$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa File: EF2F0372C9F211E986C3B486C4F9AE02.roa (raw, json) Hash identifier: tDWJoOuU74H3AlTafxyIco3/RdTKhGKgcY5EJMnHKDM= Subject key identifier: DE:5B:0A:86:55:BC:FC:83:F6:F8:35:AC:8B:1A:92:B7:41:D9:7F:61 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1F02 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa Signing time: Fri 25 Sep 2026 03:44:04 +0000 ROA not before: Fri 25 Sep 2026 03:44:04 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 63989 IP address blocks: 103.58.148.0/24 maxlen: 24 103.58.149.0/24 maxlen: 24 103.58.150.0/24 maxlen: 24 103.58.151.0/24 maxlen: 24 103.82.248.0/24 maxlen: 24 103.82.249.0/24 maxlen: 24 103.82.250.0/24 maxlen: 24 103.82.251.0/24 maxlen: 24 202.9.89.0/24 maxlen: 24 202.9.90.0/24 maxlen: 24 202.94.166.0/24 maxlen: 24 2402:6880:1000::/48 maxlen: 48 2402:6880:2000::/48 maxlen: 48 2402:6880:2100::/48 maxlen: 48 2402:6880:3000::/48 maxlen: 48 2402:6880:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 16:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7938 (0x1f02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Sep 25 03:44:04 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6ab5ee04-6ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:3f:5f:f5:10:3f:f1:84:0b:ab:0e:11:2e: 91:e0:a7:be:d6:d6:ee:ae:ef:97:c2:50:e7:24:24: 5d:fd:ba:e0:c4:fc:1f:fc:72:e2:d5:9d:de:65:7d: 3f:29:e8:7e:03:48:d5:f3:9f:95:a9:6e:32:13:cd: ec:51:2e:e1:4b:9e:2b:7c:94:6b:ea:49:83:e6:e6: 07:36:8e:39:3e:4d:00:ff:17:ec:65:39:e8:36:d6: 32:e7:a9:cc:3d:4a:dc:f0:7f:df:97:b1:e6:34:bd: 87:41:21:9e:04:79:ee:bc:59:f8:ec:1f:9f:ac:cc: 31:c0:ea:44:5b:19:3e:ed:6b:b7:97:4e:8a:e8:10: d2:5d:3d:fd:98:ec:da:14:b2:3b:7e:77:d1:6f:9a: cf:a6:ca:6d:b2:33:25:1b:f7:7f:0e:59:e5:fa:e9: c1:15:8e:99:d0:bc:d3:76:ee:03:c5:83:37:2e:6a: 18:e9:88:e1:73:5e:0c:6d:c3:5a:b6:ce:f1:27:c5: f4:ae:ff:32:32:61:84:7a:9b:8a:bc:6d:5b:c3:40: 47:a7:12:d3:59:fa:c9:36:73:5b:da:41:48:3b:9b: d8:cd:9a:39:b2:3e:d8:59:0b:28:66:90:af:fc:7e: cd:f7:47:e3:c6:06:76:d4:7e:2d:ff:10:87:b7:ca: 50:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5B:0A:86:55:BC:FC:83:F6:F8:35:AC:8B:1A:92:B7:41:D9:7F:61 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.58.148.0/22 103.82.248.0/22 202.9.89.0-202.9.90.255 202.94.166.0/24 IPv6: 2402:6880:1000::/48 2402:6880:2000::/48 