$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/C08B939607D911EDA41A0B25C4F9AE02.roa File: C08B939607D911EDA41A0B25C4F9AE02.roa (raw, json) Hash identifier: emokKDAX1pWI9mPL3wEnfsuiicZ8ph57Boah9/Rm6CM= Subject key identifier: BE:E3:AB:F1:A0:1F:F0:CB:FF:A8:BB:0A:A0:45:1A:A5:33:42:90:5F Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 06A9 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/C08B939607D911EDA41A0B25C4F9AE02.roa Signing time: Sun 04 Oct 2026 23:43:52 +0000 ROA not before: Sun 04 Oct 2026 23:43:52 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 59117 IP address blocks: 103.135.208.0/22 maxlen: 24 103.204.13.0/24 maxlen: 24 125.3.192.0/21 maxlen: 21 222.167.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Oct 4 23:43:52 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac2e4b8-d717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:b1:db:19:19:08:a6:05:35:14:43:d8:1b: be:01:49:af:be:34:31:a4:6b:18:31:8d:67:ab:8a: 33:43:b7:f8:b0:81:dc:72:5c:cc:b6:dc:43:0a:c7: 55:fd:84:cc:34:cc:d2:9b:c1:65:a6:61:39:c9:81: d9:1c:07:3f:5b:7c:2e:cf:81:b3:b7:3e:58:a5:ca: 16:ea:f7:29:41:70:5a:72:f1:41:11:d4:31:4e:c1: 7f:29:91:76:5f:65:a4:17:46:1b:3a:10:7c:87:d1: 04:f4:bf:60:f2:e7:ab:32:2a:10:ee:7e:7f:60:68: c0:01:48:c0:49:f8:44:53:b3:41:99:03:81:3f:99: 20:e7:44:60:5b:60:14:b7:e5:30:08:59:c9:7b:d3: 6f:fe:71:d8:b5:d5:9e:22:e2:95:b7:9a:4d:9d:fa: 06:cd:ae:1b:07:d3:29:eb:a9:aa:ee:c2:ed:e9:03: 9d:4c:6b:4c:00:aa:5b:e2:15:54:94:0d:0c:29:d6: 62:a3:c5:6f:4d:58:a7:ea:e9:a2:56:e5:b0:d0:87: ab:62:cf:f8:35:14:6d:65:02:e2:20:e6:05:83:09: 7f:e5:74:a9:48:e5:84:ab:13:42:b3:b8:6a:34:1c: 80:12:35:49:4d:70:a4:12:6a:3f:10:16:64:c3:ee: 68:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E3:AB:F1:A0:1F:F0:CB:FF:A8:BB:0A:A0:45:1A:A5:33:42:90:5F X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/C08B939607D911EDA41A0B25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.208.0/22 103.204.13.0/24 125.3.192.0/21 222.167.32.0/22 Signature Algorithm: sha256WithRSAEncryption a9:38:a7:00:39:3c:9d:7f:4d:9c:a0:68:82:cc:4f:f2:92:90: 85:84:fe:8a:0f:93:ba:0d:fd:9d:58:c3:d3:0c:96:0a:52:d8: 7b:4a:2d:86:1d:ec:c7:d8:c7:26:92:82:c0:68:c6:07:45:6c: 12:46:12:4e:57:e1:3f:55:77:fd:0c:fa:6d:d8:69:4f:60:8e: 1d:6e:21:f4:2c:ba:09:bc:dc:e5:95:10:70:68:97:ca:c2:75: 62:1d:69:0e:7b:0e:fe:12:26:19:59:72:e7:ff:10:00:43:02: d1:a6:bc:2d:b6:2f:19:66:d9:30:26:f9:4a:54:6a:42:a3:4f: aa:ba:25:5d:17:36:bd:bc:0a:f5:53:38:28:7d:8a:2f:9d:ba: 17:fb:ed:d3:44:1b:9d:d5:15:0c:a6:04:07:ef:3f:3a:e2:33: 84:ba:45:64:0f:a0:16:02:a5:dc:52:79:16:bb:a8:cd:c9:26: 3e:96:e3:91:13:6d:ec:7d:e0:c5:ef:25:31:f5:e3:0a:0f:99: fb:fe:e1:7f:f5:91:4b:ee:9b:92:71:16:ea:9c:52:7a:c6:39: 1f:ad:65:9e:bc:51:02:d2:45:17:48:26:20:91:a9:27:cd:93: 2b:d7:f7:9d:fd:91:c4:ce:80:82:90:d3:2e:0e:6b:59:28:27: f6:38:d5:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYxMDA0MjM0MzUyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyZTRiOC1kNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVux2xkZCKYFNRRD2Bu+AUmvvjQxpGsYMY1nq4ozQ7f4sIHcclzMttxDCsdV /YTMNMzSm8FlpmE5yYHZHAc/W3wuz4Gztz5YpcoW6vcpQXBacvFBEdQxTsF/KZF2 X2WkF0YbOhB8h9EE9L9g8uerMioQ7n5/YGjAAUjASfhEU7NBmQOBP5kg50RgW2AU t+UwCFnJe9Nv/nHYtdWeIuKVt5pNnfoGza4bB9Mp66mq7sLt6QOdTGtMAKpb4hVU lA0MKdZio8VvTVin6umiVuWw0IerYs/4NRRtZQLiIOYFgwl/5XSpSOWEqxNCs7hq NByAEjVJTXCkEmo/EBZkw+5oTwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFL7jq/Gg H/DL/6i7CqBFGqUzQpBfMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvQzA4QjkzOTYw N0Q5MTFFREE0MUEwQjI1QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCZ4fQAwQAZ8wNAwQDfQPAAwQC3qcgMA0GCSqGSIb3DQEBCwUAA4IB AQCpOKcAOTydf02coGiCzE/ykpCFhP6KD5O6Df2dWMPTDJYKUth7Si2GHezH2Mcm koLAaMYHRWwSRhJOV+E/VXf9DPpt2GlPYI4dbiH0LLoJvNzllRBwaJfKwnViHWkO ew7+EiYZWXLn/xAAQwLRprwtti8ZZtkwJvlKVGpCo0+quiVdFza9vAr1UzgofYov nboX++3TRBud1RUMpgQH7z864jOEukVkD6AWAqXcUnkWu6jNySY+luORE23sfeDF 7yUx9eMKD5n7/uF/9ZFL7puScRbqnFJ6xjkfrWWevFEC0kUXSCYgkaknzZMr1/ed /ZHEzoCCkNMuDmtZKCf2ONVv -----END CERTIFICATE-----Generated at Wed Oct 28 18:54:09 2026 by rpki-client