$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa File: 9C749C7C140811EABB746522C4F9AE02.roa (raw, json) Hash identifier: 8DA++vR3BKDYCST9TMw7MMayZWjyBFWCPRi2cmbhv0A= Subject key identifier: 0B:7E:FD:D1:74:25:81:CC:30:E1:5F:29:71:07:3C:C6:1B:3E:59:51 Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Certificate serial: 0CFF Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa Signing time: Tue 22 Sep 2026 18:38:01 +0000 ROA not before: Tue 22 Sep 2026 18:38:01 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 139590 IP address blocks: 103.142.34.0/23 maxlen: 23 103.142.34.0/24 maxlen: 24 103.142.35.0/24 maxlen: 24 2400:63a0::/32 maxlen: 32 2400:63a0::/48 maxlen: 48 2400:63a0:1::/48 maxlen: 48 2400:63a0:2::/48 maxlen: 48 2400:63a0:3::/48 maxlen: 48 2400:63a0:4::/48 maxlen: 48 2400:63a0:5::/48 maxlen: 48 2400:63a0:6::/48 maxlen: 48 2400:63a0:7::/48 maxlen: 48 2400:63a0:8::/48 maxlen: 48 2400:63a0:9::/48 maxlen: 48 2400:63a0:a::/48 maxlen: 48 2400:63a0:b::/48 maxlen: 48 2400:63a0:c::/48 maxlen: 48 2400:63a0:d::/48 maxlen: 48 2400:63a0:11::/48 maxlen: 48 2400:63a0:12::/48 maxlen: 48 2400:63a0:40::/42 maxlen: 42 2400:63a0:80::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Validity Not Before: Sep 22 18:38:01 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab2cb09-01b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:6a:cc:87:ed:a7:b3:38:1a:22:1a:3c:41: 69:38:15:3c:39:6a:11:37:ba:11:7c:4e:e0:51:dc: e2:5a:e2:06:44:aa:b0:f9:87:20:6b:7b:cc:ee:1d: 22:56:61:aa:9f:d1:a0:34:aa:94:b0:a4:f6:5d:c5: c6:b0:d0:23:f7:e7:c8:ba:bd:1b:2c:61:1b:f8:f5: a2:af:e0:20:2b:d1:e0:ba:94:53:9c:ff:48:cb:9c: 7f:73:8b:db:78:30:b2:33:1f:c0:bf:50:cc:2b:1b: 10:be:81:46:c5:4e:37:6a:3c:e5:a9:f5:8c:2c:75: a1:9f:04:c9:d1:94:01:2c:02:61:b8:f1:1f:84:8f: 5b:1b:f1:77:ec:6d:02:bd:a1:ef:4e:61:26:8f:d2: 85:42:94:36:e0:79:0d:a7:dd:7a:a6:4b:fd:bc:ff: 60:c8:80:4d:d4:d9:fb:df:77:0f:09:6b:44:ab:0d: 02:f9:23:c8:6d:1b:f2:d4:d5:37:65:0c:05:cb:2e: db:f6:14:b0:a7:9c:fe:c1:a4:78:4d:4a:ab:c9:fa: f3:ab:e5:23:78:08:22:08:40:8a:7f:5e:cd:b9:50: 55:4f:7c:54:74:40:17:15:bf:9c:df:e8:aa:89:f6: cd:34:28:62:6f:2e:7f:3a:01:fc:6e:62:18:d8:80: 04:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7E:FD:D1:74:25:81:CC:30:E1:5F:29:71:07:3C:C6:1B:3E:59:51 X509v3 Authority Key Identifier: keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.142.34.0/23 IPv6: 2400:63a0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:e4:30:4b:cc:86:0c:f7:cf:a8:39:23:b7:5f:3c:12:c1:39: