$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1126128EE44C11F0A977367B746F56BC.roa File: 1126128EE44C11F0A977367B746F56BC.roa (raw, json) Hash identifier: u18/e2o3f3QaJnc8VBwFOAFUBiAMwsHGZVtwhVO8D2M= Subject key identifier: 93:C8:A3:86:01:AF:65:5F:71:10:13:ED:E9:C2:CE:1A:83:B2:FA:9A Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3DAA Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1126128EE44C11F0A977367B746F56BC.roa Signing time: Thu 06 Aug 2026 15:11:35 +0000 ROA not before: Thu 06 Aug 2026 15:11:35 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 16509 IP address blocks: 103.104.86.0/24 maxlen: 24 103.182.250.0/24 maxlen: 24 103.182.251.0/24 maxlen: 24 103.188.89.0/24 maxlen: 24 103.253.240.0/22 maxlen: 22 144.48.40.0/22 maxlen: 24 203.191.134.0/24 maxlen: 24 203.191.135.0/24 maxlen: 24 211.44.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15786 (0x3daa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Aug 6 15:11:35 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a74a427-d946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:7c:a1:fc:6b:3c:0f:fc:d7:c7:69:ba:2f: 1a:83:3e:dc:6b:ac:02:de:35:ac:fe:bd:d7:01:cc: 0c:60:4a:1e:05:40:70:a9:0c:20:ce:c3:de:67:a3: a8:55:8f:16:27:7a:32:1e:35:70:81:f6:1b:77:ad: 13:c2:e4:12:d0:b3:de:22:f5:d4:b5:36:67:a9:39: f9:ca:7c:41:31:f0:17:04:c9:3d:b7:9c:24:6d:11: f5:3a:91:be:60:65:8c:16:c1:85:74:95:c2:08:51: 12:68:ea:a7:8b:e6:40:29:d4:29:1d:08:bb:8e:b7: 28:0e:75:01:09:48:cc:91:ec:fa:b7:0a:30:dc:11: 78:e3:39:3b:95:37:5f:78:ab:c1:45:41:4f:e7:b3: 40:d4:3a:7d:da:8d:9b:a2:97:bd:72:c9:46:b6:fc: c7:20:0d:96:84:33:02:36:fa:1b:d2:bf:a7:2e:60: 9a:25:a0:c2:9c:f4:fe:68:a3:58:79:21:74:03:17: 9d:d9:66:ee:88:f1:8d:7d:83:99:a8:c8:56:b2:0d: c3:7f:60:9f:22:cc:92:34:a6:cd:1d:7d:09:bd:3a: a0:a7:94:0a:73:9d:fd:65:96:cb:49:59:08:66:43: 6a:28:a7:4a:0e:98:c3:8a:a8:19:a6:45:19:0f:d5: 02:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C8:A3:86:01:AF:65:5F:71:10:13:ED:E9:C2:CE:1A:83:B2:FA:9A X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1126128EE44C11F0A977367B746F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.104.86.0/24 103.182.250.0/23 103.188.89.0/24 103.253.240.0/22 144.48.40.0/22 203.191.134.0/23 211.44.103.0/24 Signature Algorithm: sha256WithRSAEncryption e1:8f:06:6c:fc:0a:14:56:01:f0:c2:4f:ca:d5:ca:2e:98:bd: 6e:45:5d:29:10:4d:69:f9:3e:64:af:e5:33:fe:f4:a4:a9:40: c9:7f:2e:a4:04:39:d0:90:de:a8:6b:18:8f:db:ac:dd:0f:09: 1f:66:b0:81:40:be:8b:dc:38:48:ec:c4:5f:8c:e8:d9:01:cd: 13:64:45:bc:eb:87:59:68:31:0e:7f:25:8a:a8:aa:82:6a:f5: 57:7a:e3:87:65:8a:5c:2f:67:0f:39:c9:0e:92:f7:00:2b:c8: 73:68:39:e5:d4:ac:7f:71:d6:fa:f0:27:31:bb:70:0e:e3:cc: c1:3a:af:ec:fe:e3:49:a0:58:76:76:00:4a:3b:57:bb:ce:20: d3:1a:ef:91:3a:74:24:c6:ec:1c:c7:49:96:a5:69:d0:4c:10: f0:52:d7:03:b4:10:78:04:db:88:f5:bf:9b:01:1f:6f:be:cd: d0:c6:e0:28:8e:b2:42:21:81:67:52:37:1b:c8:89:69:de:72: 1e:9f:ed:04:20:68:e1:4f:b8:8e:3d:18:18:45:f6:e4:45:a8: 07:c9:be:d1:40:f5:d7:d4:56:2e:f6:6f:98:55:a5:1b:f1:c4: e4:f0:96:db:47:d2:35:e0:2c:dd:59:a5:0e:50:97:00:ed:62: ca:51:9f:fb -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICPaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwODA2MTUxMTM1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0YTQyNy1kOTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFd8ofxrPA/818dpui8agz7ca6wC3jWs/r3XAcwMYEoeBUBwqQwgzsPeZ6Oo VY8WJ3oyHjVwgfYbd60TwuQS0LPeIvXUtTZnqTn5ynxBMfAXBMk9t5wkbRH1OpG+ YGWMFsGFdJXCCFESaOqni+ZAKdQpHQi7jrcoDnUBCUjMkez6twow3BF44zk7lTdf eKvBRUFP57NA1Dp92o2bope9cslGtvzHIA2WhDMCNvob0r+nLmCaJaDCnPT+aKNY eSF0Axed2WbuiPGNfYOZqMhWsg3Df2CfIsySNKbNHX0JvTqgp5QKc539ZZbLSVkI ZkNqKKdKDpjDiqgZpkUZD9UCkwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFJPIo4YB r2VfcRAT7enCzhqDsvqaMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMTEyNjEyOEVF NDRDMTFGMEE5NzczNjdCNzQ2RjU2QkMucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQAZ2hWAwQBZ7b6AwQAZ7xZAwQCZ/3wAwQCkDAoAwQBy7+GAwQA0yxn MA0GCSqGSIb3DQEBCwUAA4IBAQDhjwZs/AoUVgHwwk/K1coumL1uRV0pEE1p+T5k r+Uz/vSkqUDJfy6kBDnQkN6oaxiP26zdDwkfZrCBQL6L3DhI7MRfjOjZAc0TZEW8 64dZaDEOfyWKqKqCavVXeuOHZYpcL2cPOckOkvcAK8hzaDnl1Kx/cdb68Ccxu3AO 48zBOq/s/uNJoFh2dgBKO1e7ziDTGu+ROnQkxuwcx0mWpWnQTBDwUtcDtBB4BNuI 9b+bAR9vvs3QxuAojrJCIYFnUjcbyIlp3nIen+0EIGjhT7iOPRgYRfbkRagHyb7R QPXX1FYu9m+YVaUb8cTk8JbbR9I14CzdWaUOUJcA7WLKUZ/7 -----END CERTIFICATE-----Generated at Thu Sep 10 18:12:48 2026 by rpki-client