$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/687D7178B85D11EBB2E17F26C4F9AE02.roa File: 687D7178B85D11EBB2E17F26C4F9AE02.roa (raw, json) Hash identifier: ACAY/xzMAwRsaI6amyIZeaQ0gMp5jylI2sZ6rmvu9eo= Subject key identifier: 5B:76:CB:08:E9:1A:D3:4D:82:F2:56:20:76:3E:4B:D8:AF:88:A5:08 Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Certificate serial: 0722 Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/687D7178B85D11EBB2E17F26C4F9AE02.roa Signing time: Sun 18 Oct 2026 22:42:55 +0000 ROA not before: Sun 18 Oct 2026 22:42:55 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 132296 IP address blocks: 103.72.72.0/22 maxlen: 22 103.72.72.0/24 maxlen: 24 103.72.73.0/24 maxlen: 24 103.72.74.0/24 maxlen: 24 103.72.75.0/24 maxlen: 24 103.233.140.0/23 maxlen: 23 103.233.140.0/24 maxlen: 24 103.233.141.0/24 maxlen: 24 103.248.202.0/23 maxlen: 24 2406:b580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 21:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Validity Not Before: Oct 18 22:42:55 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ad54b6f-488e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:a0:3c:eb:20:7e:30:68:65:50:d5:77:fe: 9e:6b:c3:e0:e4:16:c0:df:e2:c1:44:c7:35:1a:65: 14:2e:ed:5c:4c:84:51:77:6f:4c:c6:36:08:cf:ef: 94:a2:fe:f6:d9:46:46:1e:8c:00:50:03:a4:9a:97: bb:2c:1d:55:98:d1:ba:a5:a7:5b:cf:da:f0:bc:fc: 81:d4:5e:37:ee:d0:e3:57:0e:d4:e0:44:fd:51:f2: 06:f1:fd:44:5e:fc:41:e5:d1:fd:32:6c:52:6b:59: 15:5a:2c:77:b4:23:96:bd:c1:90:55:72:8a:13:3c: cb:22:5c:bd:ab:e4:d7:08:73:91:6a:3a:57:9d:97: 29:42:6d:2d:ef:39:91:90:e2:f8:4a:53:64:b2:2b: 5a:e4:81:0d:14:35:a7:08:8a:d4:7b:85:65:2a:d7: f1:71:01:8f:3f:39:6a:4e:e4:4b:5f:7f:b5:bb:b5: 53:05:a3:cd:54:53:1a:e7:78:eb:b1:ef:f4:86:dc: 01:b3:65:f8:b5:65:23:0d:80:63:26:c9:0e:2a:62: 3c:db:05:ac:c5:2e:c9:06:12:e5:e4:c5:8c:a7:7e: 2b:14:86:a7:bc:e4:1f:53:c2:89:a2:d7:f2:b8:25: 1d:10:d1:2f:d0:c0:31:34:f0:5b:2b:d7:c3:f7:2b: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:76:CB:08:E9:1A:D3:4D:82:F2:56:20:76:3E:4B:D8:AF:88:A5:08 X509v3 Authority Key Identifier: keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/687D7178B85D11EBB2E17F26C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.72.72.0/22 103.233.140.0/23 103.248.202.0/23 IPv6: 2406:b580::/32 Signature Algorithm: sha256WithRSAEncryption 81:0c:7c:7d:43:c4:c9:73:28:b6:07:52:72:f7:8c:fb:01:cd: