$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/DAF6E1269D6311F185B42B275911F970.roa File: DAF6E1269D6311F185B42B275911F970.roa (raw, json) Hash identifier: Q+t9QHgHTORJNMlhnHJ+AO6F+75fwbTJvsyktZGR258= Subject key identifier: 80:CA:AC:93:F7:55:43:90:03:4A:3A:A5:39:C8:B7:5C:C1:63:70:01 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0865 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/DAF6E1269D6311F185B42B275911F970.roa Signing time: Thu 24 Sep 2026 22:44:37 +0000 ROA not before: Thu 24 Sep 2026 22:44:37 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 42960 IP address blocks: 43.247.132.0/22 maxlen: 24 43.254.164.0/22 maxlen: 24 43.255.120.0/22 maxlen: 24 43.255.156.0/22 maxlen: 24 103.24.216.0/22 maxlen: 24 103.30.76.0/22 maxlen: 24 103.145.60.0/23 maxlen: 24 103.171.34.0/23 maxlen: 24 103.231.56.0/22 maxlen: 24 103.240.196.0/22 maxlen: 24 2001:df7:3480::/48 maxlen: 48 2401:2660::/36 maxlen: 36 2401:2660:1000::/36 maxlen: 36 2401:2660:1000::/48 maxlen: 48 2401:2660:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 22:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 24 22:44:37 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab5a7d5-b7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:8a:1f:e8:46:8b:52:9f:55:64:91:c1:ae: 47:ba:47:e8:31:5f:44:58:07:57:3f:96:76:12:bf: d0:4a:19:87:e8:f2:d8:3c:92:dc:53:2d:61:f8:9a: 9b:c5:e6:9a:52:e4:a2:bc:b3:a5:ce:28:74:bd:6d: 7f:5b:ed:20:42:06:df:aa:19:8e:2a:99:83:32:64: 48:f6:d9:72:96:e2:4d:18:75:88:29:ab:a9:e0:97: 4a:fa:8a:26:b1:7a:7c:70:b9:8d:bc:d1:a2:b9:8b: fe:a1:5e:ba:03:9c:79:3f:d9:84:82:65:a0:8f:69: 2e:8f:ba:29:72:c0:b0:e6:4b:e1:8d:38:7f:44:58: e1:39:17:14:04:18:7f:e9:8c:cc:79:2f:6f:c8:2c: ab:5d:b3:61:d2:7c:05:9e:e9:52:15:2d:22:6d:62: ab:88:25:c5:10:c0:d8:71:8c:f2:c8:07:70:0a:da: 12:6f:9a:3c:c2:12:61:7b:4b:10:7a:62:29:ba:15: 77:63:c2:d0:a8:7c:ee:9a:9d:e8:26:eb:7b:c0:3d: 95:7b:c9:a1:39:8d:bf:ff:62:aa:9f:9e:05:e6:cf: fd:09:fb:f8:b5:a0:b4:2f:c9:e4:51:7a:35:ca:2f: 0c:d0:fd:3a:44:bf:0d:5a:cb:24:7a:fe:31:5c:9b: 9e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CA:AC:93:F7:55:43:90:03:4A:3A:A5:39:C8:B7:5C:C1:63:70:01 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/DAF6E1269D6311F185B42B275911F970.roa sbgp-ipAddrBlock: critical IPv4: 43.247.132.0/22 43.254.164.0/22 43.255.120.0/22 