$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/2379396E35DA11F08BAAE414C4F9AE02.roa File: 2379396E35DA11F08BAAE414C4F9AE02.roa (raw, json) Hash identifier: ea2iBmDkz/yRAtN6cJW2O25Irp0qPff20AjY6xfl2jM= Subject key identifier: 6D:D0:73:A1:A7:CE:30:E5:90:6B:0E:1B:C5:15:70:3A:E5:1C:24:39 Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 06A4 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/2379396E35DA11F08BAAE414C4F9AE02.roa Signing time: Sun 04 Oct 2026 23:43:43 +0000 ROA not before: Sun 04 Oct 2026 23:43:43 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 146806 IP address blocks: 103.135.208.0/24 maxlen: 24 103.135.209.0/24 maxlen: 24 103.135.210.0/24 maxlen: 24 103.135.211.0/24 maxlen: 24 203.168.128.0/22 maxlen: 22 203.168.128.0/23 maxlen: 23 203.168.128.0/24 maxlen: 24 203.168.129.0/24 maxlen: 24 203.168.130.0/23 maxlen: 23 203.168.130.0/24 maxlen: 24 203.168.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 23:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Oct 4 23:43:43 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac2e4ae-614e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:9a:aa:50:00:da:d9:05:79:12:5c:b3:c6: 6d:45:8f:df:bf:60:c6:47:95:90:79:36:e3:f7:44: cb:86:e3:eb:87:d0:21:0e:16:2e:bd:1d:a4:b3:94: 54:70:ec:d0:63:39:07:f1:30:15:10:93:b4:e6:02: dc:9e:e9:0b:91:b3:c1:2f:4f:06:01:6d:48:6f:62: bd:f3:86:11:61:5f:33:24:56:05:9c:c8:bf:01:76: b6:16:f9:3c:2e:62:0d:f1:41:a6:1d:9d:c7:bc:92: 02:68:5b:68:c0:5c:31:95:2a:9f:e8:97:44:c3:c9: 6f:53:b7:6b:d2:7b:95:6a:3e:4b:3b:6e:c4:57:00: 38:cc:51:fe:2b:2e:f4:c8:4c:20:02:0c:0d:26:72: d5:9e:e0:5c:65:db:51:1b:99:e5:5d:c3:9e:bb:b9: 98:8e:8f:35:d4:07:11:ef:3d:f0:6f:37:95:c3:47: 54:27:ac:90:cb:9c:4c:c9:d6:09:c5:b0:f3:8a:72: 1a:96:c8:82:7e:ae:ff:a0:f3:f9:e0:90:84:a4:a8: 08:f1:6e:35:a1:e8:5c:a4:a4:89:9b:71:76:5d:99: c1:e7:3d:81:41:26:1b:75:8d:c7:c5:47:fa:51:0c: 59:6c:36:f8:25:2b:cd:cb:fc:72:dc:ac:db:c0:b7: 83:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D0:73:A1:A7:CE:30:E5:90:6B:0E:1B:C5:15:70:3A:E5:1C:24:39 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/2379396E35DA11F08BAAE414C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.208.0/22 203.168.128.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:ce:07:27:02:a8:0f:5e:34:4b:0c:71:fb:c9:96:1a:40:40: 11:2c:c4:95:be:05:fb:fc:5a:b3:fa:a3:26:af:2c:ca:4f:00: c5:af:f0:8f:fb:c5:80:c4:1f:e2:71:9c:36:f0:60:ed:7c:6f: 8d:3f:2c:dd:c1:4d:a2:05:7f:bf:93:3c:64:c9:93:55:59:70: 06:73:9e:08:70:ab:f0:9c:b0:b1:8e:3c:41:a9:bd:4c:28:4b: 15:8c:2e:94:56:ec:e8:4e:c9:8f:88:4d:dd:01:1d:af:d3:07: dd:5c:c7:bf:b9:21:94:43:42:10:4b:e7:0e:71:cc:fc:6e:86: 66:8c:ab:7c:d3:25:bc:22:15:76:45:bd:bb:9f:a6:de:d0:76: f4:a9:31:f2:6e:ac:a6:73:a1:9b:93:69:d4:57:5a:d0:9a:bd: 3b:91:d0:cf:28:9a:d1:98:dc:8a:55:27:38:cc:13:33:a5:8f: 8d:87:39:3f:72:33:bc:12:8b:f6:0b:07:3b:53:1f:55:f8:aa: 06:7a:83:6b:64:a5:54:28:9a:47:f3:a1:ab:27:63:ba:06:db: 00:af:c5:c0:24:80:e4:03:90:63:d4:a3:9f:9e:8a:fe:4e:a9: 20:fe:a9:cf:bb:d3:8c:f4:aa:ba:06:04:2b:d4:f1:c5:97:22: f4:d8:ce:d9 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYxMDA0MjM0MzQzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyZTRhZS02MTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8GaqlAA2tkFeRJcs8ZtRY/fv2DGR5WQeTbj90TLhuPrh9AhDhYuvR2ks5RU cOzQYzkH8TAVEJO05gLcnukLkbPBL08GAW1Ib2K984YRYV8zJFYFnMi/AXa2Fvk8 LmIN8UGmHZ3HvJICaFtowFwxlSqf6JdEw8lvU7dr0nuVaj5LO27EVwA4zFH+Ky70 yEwgAgwNJnLVnuBcZdtRG5nlXcOeu7mYjo811AcR7z3wbzeVw0dUJ6yQy5xMydYJ xbDzinIalsiCfq7/oPP54JCEpKgI8W41oehcpKSJm3F2XZnB5z2BQSYbdY3HxUf6 UQxZbDb4JSvNy/xy3KzbwLeDFQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFG3Qc6Gn zjDlkGsOG8UVcDrlHCQ5MB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvMjM3OTM5NkUz NURBMTFGMDhCQUFFNDE0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ4fQAwQCy6iAMA0GCSqGSIb3DQEBCwUAA4IBAQB9zgcnAqgPXjRL DHH7yZYaQEARLMSVvgX7/Fqz+qMmryzKTwDFr/CP+8WAxB/icZw28GDtfG+NPyzd wU2iBX+/kzxkyZNVWXAGc54IcKvwnLCxjjxBqb1MKEsVjC6UVuzoTsmPiE3dAR2v 0wfdXMe/uSGUQ0IQS+cOccz8boZmjKt80yW8IhV2Rb27n6be0Hb0qTHybqymc6Gb k2nUV1rQmr07kdDPKJrRmNyKVSc4zBMzpY+Nhzk/cjO8Eov2Cwc7Ux9V+KoGeoNr ZKVUKJpH86GrJ2O6BtsAr8XAJIDkA5Bj1KOfnor+Tqkg/qnPu9OM9Kq6BgQr1PHF lyL02M7Z -----END CERTIFICATE-----Generated at Wed Oct 14 03:14:59 2026 by rpki-client