$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/DAF6E1269D6311F185B42B275911F970.roa File: DAF6E1269D6311F185B42B275911F970.roa (raw, json) Hash identifier: Hab9S6TeDcpWfiYfOqxFh2hxEt9pu50NSl3sytu5Y6c= Subject key identifier: C4:D0:AB:D3:72:A7:8F:E8:E7:45:D8:5C:E0:61:26:CB:1C:76:53:B7 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 084F Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/DAF6E1269D6311F185B42B275911F970.roa Signing time: Fri 21 Aug 2026 14:22:32 +0000 ROA not before: Fri 21 Aug 2026 14:22:32 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 42960 IP address blocks: 43.247.132.0/22 maxlen: 24 43.254.164.0/22 maxlen: 24 43.255.120.0/22 maxlen: 24 43.255.156.0/22 maxlen: 24 103.24.216.0/22 maxlen: 24 103.30.76.0/22 maxlen: 24 103.145.60.0/23 maxlen: 24 103.171.34.0/23 maxlen: 24 103.231.56.0/22 maxlen: 24 103.240.196.0/22 maxlen: 24 2001:df7:3480::/48 maxlen: 48 2401:2660::/36 maxlen: 36 2401:2660:1000::/36 maxlen: 36 2401:2660:1000::/48 maxlen: 48 2401:2660:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Aug 21 14:22:32 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a885f28-e675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:0d:13:7b:1e:ec:8f:7f:67:3b:cc:31:12: c8:97:70:ef:d8:fa:32:23:49:ea:7f:d9:10:3e:a0: d4:83:64:40:a4:32:d5:e6:ed:77:25:ca:74:ea:e6: 29:d5:45:e0:fc:ea:3e:4a:ae:10:cb:ae:38:d4:d2: 61:81:8c:a4:73:0d:47:59:cd:b7:9c:6a:50:25:43: 78:5c:b9:8a:be:84:42:ba:4f:ac:8c:70:f5:da:78: e0:3d:20:db:3e:d9:83:a8:72:aa:6c:bf:dc:39:6e: 5a:38:99:f9:8c:64:8f:02:e6:13:27:2e:90:ca:bb: 87:02:d6:e4:38:0f:c1:f3:ef:3d:08:1a:ba:16:6a: 03:b9:f4:12:70:b8:b9:63:22:b9:10:52:cd:d9:2e: 0f:e6:74:0e:53:b6:73:74:da:40:eb:4d:a0:c7:a9: 6d:0a:0e:87:c9:88:d7:56:d2:fc:6f:d2:1c:ca:60: 65:90:48:57:d9:f1:85:ea:63:49:84:f5:36:ed:38: 6c:a9:b7:b4:d1:65:36:9b:89:7c:2b:fb:76:3e:35: 81:c9:c1:37:bc:1c:6b:3e:38:0a:3f:9a:85:0a:6b: 30:05:be:ab:ec:3f:8f:56:4d:9b:49:aa:1a:a8:ae: 23:e4:24:31:c3:09:14:d2:4b:b1:c5:fe:86:ef:64: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D0:AB:D3:72:A7:8F:E8:E7:45:D8:5C:E0:61:26:CB:1C:76:53:B7 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/DAF6E1269D6311F185B42B275911F970.roa sbgp-ipAddrBlock: critical IPv4: 43.247.132.0/22 43.254.164.0/22 43.255.120.0/22 43.255.156.0/22 