$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/E118A9DA7CB911EABD07CE5EC4F9AE02.roa File: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (raw, json) Hash identifier: 5qDOhUJQzbJJA/t6S5h87Ddj6klCnngfHbOrwjUnSdo= Subject key identifier: EA:15:9F:74:B6:3F:E1:8C:CB:90:15:A2:DB:FA:FA:58:90:88:9B:36 Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 0AEA Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/E118A9DA7CB911EABD07CE5EC4F9AE02.roa Signing time: Sat 10 Oct 2026 19:38:51 +0000 ROA not before: Sat 10 Oct 2026 19:38:51 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 139701 IP address blocks: 103.143.211.0/24 maxlen: 24 103.144.195.0/24 maxlen: 24 2001:df1:9880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2794 (0xaea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: Oct 10 19:38:51 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6aca944b-d8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:64:ec:66:a5:04:3e:c0:df:9e:8e:3f:0f:8f: 07:7d:4c:aa:73:2d:54:2b:66:3a:a0:61:1d:22:2d: 53:28:9f:b5:6a:e1:b6:43:df:4e:d5:4e:ee:70:1a: 2e:2c:c5:76:a6:8f:4f:56:ab:f5:aa:64:20:e5:be: 5c:64:f9:ca:fb:4e:de:0c:81:06:88:fd:11:44:e0: 84:25:e3:ee:21:06:c4:cd:67:72:76:d6:57:a3:84: 30:8b:e4:3c:2b:75:f8:47:af:cd:1e:1e:53:a7:82: 62:ec:d7:1e:51:9c:89:97:03:07:d8:c6:52:31:02: 1c:10:95:ac:16:d1:1a:9d:fc:f2:e3:1d:82:93:b5: 5c:0b:19:99:8f:97:c9:27:ea:1f:9c:e8:f2:28:70: ca:88:4c:e3:3e:bf:77:9a:15:a6:14:c7:12:98:82: 96:c7:b0:60:51:d7:e6:66:de:e3:b5:14:0c:b3:9a: ef:d2:df:80:e7:b6:bd:70:58:c9:54:9f:d5:1e:ca: 75:e0:58:02:52:e0:3f:3b:d5:eb:4c:cd:6d:96:8d: 65:02:26:be:87:70:08:77:91:ea:d1:64:a4:5c:76: fb:09:14:78:9b:98:09:88:c9:c1:81:c1:5f:1b:1b: 4c:b3:0a:96:fb:06:38:ca:96:ca:56:fe:32:25:08: 13:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:15:9F:74:B6:3F:E1:8C:CB:90:15:A2:DB:FA:FA:58:90:88:9B:36 X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/E118A9DA7CB911EABD07CE5EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.211.0/24 103.144.195.0/24 IPv6: 2001:df1:9880::/48 Signature Algorithm: sha256WithRSAEncryption 50:a6:d4:1b:d0:42:83:0a:9f:7a:b6:c1:ed:60:d4:80:9a:68: 2e:b8:a2:07:0c:ad:e7:d6:80:a1:e3:11:c4:f9:ba:60:4e:00: bc:4b:ce:8c:3f:ec:4f:71:6a:f8:b5:24:f8:a8:ae:c2:e7:f5: 7f:36:c8:6c:84:c7:80:b1:07:33:5a:df:cf:b4:3e:6e:e3:d2: 09:50:1c:79:b8:ce:2a:ab:81:f5:be:33:69:ba:60:3c:b2:2d: 3b:ef:87:3b:54:a0:bd:cf:2b:c1:ba:f8:89:25:4f:72:f2:09: f9:48:37:4e:0d:a4:f1:f5:d0:07:44:cb:7f:f9:87:5e:f2:d3: 94:7e:67:7d:fa:1a:65:8c:e4:50:0a:f2:22:36:3e:35:c2:76: dc:9b:31:09:21:7c:ec:bc:33:7c:f2:d0:ce:73:79:93:ce:57: 1a:52:fc:9b:5d:7d:7d:01:f1:9d:a0:6b:52:71:fb:58:17:f4: 24:a1:b2:38:e5:f1:89:23:86:08:e3:5b:57:04:73:8d:eb:94: 5c:a6:f8:01:d4:d8:15:55:f2:1d:45:75:9c:cc:52:9f:c6:a0: b5:8e:16:dd:f3:97:35:52:9d:84:b6:13:d8:8f:bd:61:38:9c: 4f:a0:13:56:b0:46:24:be:94:e5:f6:55:21:d9:6a:6c:f7:89: f3:9b:0e:23 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICCuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjYxMDEwMTkzODUxWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhOTQ0Yi1kOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmTsZqUEPsDfno4/D48HfUyqcy1UK2Y6oGEdIi1TKJ+1auG2Q99O1U7ucBou LMV2po9PVqv1qmQg5b5cZPnK+07eDIEGiP0RROCEJePuIQbEzWdydtZXo4Qwi+Q8 K3X4R6/NHh5Tp4Ji7NceUZyJlwMH2MZSMQIcEJWsFtEanfzy4x2Ck7VcCxmZj5fJ J+ofnOjyKHDKiEzjPr93mhWmFMcSmIKWx7BgUdfmZt7jtRQMs5rv0t+A57a9cFjJ VJ/VHsp14FgCUuA/O9XrTM1tlo1lAia+h3AId5Hq0WSkXHb7CRR4m5gJiMnBgcFf GxtMswqW+wY4ypbKVv4yJQgTcwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFOoVn3S2 P+GMy5AVotv6+liQiJs2MB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc3MTUvQkMxQzVGMTA3Q0I4MTFFQUIwRjY0NzVEQzRGOUFFMDIvRTExOEE5REE3 Q0I5MTFFQUJEMDdDRTVFQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ4/TAwQAZ5DDMA8EAgACMAkDBwAgAQ3xmIAwDQYJKoZIhvcNAQEL BQADggEBAFCm1BvQQoMKn3q2we1g1ICaaC64ogcMrefWgKHjEcT5umBOALxLzow/ 7E9xavi1JPiorsLn9X82yGyEx4CxBzNa38+0Pm7j0glQHHm4ziqrgfW+M2m6YDyy LTvvhztUoL3PK8G6+IklT3LyCflIN04NpPH10AdEy3/5h17y05R+Z336GmWM5FAK 8iI2PjXCdtybMQkhfOy8M3zy0M5zeZPOVxpS/JtdfX0B8Z2ga1Jx+1gX9CShsjjl 8YkjhgjjW1cEc43rlFym+AHU2BVV8h1FdZzMUp/GoLWOFt3zlzVSnYS2E9iPvWE4 nE+gE1awRiS+lOX2VSHZamz3ifObDiM= -----END CERTIFICATE-----Generated at Sun Oct 11 06:31:05 2026 by rpki-client