$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/0DA7D6ACBEF111ED9634C070C4F9AE02.roa File: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (raw, json) Hash identifier: vjzanv4ooY3fB2GpsZwFKUTpj8/Y6JZNtKtoqDqZTqc= Subject key identifier: 0C:D3:DD:D7:6E:C6:47:4B:B2:EA:EE:08:E4:14:2D:36:D2:DF:C7:BE Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 08F7 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/0DA7D6ACBEF111ED9634C070C4F9AE02.roa Signing time: Mon 02 Nov 2026 21:39:31 +0000 ROA not before: Mon 02 Nov 2026 21:39:31 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 133929 IP address blocks: 43.225.59.0/24 maxlen: 24 103.252.16.0/22 maxlen: 22 103.252.16.0/23 maxlen: 24 103.252.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2295 (0x8f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Nov 2 21:39:31 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ae90313-4958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:29:d6:b3:04:c0:84:ec:7b:82:2f:f8:51: 6a:73:6f:7b:6d:8d:64:2a:9c:86:34:59:0e:5e:8f: ed:0f:4b:26:8d:12:bd:d3:c1:03:e9:b6:0c:c4:a5: 5a:29:20:ea:76:73:1d:dc:f3:82:d0:db:7c:9b:e9: ed:97:52:c5:42:ed:2b:5c:09:09:f8:ba:98:51:72: 8e:f2:2f:ad:d7:96:01:4a:2c:15:dc:24:4c:82:d7: a5:68:eb:3f:7d:5c:3d:c3:6c:93:5b:6e:28:21:cb: 77:90:82:d7:df:48:00:55:d3:e8:f2:fb:0d:e9:2d: 1e:05:ab:fd:db:09:dd:fd:52:c3:31:97:3c:38:d6: 2f:10:a8:db:c2:19:76:76:c7:81:7e:ab:03:a1:e2: a3:28:61:5c:66:7e:4a:cc:0b:51:74:10:48:7e:be: 06:af:b8:43:61:b3:07:36:8b:07:11:10:22:f8:2c: 76:0a:10:6a:78:30:17:f7:d8:a3:7d:ad:be:5a:16: a1:51:e3:17:bb:d7:1d:c7:9c:1d:0f:ff:68:84:b0: fe:7b:7c:19:7e:b4:32:87:37:94:67:cc:f2:d3:47: 3a:43:b8:aa:1e:9f:fa:8d:19:35:26:8e:09:50:a1: 26:ee:34:14:ff:4e:02:e7:fd:81:27:62:60:1c:fb: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D3:DD:D7:6E:C6:47:4B:B2:EA:EE:08:E4:14:2D:36:D2:DF:C7:BE X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/0DA7D6ACBEF111ED9634C070C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.59.0/24 103.252.16.0/22 Signature Algorithm: sha256WithRSAEncryption 25:37:39:b4:ce:68:dd:90:88:c5:17:17:c5:a4:57:7f:f7:c0: 77:0f:7c:d5:dc:b5:e7:62:28:97:7f:1b:f6:af:b1:bb:04:ae: 70:18:85:a1:ec:15:74:73:46:51:40:60:4f:62:7b:d8:df:ea: ec:59:25:6d:e8:3b:ff:87:40:2e:70:22:67:71:00:80:0d:77: 94:23:e1:26:6f:36:d0:2e:c7:b8:53:b7:e6:45:c6:39:2b:17: 42:7c:cc:ff:87:7f:51:20:e7:6c:47:59:c1:9c:b4:7a:5c:7a: e6:de:c3:14:27:ba:1f:75:55:31:62:86:61:6d:de:eb:a1:bf: 9f:33:04:73:66:8e:1b:be:72:31:aa:bd:da:5c:69:1b:ec:85: 8d:db:71:d2:19:e8:2e:2b:e9:6f:0f:f9:a0:c3:91:4c:cc:91: e7:eb:71:ed:11:86:8a:1f:ac:67:fc:d3:30:78:4b:57:0f:7a: ee:d0:b4:76:cb:93:75:99:16:a8:93:77:cd:6a:b4:24:6f:00: ec:3b:b0:b6:91:0c:46:c8:6a:18:a0:b6:3c:95:29:80:90:85: 24:e6:f3:66:8a:1b:39:e7:4d:89:6c:3b:c2:a8:9d:35:42:ae: 2c:31:54:9e:07:d1:dd:a3:78:72:34:99:f7:fd:c6:b0:fd:58: e3:8a:af:8a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjYxMTAyMjEzOTMxWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU5MDMxMy00OTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzd4p1rMEwITse4Iv+FFqc297bY1kKpyGNFkOXo/tD0smjRK908ED6bYMxKVa KSDqdnMd3POC0Nt8m+ntl1LFQu0rXAkJ+LqYUXKO8i+t15YBSiwV3CRMgtelaOs/ fVw9w2yTW24oIct3kILX30gAVdPo8vsN6S0eBav92wnd/VLDMZc8ONYvEKjbwhl2 dseBfqsDoeKjKGFcZn5KzAtRdBBIfr4Gr7hDYbMHNosHERAi+Cx2ChBqeDAX99ij fa2+WhahUeMXu9cdx5wdD/9ohLD+e3wZfrQyhzeUZ8zy00c6Q7iqHp/6jRk1Jo4J UKEm7jQU/04C5/2BJ2JgHPvVzQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAzT3ddu xkdLsuruCOQULTbS38e+MB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVGMTgvQTM4NDI5MUMwQUEwMTFFQjg3MzMzODgyQzRGOUFFMDIvMERBN0Q2QUNC RUYxMTFFRDk2MzRDMDcwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK+E7AwQCZ/wQMA0GCSqGSIb3DQEBCwUAA4IBAQAlNzm0zmjdkIjF FxfFpFd/98B3D3zV3LXnYiiXfxv2r7G7BK5wGIWh7BV0c0ZRQGBPYnvY3+rsWSVt 6Dv/h0AucCJncQCADXeUI+EmbzbQLse4U7fmRcY5KxdCfMz/h39RIOdsR1nBnLR6 XHrm3sMUJ7ofdVUxYoZhbd7rob+fMwRzZo4bvnIxqr3aXGkb7IWN23HSGeguK+lv D/mgw5FMzJHn63HtEYaKH6xn/NMweEtXD3ru0LR2y5N1mRaok3fNarQkbwDsO7C2 kQxGyGoYoLY8lSmAkIUk5vNmihs5502JbDvCqJ01Qq4sMVSeB9Hdo3hyNJn3/caw /Vjjiq+K -----END CERTIFICATE-----Generated at Sun Nov 15 18:12:53 2026 by rpki-client