$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/13C099EE366711F0B5877C84C4F9AE02.roa File: 13C099EE366711F0B5877C84C4F9AE02.roa (raw, json) Hash identifier: 9rtPRacA/ab9M7425X6SxTSzGNOoYyxxb6DdOR9QEzk= Subject key identifier: 6D:0D:DA:E6:3E:53:48:76:75:92:78:92:9E:52:66:BD:80:20:7F:C9 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0E62 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/13C099EE366711F0B5877C84C4F9AE02.roa Signing time: Thu 07 May 2026 07:47:45 +0000 ROA not before: Thu 07 May 2026 07:47:45 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138640 IP address blocks: 43.246.200.0/24 maxlen: 24 43.246.201.0/24 maxlen: 24 103.109.56.0/24 maxlen: 24 103.109.57.0/24 maxlen: 24 103.109.59.0/24 maxlen: 24 103.111.13.0/24 maxlen: 24 2402:76c0::/32 maxlen: 36 2402:76c0:f000::/48 maxlen: 48 2402:76c0:f001::/48 maxlen: 48 2402:76c0:f010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3682 (0xe62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: May 7 07:47:45 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69fc43a1-6b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:a0:79:be:14:86:a6:49:30:17:4c:d1:11: 66:3e:16:4d:87:70:bd:49:61:cf:fd:12:e0:2d:17: 6f:92:a1:3b:ec:8c:ec:c5:3e:19:24:8f:8e:04:98: a4:57:f6:83:6c:17:54:2b:89:fc:76:dc:78:d6:b3: 73:60:23:8f:66:b3:b5:10:e5:7a:eb:c6:08:cd:03: 75:26:3a:64:6c:79:bb:d4:89:7e:99:27:40:8d:df: d3:8b:89:ac:ad:8d:21:96:bf:fc:b4:46:87:2c:c7: c3:1e:90:5b:c2:71:e1:51:0c:e0:6a:33:40:a9:8c: a2:0a:08:3e:e9:a4:d6:45:5a:54:b6:f6:9c:2a:17: 72:3b:c7:2e:58:99:2b:de:fb:d7:39:44:0e:de:3f: c0:a2:a4:22:4b:70:6f:8d:23:92:18:4b:9a:51:ab: d0:9c:28:d7:35:a5:8b:86:cf:72:05:cb:8b:5f:ee: 39:7f:2f:cd:ca:c4:89:01:34:8b:d0:23:d2:dd:52: 5a:99:6e:8b:13:ef:ea:99:73:e2:ce:13:f6:1d:a1: 7a:0f:73:c9:e1:3b:96:fd:04:4c:55:07:f6:9a:41: e3:88:b5:6f:54:f7:c1:2e:22:2a:7e:73:5b:1a:5e: f5:d5:07:89:b5:41:43:88:a0:74:13:7c:ff:65:61: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0D:DA:E6:3E:53:48:76:75:92:78:92:9E:52:66:BD:80:20:7F:C9 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/13C099EE366711F0B5877C84C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.200.0/23 103.109.56.0/23 103.109.59.0/24 103.111.13.0/24 IPv6: 2402:76c0::/32 Signature Algorithm: sha256WithRSAEncryption 02:d9:0c:fb:b9:cb:8b:ad:03:8d:f5:ef:16:84:df:e5:70:d3: a9:22:c9:5e:42:4b:5b:39:e2:14:90:1b:a4:1f:3f:d1:d1:fb: ed:cd:80:83:78:c0:46:43:b9:60:7e:31:63:c7:87:85:f1:f3: 23:27:c7:23:ad:d7:8b:ca:e6:00:da:ca:b2:07:06:2c:fb:c1: 2b:8c:3b:66:48:db:03:be:bb:ce:47:22:3a:69:bc:1f:b9:8c: f9:7b:2f:62:c5:a1:5c:76:13:f2:12:82:84:1c:8e:01:39:68: 03:83:41:54:b5:d5:22:a6:ff:15:6a:26:02:d1:8f:7c:37:13: ea:6f:71:9e:ac:13:12:4a:b7:f9:7d:4b:f5:48:ae:e6:67:c7: 25:18:f1:98:a1:4f:91:ea:c7:e2:bd:5e:42:d1:55:6f:f9:48: 0a:19:32:10:a2:00:8a:82:c4:70:53:2b:87:37:0e:7f:f6:f4: 4f:a7:d4:4a:34:c8:0c:f5:4e:0c:29:b2:c4:f4:8c:0b:75:94: 13:94:2e:76:e4:5b:aa:44:3e:0b:f3:fa:eb:a5:51:99:3c:36: e2:87:24:6e:6d:c1:1a:3d:18:b3:68:86:22:48:7d:dd:5d:05: 50:32:16:a2:99:4b:de:db:f7:e4:7b:03:76:15:1d:16:6e:4e: f0:08:5f:fa -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICDmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjYwNTA3MDc0NzQ1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWZjNDNhMS02YjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqSgeb4UhqZJMBdM0RFmPhZNh3C9SWHP/RLgLRdvkqE77IzsxT4ZJI+OBJik V/aDbBdUK4n8dtx41rNzYCOPZrO1EOV668YIzQN1JjpkbHm71Il+mSdAjd/Ti4ms rY0hlr/8tEaHLMfDHpBbwnHhUQzgajNAqYyiCgg+6aTWRVpUtvacKhdyO8cuWJkr 3vvXOUQO3j/AoqQiS3BvjSOSGEuaUavQnCjXNaWLhs9yBcuLX+45fy/NysSJATSL 0CPS3VJamW6LE+/qmXPizhP2HaF6D3PJ4TuW/QRMVQf2mkHjiLVvVPfBLiIqfnNb Gl711QeJtUFDiKB0E3z/ZWEl8QIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFG0N2uY+ U0h2dZJ4kp5SZr2AIH/JMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg4NDcvRERGQkIwQjhENzgxMTFFOUI0MjNBQzRCQzRGOUFFMDIvMTNDMDk5RUUz NjY3MTFGMEI1ODc3Qzg0QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQBK/bIAwQBZ204AwQAZ207AwQAZ28NMA0EAgACMAcDBQAkAnbAMA0G CSqGSIb3DQEBCwUAA4IBAQAC2Qz7ucuLrQON9e8WhN/lcNOpIsleQktbOeIUkBuk Hz/R0fvtzYCDeMBGQ7lgfjFjx4eF8fMjJ8cjrdeLyuYA2sqyBwYs+8ErjDtmSNsD vrvORyI6abwfuYz5ey9ixaFcdhPyEoKEHI4BOWgDg0FUtdUipv8VaiYC0Y98NxPq b3GerBMSSrf5fUv1SK7mZ8clGPGYoU+R6sfivV5C0VVv+UgKGTIQogCKgsRwUyuH Nw5/9vRPp9RKNMgM9U4MKbLE9IwLdZQTlC525FuqRD4L8/rrpVGZPDbihyRubcEa PRizaIYiSH3dXQVQMhaimUve2/fkewN2FR0Wbk7wCF/6 -----END CERTIFICATE-----Generated at Wed May 13 03:00:46 2026 by rpki-client