ae:1d:f5:55:9a:a7:d7:80:f0:ce:bd:d4:90:e8:1b:8b:7d:bf: 16:43:f2:48:36:e3:c2:06:d1:31:e7:be:28:3a:0f:65:cf:e3: 8d:89:7f:67:b0:51:d2:be:0c:fc:f1:05:a0:bb:95:35:1e:89: 6b:c0:e4:c3:cf:96:93:aa:55:3d:31:a4:fb:a3:0d:c5:da:f5: 16:c5:e2:5e:01:18:9f:81:76:4f:be:e9:7b:0c:dc:cb:f4:12: 2e:fc:27:f6:96:43:1d:e6:10:2f:c9:5d:01:60:79:12:b5:4d: 22:8f:77:0e:43:93:a4:a3:24:f4:06:c3:cf:af:6e:9c:5f:85: c3:d4:3c:c8:c0:1a:5a:54:7e:09:13:c1:59:ec:e7:bd:d6:ff: b4:89:19:f7:74:30:27:93:4f:ae:1e:bc:5f:8b:da:06:05:5d: 36:44:42:98:d9:58:d2:6d:41:1b:03:ad:cb:7e:61:74:40:96: 24:26:68:0f:98:ef:11:d1:de:22:8f:d2:f1:4d:e7:a2:c3:1f: a4:05:25:47:63:d3:80:2d:08:29:6f:4c:f1:11:8d:97:ce:b2: 60:ef:bb:aa:a1:9b:9f:bd:b4:00:f3:d4:08:28:67:27:f4:97: b7:77:46:63 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyODUxMTAvBgNVBAUTKDBFRUUwRkJGNzg2QTc3N0Y0QzI3NDE1M0Y3NTM2RjNE Rjg5Rjk0OTIwHhcNMjYwOTIyMTgzODAxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIyY2IwOS0wMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWBqzIftp7M4GiIaPEFpOBU8OWoRN7oRfE7gUdziWuIGRKqw+Ycga3vM7h0i VmGqn9GgNKqUsKT2XcXGsNAj9+fIur0bLGEb+PWir+AgK9HgupRTnP9Iy5x/c4vb eDCyMx/Av1DMKxsQvoFGxU43ajzlqfWMLHWhnwTJ0ZQBLAJhuPEfhI9bG/F37G0C vaHvTmEmj9KFQpQ24HkNp916pkv9vP9gyIBN1Nn733cPCWtEqw0C+SPIbRvy1NU3 ZQwFyy7b9hSwp5z+waR4TUqryfrzq+UjeAgiCECKf17NuVBVT3xUdEAXFb+c3+iq ifbNNChiby5/OgH8bmIY2IAERwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFAt+/dF0 JYHMMOFfKXEHPMYbPllRMB8GA1UdIwQYMBaAFA7uD794and/TCdBU/dTbz34n5SS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzI4NS9GRTdGNjM3QzE0 MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQzOU1KMEZUOTFOdlBmaWZs SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1NFB2M2hxZDM5TUowRlQ5MU52UGZpZmxKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcyODUvRkU3RjYzN0MxNDA2MTFFQUE3MjgxMzFGQzRGOUFFMDIvOUM3NDlDN0Mx NDA4MTFFQUJCNzQ2NTIyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ44iMA0EAgACMAcDBQAkAGOgMA0GCSqGSIb3DQEBCwUAA4IBAQAs 5DBLzIYM98+oOSO3XzwSwTmuHfVVmqfXgPDOvdSQ6BuLfb8WQ/JINuPCBtEx574o Og9lz+ONiX9nsFHSvgz88QWgu5U1HolrwOTDz5aTqlU9MaT7ow3F2vUWxeJeARif gXZPvul7DNzL9BIu/Cf2lkMd5hAvyV0BYHkStU0ij3cOQ5OkoyT0BsPPr26cX4XD 1DzIwBpaVH4JE8FZ7Oe91v+0iRn3dDAnk0+uHrxfi9oGBV02REKY2VjSbUEbA63L fmF0QJYkJmgPmO8R0d4ij9LxTeeiwx+kBSVHY9OALQgpb0zxEY2XzrJg77uqoZuf vbQA89QIKGcn9Je3d0Zj -----END CERTIFICATE-----Generated at Fri Sep 25 01:16:39 2026 by rpki-client