$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/ABF8D808CA6D11F084F59728C4F9AE02.roa File: ABF8D808CA6D11F084F59728C4F9AE02.roa (raw, json) Hash identifier: KXhj7RsgxFUQZbwMKbg/7yB+kCVQwT78PSTadZw1k48= Subject key identifier: CD:DB:95:78:45:45:6B:94:D7:56:E7:A3:F9:AF:0E:F0:27:61:5C:F7 Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Certificate serial: EF Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/ABF8D808CA6D11F084F59728C4F9AE02.roa Signing time: Thu 01 Oct 2026 08:56:22 +0000 ROA not before: Thu 01 Oct 2026 08:56:22 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154329 IP address blocks: 203.21.65.0/24 maxlen: 24 203.28.195.0/24 maxlen: 24 203.32.55.0/24 maxlen: 24 203.34.190.0/24 maxlen: 24 2001:df2:d440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Validity Not Before: Oct 1 08:56:22 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abe2035-1efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:dc:2f:e3:7c:49:c3:fa:9c:2e:d5:e1:32: 4a:9d:30:6e:8e:a1:8b:4c:ea:ff:7c:9e:0a:76:ba: 4e:d1:8b:a4:c6:eb:3b:a3:36:23:8b:20:84:b9:20: 1f:98:d1:d6:95:83:d1:b5:9e:fd:18:66:0a:75:12: 29:a7:68:bb:c9:12:48:20:71:66:59:16:68:39:92: 0f:e1:3d:38:68:5c:40:51:97:b3:0d:bc:b9:3b:23: 5f:01:64:ae:ac:28:04:fc:88:81:33:b0:d3:52:9d: 84:f0:a3:45:f0:f6:9d:67:5a:b7:b8:fa:c1:68:ba: 29:38:53:d4:85:fd:47:b9:aa:27:fd:15:bf:63:36: 4c:19:7e:08:55:44:b1:60:c2:0b:20:71:11:b7:8b: e2:1a:4f:79:0b:a3:0f:42:21:7d:16:32:82:e3:17: e0:90:27:ff:bd:68:e4:72:d3:c4:38:e9:0c:df:f4: fa:f1:d2:0b:30:22:c7:33:1a:a2:f3:fe:d1:62:f5: a9:a1:45:69:02:35:59:e9:79:ec:a4:d8:a4:14:13: d0:2f:f3:7e:9f:68:dd:f4:23:8b:95:27:18:49:9d: 1c:78:5f:d0:77:62:5c:d9:f9:2e:11:a2:48:9e:04: e4:7f:59:be:4d:0c:db:c1:f1:05:f3:0c:1b:a0:0b: 89:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DB:95:78:45:45:6B:94:D7:56:E7:A3:F9:AF:0E:F0:27:61:5C:F7 X509v3 Authority Key Identifier: keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/ABF8D808CA6D11F084F59728C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.21.65.0/24 203.28.195.0/24 203.32.55.0/24 203.34.190.0/24 IPv6: 2001:df2:d440::/48 Signature Algorithm: sha256WithRSAEncryption 87:6f:7a:3b:93:4c:ef:70:74:a7:40:ce:ab:d4:ca:bc:89:c5: 43:12:30:d5:f4:56:6b:e9:d9:59:9b:5c:c6:89:76:fa:db:d1: f5:fc:17:2b:ec:c3:83:a2:6a:f9:3c:df:77:0d:8c:54:73:dc: 2e:e8:00:1a:1a:8e:65:02:f3:da:a9:60:b7:80:45:1e:e9:4c: 7c:d7:94:da:44:cb:a7:7b:a3:4e:db:11:51:1e:9a:d5:6d:1c: 67:bd:33:bf:26:87:6f:04:56:e6:5f:5e:15:c2:b8:a4:0c:e8: 1d:e9:16:7c:c8:90:5b:c8:83:06:91:77:2d:df:60:16:50:21: fb:94:2a:1d:4f:6f:98:d9:c4:94:2d:df:e9:77:b0:a0:2f:b0: 67:d3:0b:de:f9:57:05:23:94:35:43:0a:0c:31:73:81:67:e2: 64:0b:29:89:c4:1c:f1:1f:33:25:57:0a:5b:fe:d2:91:ad:91: a5:08:d1:80:b9:e0:dd:c7:ab:bc:7b:42:20:9c:4d:6a:8a:9c: f0:fd:28:b0:a7:2e:12:c0:73:dc:b1:7d:70:92:57:6a:0a:16: f6:c6:05:92:eb:77:ca:fb:e0:b9:e2:8c:fd:c1:ec:0e:2e:31: 13:38:7b:83:73:63:8e:1c:8a:cc:9b:fd:46:dd:15:63:1c:71: be:19:f2:4d -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVEMUYxMTAvBgNVBAUTKDBDQUI2OEUwNjkwODNBNDM4OEU4RkM2OTc1OEYwNDU5 NjJGRDAxQUYwHhcNMjYxMDAxMDg1NjIyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJlMjAzNS0xZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviPcL+N8ScP6nC7V4TJKnTBujqGLTOr/fJ4KdrpO0Yukxus7ozYjiyCEuSAf mNHWlYPRtZ79GGYKdRIpp2i7yRJIIHFmWRZoOZIP4T04aFxAUZezDby5OyNfAWSu rCgE/IiBM7DTUp2E8KNF8PadZ1q3uPrBaLopOFPUhf1Huaon/RW/YzZMGX4IVUSx YMILIHERt4viGk95C6MPQiF9FjKC4xfgkCf/vWjkctPEOOkM3/T68dILMCLHMxqi 8/7RYvWpoUVpAjVZ6XnspNikFBPQL/N+n2jd9COLlScYSZ0ceF/Qd2Jc2fkuEaJI ngTkf1m+TQzbwfEF8wwboAuJEwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFM3blXhF RWuU11bno/mvDvAnYVz3MB8GA1UdIwQYMBaAFAyraOBpCDpDiOj8aXWPBFli/QGv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUQxRi9BRDIwMjFBNDk3 NzQxMUYwODBCRjFFNjRDNEY5QUUwMi9ES3RvNEdrSU9rT0k2UHhwZFk4RVdXTDlB YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzVEMUYvQUQyMDIxQTQ5Nzc0MTFGMDgwQkYxRTY0QzRGOUFFMDIvQUJGOEQ4MDhD QTZEMTFGMDg0RjU5NzI4QzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAe BAIAATAYAwQAyxVBAwQAyxzDAwQAyyA3AwQAyyK+MA8EAgACMAkDBwAgAQ3y1EAw DQYJKoZIhvcNAQELBQADggEBAIdvejuTTO9wdKdAzqvUyryJxUMSMNX0Vmvp2Vmb XMaJdvrb0fX8Fyvsw4Oiavk833cNjFRz3C7oABoajmUC89qpYLeARR7pTHzXlNpE y6d7o07bEVEemtVtHGe9M78mh28EVuZfXhXCuKQM6B3pFnzIkFvIgwaRdy3fYBZQ IfuUKh1Pb5jZxJQt3+l3sKAvsGfTC975VwUjlDVDCgwxc4Fn4mQLKYnEHPEfMyVX Clv+0pGtkaUI0YC54N3Hq7x7QiCcTWqKnPD9KLCnLhLAc9yxfXCSV2oKFvbGBZLr d8r74LnijP3B7A4uMRM4e4NzY44cisyb/UbdFWMccb4Z8k0= -----END CERTIFICATE-----Generated at Wed Oct 7 15:13:34 2026 by rpki-client