$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/9E9EC628D9C511EC81B54F47C4F9AE02.roa File: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (raw, json) Hash identifier: LpWdecCaZjYDqnwlofOF98ADZ9wJd8dslMfZKWc8i2U= Subject key identifier: 39:64:2A:EC:C4:B5:C6:F4:0A:4A:E0:A2:2C:AC:EB:40:33:24:90:99 Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 041A Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/9E9EC628D9C511EC81B54F47C4F9AE02.roa Signing time: Mon 21 Sep 2026 02:45:59 +0000 ROA not before: Mon 21 Sep 2026 02:45:59 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 55720 IP address blocks: 103.159.132.0/24 maxlen: 24 103.159.133.0/24 maxlen: 24 103.169.90.0/24 maxlen: 24 103.169.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Sep 21 02:45:59 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6ab09a66-a9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:fc:70:03:83:0b:08:08:0d:df:68:07:c7: 3f:a9:c6:9c:3e:d7:46:ee:20:82:e6:c1:a6:d7:e5: a8:e5:29:0c:5f:d1:4e:73:74:3d:c0:d3:3f:99:47: 95:45:b5:5c:c1:31:51:a0:29:98:0b:0b:d7:61:42: 42:60:ce:07:0f:cc:21:30:fe:bd:51:99:d6:4d:9b: 0b:bd:8e:5e:1d:13:a7:07:42:a2:bb:22:24:7f:d0: 64:32:af:2b:ef:e0:9d:53:28:d3:6e:0e:41:ee:c9: 54:b0:16:95:0a:01:d9:aa:33:db:73:43:94:86:80: a4:c7:a1:1c:fc:1d:99:ec:85:7f:91:05:d6:87:ab: db:8a:55:04:8b:c0:38:c0:67:fb:d0:b7:7c:88:3e: d5:12:46:5f:74:e9:17:3c:1d:38:2b:f0:98:a0:40: 66:ec:4e:de:5a:ec:08:15:f9:0f:7a:e0:90:5d:56: 09:4f:5c:ba:0e:d8:f3:39:27:db:5a:68:66:df:c6: 06:3e:b6:1f:63:82:79:42:bb:d2:b9:43:48:48:09: cf:7d:e7:62:81:50:39:98:9c:a3:db:e5:9a:35:0c: 4a:3e:4a:a0:ce:ff:7b:d5:1e:d2:a4:e8:c9:75:45: f5:c9:60:d0:c0:bf:fe:39:c2:89:47:9f:d9:1b:5b: d8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:64:2A:EC:C4:B5:C6:F4:0A:4A:E0:A2:2C:AC:EB:40:33:24:90:99 X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/9E9EC628D9C511EC81B54F47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.159.132.0/23 103.169.90.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:9f:1f:d8:77:d3:52:7d:6e:5f:a8:14:e8:51:0c:6b:9f:41: ab:e1:99:b4:d2:dd:29:85:c5:1d:a4:9a:71:fa:b2:ec:83:ad: be:25:9a:a8:22:e1:6c:ee:12:fa:5c:26:29:cf:34:ff:ad:cd: 6f:c3:3a:f0:25:5a:24:78:ac:36:5f:b1:c4:67:0b:8d:d1:fb: 85:f7:f2:e0:11:a8:48:bd:c7:92:66:cc:c6:70:da:c6:71:0f: 8c:e7:8d:36:7a:ca:17:7c:ea:9c:c0:2f:ed:a8:ab:24:a4:6e: 5b:31:a0:cc:ce:af:c6:4c:f0:d7:99:fa:25:21:26:cb:41:c4: 7d:6e:40:a5:af:b5:a2:c3:85:93:9e:6b:7f:8f:bd:bc:17:6b: 0b:bd:f7:50:a1:6e:bb:1d:71:3c:31:69:9f:18:ff:44:8a:85: 06:9e:86:34:fb:e3:58:8e:fa:97:e3:69:a8:03:b1:67:91:77: be:67:a1:f4:f6:22:79:59:48:31:fc:69:a0:b6:1e:74:5b:51: 3d:e5:c1:cb:7c:bd:4b:ae:69:04:91:6d:d7:5c:2b:f1:37:90: 4d:0e:d8:0d:1d:71:5a:97:f3:56:06:75:8c:b9:b2:b8:fb:3d: 45:e5:d9:6b:0e:c5:f7:b3:e5:83:d7:16:40:be:03:87:69:2e: 75:6c:b5:b7 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjYwOTIxMDI0NTU5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIwOWE2Ni1hOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutz8cAODCwgIDd9oB8c/qcacPtdG7iCC5sGm1+Wo5SkMX9FOc3Q9wNM/mUeV RbVcwTFRoCmYCwvXYUJCYM4HD8whMP69UZnWTZsLvY5eHROnB0KiuyIkf9BkMq8r 7+CdUyjTbg5B7slUsBaVCgHZqjPbc0OUhoCkx6Ec/B2Z7IV/kQXWh6vbilUEi8A4 wGf70Ld8iD7VEkZfdOkXPB04K/CYoEBm7E7eWuwIFfkPeuCQXVYJT1y6DtjzOSfb Wmhm38YGPrYfY4J5QrvSuUNISAnPfedigVA5mJyj2+WaNQxKPkqgzv971R7SpOjJ dUX1yWDQwL/+OcKJR5/ZG1vYfwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDlkKuzE tcb0Ckrgoiys60AzJJCZMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlBRkIvNDQzNEQ1OTBEOUMyMTFFQzg4N0Y5ODQ2QzRGOUFFMDIvOUU5RUM2MjhE OUM1MTFFQzgxQjU0RjQ3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ5+EAwQBZ6laMA0GCSqGSIb3DQEBCwUAA4IBAQBrnx/Yd9NSfW5f qBToUQxrn0Gr4Zm00t0phcUdpJpx+rLsg62+JZqoIuFs7hL6XCYpzzT/rc1vwzrw JVokeKw2X7HEZwuN0fuF9/LgEahIvceSZszGcNrGcQ+M5402esoXfOqcwC/tqKsk pG5bMaDMzq/GTPDXmfolISbLQcR9bkClr7Wiw4WTnmt/j728F2sLvfdQoW67HXE8 MWmfGP9EioUGnoY0++NYjvqX42moA7FnkXe+Z6H09iJ5WUgx/Gmgth50W1E95cHL fL1LrmkEkW3XXCvxN5BNDtgNHXFal/NWBnWMubK4+z1F5dlrDsX3s+WD1xZAvgOH aS51bLW3 -----END CERTIFICATE-----Generated at Wed Sep 23 08:50:25 2026 by rpki-client