$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/62AC0F740B1511F189F6F0D93B3D8C67.roa File: 62AC0F740B1511F189F6F0D93B3D8C67.roa (raw, json) Hash identifier: Htk1BqkRKiaFa9x+yTZJCZVf/zPXHwbaP6hoH1eBN/c= Subject key identifier: CA:00:9D:AB:0F:F7:03:AF:34:1B:78:C9:5E:4C:93:EF:F7:97:D9:A5 Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Certificate serial: 04C9 Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/62AC0F740B1511F189F6F0D93B3D8C67.roa Signing time: Fri 11 Sep 2026 00:49:46 +0000 ROA not before: Fri 11 Sep 2026 00:49:46 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 131995 IP address blocks: 43.245.212.0/23 maxlen: 23 103.29.152.0/23 maxlen: 23 103.29.152.0/24 maxlen: 24 103.29.153.0/24 maxlen: 24 103.29.154.0/24 maxlen: 24 103.29.155.0/24 maxlen: 24 2401:af00::/32 maxlen: 32 2401:af00:9559::/48 maxlen: 48 2401:af00:95ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 00:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193045, serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Validity Not Before: Sep 11 00:49:46 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa3502a-ce0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a7:b4:63:b9:f4:dd:96:fd:ce:94:d6:96:81: e8:71:b7:78:3b:61:92:7b:88:a7:60:df:59:81:a2: 02:72:6c:20:bf:3f:36:53:10:62:1d:60:37:00:90: b6:80:9e:ee:c0:73:d5:c3:d0:f3:3a:ca:5c:5c:d7: b9:bd:df:57:cf:a5:59:09:aa:16:be:74:13:5b:53: 1d:2b:43:76:7f:4f:21:54:53:c2:c4:aa:b9:5f:86: fc:1b:a8:e6:4f:9a:da:cb:a4:8e:11:30:d5:0b:8d: 85:24:ad:5a:82:bc:62:a2:ab:d9:c4:1a:b7:d5:71: a4:85:8f:8a:4d:ba:e2:56:7f:b1:7d:8b:e7:e8:89: 4c:da:0e:26:56:dc:2d:06:2e:15:d3:06:ae:64:46: 2a:5d:07:e5:62:54:7c:ca:67:84:38:da:e5:b3:08: 1b:55:0f:3f:88:b0:b5:81:3a:cb:0a:20:71:93:74: b8:f6:08:f6:5b:68:54:51:6e:5f:da:12:00:47:a0: ea:5e:32:df:1b:e8:5f:e4:6a:e5:ae:0a:20:53:54: 3b:e1:d5:e2:6b:07:4f:39:e5:61:7c:ee:92:90:45: ac:83:8d:20:d4:2f:81:30:f8:1d:9f:8a:b7:0c:7e: ee:c1:3e:f8:16:32:7f:85:33:2f:3d:04:78:7b:74: 0c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:00:9D:AB:0F:F7:03:AF:34:1B:78:C9:5E:4C:93:EF:F7:97:D9:A5 X509v3 Authority Key Identifier: keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/62AC0F740B1511F189F6F0D93B3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.245.212.0/23 103.29.152.0/22 IPv6: 2401:af00::/32 Signature Algorithm: sha256WithRSAEncryption 77:7c:5e:2c:7c:db:d6:47:69:1a:9c:ef:51:08:6a:0d:d1:66: d5:26:3e:9d:07:46:85:73:52:5c:8b:26:ce:19:a5:dd:dd:00: 9b:80:5e:0f:79:ba:e0:8f:cf:65:d0:d4:2b:4b:07:f8:a1:6c: dc:95:03:8a:1b:36:09:aa:f3:9b:e9:0a:3a:ca:5c:70:ac:34: b0:53:2a:be:d6:a7:0c:f9:da:b3:cd:5f:d9:e3:c8:a0:c1:af: 72:cf:8f:a6:f8:06:40:ef:76:76:4c:8a:1d:cb:90:eb:43:cd: 42:a5:2b:7a:64:eb:8e:3d:fe:cb:cd:41:f0:3d:ff:9f:a5:21: 74:81:17:ce:54:ba:bc:e1:22:07:a5:57:75:dc:05:f4:f5:83: 59:53:f4:7e:80:48:50:7f:14:a7:c3:98:f2:8a:09:6d:78:f9: 75:5b:7b:36:e5:3c:84:91:ba:00:63:fc:cf:e3:d6:8a:f2:83: c9:0e:da:18:c3:dc:47:7e:57:d2:8b:2a:72:8b:1f:29:d1:fb: 23:69:07:e4:5e:99:dd:dc:b3:39:df:a3:bc:bb:3a:9d:8a:e3: ae:6d:2d:11:57:5a:d5:4d:37:f5:3c:b6:f8:e8:4f:c7:4e:21: b2:d3:61:63:4f:eb:12:87:ea:a9:2c:a6:35:75:b0:d5:5b:7c: c7:77:04:31 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwNDUxMTAvBgNVBAUTKDY2RTg1NDYxQkIzNTJBNDk4REI1NTcwMzY0NjMwNUNB MzdFNzRGQjQwHhcNMjYwOTExMDA0OTQ2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEzNTAyYS1jZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ke0Y7n03Zb9zpTWloHocbd4O2GSe4inYN9ZgaICcmwgvz82UxBiHWA3AJC2 gJ7uwHPVw9DzOspcXNe5vd9Xz6VZCaoWvnQTW1MdK0N2f08hVFPCxKq5X4b8G6jm T5ray6SOETDVC42FJK1agrxioqvZxBq31XGkhY+KTbriVn+xfYvn6IlM2g4mVtwt Bi4V0wauZEYqXQflYlR8ymeEONrlswgbVQ8/iLC1gTrLCiBxk3S49gj2W2hUUW5f 2hIAR6DqXjLfG+hf5GrlrgogU1Q74dXiawdPOeVhfO6SkEWsg40g1C+BMPgdn4q3 DH7uwT74FjJ/hTMvPQR4e3QMkQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMoAnasP 9wOvNBt4yV5Mk+/3l9mlMB8GA1UdIwQYMBaAFGboVGG7NSpJjbVXA2RjBco350+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzA0NS9CRkFEQzYxMDlG MjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtrbU50VmNEWkdNRnlqZm5U N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1aFVZYnMxS2ttTnRWY0RaR01GeWpmblQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTMwNDUvQkZBREM2MTA5RjI5MTFFQzlDMkQ2Nzg1QzRGOUFFMDIvNjJBQzBGNzQw QjE1MTFGMTg5RjZGMEQ5M0IzRDhDNjcucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBK/XUAwQCZx2YMA0EAgACMAcDBQAkAa8AMA0GCSqGSIb3DQEBCwUA A4IBAQB3fF4sfNvWR2kanO9RCGoN0WbVJj6dB0aFc1JciybOGaXd3QCbgF4Pebrg j89l0NQrSwf4oWzclQOKGzYJqvOb6Qo6ylxwrDSwUyq+1qcM+dqzzV/Z48igwa9y z4+m+AZA73Z2TIody5DrQ81CpSt6ZOuOPf7LzUHwPf+fpSF0gRfOVLq84SIHpVd1 3AX09YNZU/R+gEhQfxSnw5jyigltePl1W3s25TyEkboAY/zP49aK8oPJDtoYw9xH flfSiypyix8p0fsjaQfkXpnd3LM536O8uzqdiuOubS0RV1rVTTf1PLb46E/HTiGy 02FjT+sSh+qpLKY1dbDVW3zHdwQx -----END CERTIFICATE-----Generated at Tue Sep 29 04:13:06 2026 by rpki-client