$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa File: F100A1207F9911EBAFB6C91BC4F9AE02.roa (raw, json) Hash identifier: uHuDTfwJOFKVGTsEop4y/RlcNFUS7e0GQKR0Kyo3w84= Subject key identifier: 8B:EE:62:69:26:EB:5D:B1:B7:5F:D7:D1:B7:C1:8C:B1:E2:20:2A:8D Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Certificate serial: 0767 Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa Signing time: Fri 14 Aug 2026 22:42:42 +0000 ROA not before: Fri 14 Aug 2026 22:42:42 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131476 IP address blocks: 43.245.168.0/22 maxlen: 22 43.245.169.0/24 maxlen: 24 43.245.170.0/24 maxlen: 24 43.245.171.0/24 maxlen: 24 103.4.236.0/24 maxlen: 24 103.4.237.0/24 maxlen: 24 103.4.238.0/24 maxlen: 24 103.4.239.0/24 maxlen: 24 202.81.4.0/22 maxlen: 22 202.81.4.0/24 maxlen: 24 202.81.5.0/24 maxlen: 24 202.81.6.0/24 maxlen: 24 202.81.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 21:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147DCA, serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Validity Not Before: Aug 14 22:42:42 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7f99e2-78c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:6c:e3:1e:a3:08:27:7a:70:eb:be:d6:1a: da:cb:ee:15:49:29:31:ea:6e:f9:9b:78:ad:41:ab: db:09:92:4d:dc:4d:76:a7:8d:be:d1:b3:eb:fe:a0: 7b:ad:46:34:a9:71:f4:a3:94:c3:a4:c3:40:5a:4c: 88:1f:01:c6:0d:49:ce:66:12:87:08:84:eb:bb:28: d7:35:22:09:40:fc:a1:4d:fc:a3:56:93:3d:05:76: 3c:b2:47:2c:3b:05:bd:4f:f0:dd:b6:c0:1e:f9:aa: 00:6c:fb:99:5f:6a:b0:f3:52:b3:23:e7:da:f1:fc: 4d:b7:89:82:f7:8c:07:a7:60:bf:5c:c0:61:e0:fb: 32:1a:43:78:13:58:86:df:c4:7f:df:ff:9c:d6:7b: 1b:a6:eb:a3:86:1b:73:c2:3b:b9:48:1d:14:83:cd: c6:e9:8b:69:71:f0:53:8a:89:65:08:e9:b0:c0:ff: 8a:48:7c:f0:d7:75:a0:3f:08:8d:75:9b:c7:60:26: de:07:cd:2d:4c:3d:e8:8b:91:04:99:4d:9e:c3:90: 40:d7:65:42:21:c5:d6:37:33:42:62:22:59:1e:1e: e8:41:50:56:d4:3b:51:ea:00:e1:71:a6:51:dc:e3: 1a:4f:de:5a:8d:85:7d:b3:43:0a:f9:5a:a4:ef:fc: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EE:62:69:26:EB:5D:B1:B7:5F:D7:D1:B7:C1:8C:B1:E2:20:2A:8D X509v3 Authority Key Identifier: keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.168.0/22 103.4.236.0/22 202.81.4.0/22 Signature Algorithm: sha256WithRSAEncryption 25:ff:4e:29:08:5c:ad:95:07:0f:2a:18:75:3f:82:4e:bf:9c: bf:2e:3e:1c:23:61:a6:d0:27:46:b2:67:fd:31:21:78:70:e0: 81:dd:3c:1c:33:04:25:d6:90:ba:5b:f3:a4:a3:36:04:3e:10: 81:30:e8:a0:5a:16:19:75:8b:43:2d:a1:a4:33:18:89:96:b0: e1:46:9d:81:4d:3e:54:9b:84:18:f4:e5:98:01:f8:5d:4b:ba: 67:9f:10:8f:ee:ca:65:0e:4e:4c:5c:1c:c5:be:5a:97:62:40: ec:c0:6f:1f:b6:f4:b7:99:59:a8:8e:3e:88:11:ab:de:f3:68: 96:6b:a5:8b:ee:f4:5b:63:84:08:ae:8f:81:c5:88:ae:43:47: 2e:2d:ad:29:62:91:ba:7c:e5:83:49:0a:8c:1c:92:4a:56:86: 38:17:36:36:5a:32:1e:21:7f:ee:a6:4c:2f:2b:e5:cf:2b:d1: ce:65:49:5a:89:7d:87:e7:2b:27:fc:05:7e:76:89:e7:1c:61: 57:f6:16:24:58:af:9f:8f:43:7a:ba:11:c4:2f:93:7a:a8:de: 79:4d:c1:90:97:1b:8d:e7:a0:58:f9:99:ea:66:f4:72:b3:4c: 2c:d2:56:ce:b1:d7:59:71:39:c4:84:5c:53:70:62:24:c0:59: b1:74:8e:9d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1 RTREMjE5RjkwHhcNMjYwODE0MjI0MjQyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdmOTllMi03OGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxFs4x6jCCd6cOu+1hray+4VSSkx6m75m3itQavbCZJN3E12p42+0bPr/qB7 rUY0qXH0o5TDpMNAWkyIHwHGDUnOZhKHCITruyjXNSIJQPyhTfyjVpM9BXY8skcs OwW9T/DdtsAe+aoAbPuZX2qw81KzI+fa8fxNt4mC94wHp2C/XMBh4PsyGkN4E1iG 38R/3/+c1nsbpuujhhtzwju5SB0Ug83G6YtpcfBTiollCOmwwP+KSHzw13WgPwiN dZvHYCbeB80tTD3oi5EEmU2ew5BA12VCIcXWNzNCYiJZHh7oQVBW1DtR6gDhcaZR 3OMaT95ajYV9s0MK+Vqk7/zgLwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIvuYmkm 612xt1/X0bfBjLHiICqNMB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdEQ0EvMUM3NUVEQTY3RDZBMTFFQkE0QTU5ODBDQzRGOUFFMDIvRjEwMEExMjA3 Rjk5MTFFQkFGQjZDOTFCQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/WoAwQCZwTsAwQCylEEMA0GCSqGSIb3DQEBCwUAA4IBAQAl/04p CFytlQcPKhh1P4JOv5y/Lj4cI2Gm0CdGsmf9MSF4cOCB3TwcMwQl1pC6W/OkozYE PhCBMOigWhYZdYtDLaGkMxiJlrDhRp2BTT5Um4QY9OWYAfhdS7pnnxCP7splDk5M XBzFvlqXYkDswG8ftvS3mVmojj6IEave82iWa6WL7vRbY4QIro+BxYiuQ0cuLa0p YpG6fOWDSQqMHJJKVoY4FzY2WjIeIX/upkwvK+XPK9HOZUlaiX2H5ysn/AV+donn HGFX9hYkWK+fj0N6uhHEL5N6qN55TcGQlxuN56BY+ZnqZvRys0ws0lbOsddZcTnE hFxTcGIkwFmxdI6d -----END CERTIFICATE-----Generated at Thu Aug 27 07:56:51 2026 by rpki-client