$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/E57F70C206C311F185D816DB103D8C67.roa File: E57F70C206C311F185D816DB103D8C67.roa (raw, json) Hash identifier: Wz+Aa2wnMlwpT85yT4ccSaJKxyuxT87QuUWxfJ/y6fU= Subject key identifier: B5:A0:DC:07:19:49:F7:82:76:4B:DE:ED:90:29:7C:C3:8D:03:C5:E9 Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Certificate serial: 04CA Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/E57F70C206C311F185D816DB103D8C67.roa Signing time: Fri 11 Sep 2026 00:49:48 +0000 ROA not before: Fri 11 Sep 2026 00:49:48 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 45345 IP address blocks: 43.245.212.0/23 maxlen: 24 103.29.152.0/23 maxlen: 23 103.29.152.0/24 maxlen: 24 103.29.153.0/24 maxlen: 24 103.29.154.0/24 maxlen: 24 103.29.155.0/24 maxlen: 24 2401:af00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 00:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193045, serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Validity Not Before: Sep 11 00:49:48 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa3502c-740c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:20:dd:06:65:e8:04:51:4d:5f:3e:e9:f6: 25:7e:52:4f:1e:ad:18:59:e8:9c:a4:92:b1:1c:83: f9:4f:f0:9d:59:ed:57:2a:0d:8c:aa:c2:02:75:19: 37:fa:22:5d:2f:5d:e5:44:1f:fb:ce:f1:ca:39:7d: 88:07:7d:ce:f1:13:05:12:2c:ac:b4:89:1d:05:65: c0:cd:23:9e:5b:98:8f:b3:23:18:81:de:65:49:ac: f0:13:41:f8:fb:20:96:eb:f0:d7:80:c1:98:e1:92: af:b3:f9:32:7d:9a:80:ca:af:af:9b:92:80:0d:11: ba:59:b0:15:48:82:4a:52:36:89:0e:68:d9:e9:61: 40:9a:60:18:d6:ac:61:fc:07:69:b0:0c:57:34:fa: 16:70:20:5a:3d:46:28:3e:5f:1c:16:70:6d:d5:65: 28:33:54:63:c7:1a:c5:a0:a0:31:8d:c4:7b:e6:0f: f1:41:dd:c9:58:0c:14:f1:94:4c:a8:08:73:5a:76: 3d:e5:46:18:1f:58:b8:54:fe:3d:0b:89:3a:35:1a: 34:5f:98:10:55:9d:6a:4f:46:a2:cd:c0:fb:ea:ed: 2a:ea:96:a0:d5:65:1b:56:92:5a:48:e3:06:a7:0a: 25:2c:3f:52:7c:4e:ce:90:37:b9:18:a0:61:03:cc: 1e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A0:DC:07:19:49:F7:82:76:4B:DE:ED:90:29:7C:C3:8D:03:C5:E9 X509v3 Authority Key Identifier: keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/E57F70C206C311F185D816DB103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.245.212.0/23 103.29.152.0/22 IPv6: 2401:af00::/32 Signature Algorithm: sha256WithRSAEncryption 25:f3:00:4d:53:da:59:9e:3e:eb:57:08:67:df:31:02:70:68: 53:62:7f:85:d9:98:03:af:94:0c:9b:02:a1:be:a1:5c:88:47: c3:37:5b:2f:8d:70:6e:6a:64:67:d3:c8:30:df:86:19:8f:6e: 98:78:c9:9e:2c:46:2b:d2:08:de:44:fb:9d:b0:18:13:58:5e: 9a:a4:0d:3d:d8:eb:35:5b:29:a7:82:f0:77:d3:76:7d:ae:a4: 09:5c:09:14:40:0c:0a:fb:97:52:25:eb:a9:af:bf:92:f2:0b: 85:64:4e:3e:ef:fb:ab:90:fe:bf:82:c6:7c:97:bf:7c:83:de: 3c:82:82:9b:60:95:b7:ca:fa:65:14:30:ec:7e:21:fb:b0:2b: 8e:df:87:da:fb:b3:70:a2:52:d5:1a:db:65:0b:92:98:9e:5e: aa:e9:4d:b4:4e:c6:f4:5e:76:67:f4:7c:a9:88:74:7c:bb:1b: 13:e7:1a:03:12:a5:14:94:8c:84:8c:0c:83:49:0c:8e:b0:a3: f6:60:ec:8c:06:1a:f0:3a:da:a9:4b:fc:8e:7b:94:18:db:18: ed:bb:c3:f5:50:7a:96:d9:fc:16:fa:9e:a3:d5:1e:96:8f:5a: f6:5a:84:9e:cd:26:d5:fd:72:1e:df:7f:d8:4a:cb:0f:9a:fc: a5:32:0b:f2 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwNDUxMTAvBgNVBAUTKDY2RTg1NDYxQkIzNTJBNDk4REI1NTcwMzY0NjMwNUNB MzdFNzRGQjQwHhcNMjYwOTExMDA0OTQ4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEzNTAyYy03NDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7Ag3QZl6ARRTV8+6fYlflJPHq0YWeicpJKxHIP5T/CdWe1XKg2MqsICdRk3 +iJdL13lRB/7zvHKOX2IB33O8RMFEiystIkdBWXAzSOeW5iPsyMYgd5lSazwE0H4 +yCW6/DXgMGY4ZKvs/kyfZqAyq+vm5KADRG6WbAVSIJKUjaJDmjZ6WFAmmAY1qxh /AdpsAxXNPoWcCBaPUYoPl8cFnBt1WUoM1RjxxrFoKAxjcR75g/xQd3JWAwU8ZRM qAhzWnY95UYYH1i4VP49C4k6NRo0X5gQVZ1qT0aizcD76u0q6pag1WUbVpJaSOMG pwolLD9SfE7OkDe5GKBhA8weLQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFLWg3AcZ SfeCdkve7ZApfMONA8XpMB8GA1UdIwQYMBaAFGboVGG7NSpJjbVXA2RjBco350+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzA0NS9CRkFEQzYxMDlG MjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtrbU50VmNEWkdNRnlqZm5U N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1aFVZYnMxS2ttTnRWY0RaR01GeWpmblQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTMwNDUvQkZBREM2MTA5RjI5MTFFQzlDMkQ2Nzg1QzRGOUFFMDIvRTU3RjcwQzIw NkMzMTFGMTg1RDgxNkRCMTAzRDhDNjcucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBK/XUAwQCZx2YMA0EAgACMAcDBQAkAa8AMA0GCSqGSIb3DQEBCwUA A4IBAQAl8wBNU9pZnj7rVwhn3zECcGhTYn+F2ZgDr5QMmwKhvqFciEfDN1svjXBu amRn08gw34YZj26YeMmeLEYr0gjeRPudsBgTWF6apA092Os1WymngvB303Z9rqQJ XAkUQAwK+5dSJeupr7+S8guFZE4+7/urkP6/gsZ8l798g948goKbYJW3yvplFDDs fiH7sCuO34fa+7NwolLVGttlC5KYnl6q6U20Tsb0XnZn9HypiHR8uxsT5xoDEqUU lIyEjAyDSQyOsKP2YOyMBhrwOtqpS/yOe5QY2xjtu8P1UHqW2fwW+p6j1R6Wj1r2 WoSezSbV/XIe33/YSssPmvylMgvy -----END CERTIFICATE-----Generated at Tue Sep 29 08:13:57 2026 by rpki-client