$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/4911720A694F11ECB6F9B541C4F9AE02.roa File: 4911720A694F11ECB6F9B541C4F9AE02.roa (raw, json) Hash identifier: 2plTZ3bZ+t6Eue2S9Vu1mnYO900p7g8c5qWlBRkiH48= Subject key identifier: FA:5C:AD:D0:CC:EB:ED:F1:06:E0:08:6E:6C:6F:D9:47:0E:16:23:85 Certificate issuer: /CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314 Certificate serial: 0545 Authority key identifier: BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/4911720A694F11ECB6F9B541C4F9AE02.roa Signing time: Wed 02 Sep 2026 23:48:41 +0000 ROA not before: Wed 02 Sep 2026 23:48:41 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 146962 IP address blocks: 103.172.106.0/24 maxlen: 24 103.172.107.0/24 maxlen: 24 2407:d040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 23:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1349 (0x545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138C14, serialNumber=BB0E550379FEA281A881A67479B77C8602D01314 Validity Not Before: Sep 2 23:48:41 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a98b5d9-8420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:03:f6:45:5a:63:49:27:c8:b5:b4:ea:4f: d6:30:b9:28:6b:bf:e8:68:48:bd:f6:25:bf:85:4d: 43:84:ec:41:13:40:78:87:a0:b6:08:75:e1:db:0f: f1:5f:a7:b2:7f:97:e4:7c:fc:2b:6f:21:e9:8d:42: 1c:ea:4e:81:c0:ae:e8:29:ed:61:a5:d7:4d:87:6f: 1b:3f:7e:73:38:9f:57:3a:b1:cb:5c:95:d6:b0:ec: c7:89:e3:6e:96:79:1d:56:2c:98:42:31:ff:6b:f1: 2f:0c:50:98:47:c4:04:61:62:0e:29:e8:a2:35:eb: cd:e2:17:7d:0b:75:55:2e:f5:40:3a:12:49:c1:b5: d0:db:44:c5:5f:7a:12:0e:a8:c6:ff:d5:df:68:b2: 43:00:eb:75:97:39:cc:a8:e2:78:92:02:00:f4:09: 59:17:cd:46:8e:39:30:62:4d:fc:5b:fc:f3:dc:8c: 3e:9d:7f:1c:96:04:c3:19:6c:b1:a1:a1:6c:1b:19: 23:01:1e:7c:00:a5:25:54:df:87:8c:d6:54:22:4a: 50:d8:eb:9c:dc:e4:16:2b:a6:27:53:c9:b5:72:d6: 1e:78:50:9b:99:c9:b4:6f:42:3d:c1:15:19:6e:87: 8a:fb:bb:9e:14:45:62:22:93:7d:fc:29:16:a4:90: 0f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5C:AD:D0:CC:EB:ED:F1:06:E0:08:6E:6C:6F:D9:47:0E:16:23:85 X509v3 Authority Key Identifier: keyid:BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/4911720A694F11ECB6F9B541C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.106.0/23 IPv6: 2407:d040::/32 Signature Algorithm: sha256WithRSAEncryption 90:a6:81:87:fc:83:29:e7:34:de:82:65:51:0e:f2:bc:bb:a5: 68:d6:78:14:2c:e1:ca:42:72:f2:8d:72:8b:14:41:d2:3a:2e: a7:66:a4:f8:ed:dc:fe:82:2b:7b:5b:27:a4:0b:2a:c0:69:9f: 9d:d7:c0:a0:4b:a4:82:41:a5:ef:1c:3e:78:9f:d6:ba:c0:12: 87:5b:c6:95:fd:f5:cf:40:03:ba:35:e3:ed:5e:95:b9:08:2f: 89:a9:ef:5a:9c:ca:ef:49:25:73:3d:ef:01:87:69:f8:db:3d: 24:bc:86:2f:6c:cd:78:3c:e2:c1:5d:21:af:cb:8d:f2:cf:77: 5a:a6:3b:54:d9:97:c7:aa:e3:f7:5f:a2:e2:d9:63:f4:af:52: 05:58:20:bb:45:f1:91:48:48:05:67:30:e5:6b:a3:84:b8:9c: 8a:a4:ac:06:2b:25:e9:5b:38:ba:a8:44:a7:ce:6f:40:00:23: 69:83:4d:35:87:4c:e7:89:78:ac:48:eb:32:d5:97:90:75:4f: aa:71:57:ec:37:f5:0d:16:3d:8b:61:89:a5:d2:b7:12:4a:7f: 29:7a:4f:15:11:92:a1:34:48:3d:cc:0a:34:e1:dd:d9:91:b8: 34:db:1c:ed:17:e5:e1:d1:3a:65:c2:9b:13:56:1f:a4:d7:48: 41:eb:ed:1f -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhDMTQxMTAvBgNVBAUTKEJCMEU1NTAzNzlGRUEyODFBODgxQTY3NDc5Qjc3Qzg2 MDJEMDEzMTQwHhcNMjYwOTAyMjM0ODQxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4YjVkOS04NDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOQD9kVaY0knyLW06k/WMLkoa7/oaEi99iW/hU1DhOxBE0B4h6C2CHXh2w/x X6eyf5fkfPwrbyHpjUIc6k6BwK7oKe1hpddNh28bP35zOJ9XOrHLXJXWsOzHieNu lnkdViyYQjH/a/EvDFCYR8QEYWIOKeiiNevN4hd9C3VVLvVAOhJJwbXQ20TFX3oS DqjG/9XfaLJDAOt1lznMqOJ4kgIA9AlZF81GjjkwYk38W/zz3Iw+nX8clgTDGWyx oaFsGxkjAR58AKUlVN+HjNZUIkpQ2Ouc3OQWK6YnU8m1ctYeeFCbmcm0b0I9wRUZ boeK+7ueFEViIpN9/CkWpJAPUQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPpcrdDM 6+3xBuAIbmxv2UcOFiOFMB8GA1UdIwQYMBaAFLsOVQN5/qKBqIGmdHm3fIYC0BMU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEMxNC8zRTRDNDYzMDVC QzQxMUVDOTYyNzkzNTRDNEY5QUUwMi91dzVWQTNuLW9vR29nYVowZWJkOGhnTFFF eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V3NVZBM24tb29Hb2dhWjBlYmQ4aGdMUUV4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzhDMTQvM0U0QzQ2MzA1QkM0MTFFQzk2Mjc5MzU0QzRGOUFFMDIvNDkxMTcyMEE2 OTRGMTFFQ0I2RjlCNTQxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6xqMA0EAgACMAcDBQAkB9BAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ poGH/IMp5zTegmVRDvK8u6Vo1ngULOHKQnLyjXKLFEHSOi6nZqT47dz+git7Wyek CyrAaZ+d18CgS6SCQaXvHD54n9a6wBKHW8aV/fXPQAO6NePtXpW5CC+Jqe9anMrv SSVzPe8Bh2n42z0kvIYvbM14POLBXSGvy43yz3dapjtU2ZfHquP3X6Li2WP0r1IF WCC7RfGRSEgFZzDla6OEuJyKpKwGKyXpWzi6qESnzm9AACNpg001h0zniXisSOsy 1ZeQdU+qcVfsN/UNFj2LYYml0rcSSn8pek8VEZKhNEg9zAo04d3Zkbg02xztF+Xh 0TplwpsTVh+k10hB6+0f -----END CERTIFICATE-----Generated at Wed Sep 9 16:01:52 2026 by rpki-client