$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa File: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (raw, json) Hash identifier: 2pM7TvgdGAXqaUhWu0cxJaq+LWv0IGwie8txlXv9TlU= Subject key identifier: 5B:36:EB:AB:0D:9F:78:79:27:8E:8E:D2:A3:53:A2:B0:83:69:D7:95 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 201F Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa Signing time: Sun 04 Oct 2026 16:28:24 +0000 ROA not before: Sun 04 Oct 2026 16:28:24 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 132123 IP address blocks: 103.70.228.0/22 maxlen: 22 103.70.228.0/24 maxlen: 24 103.70.229.0/24 maxlen: 24 103.70.230.0/24 maxlen: 24 103.70.231.0/24 maxlen: 24 2001:df3:be00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8223 (0x201f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Oct 4 16:28:24 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac27ea8-8e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:87:d1:ef:3e:06:f5:8c:95:fc:0a:b1:9e: e2:18:bb:23:f0:33:48:1c:e9:59:ad:f7:09:c9:a8: 3f:cc:03:e1:6c:90:02:aa:88:36:be:61:21:88:1f: 62:1d:db:04:bb:4d:11:61:70:5e:1a:4a:0f:2e:95: 35:91:a8:a8:46:5b:18:5a:1d:ed:40:0e:9f:22:7f: 85:8b:43:fc:cd:e6:70:82:18:34:c0:32:2f:cf:c2: c2:f1:bb:c5:47:34:29:6f:13:79:38:62:3d:39:18: 45:df:ec:71:1a:0d:a9:d3:af:21:e3:ff:a6:41:e9: 1c:a4:fe:8b:0e:3f:e9:33:ed:37:07:ae:80:db:ee: 1f:94:53:5b:c5:40:4b:34:cd:4e:e5:5b:54:91:31: 43:04:6c:68:c5:e4:5e:3c:84:43:57:fd:d4:e9:35: b8:d3:a1:0b:47:4d:27:93:c6:75:01:f8:a0:5a:2a: 7b:6b:c5:a2:2f:15:63:97:70:09:84:fd:17:2e:ff: 68:58:40:fb:29:07:ba:a6:61:a9:d4:b7:2a:22:a2: 91:8a:a7:ce:93:52:da:ee:34:ce:92:e0:4a:45:a9: a3:c9:90:60:bb:9c:3a:eb:b2:9d:39:98:08:4f:a5: c0:72:0f:12:af:02:bf:b5:a4:f4:3b:c5:ce:4e:b5: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:36:EB:AB:0D:9F:78:79:27:8E:8E:D2:A3:53:A2:B0:83:69:D7:95 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.70.228.0/22 IPv6: 2001:df3:be00::/48 Signature Algorithm: sha256WithRSAEncryption 61:ee:ff:e0:79:88:e4:6e:35:26:4a:fc:2f:da:38:91:55:4b: 40:04:98:00:78:80:ad:da:0f:ee:15:d7:e9:fb:b5:27:41:ac: 9e:94:ec:d2:7c:70:8f:44:76:2a:d3:29:59:69:17:c4:67:9d: 32:30:fe:90:79:44:5a:16:5b:86:dc:80:e8:b7:60:81:cc:18: b8:7a:dc:74:13:24:f4:24:01:ac:c6:c6:89:f8:1d:3c:9f:2e: d9:35:ac:4a:9d:67:fe:13:8f:1d:3f:50:83:9f:29:54:b0:37: 18:13:c9:00:80:2d:87:ce:af:4c:99:0f:a5:68:2a:c6:17:65: 1b:1a:41:8d:0d:7a:af:e6:ea:c8:33:d8:fc:73:31:a0:85:47: 2c:17:d5:96:42:b7:9a:b7:39:3e:0f:3b:b1:ac:aa:43:6d:56: 17:87:af:6a:39:35:9a:af:96:c3:eb:e8:67:d2:ce:4a:3b:8f: 33:b0:ee:6d:65:37:05:31:1f:92:49:5b:4f:7f:b6:62:02:ba: 4d:0b:ed:ac:12:9b:61:20:f8:d9:c0:87:1b:8f:7c:6c:59:31: 23:53:f3:5f:3a:0c:74:f9:89:56:9b:e0:75:87:a1:56:f2:ca: 24:52:57:80:92:a1:ee:9f:ae:e8:5d:a3:13:ec:ea:e0:7f:99: e6:5a:47:9b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICIB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjYxMDA0MTYyODI0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyN2VhOC04ZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxaH0e8+BvWMlfwKsZ7iGLsj8DNIHOlZrfcJyag/zAPhbJACqog2vmEhiB9i HdsEu00RYXBeGkoPLpU1kaioRlsYWh3tQA6fIn+Fi0P8zeZwghg0wDIvz8LC8bvF RzQpbxN5OGI9ORhF3+xxGg2p068h4/+mQekcpP6LDj/pM+03B66A2+4flFNbxUBL NM1O5VtUkTFDBGxoxeRePIRDV/3U6TW406ELR00nk8Z1AfigWip7a8WiLxVjl3AJ hP0XLv9oWED7KQe6pmGp1LcqIqKRiqfOk1La7jTOkuBKRamjyZBgu5w667KdOZgI T6XAcg8SrwK/taT0O8XOTrUCoQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFs266sN n3h5J46O0qNTorCDadeVMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIyMDkvQTZCNTY3ODQ1ODlGMTFFNkJEREZGMTIxQzRGOUFFMDIvNzRGM0YxMTA5 OEJCMTFFQTlCMUJENzVDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ0bkMA8EAgACMAkDBwAgAQ3zvgAwDQYJKoZIhvcNAQELBQADggEB AGHu/+B5iORuNSZK/C/aOJFVS0AEmAB4gK3aD+4V1+n7tSdBrJ6U7NJ8cI9EdirT KVlpF8RnnTIw/pB5RFoWW4bcgOi3YIHMGLh63HQTJPQkAazGxon4HTyfLtk1rEqd Z/4Tjx0/UIOfKVSwNxgTyQCALYfOr0yZD6VoKsYXZRsaQY0Neq/m6sgz2PxzMaCF RywX1ZZCt5q3OT4PO7GsqkNtVheHr2o5NZqvlsPr6GfSzko7jzOw7m1lNwUxH5JJ W09/tmICuk0L7awSm2Eg+NnAhxuPfGxZMSNT8186DHT5iVab4HWHoVbyyiRSV4CS oe6fruhdoxPs6uB/meZaR5s= -----END CERTIFICATE-----Generated at Thu Oct 8 12:37:00 2026 by rpki-client