af:18:d2:e1:35:4a:70:ec:25:b7:00:12:b5:a1:f5:d2:74:1b: 48:bf:8b:93:ba:16:b5:c1:ae:81:92:21:4e:22:f1:36:8b:74: 2a:27:10:87:af:59:3b:65:71:f6:18:8d:c5:ac:9d:d0:c6:2c: a3:f4:f2:0b:6b:70:10:f7:40:a3:b8:eb:4e:73:ef:bb:41:1d: 95:df:97:45:a7:e9:eb:0f:30:d8:38:dc:56:b6:d4:d2:1a:12: 51:17:0d:a5:08:e2:99:7e:f4:bb:33:3d:57:04:67:e2:09:e2: b1:03:bf:df:5f:7f:3d:bf:f9:83:fe:1a:7b:e7:1c:da:6c:9b: 6b:64:40:f5:9f:44:0a:52:9c:69:29:fe:55:f1:da:70:ea:a8: 70:06:ae:30:3c:e4:2b:3d:3c:05:47:20:01:7b:74:30:42:61: ac:eb:44:0a:74:21:28:74:c5:fc:15:43:4f:88:de:b6:a4:5a: 64:81:0a:f7:76:33:2a:90:68:1c:d3:7a:e4:49:e9:ad:a7:62: d2:eb:6a:02:90:8c:23:5d:c2:f3:60:29:10:58:32:f5:44:bd: da:2b:4c:02:a1:d4:11:0d:85:af:68:5f:85:f1:45:89:ac:0b: 87:db:b1:3b -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMjgxMTAvBgNVBAUTKDgwOUVGRjFGNzgxOUI4MTc1MUYxNzdBQjVBRkVEODJC Q0MzMkE1NjkwHhcNMjYxMDE4MjI0MjU1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQ1NGI2Zi00ODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzagPOsgfjBoZVDVd/6ea8Pg5BbA3+LBRMc1GmUULu1cTIRRd29MxjYIz++U ov722UZGHowAUAOkmpe7LB1VmNG6padbz9rwvPyB1F437tDjVw7U4ET9UfIG8f1E XvxB5dH9MmxSa1kVWix3tCOWvcGQVXKKEzzLIly9q+TXCHORajpXnZcpQm0t7zmR kOL4SlNksita5IENFDWnCIrUe4VlKtfxcQGPPzlqTuRLX3+1u7VTBaPNVFMa53jr se/0htwBs2X4tWUjDYBjJskOKmI82wWsxS7JBhLl5MWMp34rFIanvOQfU8KJotfy uCUdENEv0MAxNPBbK9fD9yvSWQIDAQABo4ICezCCAncwHQYDVR0OBBYEFFt2ywjp GtNNgvJWIHY+S9iviKUIMB8GA1UdIwQYMBaAFICe/x94GbgXUfF3q1r+2CvMMqVp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAyOC84QTRBREVFNEEx MUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVCZFI4WGVyV3Y3WUs4d3lw V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKN19IM2dadUJkUjhYZXJXdjdZSzh3eXBXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgwMjgvOEE0QURFRTRBMTFGMTFFQjkzMzlENTBBQzRGOUFFMDIvNjg3RDcxNzhC ODVEMTFFQkIyRTE3RjI2QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ0hIAwQBZ+mMAwQBZ/jKMA0EAgACMAcDBQAkBrWAMA0GCSqGSIb3 DQEBCwUAA4IBAQCBDHx9Q8TJcyi2B1Jy94z7Ac2vGNLhNUpw7CW3ABK1ofXSdBtI v4uTuha1wa6BkiFOIvE2i3QqJxCHr1k7ZXH2GI3FrJ3Qxiyj9PILa3AQ90CjuOtO c++7QR2V35dFp+nrDzDYONxWttTSGhJRFw2lCOKZfvS7Mz1XBGfiCeKxA7/fX389 v/mD/hp75xzabJtrZED1n0QKUpxpKf5V8dpw6qhwBq4wPOQrPTwFRyABe3QwQmGs 60QKdCEodMX8FUNPiN62pFpkgQr3djMqkGgc03rkSemtp2LS62oCkIwjXcLzYCkQ WDL1RL3aK0wCodQRDYWvaF+F8UWJrAuH27E7 -----END CERTIFICATE-----Generated at Sun Oct 25 03:15:52 2026 by rpki-client