$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/35A768B8563B11EC94608B5BC4F9AE02.roa File: 35A768B8563B11EC94608B5BC4F9AE02.roa (raw, json) Hash identifier: xTxj7kWAr8L1hQC8yOWBnMz+vLF5/tfrwvJ1h0JsS+k= Subject key identifier: 86:6E:F6:79:D9:C2:6F:F6:91:C6:38:85:E7:45:3B:BF:C7:AE:7E:18 Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 06A2 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/35A768B8563B11EC94608B5BC4F9AE02.roa Signing time: Sun 04 Oct 2026 23:43:38 +0000 ROA not before: Sun 04 Oct 2026 23:43:38 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 13335 IP address blocks: 103.135.208.0/22 maxlen: 22 103.172.110.0/23 maxlen: 23 103.204.13.0/24 maxlen: 24 125.3.192.0/21 maxlen: 21 203.168.128.0/22 maxlen: 22 203.168.192.0/20 maxlen: 20 222.167.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Oct 4 23:43:38 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac2e4aa-a8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:07:56:c9:67:cb:5b:f1:c1:fb:3d:dd:b6:3a: 54:e1:9d:71:79:04:d5:f3:4d:5d:02:8a:49:54:b1: 01:4e:5d:0c:d7:0d:e9:af:19:c3:b2:ad:1d:9d:f4: a9:75:d5:05:48:cc:e6:b9:55:71:67:4e:5d:bd:88: f3:2b:36:bd:f6:52:45:85:35:87:69:e0:7c:1a:b4: 74:a3:94:37:1a:08:62:fb:68:14:71:1c:54:38:19: 88:2a:62:cd:f0:cc:6a:8d:b6:62:9e:47:fa:54:a4: 3f:f5:4d:bb:82:e8:a2:2c:87:e1:b4:cc:26:8d:ac: fb:12:4f:c1:7c:44:8e:85:f6:a8:39:29:23:e5:3a: 2b:b6:19:b7:db:e3:5d:76:71:d4:49:f5:2c:fa:94: 2d:d2:ae:54:28:ce:ff:97:bd:11:99:33:33:19:79: 6c:17:61:44:40:e4:c5:23:0a:74:4d:2a:2b:3d:72: 85:43:8a:66:f5:06:35:df:98:1b:0a:92:d8:aa:bb: 6b:70:85:6b:07:13:d2:b1:69:65:4b:b1:cb:dd:84: 16:fb:3b:6b:9d:9e:72:be:11:33:1f:fc:cb:e9:b5: 4e:24:a3:10:02:6a:a0:3f:8e:dc:47:de:c6:e6:c7: ae:ab:3a:dd:90:6c:57:fc:aa:10:fe:78:04:92:3c: 12:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6E:F6:79:D9:C2:6F:F6:91:C6:38:85:E7:45:3B:BF:C7:AE:7E:18 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/35A768B8563B11EC94608B5BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.208.0/22 103.172.110.0/23 103.204.13.0/24 125.3.192.0/21 203.168.128.0/22 203.168.192.0/20 222.167.32.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:71:29:16:a6:2f:92:a5:92:15:4d:3a:e0:7a:c9:df:5f:a0: ae:15:5d:dd:24:bc:a4:66:12:04:4f:c2:96:34:16:38:d4:52: 83:e2:cc:3d:43:23:59:25:59:61:da:61:0a:ef:1e:1d:5a:61: a4:39:1e:20:62:6e:29:dd:99:45:96:10:27:64:59:49:99:1f: ac:c4:b5:56:bd:7a:9e:d1:3a:27:49:e2:58:4e:35:67:f7:ef: b4:d7:af:c2:b7:4b:f8:fd:0e:5e:6c:c2:42:41:74:ef:c2:f7: 15:c7:24:e2:90:24:ac:5f:81:9e:6b:1b:80:d9:c9:88:b6:c2: ea:80:3c:47:cb:53:f5:8f:5b:90:04:74:e4:8a:86:45:82:56: 66:53:e5:af:5a:d0:61:16:d5:85:27:43:2e:63:7e:cd:da:35: ab:9c:6e:f5:8c:ae:bd:99:61:6d:50:ad:60:fd:9b:73:4b:2c: b6:1a:82:f9:b9:fd:2a:7b:87:e9:bf:5c:e1:20:78:28:b5:c1: a8:15:28:de:6e:fe:8f:57:0e:b2:97:ba:fb:41:fc:b9:66:df: 79:c7:ae:64:f1:66:5e:9c:a8:c7:f1:ea:50:23:3b:48:04:0d: d1:98:13:6e:de:66:59:31:e9:1f:a1:68:b7:5a:98:fb:67:af: a4:92:c6:fb -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYxMDA0MjM0MzM4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyZTRhYS1hOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gdWyWfLW/HB+z3dtjpU4Z1xeQTV801dAopJVLEBTl0M1w3prxnDsq0dnfSp ddUFSMzmuVVxZ05dvYjzKza99lJFhTWHaeB8GrR0o5Q3Gghi+2gUcRxUOBmIKmLN 8MxqjbZinkf6VKQ/9U27guiiLIfhtMwmjaz7Ek/BfESOhfaoOSkj5Torthm32+Nd dnHUSfUs+pQt0q5UKM7/l70RmTMzGXlsF2FEQOTFIwp0TSorPXKFQ4pm9QY135gb CpLYqrtrcIVrBxPSsWllS7HL3YQW+ztrnZ5yvhEzH/zL6bVOJKMQAmqgP47cR97G 5seuqzrdkGxX/KoQ/ngEkjwS0QIDAQABo4IChDCCAoAwHQYDVR0OBBYEFIZu9nnZ wm/2kcY4hedFO7/Hrn4YMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvMzVBNzY4Qjg1 NjNCMTFFQzk0NjA4QjVCQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQCZ4fQAwQBZ6xuAwQAZ8wNAwQDfQPAAwQCy6iAAwQEy6jAAwQC3qcg MA0GCSqGSIb3DQEBCwUAA4IBAQBdcSkWpi+SpZIVTTrgesnfX6CuFV3dJLykZhIE T8KWNBY41FKD4sw9QyNZJVlh2mEK7x4dWmGkOR4gYm4p3ZlFlhAnZFlJmR+sxLVW vXqe0TonSeJYTjVn9++016/Ct0v4/Q5ebMJCQXTvwvcVxyTikCSsX4GeaxuA2cmI tsLqgDxHy1P1j1uQBHTkioZFglZmU+WvWtBhFtWFJ0MuY37N2jWrnG71jK69mWFt UK1g/ZtzSyy2GoL5uf0qe4fpv1zhIHgotcGoFSjebv6PVw6yl7r7Qfy5Zt95x65k 8WZenKjH8epQIztIBA3RmBNu3mZZMekfoWi3Wpj7Z6+kksb7 -----END CERTIFICATE-----Generated at Wed Oct 28 06:17:06 2026 by rpki-client