$ rpki-client -vvvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/8D7E9B7EF03D11EB804DF61FC4F9AE02.roa File: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (raw, json) Hash identifier: F9bSi9SMVxcATU1QQ8w2R/RL++YHVnpS2pqfFp8JQgw= Subject key identifier: B4:3C:DA:DA:B1:D2:66:3F:C9:47:A8:8F:67:C3:C2:62:63:F8:7A:1F Certificate issuer: /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Certificate serial: 064D Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/8D7E9B7EF03D11EB804DF61FC4F9AE02.roa Signing time: Wed 30 Sep 2026 23:43:06 +0000 ROA not before: Wed 30 Sep 2026 23:43:06 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 139781 IP address blocks: 103.170.136.0/23 maxlen: 23 103.170.136.0/24 maxlen: 24 103.170.137.0/24 maxlen: 24 2001:df7:1b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 22:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Validity Not Before: Sep 30 23:43:06 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abd9e8a-c75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:c7:f7:d1:ef:94:db:49:18:15:c7:1c:05: 93:c8:2a:a0:63:3f:aa:8a:fb:5e:be:24:ac:f6:02: 0b:0d:0b:70:ed:38:05:6b:28:f8:b8:e7:2a:ce:4d: 80:a0:5f:62:f3:e6:78:62:c5:08:43:e2:70:40:fc: 00:74:35:6d:59:34:0e:12:ed:50:42:a2:39:12:5c: d6:7c:24:ca:4a:10:15:1a:9c:2f:27:da:06:47:39: ab:85:e7:d7:c6:55:16:36:6e:0f:4b:db:c5:51:ca: 4c:b5:84:fc:4d:95:de:f5:53:51:98:b9:ad:ff:8d: 68:4c:6c:9e:65:32:85:cc:23:2b:34:71:cc:c5:08: dd:37:fc:f8:c0:81:90:4b:90:e4:6d:2b:5f:23:5c: d4:de:c2:87:22:d3:cc:4b:c6:81:03:17:07:2e:d4: 53:d4:0f:06:1f:40:1e:a7:bc:7e:8f:73:fe:7d:92: 98:86:36:bc:a4:eb:78:87:aa:3c:66:9d:35:a2:05: fc:9d:23:21:07:ba:97:35:c9:c0:d4:56:d5:12:18: 7f:30:a5:f8:92:14:28:91:25:f7:88:23:e8:59:78: c7:c2:3d:c6:92:99:4b:1c:e4:49:57:8f:c3:58:08: 04:8c:d9:0d:83:c4:4c:76:07:b1:ca:22:96:3b:7a: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:DA:DA:B1:D2:66:3F:C9:47:A8:8F:67:C3:C2:62:63:F8:7A:1F X509v3 Authority Key Identifier: keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/8D7E9B7EF03D11EB804DF61FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.170.136.0/23 IPv6: 2001:df7:1b80::/48 Signature Algorithm: sha256WithRSAEncryption 12:db:56:c3:0f:b1:59:e9:ad:75:33:06:8f:a1:9f:14:87:83: 39:30:b7:ab:16:0b:98:f8:4e:af:91:ae:2a:7d:b3:85:25:b0: 15:5e:62:c6:49:e2:c2:74:b8:39:62:c2:e6:8a:ad:07:09:ea: 0b:45:65:c8:e3:c8:20:02:0e:20:78:5e:09:9f:be:20:f5:61: d8:da:7c:94:c9:c3:41:34:7a:6b:c5:7f:03:4b:0b:4b:d7:71: a8:82:0c:10:a7:c8:e6:ad:49:60:32:f6:df:10:53:65:5f:72: a1:42:50:bc:e2:7d:e7:a4:af:aa:3b:c6:c6:ed:3b:af:41:19: 9c:46:4d:2d:92:04:43:a0:f0:c3:29:1f:92:a6:c7:d1:9c:24: 06:7b:0c:4b:e5:0e:51:bb:e6:fe:1c:f3:29:c4:5a:7b:4e:a1: 01:45:3f:03:02:3a:a4:95:76:ef:51:87:76:dc:dd:c7:ca:5a: 67:e1:95:73:80:c7:a6:ea:6e:b0:da:f8:6b:52:86:2f:24:15: 80:a0:2e:2f:8c:35:00:23:d0:ca:1c:be:2f:99:94:0f:1b:83: 3e:55:13:33:cf:37:47:af:79:52:ce:c2:cc:02:33:94:1a:eb: ac:e3:f2:35:4f:bd:0c:71:9b:91:6f:fc:24:1f:76:85:95:b6: 37:46:5b:fd -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGM0IxMTAvBgNVBAUTKEE4OTZCMTcwQkYwRDg4NzIzRjM2QzdBQzIwODc4NTRB QTI4NEJENzEwHhcNMjYwOTMwMjM0MzA2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkOWU4YS1jNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQnH99HvlNtJGBXHHAWTyCqgYz+qivteviSs9gILDQtw7TgFayj4uOcqzk2A oF9i8+Z4YsUIQ+JwQPwAdDVtWTQOEu1QQqI5ElzWfCTKShAVGpwvJ9oGRzmrhefX xlUWNm4PS9vFUcpMtYT8TZXe9VNRmLmt/41oTGyeZTKFzCMrNHHMxQjdN/z4wIGQ S5DkbStfI1zU3sKHItPMS8aBAxcHLtRT1A8GH0Aep7x+j3P+fZKYhja8pOt4h6o8 Zp01ogX8nSMhB7qXNcnA1FbVEhh/MKX4khQokSX3iCPoWXjHwj3GkplLHORJV4/D WAgEjNkNg8RMdgexyiKWO3rP8QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLQ82tqx 0mY/yUeoj2fDwmJj+HofMB8GA1UdIwQYMBaAFKiWsXC/DYhyPzbHrCCHhUqihL1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYzQi9DREJBODEyRUYw M0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlISV9Oc2VzSUllRlNxS0V2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKYXhjTDhOaUhJX05zZXNJSWVGU3FLRXZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0RGM0IvQ0RCQTgxMkVGMDNBMTFFQjhEMzBFMDU4QzRGOUFFMDIvOEQ3RTlCN0VG MDNEMTFFQjgwNERGNjFGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6qIMA8EAgACMAkDBwAgAQ33G4AwDQYJKoZIhvcNAQELBQADggEB ABLbVsMPsVnprXUzBo+hnxSHgzkwt6sWC5j4Tq+Rrip9s4UlsBVeYsZJ4sJ0uDli wuaKrQcJ6gtFZcjjyCACDiB4XgmfviD1YdjafJTJw0E0emvFfwNLC0vXcaiCDBCn yOatSWAy9t8QU2VfcqFCULzifeekr6o7xsbtO69BGZxGTS2SBEOg8MMpH5Kmx9Gc JAZ7DEvlDlG75v4c8ynEWntOoQFFPwMCOqSVdu9Rh3bc3cfKWmfhlXOAx6bqbrDa +GtShi8kFYCgLi+MNQAj0Mocvi+ZlA8bgz5VEzPPN0eveVLOwswCM5Qa66zj8jVP vQxxm5Fv/CQfdoWVtjdGW/0= -----END CERTIFICATE-----Generated at Sun Oct 11 07:19:24 2026 by rpki-client