$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/747C668ECCD911EF9B52C877C4F9AE02.roa File: 747C668ECCD911EF9B52C877C4F9AE02.roa (raw, json) Hash identifier: sSCsbAespKsi6vl2psJYVlnWWlGIuiPTWax+dVAB//o= Subject key identifier: 88:F7:D7:20:E9:02:7D:76:6A:00:14:BA:B3:05:8E:23:59:96:13:77 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: 01B0 Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/747C668ECCD911EF9B52C877C4F9AE02.roa Signing time: Tue 13 Oct 2026 05:54:52 +0000 ROA not before: Tue 13 Oct 2026 05:54:52 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 153325 IP address blocks: 103.151.248.0/24 maxlen: 24 103.251.25.0/24 maxlen: 24 116.206.148.0/24 maxlen: 24 116.206.150.0/24 maxlen: 24 203.19.243.0/24 maxlen: 24 223.26.16.0/24 maxlen: 24 223.26.17.0/24 maxlen: 24 223.26.18.0/24 maxlen: 24 223.26.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: Oct 13 05:54:52 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acdc7ac-6f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:31:36:da:69:84:45:25:00:ef:96:7a:b1: 91:c8:ea:8e:2f:18:12:62:25:44:94:40:88:18:ac: b4:27:df:03:1a:c8:da:0d:24:34:fc:82:d7:71:98: 56:3d:73:04:ae:a6:0e:8b:13:bf:4c:7e:f4:21:ae: db:b9:ed:54:1a:d7:e7:4a:7e:1e:d5:97:b1:f7:33: 72:14:c6:f2:95:4f:7e:95:65:00:0c:92:5c:e5:e3: 38:ff:4d:98:74:21:e5:99:aa:b8:c6:bb:14:bd:ea: 09:27:ba:29:f6:d3:a9:d6:cd:cc:41:92:b5:3b:17: f9:fd:47:62:ac:41:89:84:ac:6e:ad:6e:27:0d:44: 48:f2:aa:fb:ed:91:c1:52:c4:ed:ad:b2:25:e7:21: f2:e2:3d:f2:f3:00:8d:1d:d3:b0:37:ba:39:97:3e: 2f:15:b1:5a:ae:8b:78:63:8e:5d:1a:89:65:d7:b5: cb:69:95:0e:8c:4d:a1:ab:26:9f:96:dd:30:c5:98: 37:6d:c8:73:a9:c0:6d:23:0c:4e:e3:dd:76:3b:c6: 12:de:02:c0:15:12:fb:4a:a9:f9:4f:e7:2e:74:cf: fe:b6:57:07:0a:54:84:ef:35:ac:6a:40:a0:45:b2: 9c:49:c6:b8:39:a1:3b:71:eb:c0:a6:ce:d3:62:46: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F7:D7:20:E9:02:7D:76:6A:00:14:BA:B3:05:8E:23:59:96:13:77 X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/747C668ECCD911EF9B52C877C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.151.248.0/24 103.251.25.0/24 116.206.148.0/24 116.206.150.0/24 203.19.243.0/24 223.26.16.0/22 Signature Algorithm: sha256WithRSAEncryption 24:fd:7b:2c:e6:03:dd:46:56:63:78:85:87:ea:74:6a:d0:6a: 3d:ab:15:71:d5:c0:d1:2e:84:1d:6a:95:ea:38:7d:a2:ad:20: 1c:bb:6e:06:7b:6e:51:58:10:57:30:c7:f1:e3:9b:59:62:d2: ba:04:8a:34:00:14:6e:80:c5:09:91:bc:26:38:2f:62:7d:f3: 94:95:ac:1a:a9:b3:35:ac:1b:34:d3:e2:c4:b1:69:18:02:0c: 1e:5e:2b:96:80:c7:be:25:cd:c7:77:74:20:f4:be:e9:dd:4e: bd:11:d6:3d:b6:37:1f:e9:f5:75:e9:c4:6c:6e:1e:d7:15:2b: 87:b2:e8:7b:0e:6d:02:98:f2:32:a6:9a:13:a4:c7:3b:2e:dc: 83:43:1a:a9:76:30:8f:6d:86:f8:b2:b9:ab:f6:92:38:49:65: 3f:b9:20:16:8f:0b:25:98:80:be:c9:a3:bb:15:e0:f4:23:7e: 57:47:db:fc:ca:04:91:77:71:73:b4:b4:2d:44:12:a1:5a:f7: 36:17:e5:bd:bb:89:cf:7d:99:50:ae:2c:63:2f:1c:f9:dd:4f: 0e:c1:8a:eb:a7:a4:de:cb:c1:34:9e:b0:7e:af:0c:c2:63:6f: e8:66:ae:04:cf:98:a0:2f:d9:83:b2:fd:53:c8:9c:04:8d:c6: 08:3a:d0:03 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKDY1RTE3NzBFNzg4NTUxMEExOENFOTBEOEFBREQ5RURF N0Q1QjM1NTMwHhcNMjYxMDEzMDU1NDUyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkYzdhYy02ZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLMxNtpphEUlAO+WerGRyOqOLxgSYiVElECIGKy0J98DGsjaDSQ0/ILXcZhW PXMErqYOixO/TH70Ia7bue1UGtfnSn4e1Zex9zNyFMbylU9+lWUADJJc5eM4/02Y dCHlmaq4xrsUveoJJ7op9tOp1s3MQZK1Oxf5/UdirEGJhKxurW4nDURI8qr77ZHB UsTtrbIl5yHy4j3y8wCNHdOwN7o5lz4vFbFarot4Y45dGoll17XLaZUOjE2hqyaf lt0wxZg3bchzqcBtIwxO4912O8YS3gLAFRL7Sqn5T+cudM/+tlcHClSE7zWsakCg RbKcSca4OaE7cevAps7TYkb9nQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIj31yDp An12agAUurMFjiNZlhN3MB8GA1UdIwQYMBaAFGXhdw54hVEKGM6Q2Krdnt59WzVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi81MjFDOEU1Qzcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVRb1l6cERZcXQyZTNuMWJO Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5WTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE5MzIvNTIxQzhFNUM3MjA3MTFFRjlEQzhCQTIxQzRGOUFFMDIvNzQ3QzY2OEVD Q0Q5MTFFRjlCNTJDODc3QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQAZ5f4AwQAZ/sZAwQAdM6UAwQAdM6WAwQAyxPzAwQC3xoQMA0GCSqG SIb3DQEBCwUAA4IBAQAk/Xss5gPdRlZjeIWH6nRq0Go9qxVx1cDRLoQdapXqOH2i rSAcu24Ge25RWBBXMMfx45tZYtK6BIo0ABRugMUJkbwmOC9iffOUlawaqbM1rBs0 0+LEsWkYAgweXiuWgMe+Jc3Hd3Qg9L7p3U69EdY9tjcf6fV16cRsbh7XFSuHsuh7 Dm0CmPIyppoTpMc7LtyDQxqpdjCPbYb4srmr9pI4SWU/uSAWjwslmIC+yaO7FeD0 I35XR9v8ygSRd3FztLQtRBKhWvc2F+W9u4nPfZlQrixjLxz53U8OwYrrp6Tey8E0 nrB+rwzCY2/oZq4Ez5igL9mDsv1TyJwEjcYIOtAD -----END CERTIFICATE-----Generated at Wed Oct 28 22:48:24 2026 by rpki-client