103.24.216.0/22 103.30.76.0/22 103.145.60.0/23 103.171.34.0/23 103.231.56.0/22 103.240.196.0/22 IPv6: 2001:df7:3480::/48 2401:2660::/35 Signature Algorithm: sha256WithRSAEncryption a2:87:bf:2d:e2:f0:27:84:d7:f7:58:00:0e:cb:b6:f5:c1:f4: f5:9a:46:f1:69:23:b8:30:bc:a2:b7:46:87:00:67:ba:30:1f: 3e:68:93:28:9b:37:36:70:9a:5e:94:ba:8a:3c:e9:1b:81:f6: 6b:05:23:c1:80:f5:57:ee:e8:91:d0:77:49:32:86:ee:5a:3b: 98:74:c0:48:ad:8c:24:44:00:1e:94:06:17:21:1d:87:3d:b0: a3:e2:06:82:b2:6d:74:bf:5b:b2:61:2c:08:ad:2c:f2:ec:29: b5:e3:fe:a0:4f:0c:3f:29:84:b1:8d:4d:43:a8:b1:81:59:2e: 1f:0d:12:b3:f9:17:e9:c6:2e:19:5d:87:ab:c7:54:af:68:fb: c3:fe:03:5c:63:5b:b3:b8:6a:24:8a:14:5a:3a:63:6a:c7:35: 1f:fb:d0:4d:6e:98:d9:4d:81:c0:a5:68:92:04:60:50:fb:29: 0e:3d:a9:73:5d:83:3f:06:45:9f:2e:9f:69:91:40:fc:12:86: f6:de:38:ad:49:af:93:56:2c:45:e7:71:cb:3c:0c:0e:e5:b4: e1:3d:1c:ff:c5:27:58:8b:de:47:11:2f:8b:e7:a5:66:9c:ca: 0e:54:b7:8c:96:34:18:e0:49:26:00:2a:e2:94:2f:1e:af:8d: 34:dd:5b:6c -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYwODIxMTQyMjMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg4NWYyOC1lNjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDwNE3se7I9/ZzvMMRLIl3Dv2PoyI0nqf9kQPqDUg2RApDLV5u13Jcp06uYp 1UXg/Oo+Sq4Qy6441NJhgYykcw1HWc23nGpQJUN4XLmKvoRCuk+sjHD12njgPSDb PtmDqHKqbL/cOW5aOJn5jGSPAuYTJy6QyruHAtbkOA/B8+89CBq6FmoDufQScLi5 YyK5EFLN2S4P5nQOU7ZzdNpA602gx6ltCg6HyYjXVtL8b9IcymBlkEhX2fGF6mNJ hPU27Thsqbe00WU2m4l8K/t2PjWBycE3vBxrPjgKP5qFCmswBb6r7D+PVk2bSaoa qK4j5CQxwwkU0kuxxf6G72R4twIDAQABo4ICrzCCAqswHQYDVR0OBBYEFMTQq9Ny p4/o50XYXOBhJsscdlO3MB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvREFGNkUxMjY5 RDYzMTFGMTg1QjQyQjI3NTkxMUY5NzAucm9hMG4GCCsGAQUFBwEHAQH/BF8wXTBC BAIAATA8AwQCK/eEAwQCK/6kAwQCK/94AwQCK/+cAwQCZxjYAwQCZx5MAwQBZ5E8 AwQBZ6siAwQCZ+c4AwQCZ/DEMBcEAgACMBEDBwAgAQ33NIADBgUkASZgADANBgkq hkiG9w0BAQsFAAOCAQEAooe/LeLwJ4TX91gADsu29cH09ZpG8WkjuDC8ordGhwBn ujAfPmiTKJs3NnCaXpS6ijzpG4H2awUjwYD1V+7okdB3STKG7lo7mHTASK2MJEQA HpQGFyEdhz2wo+IGgrJtdL9bsmEsCK0s8uwpteP+oE8MPymEsY1NQ6ixgVkuHw0S s/kX6cYuGV2Hq8dUr2j7w/4DXGNbs7hqJIoUWjpjasc1H/vQTW6Y2U2BwKVokgRg UPspDj2pc12DPwZFny6faZFA/BKG9t44rUmvk1YsRedxyzwMDuW04T0c/8UnWIve RxEvi+elZpzKDlS3jJY0GOBJJgAq4pQvHq+NNN1bbA== -----END CERTIFICATE-----Generated at Sat Sep 5 01:41:21 2026 by rpki-client