$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/5D4FB6AA9AB711EE86E1D058C4F9AE02.roa File: 5D4FB6AA9AB711EE86E1D058C4F9AE02.roa (raw, json) Hash identifier: Prz3VyZkBSjKw6Vw8c1ZhA3T3AcjA9keMtVp+BLYBlI= Subject key identifier: 95:E7:22:6D:5B:A7:B5:9B:74:59:B0:70:F7:50:F2:64:B1:5D:AF:B3 Certificate issuer: /CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Certificate serial: 0267 Authority key identifier: 45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/5D4FB6AA9AB711EE86E1D058C4F9AE02.roa Signing time: Fri 23 Oct 2026 03:51:29 +0000 ROA not before: Fri 23 Oct 2026 03:51:29 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 151835 IP address blocks: 103.240.2.0/23 maxlen: 23 103.240.2.0/24 maxlen: 24 103.240.3.0/24 maxlen: 24 2001:df2:fbc0::/46 maxlen: 46 2001:df2:fbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174589, serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Validity Not Before: Oct 23 03:51:29 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6adad9c1-b41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bd:99:b0:79:10:9a:4b:ce:65:2e:93:c7:70: e8:32:05:41:e0:cc:82:13:e7:eb:7b:bd:8c:a8:a3: c5:37:7a:66:5f:b4:fe:90:2a:52:49:e0:e6:2b:bb: 7f:fe:42:6c:ff:1a:6b:5d:17:62:f7:82:9a:5f:dc: c7:3e:cd:7b:35:7e:87:9b:c3:95:96:e8:30:c6:ed: 0d:e0:8d:14:3f:a8:00:a1:04:9e:1f:fb:c6:16:d4: ae:ae:66:18:d2:11:dd:83:40:b5:69:5c:2b:da:b2: 75:52:7f:4d:82:df:a8:3c:a9:d7:ec:23:bd:3d:c5: 21:a8:eb:54:4e:c3:2e:ab:d5:9d:f4:a0:cb:bc:9e: b8:5c:17:60:e2:bc:17:98:8e:83:e1:64:5c:77:5a: f5:75:b9:db:fb:e5:63:f3:bf:8e:8d:97:0b:d8:9f: 6e:1c:56:14:fa:bd:ab:d4:ed:83:b1:0d:d4:f0:aa: 48:31:c1:d1:16:a3:b4:23:de:76:ce:6c:fb:92:f9: 89:4d:a8:2d:46:80:03:d9:51:2b:c2:b2:1e:0c:e5: 1e:19:4f:9b:60:4f:26:56:cd:90:a6:2f:e0:51:1c: 94:f2:d1:17:4c:47:47:d2:86:95:3e:ef:e6:70:f6: 72:33:ec:82:b8:c3:92:f5:4f:b3:da:a4:a8:8a:a6: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E7:22:6D:5B:A7:B5:9B:74:59:B0:70:F7:50:F2:64:B1:5D:AF:B3 X509v3 Authority Key Identifier: keyid:45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/5D4FB6AA9AB711EE86E1D058C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.240.2.0/23 IPv6: 2001:df2:fbc0::/46 Signature Algorithm: sha256WithRSAEncryption b4:b2:46:99:85:e3:63:7f:5d:af:61:7e:67:a1:2c:87:b3:d5: 1b:dc:28:ca:9e:9b:3d:31:6f:f9:e5:d4:4f:c0:47:ff:ef:9c: 86:06:6b:07:15:a7:31:80:12:ea:1e:4a:fd:96:5c:73:1e:73: 93:71:be:2c:b4:8e:1e:cd:79:61:31:68:e2:87:6d:7c:fe:44: 7a:bd:50:6d:96:91:c4:5f:0e:47:6b:87:5b:44:50:d3:7d:f7: 25:3a:e4:b3:15:ae:43:de:4a:bb:99:5d:3d:2d:43:4a:d6:76: 2b:32:ed:32:f7:c8:df:0b:0f:67:e3:d9:58:f4:be:db:6e:6b: 37:6d:0d:ae:72:6c:b3:a5:87:33:22:31:63:94:c9:54:8d:1b: 0f:bd:e1:6e:90:19:c4:67:9f:ab:bd:5a:af:a6:5e:18:1d:9f: 34:23:e0:01:e4:9b:a0:57:20:73:56:f3:81:01:f0:c8:56:41: 44:29:f9:22:39:25:58:d6:1f:c7:c1:2e:37:70:d6:a5:70:14: 3e:5e:55:e6:38:55:8c:54:8d:fc:67:a0:c3:a7:5d:7f:8a:08: d0:a4:02:20:01:2f:8c:cb:59:04:6d:6f:41:4d:df:d6:a8:7c: 3c:c4:fc:77:e0:ae:fd:a9:dd:bd:38:8b:88:98:14:4d:10:7f: a0:8b:1d:b2 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ1ODkxMTAvBgNVBAUTKDQ1OENERENBM0U4RkI2NEM5RDFBMjM0OTI1MjhCQTc3 N0ZDREQyMzQwHhcNMjYxMDIzMDM1MTI5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRhZDljMS1iNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b2ZsHkQmkvOZS6Tx3DoMgVB4MyCE+fre72MqKPFN3pmX7T+kCpSSeDmK7t/ /kJs/xprXRdi94KaX9zHPs17NX6Hm8OVlugwxu0N4I0UP6gAoQSeH/vGFtSurmYY 0hHdg0C1aVwr2rJ1Un9Ngt+oPKnX7CO9PcUhqOtUTsMuq9Wd9KDLvJ64XBdg4rwX mI6D4WRcd1r1dbnb++Vj87+OjZcL2J9uHFYU+r2r1O2DsQ3U8KpIMcHRFqO0I952 zmz7kvmJTagtRoAD2VErwrIeDOUeGU+bYE8mVs2Qpi/gURyU8tEXTEdH0oaVPu/m cPZyM+yCuMOS9U+z2qSoiqZPtwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJXnIm1b p7WbdFmwcPdQ8mSxXa+zMB8GA1UdIwQYMBaAFEWM3co+j7ZMnRojSSUound/zdI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDU4OS81RkM2MjdDNDYx QzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRreWRHaU5KSlNpNmQzX04w alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZemR5ajZQdGt5ZEdpTkpKU2k2ZDNfTjBqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQ1ODkvNUZDNjI3QzQ2MUM0MTFFRUJCMTUxQzRCQzRGOUFFMDIvNUQ0RkI2QUE5 QUI3MTFFRTg2RTFEMDU4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ/ACMA8EAgACMAkDBwIgAQ3y+8AwDQYJKoZIhvcNAQELBQADggEB ALSyRpmF42N/Xa9hfmehLIez1RvcKMqemz0xb/nl1E/AR//vnIYGawcVpzGAEuoe Sv2WXHMec5Nxviy0jh7NeWExaOKHbXz+RHq9UG2WkcRfDkdrh1tEUNN99yU65LMV rkPeSruZXT0tQ0rWdisy7TL3yN8LD2fj2Vj0vttuazdtDa5ybLOlhzMiMWOUyVSN Gw+94W6QGcRnn6u9Wq+mXhgdnzQj4AHkm6BXIHNW84EB8MhWQUQp+SI5JVjWH8fB Ljdw1qVwFD5eVeY4VYxUjfxnoMOnXX+KCNCkAiABL4zLWQRtb0FN39aofDzE/Hfg rv2p3b04i4iYFE0Qf6CLHbI= -----END CERTIFICATE-----Generated at Sun Nov 15 14:58:02 2026 by rpki-client