END CERTIFICATE-----Generated at Wed Sep 23 05:01:55 2026 by rpki-client