$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/131FA4B092AD11F0AF4F4C85C4F9AE02.roa File: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (raw, json) Hash identifier: tc6sy7do6MVm2lHYRrTIJ6odjR90umTVjkw2J45WL8o= Subject key identifier: 0A:41:87:B7:33:3C:BF:72:B8:E7:D9:24:9B:5F:16:31:3C:BE:38:07 Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 06A5 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/131FA4B092AD11F0AF4F4C85C4F9AE02.roa Signing time: Sun 04 Oct 2026 23:43:44 +0000 ROA not before: Sun 04 Oct 2026 23:43:44 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 209242 IP address blocks: 103.135.208.0/22 maxlen: 22 103.172.110.0/23 maxlen: 23 103.204.13.0/24 maxlen: 24 203.168.128.0/22 maxlen: 22 222.167.32.0/22 maxlen: 22 2001:df7:6e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Oct 4 23:43:44 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac2e4b0-8fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:36:d2:08:64:89:57:e8:3a:e0:a7:e1:82:a1: 5e:f6:f3:04:f5:b0:77:17:90:91:3a:85:2e:72:65: e0:1c:06:23:a8:fe:f9:a1:b6:e5:57:f4:f6:4b:cc: cb:dc:4f:6e:ff:a6:5d:0a:90:d8:54:25:78:df:4e: cc:d2:cb:30:3f:f7:ce:15:2b:d8:47:12:67:68:41: b9:d0:77:26:eb:23:62:e6:d6:47:80:05:6e:b8:30: d8:c9:04:6d:a0:25:30:e5:94:28:d9:e2:af:20:30: 36:f6:e0:fb:df:51:6d:8f:66:fb:cb:6d:53:d1:19: 8c:e0:28:f8:86:70:c1:cb:7a:ce:fe:cf:c2:0a:80: 82:43:20:5b:0f:26:fa:5e:70:b9:cc:96:c5:45:a5: f8:5c:3e:31:f9:48:c7:7a:c4:e1:7c:5c:93:1b:95: 84:61:73:4b:db:c4:d1:d5:b2:17:47:10:e4:80:d0: 35:b1:4b:1a:1a:97:1a:98:bb:98:7a:63:bb:90:24: 23:fc:21:42:ba:20:0a:92:72:d4:19:81:73:ae:27: 6f:c9:53:da:9e:f1:ab:9a:84:d9:69:90:d3:ac:dc: ee:20:8d:bc:70:ff:70:2b:6a:b8:24:89:1f:22:72: 43:bf:69:e5:b2:64:ec:6f:c8:58:59:8d:b7:9e:db: 0b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:41:87:B7:33:3C:BF:72:B8:E7:D9:24:9B:5F:16:31:3C:BE:38:07 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/131FA4B092AD11F0AF4F4C85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.208.0/22 103.172.110.0/23 103.204.13.0/24 203.168.128.0/22 222.167.32.0/22 IPv6: 2001:df7:6e80::/48 Signature Algorithm: sha256WithRSAEncryption 36:28:3d:bd:71:37:63:d9:1e:d9:e8:67:1e:15:83:3d:ea:b9: d1:e8:a9:f1:ad:55:a6:dc:3e:dd:16:e5:ee:3f:3c:c6:76:10: 37:8c:7f:5b:2a:54:c1:ad:f1:7c:97:8e:d8:88:23:ee:27:3a: 9a:42:27:3c:57:85:77:8b:f9:ec:c0:35:05:11:8c:34:dc:b2: 01:0c:07:c1:8b:88:a0:22:a0:12:e7:61:15:f2:72:bb:9c:9e: 18:80:a4:4d:5b:35:23:ef:41:44:a9:16:be:df:3a:e8:df:e0: 6a:cb:d2:bd:3f:14:00:18:4a:66:47:c5:be:e5:5f:8e:37:b8: e6:39:69:1c:cb:a8:0c:bf:05:16:41:01:e7:a8:75:eb:81:a3: 12:bd:31:69:a3:7a:79:14:a5:01:e9:24:e1:43:9a:58:8a:6f: e8:0c:ad:96:a5:d2:38:f1:a6:57:14:cb:a4:c1:89:4a:04:33: 2f:ec:52:ce:4d:75:f5:dc:f4:a9:7e:69:65:26:4d:ee:77:77: 8c:da:26:10:20:24:15:ec:d1:a1:b4:c9:d3:46:db:ab:e1:f5: 69:bf:d0:f7:a7:85:02:af:ac:2f:90:6d:5e:43:02:4d:c8:90: ab:0c:7a:5a:82:25:93:c0:cc:5a:7a:e0:c5:8d:4c:47:50:cb: e5:2c:05:b4 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYxMDA0MjM0MzQ0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyZTRiMC04ZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jbSCGSJV+g64KfhgqFe9vME9bB3F5CROoUucmXgHAYjqP75obblV/T2S8zL 3E9u/6ZdCpDYVCV4307M0sswP/fOFSvYRxJnaEG50Hcm6yNi5tZHgAVuuDDYyQRt oCUw5ZQo2eKvIDA29uD731Ftj2b7y21T0RmM4Cj4hnDBy3rO/s/CCoCCQyBbDyb6 XnC5zJbFRaX4XD4x+UjHesThfFyTG5WEYXNL28TR1bIXRxDkgNA1sUsaGpcamLuY emO7kCQj/CFCuiAKknLUGYFzridvyVPanvGrmoTZaZDTrNzuII28cP9wK2q4JIkf InJDv2nlsmTsb8hYWY23ntsLPwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFApBh7cz PL9yuOfZJJtfFjE8vjgHMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvMTMxRkE0QjA5 MkFEMTFGMEFGNEY0Qzg1QzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAk BAIAATAeAwQCZ4fQAwQBZ6xuAwQAZ8wNAwQCy6iAAwQC3qcgMA8EAgACMAkDBwAg AQ33boAwDQYJKoZIhvcNAQELBQADggEBADYoPb1xN2PZHtnoZx4Vgz3qudHoqfGt VabcPt0W5e4/PMZ2EDeMf1sqVMGt8XyXjtiII+4nOppCJzxXhXeL+ezANQURjDTc sgEMB8GLiKAioBLnYRXycrucnhiApE1bNSPvQUSpFr7fOujf4GrL0r0/FAAYSmZH xb7lX443uOY5aRzLqAy/BRZBAeeodeuBoxK9MWmjenkUpQHpJOFDmliKb+gMrZal 0jjxplcUy6TBiUoEMy/sUs5NdfXc9Kl+aWUmTe53d4zaJhAgJBXs0aG0ydNG26vh 9Wm/0PenhQKvrC+QbV5DAk3IkKsMelqCJZPAzFp64MWNTEdQy+UsBbQ= -----END CERTIFICATE-----Generated at Wed Oct 28 04:38:58 2026 by rpki-client