$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/513421B0E3AB11EF9C68465CC4F9AE02.roa File: 513421B0E3AB11EF9C68465CC4F9AE02.roa (raw, json) Hash identifier: jqzNwbz0q3EkVTPWJRKnFmQbQOsb/fwgbvqdL5jgG3k= Subject key identifier: 26:54:C0:8B:FF:1A:8C:C5:01:72:6E:33:55:AC:B4:42:1E:22:3D:F3 Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Certificate serial: 0D3C Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/513421B0E3AB11EF9C68465CC4F9AE02.roa Signing time: Sat 26 Sep 2026 18:36:39 +0000 ROA not before: Sat 26 Sep 2026 18:36:39 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 138146 IP address blocks: 103.121.60.0/24 maxlen: 24 103.121.61.0/24 maxlen: 24 103.121.62.0/24 maxlen: 24 103.121.63.0/24 maxlen: 24 2403:6840::/32 maxlen: 40 2403:6840::/48 maxlen: 48 2403:6840:1::/48 maxlen: 48 2403:6840:2::/48 maxlen: 48 2403:6840:3::/48 maxlen: 48 2403:6840:4::/48 maxlen: 48 2403:6840:5::/48 maxlen: 48 2403:6840:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3388 (0xd3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Validity Not Before: Sep 26 18:36:39 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab810b7-8394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:ba:e9:7e:8b:17:30:21:40:09:02:39:80: 4a:b1:fe:41:97:1a:45:70:2d:76:f1:34:f6:f3:42: 22:db:93:61:5a:58:c4:3e:b7:6f:b0:aa:00:09:4c: 77:fa:20:5b:95:26:cb:24:53:e9:01:fd:9b:7b:26: 86:1c:99:1f:af:d1:9b:2f:06:84:56:03:7f:1a:7f: 62:c1:32:bf:8b:bd:5c:fd:31:27:ff:62:6f:a9:33: f6:40:66:6e:3d:5f:88:a0:f5:a2:b3:5f:58:7b:85: 20:69:df:79:ee:23:e4:32:f3:5d:f2:54:af:90:83: a7:10:c4:53:2a:5e:1e:ec:b9:fc:50:86:c0:9c:e6: 45:d6:5b:64:7a:f5:52:73:bc:97:71:34:db:96:1e: 2c:21:1e:0f:a4:e5:c7:c6:e1:bc:2d:37:10:05:ae: 45:b0:12:1d:6f:7e:5e:a6:8d:34:8b:a3:78:24:fc: 09:c8:e5:38:28:21:f9:d6:31:36:98:1e:06:06:4f: a4:e9:53:0b:f9:27:fb:ca:e5:19:5d:16:25:45:a9: ab:5f:8a:ca:93:34:06:8e:9c:21:5a:b1:f1:64:ea: 6c:e6:4e:05:72:e1:63:e1:6f:7a:86:49:ef:24:24: 01:cf:be:35:5c:93:85:8e:ce:e7:61:fb:27:36:84: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:54:C0:8B:FF:1A:8C:C5:01:72:6E:33:55:AC:B4:42:1E:22:3D:F3 X509v3 Authority Key Identifier: keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/513421B0E3AB11EF9C68465CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.60.0/22 IPv6: 2403:6840::/32 Signature Algorithm: sha256WithRSAEncryption 8e:88:b7:45:9a:91:1c:d0:26:a1:6d:2c:20:a1:23:08:3c:8c: 3a:72:a8:83:ab:09:39:60:1f:1b:63:b1:14:fa:ea:09:6b:4f: 6a:41:88:10:d8:fe:aa:74:e5:d7:4c:60:ba:ac:f3:a7:bc:7f: b9:7e:e2:24:2c:2a:3d:a0:f1:b3:cb:6c:a8:14:43:78:54:6e: 8b:15:b8:77:5a:0b:02:03:56:0a:3b:86:12:32:9a:94:c4:b6: 23:41:14:d6:7d:dd:4c:49:44:b1:b6:f2:33:6e:4d:8a:42:2d: 42:30:fd:a5:ca:bc:a4:18:a1:da:75:55:e5:23:9f:10:79:78: 3f:3a:0e:ed:b3:70:0d:0c:0e:56:98:55:b2:ca:5b:42:38:94: fb:5b:5e:b5:fd:5e:75:dd:59:5e:25:20:77:75:28:5a:b0:8c: 5a:29:81:44:f8:01:96:c9:f3:95:af:35:31:07:db:df:76:85: 59:21:86:4d:0d:44:26:db:60:6f:28:b9:fc:f5:43:a9:06:bb: ef:94:ae:03:54:85:9f:1b:1c:f8:3d:81:3d:11:b9:3c:c9:8b: 77:f4:2b:23:8d:cb:53:33:6b:04:fc:39:b6:8d:b6:87:8e:9b: 58:62:b3:2a:fc:c6:c2:f4:ff:c1:ff:d1:e5:ce:b5:24:c5:d6: a9:f4:9a:3c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NDAxMTAvBgNVBAUTKEZBRTYyMDFDNjY2MzkyMzQwQkVFMTM4RUQ0MTc5OUJB ODZEQUE2ODgwHhcNMjYwOTI2MTgzNjM5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI4MTBiNy04Mzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRC66X6LFzAhQAkCOYBKsf5BlxpFcC128TT280Ii25NhWljEPrdvsKoACUx3 +iBblSbLJFPpAf2beyaGHJkfr9GbLwaEVgN/Gn9iwTK/i71c/TEn/2JvqTP2QGZu PV+IoPWis19Ye4Ugad957iPkMvNd8lSvkIOnEMRTKl4e7Ln8UIbAnOZF1ltkevVS c7yXcTTblh4sIR4PpOXHxuG8LTcQBa5FsBIdb35epo00i6N4JPwJyOU4KCH51jE2 mB4GBk+k6VML+Sf7yuUZXRYlRamrX4rKkzQGjpwhWrHxZOps5k4FcuFj4W96hknv JCQBz741XJOFjs7nYfsnNoR3vwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCZUwIv/ GozFAXJuM1WstEIeIj3zMB8GA1UdIwQYMBaAFPrmIBxmY5I0C+4TjtQXmbqG2qaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg0MC82MTc3MzMyQTBC ODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtqUUw3aE9PMUJlWnVvYmFw b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11WWdIR1pqa2pRTDdoT08xQmVadW9iYXBvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg4NDAvNjE3NzMzMkEwQjgyMTFFQTgwNDExNTRCQzRGOUFFMDIvNTEzNDIxQjBF M0FCMTFFRjlDNjg0NjVDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3k8MA0EAgACMAcDBQAkA2hAMA0GCSqGSIb3DQEBCwUAA4IBAQCO iLdFmpEc0CahbSwgoSMIPIw6cqiDqwk5YB8bY7EU+uoJa09qQYgQ2P6qdOXXTGC6 rPOnvH+5fuIkLCo9oPGzy2yoFEN4VG6LFbh3WgsCA1YKO4YSMpqUxLYjQRTWfd1M SUSxtvIzbk2KQi1CMP2lyrykGKHadVXlI58QeXg/Og7ts3ANDA5WmFWyyltCOJT7 W161/V513VleJSB3dShasIxaKYFE+AGWyfOVrzUxB9vfdoVZIYZNDUQm22BvKLn8 9UOpBrvvlK4DVIWfGxz4PYE9Ebk8yYt39CsjjctTM2sE/Dm2jbaHjptYYrMq/MbC 9P/B/9HlzrUkxdap9Jo8 -----END CERTIFICATE-----Generated at Sun Oct 4 17:04:07 2026 by rpki-client