43.255.156.0/22 103.24.216.0/22 103.30.76.0/22 103.145.60.0/23 103.171.34.0/23 103.231.56.0/22 103.240.196.0/22 IPv6: 2001:df7:3480::/48 2401:2660::/35 Signature Algorithm: sha256WithRSAEncryption 38:90:87:7e:57:83:e5:8b:58:23:f7:0f:ee:ea:44:7a:5f:fb: 8a:6e:a2:08:95:82:15:36:e6:18:6a:42:92:3b:e3:48:e2:95: 77:16:ca:65:8f:88:76:f1:4d:f6:ab:60:07:de:a4:da:f1:9d: e3:e6:54:5c:82:1f:15:65:6a:3d:58:93:f6:f2:55:59:f5:4f: d4:f5:66:1f:66:28:45:9d:ee:69:16:d5:b6:fb:9a:f4:fc:51: 22:63:0e:4e:03:b5:60:5a:58:d0:80:f6:59:44:8d:aa:9b:5b: 5c:62:83:94:0b:1d:7a:c8:db:bd:f9:d8:3d:2c:e6:7f:c3:ee: 6d:c9:e0:a7:38:9e:5e:e6:df:f2:27:4b:25:c7:98:8b:43:49: 93:c9:d9:80:32:13:81:43:5e:27:e9:62:bf:d8:00:87:47:e0: e4:3d:04:d1:01:f3:c1:70:c9:b3:b1:f0:78:39:84:b9:1c:f9: 00:e3:7e:41:a2:26:f7:65:ca:28:9b:48:d7:81:d0:60:0e:66: 89:a4:1f:78:2d:20:34:de:b0:00:d4:c1:a6:07:88:25:07:3a: 0c:36:c7:1e:60:84:31:fd:6b:b5:c9:6e:c5:90:44:88:40:de: 6f:be:2f:d5:cc:4b:35:48:0b:61:1f:5f:15:b4:ec:23:7a:56: a4:a5:f0:65 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYwOTI0MjI0NDM3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1YTdkNS1iN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwaKH+hGi1KfVWSRwa5HukfoMV9EWAdXP5Z2Er/QShmH6PLYPJLcUy1h+Jqb xeaaUuSivLOlzih0vW1/W+0gQgbfqhmOKpmDMmRI9tlyluJNGHWIKaup4JdK+oom sXp8cLmNvNGiuYv+oV66A5x5P9mEgmWgj2kuj7opcsCw5kvhjTh/RFjhORcUBBh/ 6YzMeS9vyCyrXbNh0nwFnulSFS0ibWKriCXFEMDYcYzyyAdwCtoSb5o8whJhe0sQ emIpuhV3Y8LQqHzump3oJut7wD2Ve8mhOY2//2Kqn54F5s/9Cfv4taC0L8nkUXo1 yi8M0P06RL8NWsskev4xXJueSwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFIDKrJP3 VUOQA0o6pTnIt1zBY3ABMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvREFGNkUxMjY5 RDYzMTFGMTg1QjQyQjI3NTkxMUY5NzAucm9hMG4GCCsGAQUFBwEHAQH/BF8wXTBC BAIAATA8AwQCK/eEAwQCK/6kAwQCK/94AwQCK/+cAwQCZxjYAwQCZx5MAwQBZ5E8 AwQBZ6siAwQCZ+c4AwQCZ/DEMBcEAgACMBEDBwAgAQ33NIADBgUkASZgADANBgkq hkiG9w0BAQsFAAOCAQEAOJCHfleD5YtYI/cP7upEel/7im6iCJWCFTbmGGpCkjvj SOKVdxbKZY+IdvFN9qtgB96k2vGd4+ZUXIIfFWVqPViT9vJVWfVP1PVmH2YoRZ3u aRbVtvua9PxRImMOTgO1YFpY0ID2WUSNqptbXGKDlAsdesjbvfnYPSzmf8Pubcng pzieXubf8idLJceYi0NJk8nZgDITgUNeJ+liv9gAh0fg5D0E0QHzwXDJs7HweDmE uRz5AON+QaIm92XKKJtI14HQYA5miaQfeC0gNN6wANTBpgeIJQc6DDbHHmCEMf1r tcluxZBEiEDeb74v1cxLNUgLYR9fFbTsI3pWpKXwZQ== -----END CERTIFICATE-----Generated at Thu Oct 22 15:36:03 2026 by rpki-client