$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa File: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (raw, json) Hash identifier: KtM1qdNq8NLmdL1fYFZUXHnl3LLm8zBtR6oGd0S8GvM= Subject key identifier: 2C:38:53:53:68:3F:56:45:A2:BC:84:14:A5:3B:51:C8:FB:3D:EB:94 Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Certificate serial: 0A02 Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa Signing time: Wed 30 Sep 2026 20:39:18 +0000 ROA not before: Wed 30 Sep 2026 20:39:18 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136565 IP address blocks: 103.20.122.0/24 maxlen: 24 103.20.123.0/24 maxlen: 24 2405:2500:25::/48 maxlen: 48 2405:2500:26::/48 maxlen: 48 2405:2500:65::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2562 (0xa02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Validity Not Before: Sep 30 20:39:18 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd7376-cb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:ac:6e:14:62:a2:f4:5d:a2:df:6d:95:2c: 78:3a:55:93:0e:8a:b4:18:98:10:5b:78:45:07:c3: 0d:77:da:82:e9:30:78:e6:28:2b:5d:1d:01:bc:8e: 4e:3c:81:aa:ae:b1:52:91:d5:19:07:1a:b5:90:de: 12:1b:97:88:97:77:81:c6:c3:64:01:dd:13:77:4e: 96:06:3f:c2:28:c3:21:8c:d5:7e:2d:c5:7a:13:71: 1d:7b:5b:8a:cd:04:76:fb:e0:45:07:1b:54:98:0e: 11:49:20:dd:97:e2:7c:61:9a:82:6d:e6:56:45:fe: 56:c4:5e:7e:a1:04:e3:8b:06:e0:2d:43:81:35:77: b6:f0:00:dd:04:34:e9:92:e3:3f:98:b0:d1:6e:cf: 80:fe:ca:9c:01:78:9c:e8:44:5a:f1:9c:b2:16:98: 03:d4:53:96:85:7b:9e:e7:51:22:5d:ca:29:64:41: 21:a3:45:e0:f8:43:a6:0b:0f:8f:17:92:cc:39:ae: aa:5a:01:95:05:ee:2a:47:01:f1:5f:d7:66:de:51: 2b:f7:90:a2:d7:90:40:90:fc:15:b7:81:d0:2f:e7: 5f:9d:65:18:90:8d:f8:d6:01:cd:db:8b:5d:8b:9e: ac:16:31:61:47:d5:8f:4a:0d:3c:08:24:39:21:95: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:38:53:53:68:3F:56:45:A2:BC:84:14:A5:3B:51:C8:FB:3D:EB:94 X509v3 Authority Key Identifier: keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.20.122.0/23 IPv6: 2405:2500:25::-2405:2500:26:ffff:ffff:ffff:ffff:ffff 2405:2500:65::/48 Signature Algorithm: sha256WithRSAEncryption ce:d9:b2:7e:09:c4:28:9c:93:f9:6c:64:07:98:0c:87:38:be: 0e:91:29:b0:23:cb:97:ce:7e:9f:b9:a6:5f:cf:14:c5:ad:49: 6c:f8:21:78:2b:8f:ef:66:e0:f6:5f:d9:b4:a4:17:7a:18:4d: 05:a4:26:b2:93:09:1a:49:9a:4c:12:16:14:51:50:f7:a9:82: d2:19:80:8c:d6:6f:71:3d:78:a1:fb:b2:ba:a4:19:b0:ad:3d: 03:24:63:c3:27:82:1e:bb:cf:74:4b:ec:77:ef:94:44:c9:b1: 7c:31:2e:f0:f7:79:cd:b6:89:58:47:4c:47:4a:52:15:bf:79: 13:9d:f7:47:8e:25:9c:0e:46:a4:09:1b:73:63:77:68:87:61: ff:0e:f9:c0:f8:3c:31:8d:fb:6e:70:61:99:80:91:07:71:cc: 2b:fb:9f:71:a5:48:91:39:50:eb:9a:5c:d7:ef:ae:43:a7:55: 74:32:a7:24:49:86:bd:72:8f:12:b3:0b:e4:23:06:ac:85:84: 5c:2b:2c:14:e0:9a:30:97:9f:63:f6:90:79:2d:71:b7:ed:ca: 15:03:01:ab:37:5f:c4:f6:0a:12:4a:65:ec:16:c8:58:09:33: e7:c6:a8:57:b2:f5:db:00:9a:27:50:2f:9c:93:9b:72:06:e1: 59:15:8d:c4 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz RjE1NjI3MkQwHhcNMjYwOTMwMjAzOTE4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkNzM3Ni1jYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwd2sbhRiovRdot9tlSx4OlWTDoq0GJgQW3hFB8MNd9qC6TB45igrXR0BvI5O PIGqrrFSkdUZBxq1kN4SG5eIl3eBxsNkAd0Td06WBj/CKMMhjNV+LcV6E3Ede1uK zQR2++BFBxtUmA4RSSDdl+J8YZqCbeZWRf5WxF5+oQTjiwbgLUOBNXe28ADdBDTp kuM/mLDRbs+A/sqcAXic6ERa8ZyyFpgD1FOWhXue51EiXcopZEEho0Xg+EOmCw+P F5LMOa6qWgGVBe4qRwHxX9dm3lEr95Ci15BAkPwVt4HQL+dfnWUYkI341gHN24td i56sFjFhR9WPSg08CCQ5IZXE0QIDAQABo4IChTCCAoEwHQYDVR0OBBYEFCw4U1No P1ZForyEFKU7Ucj7PeuUMB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzBBNTMvNzFCN0Q0NzBBQjRBMTFFQTg5RDE2MzU5QzRGOUFFMDIvRjJDRDg5QUFB QjRCMTFFQUEyQ0E1ODVCQzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAM BAIAATAGAwQBZxR6MCMEAgACMB0wEgMHACQFJQAAJQMHACQFJQAAJgMHACQFJQAA ZTANBgkqhkiG9w0BAQsFAAOCAQEAztmyfgnEKJyT+WxkB5gMhzi+DpEpsCPLl85+ n7mmX88Uxa1JbPgheCuP72bg9l/ZtKQXehhNBaQmspMJGkmaTBIWFFFQ96mC0hmA jNZvcT14ofuyuqQZsK09AyRjwyeCHrvPdEvsd++URMmxfDEu8Pd5zbaJWEdMR0pS Fb95E533R44lnA5GpAkbc2N3aIdh/w75wPg8MY37bnBhmYCRB3HMK/ufcaVIkTlQ 65pc1++uQ6dVdDKnJEmGvXKPErML5CMGrIWEXCssFOCaMJefY/aQeS1xt+3KFQMB qzdfxPYKEkpl7BbIWAkz58aoV7L12wCaJ1AvnJObcgbhWRWNxA== -----END CERTIFICATE-----Generated at Tue Oct 6 00:59:19 2026 by rpki-client