$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/2965791E5F4011ED9361C246C4F9AE02.roa File: 2965791E5F4011ED9361C246C4F9AE02.roa (raw, json) Hash identifier: crADnnspzyglWavHLC4zFe+KwWuVQZ1sRGjDTPv5Jv8= Subject key identifier: BE:20:C3:8D:7B:15:DB:34:8D:32:8E:EA:D9:73:C5:1B:D9:4F:60:24 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 02DE Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/2965791E5F4011ED9361C246C4F9AE02.roa Signing time: Thu 03 Sep 2026 01:51:18 +0000 ROA not before: Thu 03 Sep 2026 01:51:17 +0000 ROA not after: Fri 01 Jan 2027 00:00:00 +0000 asID: 136780 IP address blocks: 43.239.206.0/23 maxlen: 24 103.105.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: Sep 3 01:51:17 2026 GMT Not After : Jan 1 00:00:00 2027 GMT Subject: CN=6a98d295-0008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:31:49:60:54:52:13:61:41:63:68:a0:5e: 0f:06:c5:07:18:99:23:88:d8:75:24:5e:64:18:ff: fe:9c:c9:c2:ce:29:29:e4:9c:58:ea:a1:0a:b8:e0: 24:c0:a9:3e:13:b0:7a:2d:20:e3:ed:57:f0:e1:b3: 2e:6c:a2:56:fb:ac:e6:89:ae:95:fd:d4:d9:86:ad: 3d:b8:66:6a:b4:df:fe:32:bb:a6:cb:4a:37:12:ea: b6:f2:db:5f:af:50:08:99:a0:8d:38:13:46:5c:5e: 97:be:43:1c:3d:aa:89:f0:12:54:bd:76:c2:d8:fc: 01:f5:db:15:71:0c:9f:f1:49:00:da:20:d1:d4:a8: 01:9f:1a:a7:35:4a:8c:ae:d7:40:6f:c6:b2:49:cc: 0c:45:3b:c0:09:26:1b:f4:33:e6:f2:0e:f7:b6:41: 0c:3f:5c:57:ad:ff:2d:29:ae:8e:a2:b4:88:97:3c: a4:14:51:6a:ee:2e:47:7a:2b:09:25:8b:35:3e:8e: 49:12:be:38:28:ed:b5:75:63:39:11:9f:62:64:91: b5:93:00:ea:26:81:c0:31:f7:68:a4:b6:89:04:2f: 45:6c:cf:17:fc:8a:f9:37:07:b6:7f:b3:b1:d6:96: df:1a:f8:a0:88:ab:bb:15:df:78:2c:68:1c:40:14: 6d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:20:C3:8D:7B:15:DB:34:8D:32:8E:EA:D9:73:C5:1B:D9:4F:60:24 X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/2965791E5F4011ED9361C246C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.206.0/23 103.105.172.0/22 Signature Algorithm: sha256WithRSAEncryption 27:ff:b4:65:82:22:d9:43:a2:b1:0e:8b:93:ca:7a:ab:53:bd: dc:d2:96:be:de:96:7b:7e:46:dc:37:f8:ed:58:a5:ac:b0:60: da:de:70:00:bc:d5:00:67:a5:7e:94:d4:57:39:c5:e1:2d:40: 89:3c:f5:68:f7:5d:9c:20:01:99:ee:b6:79:4a:f7:81:2c:e3: 85:0a:ca:78:e2:bf:01:c4:c6:e5:5c:38:98:bf:07:d7:69:c6: 96:7a:f7:d4:20:64:f7:f6:7f:be:a3:05:76:28:65:84:77:88: 09:ae:d8:d0:dd:dc:a9:0b:68:62:a4:2c:3d:ef:0d:35:a7:c8: 88:80:e0:87:d0:12:9d:c8:56:d0:9c:28:df:43:64:9e:91:41: 40:06:6f:65:2d:e2:6d:c6:a7:56:55:f7:1f:b2:a4:20:d4:95: f4:aa:a1:74:aa:0c:16:b2:af:a5:07:6a:1c:b7:24:fe:8e:56: 3e:22:24:ad:5c:62:01:23:bb:26:49:f7:40:ad:af:f2:28:8a: 92:e0:9b:a7:57:66:18:e5:75:ef:b2:a1:8d:29:37:31:3b:2f: b1:02:22:07:9a:0f:7c:ca:c7:99:7b:a1:e4:f6:9d:38:0e:c0: d0:ef:0e:ca:b3:05:51:00:6f:1b:9a:6b:55:b1:1e:d6:70:02: 3f:02:04:9c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjYwOTAzMDE1MTE3WhcNMjcwMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZDI5NS0wMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA004xSWBUUhNhQWNooF4PBsUHGJkjiNh1JF5kGP/+nMnCzikp5JxY6qEKuOAk wKk+E7B6LSDj7Vfw4bMubKJW+6zmia6V/dTZhq09uGZqtN/+Mrumy0o3Euq28ttf r1AImaCNOBNGXF6XvkMcPaqJ8BJUvXbC2PwB9dsVcQyf8UkA2iDR1KgBnxqnNUqM rtdAb8ayScwMRTvACSYb9DPm8g73tkEMP1xXrf8tKa6OorSIlzykFFFq7i5HeisJ JYs1Po5JEr44KO21dWM5EZ9iZJG1kwDqJoHAMfdopLaJBC9FbM8X/Ir5Nwe2f7Ox 1pbfGvigiKu7Fd94LGgcQBRtCQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFL4gw417 Fds0jTKO6tlzxRvZT2AkMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdDOTMvNDAyMUE0RTY1RjI0MTFFREI4MEMxOTIxQzRGOUFFMDIvMjk2NTc5MUU1 RjQwMTFFRDkzNjFDMjQ2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBK+/OAwQCZ2msMA0GCSqGSIb3DQEBCwUAA4IBAQAn/7RlgiLZQ6Kx DouTynqrU73c0pa+3pZ7fkbcN/jtWKWssGDa3nAAvNUAZ6V+lNRXOcXhLUCJPPVo 912cIAGZ7rZ5SveBLOOFCsp44r8BxMblXDiYvwfXacaWevfUIGT39n++owV2KGWE d4gJrtjQ3dypC2hipCw97w01p8iIgOCH0BKdyFbQnCjfQ2SekUFABm9lLeJtxqdW VfcfsqQg1JX0qqF0qgwWsq+lB2octyT+jlY+IiStXGIBI7smSfdAra/yKIqS4Jun V2YY5XXvsqGNKTcxOy+xAiIHmg98yseZe6Hk9p04DsDQ7w7KswVRAG8bmmtVsR7W cAI/AgSc -----END CERTIFICATE-----Generated at Thu Oct 8 14:09:08 2026 by rpki-client