$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/ED8E5BC8CFD411EBA3172446C4F9AE02.roa File: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (raw, json) Hash identifier: gHuxeT98gQTNj1REYBSI+E5acOlwMT0Pk9NHYsnA4pA= Subject key identifier: FF:0C:D4:BD:E4:04:1E:8F:0A:C5:D3:76:AE:D0:28:8F:07:80:3D:9A Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Certificate serial: 0881 Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/ED8E5BC8CFD411EBA3172446C4F9AE02.roa Signing time: Sun 04 Oct 2026 21:40:45 +0000 ROA not before: Sun 04 Oct 2026 21:40:45 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 45426 IP address blocks: 103.198.41.0/24 maxlen: 24 103.198.42.0/24 maxlen: 24 202.129.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 21:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Validity Not Before: Oct 4 21:40:45 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6ac2c7dd-cf45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b2:8f:c4:eb:d4:2a:ad:4b:43:07:79:cf:1a: 99:00:21:a6:24:15:a8:8f:11:76:3e:8c:ca:d4:39: 56:21:a6:e3:47:a7:d0:b3:0d:25:78:2b:ed:f3:74: 58:f2:ed:4f:11:15:1c:44:33:99:1f:5a:72:70:75: 01:63:23:67:b5:e6:0a:57:c6:d2:2f:96:d4:b1:e8: 12:ce:01:91:45:69:6f:40:27:b4:3e:d5:48:8e:58: f3:d3:60:e9:14:3a:64:0c:23:aa:ad:aa:b8:ef:f4: f1:3c:16:7e:d8:b1:4d:d8:55:84:86:1c:39:20:e2: e9:17:31:1f:c7:2e:c9:db:c9:29:b4:54:da:e4:65: e6:d1:de:43:4b:96:b3:4a:9b:5c:55:fb:75:2c:3b: 16:e4:03:4b:10:5f:83:ba:6d:a6:b9:c1:2d:68:97: 99:ae:db:8e:2c:e9:26:1c:8a:ef:b2:ac:a1:18:84: 22:d8:dd:10:0a:bf:5a:ce:d3:fd:36:6b:d6:97:2d: e2:6c:34:c8:45:36:7c:66:71:65:be:33:56:9b:5b: dc:e5:40:ce:14:fc:64:49:56:ff:a4:67:59:00:90: a1:ce:5a:e6:ec:da:37:ff:b4:f5:77:71:fd:e5:ed: 70:df:ae:a8:c1:c5:d2:e6:80:7e:be:6e:dd:9d:bb: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0C:D4:BD:E4:04:1E:8F:0A:C5:D3:76:AE:D0:28:8F:07:80:3D:9A X509v3 Authority Key Identifier: keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/ED8E5BC8CFD411EBA3172446C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.198.41.0-103.198.42.255 202.129.244.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:9d:af:6a:dc:b5:78:73:72:16:07:07:0c:af:f4:66:d3:e7: fa:21:e9:48:71:8c:c3:0f:8f:e6:c3:8e:32:15:32:52:83:71: 93:e5:01:dc:8e:23:dc:cc:70:64:4b:d6:cb:2d:0c:b1:1b:c6: 49:1b:b1:42:cc:b5:dd:dd:ff:2f:43:8f:0f:3c:07:f6:d2:e2: a1:99:5d:9c:33:3e:51:02:54:50:31:05:28:53:d4:72:30:c4: cb:81:e3:c5:1e:3e:e7:0e:c0:fe:66:3b:ea:b2:1b:f6:94:16: 2a:7a:28:24:5d:b5:b8:70:38:26:f2:b0:ad:f3:db:cf:43:c5: 4a:ed:1c:8f:d1:8a:dc:1d:33:a4:ed:ff:9f:6f:ca:a5:8f:5f: 8f:44:27:1f:6a:01:2b:88:2a:3a:7e:4d:73:d6:dd:2b:fd:1a: e3:53:e6:8d:4b:5e:01:46:58:28:39:d0:bf:d2:24:dc:71:cc: 3f:e1:a3:8b:11:d5:4b:f0:64:56:ba:d5:50:7b:84:2a:b5:17: 06:4e:63:7f:82:11:b7:87:20:3a:61:62:66:d6:30:91:2d:ae: 08:1f:39:00:e6:26:5b:e1:0a:da:2f:e6:cf:71:46:3b:1d:80: b1:32:e9:f8:4b:b0:39:df:6c:37:71:cc:2b:93:a5:e7:3f:04: b0:3c:d1:8d -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBBOEYxMTAvBgNVBAUTKDNEOTNFQjY2RDgxQTI3NkEwMzkyNDYxNjhEMzI3OEIy NjdFQkFFRUMwHhcNMjYxMDA0MjE0MDQ1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyYzdkZC1jZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLKPxOvUKq1LQwd5zxqZACGmJBWojxF2PozK1DlWIabjR6fQsw0leCvt83RY 8u1PERUcRDOZH1pycHUBYyNnteYKV8bSL5bUsegSzgGRRWlvQCe0PtVIjljz02Dp FDpkDCOqraq47/TxPBZ+2LFN2FWEhhw5IOLpFzEfxy7J28kptFTa5GXm0d5DS5az SptcVft1LDsW5ANLEF+Dum2mucEtaJeZrtuOLOkmHIrvsqyhGIQi2N0QCr9aztP9 NmvWly3ibDTIRTZ8ZnFlvjNWm1vc5UDOFPxkSVb/pGdZAJChzlrm7No3/7T1d3H9 5e1w366owcXS5oB+vm7dnbsXIQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFP8M1L3k BB6PCsXTdq7QKI8HgD2aMB8GA1UdIwQYMBaAFD2T62bYGidqA5JGFo0yeLJn667s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEE4Ri8zMzA1MjQ3QTIz M0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoyb0Rra1lXalRKNHNtZnJy dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BaUHJadGdhSjJvRGtrWVdqVEo0c21mcnJ1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDBBOEYvMzMwNTI0N0EyMzNDMTFFQjg0OUM1RDZFQzRGOUFFMDIvRUQ4RTVCQzhD RkQ0MTFFQkEzMTcyNDQ2QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBABnxikDBABnxioDBALKgfQwDQYJKoZIhvcNAQELBQADggEBAIqd r2rctXhzchYHBwyv9GbT5/oh6UhxjMMPj+bDjjIVMlKDcZPlAdyOI9zMcGRL1sst DLEbxkkbsULMtd3d/y9Djw88B/bS4qGZXZwzPlECVFAxBShT1HIwxMuB48UePucO wP5mO+qyG/aUFip6KCRdtbhwOCbysK3z289DxUrtHI/RitwdM6Tt/59vyqWPX49E Jx9qASuIKjp+TXPW3Sv9GuNT5o1LXgFGWCg50L/SJNxxzD/ho4sR1UvwZFa61VB7 hCq1FwZOY3+CEbeHIDphYmbWMJEtrggfOQDmJlvhCtov5s9xRjsdgLEy6fhLsDnf bDdxzCuTpec/BLA80Y0= -----END CERTIFICATE-----Generated at Wed Oct 7 07:54:05 2026 by rpki-client