$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/EF33F6CCD16911F08AEFD95BC4F9AE02.roa File: EF33F6CCD16911F08AEFD95BC4F9AE02.roa (raw, json) Hash identifier: Z0QtZMlmBIXI6vlQlvMDycSEHCvU1S1Ni8aOs0GFcPI= Subject key identifier: D8:CB:97:18:68:2A:AD:F2:8B:DB:0E:C3:1E:52:93:0F:44:25:F1:4D Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 051F Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/EF33F6CCD16911F08AEFD95BC4F9AE02.roa Signing time: Thu 01 Oct 2026 00:47:11 +0000 ROA not before: Thu 01 Oct 2026 00:47:11 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136526 IP address blocks: 103.99.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 21:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1311 (0x51f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Oct 1 00:47:11 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abdad8f-df0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3a:f7:54:08:c9:4f:a9:50:a8:83:87:b5:f4: a0:b2:ce:86:fb:61:69:d8:58:bf:56:05:3d:6c:8b: 38:da:e9:41:c4:42:8b:65:6b:6b:15:0e:79:38:1e: b0:64:f9:02:bc:88:a7:70:d0:db:28:dc:f2:2a:29: ce:dd:e2:df:fc:cd:2f:2e:ed:57:98:a7:c7:57:4e: e4:a4:2d:80:3e:cf:14:29:e4:4d:2d:c2:16:e0:4d: ea:59:49:36:a0:01:cc:49:08:27:96:d2:9a:05:6b: e0:6a:fd:f0:9b:68:4f:c0:67:48:82:b1:16:38:a5: 6d:fc:a9:db:6d:70:37:c4:d6:85:7a:dc:85:70:c0: 74:6b:40:c9:73:37:53:da:af:fb:eb:04:8a:a4:fb: 9b:5f:b3:c8:ea:85:3b:de:8d:5e:9e:8f:b5:de:9c: 02:7c:a6:b5:41:27:30:24:fd:22:7a:28:ce:da:a8: e6:ce:72:31:10:12:81:bc:fb:a7:b0:05:5d:9b:10: 2f:e8:cd:ec:20:be:6c:e1:e8:e1:bd:ee:b2:51:35: f5:6b:af:38:f3:02:ba:a3:c0:57:0f:ce:d4:dc:87: 22:b8:5d:98:a8:8f:3f:a7:3c:12:f5:01:ef:34:d0: 25:4e:03:a7:88:69:ca:a6:7d:88:60:3b:1e:d3:dc: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CB:97:18:68:2A:AD:F2:8B:DB:0E:C3:1E:52:93:0F:44:25:F1:4D X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/EF33F6CCD16911F08AEFD95BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.208.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:f3:4b:12:c2:57:cc:1a:e5:80:02:77:52:fc:08:d2:10:89: 89:4b:3a:5f:99:f2:aa:cd:54:85:1f:75:ee:48:1b:0c:64:84: bb:2e:21:a0:fa:50:b9:7b:8d:7b:2a:d8:65:0a:84:fd:50:1a: d8:49:53:c5:e7:9e:4e:0d:1e:54:f4:d8:af:89:d5:60:2d:da: 59:4d:60:d8:99:89:e3:f3:8b:2c:6b:6f:cf:52:07:db:53:85: d4:c4:2b:4b:81:2f:09:a1:93:c6:8d:36:df:8d:37:26:de:1d: f1:d7:a6:6c:cd:d9:50:b5:31:c6:dc:1a:d4:4d:39:b5:02:fa: 8f:b6:93:95:14:b7:0a:83:38:e3:34:3d:9c:7c:6f:92:47:2c: b4:c5:3a:30:61:f3:cc:75:40:7a:c4:bd:28:8d:6c:fe:ca:ad: c5:65:64:ec:e5:cf:84:b8:b9:a8:37:6b:cd:f2:c9:b9:54:2b: 44:c6:48:3b:63:0b:93:4d:1e:9c:70:6e:3f:d9:35:f2:d2:27: ea:5f:75:bb:11:17:61:a3:02:5d:6b:0d:10:d5:63:5b:c7:74: d0:60:ab:5b:cc:41:72:79:90:4f:9d:63:a0:e9:f5:11:87:a9: 2a:33:ea:1c:48:97:e8:ab:0c:59:4e:2a:bd:9c:c0:f1:9f:c8: fd:28:d6:88 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjYxMDAxMDA0NzExWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkYWQ4Zi1kZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Tr3VAjJT6lQqIOHtfSgss6G+2Fp2Fi/VgU9bIs42ulBxEKLZWtrFQ55OB6w ZPkCvIincNDbKNzyKinO3eLf/M0vLu1XmKfHV07kpC2APs8UKeRNLcIW4E3qWUk2 oAHMSQgnltKaBWvgav3wm2hPwGdIgrEWOKVt/KnbbXA3xNaFetyFcMB0a0DJczdT 2q/76wSKpPubX7PI6oU73o1eno+13pwCfKa1QScwJP0ieijO2qjmznIxEBKBvPun sAVdmxAv6M3sIL5s4ejhve6yUTX1a6848wK6o8BXD87U3IciuF2YqI8/pzwS9QHv NNAlTgOniGnKpn2IYDse09wkcwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNjLlxho Kq3yi9sOwx5Skw9EJfFNMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU5QzEvRUU3MDJGNDQ3QUM5MTFFQzlEQTU1QjQ2QzRGOUFFMDIvRUYzM0Y2Q0NE MTY5MTFGMDhBRUZEOTVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ2PQMA0GCSqGSIb3DQEBCwUAA4IBAQBf80sSwlfMGuWAAndS/AjS EImJSzpfmfKqzVSFH3XuSBsMZIS7LiGg+lC5e417KthlCoT9UBrYSVPF555ODR5U 9NividVgLdpZTWDYmYnj84ssa2/PUgfbU4XUxCtLgS8JoZPGjTbfjTcm3h3x16Zs zdlQtTHG3BrUTTm1AvqPtpOVFLcKgzjjND2cfG+SRyy0xTowYfPMdUB6xL0ojWz+ yq3FZWTs5c+EuLmoN2vN8sm5VCtExkg7YwuTTR6ccG4/2TXy0ifqX3W7ERdhowJd aw0Q1WNbx3TQYKtbzEFyeZBPnWOg6fURh6kqM+ocSJfoqwxZTiq9nMDxn8j9KNaI -----END CERTIFICATE-----Generated at Sun Oct 25 03:13:38 2026 by rpki-client