2402:6880:2100::/48 2402:6880:3000::/48 2402:6880:4000::/48 Signature Algorithm: sha256WithRSAEncryption 72:b7:12:d7:fe:74:d8:fd:01:9b:94:dc:71:83:d8:c5:9e:48: 84:69:ec:cb:6e:ed:b2:00:d5:f6:c2:8b:7c:4c:72:f3:7b:69: b8:8d:61:72:18:bb:e6:cc:cd:c4:71:0c:91:2a:03:a1:4b:8f: f2:c0:93:16:a8:fe:f1:40:13:17:57:4a:04:ed:e3:39:c3:04: bc:4b:33:24:9f:fe:de:20:6a:f0:f5:5c:d2:4e:e6:91:fa:04: 91:d1:4e:07:e7:d6:d2:a1:92:76:73:d1:39:bd:74:78:bc:33: 19:d6:ee:17:b9:86:34:ba:f4:3a:d0:79:b7:ca:56:bc:9a:31: e7:19:81:d3:e2:a2:b4:d8:35:3a:68:4a:66:03:96:b0:12:d6: 94:5f:28:18:45:96:ef:8a:b0:46:b1:d4:ec:d6:c3:07:65:2d: 16:19:43:3b:3d:cb:39:59:f9:85:ee:dd:07:d4:dc:ec:99:82: 27:8d:03:99:ca:fc:70:db:b3:dd:1a:62:05:cc:ad:31:11:82: 96:58:f5:40:84:0b:50:b5:f8:56:e0:e4:25:2e:59:87:d9:e6: 16:2f:40:2f:91:84:6d:76:a6:4c:1c:1e:bd:79:20:db:fc:94: 0c:d4:ea:f8:b4:48:b0:61:eb:aa:cf:5e:22:af:ad:06:95:27: 94:a7:81:9c -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICHwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjYwOTI1MDM0NDA0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1ZWUwNC02Y2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLc/X/UQP/GEC6sOES6R4Ke+1tburu+XwlDnJCRd/brgxPwf/HLi1Z3eZX0/ Keh+A0jV85+VqW4yE83sUS7hS54rfJRr6kmD5uYHNo45Pk0A/xfsZTnoNtYy56nM PUrc8H/fl7HmNL2HQSGeBHnuvFn47B+frMwxwOpEWxk+7Wu3l06K6BDSXT39mOza FLI7fnfRb5rPpsptsjMlG/d/Dlnl+unBFY6Z0LzTdu4DxYM3LmoY6Yjhc14MbcNa ts7xJ8X0rv8yMmGEepuKvG1bw0BHpxLTWfrJNnNb2kFIO5vYzZo5sj7YWQsoZpCv /H7N90fjxgZ21H4t/xCHt8pQoQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFN5bCoZV vPyD9vg1rIsakrdB2X9hMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRBRDcvRTM3RUM4RTY4RjRFMTFFNjhFRTdDRTZFQzRGOUFFMDIvRUYyRjAzNzJD OUYyMTFFOTg2QzNCNDg2QzRGOUFFMDIucm9hMG4GCCsGAQUFBwEHAQH/BF8wXTAm BAIAATAgAwQCZzqUAwQCZ1L4MAwDBADKCVkDBADKCVoDBADKXqYwMwQCAAIwLQMH ACQCaIAQAAMHACQCaIAgAAMHACQCaIAhAAMHACQCaIAwAAMHACQCaIBAADANBgkq hkiG9w0BAQsFAAOCAQEAcrcS1/502P0Bm5TccYPYxZ5IhGnsy27tsgDV9sKLfExy 83tpuI1hchi75szNxHEMkSoDoUuP8sCTFqj+8UATF1dKBO3jOcMEvEszJJ/+3iBq 8PVc0k7mkfoEkdFOB+fW0qGSdnPROb10eLwzGdbuF7mGNLr0OtB5t8pWvJox5xmB 0+KitNg1OmhKZgOWsBLWlF8oGEWW74qwRrHU7NbDB2UtFhlDOz3LOVn5he7dB9Tc 7JmCJ40Dmcr8cNuz3RpiBcytMRGCllj1QIQLULX4VuDkJS5Zh9nmFi9AL5GEbXam TBwevXkg2/yUDNTq+LRIsGHrqs9eIq+tBpUnlKeBnA== -----END CERTIFICATE-----Generated at Mon Oct 12 00:46:47 2026 by rpki-client