$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/17F4DF6E563A11F092DD586EC4F9AE02.roa File: 17F4DF6E563A11F092DD586EC4F9AE02.roa (raw, json) Hash identifier: jtEmsTx/yQYiBqJ/0XtsYPWXlwZ12DJu3gnr8y6NkJI= Subject key identifier: D8:F3:C3:D0:7C:8D:C3:FF:37:28:F3:A9:9A:59:14:81:C2:FE:31:6C Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0866 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/17F4DF6E563A11F092DD586EC4F9AE02.roa Signing time: Thu 24 Sep 2026 22:44:39 +0000 ROA not before: Thu 24 Sep 2026 22:44:39 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 6134 IP address blocks: 43.247.132.0/22 maxlen: 24 43.254.164.0/22 maxlen: 24 43.255.156.0/22 maxlen: 24 103.30.76.0/22 maxlen: 24 103.171.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 11:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2150 (0x866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 24 22:44:39 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab5a7d7-8344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:f6:d2:00:4f:e2:68:9d:21:28:b4:5f:b3: 92:f1:db:b8:56:96:a1:8d:0d:a4:78:6f:5a:de:6d: 61:62:ec:3a:c1:8b:e5:17:45:97:77:b3:3a:62:f0: 1c:a5:d6:30:31:ec:b1:7e:20:c5:83:59:71:f0:aa: 1f:79:fe:0f:0b:87:2d:f2:55:1a:87:28:03:e3:c7: 77:65:c2:06:07:24:45:76:bc:ee:31:15:2c:2f:36: 1e:ac:09:33:0b:f4:67:c3:03:f0:86:1f:5e:61:a0: 6f:ed:0d:37:1f:2d:a7:66:8c:00:15:33:e3:c7:1d: 6e:e2:17:9c:fb:d4:ef:4b:48:ff:91:dc:09:1b:3a: 84:db:b6:7f:eb:52:16:58:b9:49:68:c2:14:89:1f: 07:07:63:63:1d:a0:d1:33:c4:2d:99:58:96:a0:74: 77:9f:89:3f:0a:e7:0a:73:ae:85:85:e4:b0:86:bf: 30:9f:34:9e:45:9a:ad:8a:7c:93:fa:91:46:b5:7e: 23:e7:aa:5d:6b:51:52:a7:7e:61:7a:7a:b3:73:0e: 77:19:bd:27:69:5a:05:aa:1f:b8:65:8f:9a:c6:54: e1:ba:62:a1:30:eb:0e:13:c5:0a:b6:3c:ee:2d:46: 8f:91:3c:e4:b1:9f:0f:3d:59:99:b3:0d:45:8a:33: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F3:C3:D0:7C:8D:C3:FF:37:28:F3:A9:9A:59:14:81:C2:FE:31:6C X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/17F4DF6E563A11F092DD586EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.247.132.0/22 43.254.164.0/22 43.255.156.0/22 103.30.76.0/22 103.171.34.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:97:40:91:b4:06:06:13:95:46:8d:09:3b:6d:e8:63:5f:f8: 0b:16:38:df:06:b7:a9:56:96:a1:1e:90:ba:80:42:67:90:58: 08:a5:17:84:ca:f1:42:3d:91:5e:70:45:c6:7d:4d:ba:d8:24: 69:05:6a:29:4c:51:91:ae:5f:7e:d0:94:48:79:65:bb:cf:bc: 23:9a:c4:bb:81:75:19:81:8b:5e:e6:98:5f:a3:e0:82:2b:57: 4b:70:b0:0e:05:46:08:c8:23:1f:23:59:b0:c1:0d:e4:0d:98: ca:79:90:61:63:b2:05:6f:39:03:6b:da:83:8a:3b:f7:be:99: 73:3f:cc:1c:f4:6d:a6:72:8f:e5:0d:40:29:35:33:26:98:ab: 49:3e:c7:63:d8:5f:b0:63:fb:51:35:ec:8f:a8:e7:58:fd:86: c9:84:b0:57:26:38:13:5f:c8:27:c5:71:f5:e3:00:a6:e1:f5: ed:40:e5:38:dc:8e:17:c0:e3:dc:05:cc:d7:85:0a:39:8f:dd: 89:98:cb:e7:6d:72:17:24:a4:8a:bd:51:99:fe:3b:81:8e:0d: 00:78:f3:36:1b:d4:ce:f5:d9:78:06:bb:f7:ff:b4:eb:8d:4e: 65:d8:b7:14:70:62:1a:6b:77:14:b4:0a:2e:29:08:c6:3e:9e: 5d:f8:78:f9 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICCGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYwOTI0MjI0NDM5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1YTdkNy04MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRT20gBP4midISi0X7OS8du4VpahjQ2keG9a3m1hYuw6wYvlF0WXd7M6YvAc pdYwMeyxfiDFg1lx8Kofef4PC4ct8lUahygD48d3ZcIGByRFdrzuMRUsLzYerAkz C/RnwwPwhh9eYaBv7Q03Hy2nZowAFTPjxx1u4hec+9TvS0j/kdwJGzqE27Z/61IW WLlJaMIUiR8HB2NjHaDRM8QtmViWoHR3n4k/CucKc66FheSwhr8wnzSeRZqtinyT +pFGtX4j56pda1FSp35henqzcw53Gb0naVoFqh+4ZY+axlThumKhMOsOE8UKtjzu LUaPkTzksZ8PPVmZsw1FijN33wIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFNjzw9B8 jcP/NyjzqZpZFIHC/jFsMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvMTdGNERGNkU1 NjNBMTFGMDkyREQ1ODZFQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCK/eEAwQCK/6kAwQCK/+cAwQCZx5MAwQBZ6siMA0GCSqGSIb3DQEB CwUAA4IBAQBNl0CRtAYGE5VGjQk7behjX/gLFjjfBrepVpahHpC6gEJnkFgIpReE yvFCPZFecEXGfU262CRpBWopTFGRrl9+0JRIeWW7z7wjmsS7gXUZgYte5phfo+CC K1dLcLAOBUYIyCMfI1mwwQ3kDZjKeZBhY7IFbzkDa9qDijv3vplzP8wc9G2mco/l DUApNTMmmKtJPsdj2F+wY/tRNeyPqOdY/YbJhLBXJjgTX8gnxXH14wCm4fXtQOU4 3I4XwOPcBczXhQo5j92JmMvnbXIXJKSKvVGZ/juBjg0AePM2G9TO9dl4Brv3/7Tr jU5l2LcUcGIaa3cUtAouKQjGPp5d+Hj5 -----END CERTIFICATE-----Generated at Mon Oct 26 21:15:34 2026 by rpki-client