$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/D872E50C86EE11F19E006003A7EE528E.roa File: D872E50C86EE11F19E006003A7EE528E.roa (raw, json) Hash identifier: ZuGgcBUFcvSWIyeZQHBhz0uzOWmkBJCKhLxT+V0xfVw= Subject key identifier: 08:0A:55:98:AA:B0:D2:0F:95:C9:A9:60:24:FF:24:19:8A:5A:94:C6 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 263D Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/D872E50C86EE11F19E006003A7EE528E.roa Signing time: Mon 12 Oct 2026 16:23:15 +0000 ROA not before: Mon 12 Oct 2026 16:23:15 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 38800 IP address blocks: 103.154.194.0/23 maxlen: 23 103.154.194.0/24 maxlen: 24 103.154.195.0/24 maxlen: 24 182.50.168.0/22 maxlen: 24 202.87.208.0/22 maxlen: 24 203.99.156.0/22 maxlen: 24 2402:ae80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 15:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9789 (0x263d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: Oct 12 16:23:15 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6acd0973-f2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f0:0d:ce:4d:a3:8b:4f:a1:03:04:4c:1f:01: f2:1f:fc:f2:b1:ca:fe:ff:4e:78:18:e3:ab:f9:69: 74:5d:5a:55:a6:42:58:04:e1:77:bb:77:83:d6:79: 0d:5d:29:1d:18:87:bd:a6:c4:bb:34:6b:9c:8d:ce: 0c:28:6e:a3:2b:09:02:e9:7c:52:f5:ae:66:be:35: d5:36:51:db:2b:2a:48:77:eb:5f:b5:14:af:dd:38: 17:8c:52:70:1e:17:cc:3d:f1:a3:3b:94:40:cd:44: a6:01:86:5a:98:3f:b5:cd:62:ee:3d:6f:d0:c3:52: d0:fa:3d:eb:c7:7f:83:fe:62:64:13:6f:50:ab:fa: bf:33:3d:62:36:6d:94:21:2b:b7:35:e5:08:a2:87: c4:3d:94:50:8b:00:18:18:98:be:87:e0:f4:76:ec: dd:11:6c:3b:62:dc:a1:43:08:27:f0:6c:7a:94:d3: 31:21:ac:a0:cc:b1:d2:84:ed:d8:47:e0:d0:7f:09: 32:c3:3f:3e:19:f5:03:c3:4b:b2:a7:7d:3f:c9:30: b6:50:97:1f:54:59:3b:15:d1:31:1f:25:48:26:35: fe:f2:23:92:ec:c1:c5:7b:cf:c9:4e:36:10:5f:e9: e1:3f:42:8f:9e:bd:40:d3:01:1e:09:d0:ba:3c:eb: 5a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0A:55:98:AA:B0:D2:0F:95:C9:A9:60:24:FF:24:19:8A:5A:94:C6 X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/D872E50C86EE11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.154.194.0/23 182.50.168.0/22 202.87.208.0/22 203.99.156.0/22 IPv6: 2402:ae80::/32 Signature Algorithm: sha256WithRSAEncryption 43:fa:e8:e8:4e:e6:db:d0:88:1d:bd:c0:91:48:0b:38:e0:4b: 7d:48:97:8b:81:82:47:eb:2a:5f:2d:1a:10:d4:87:ef:19:5a: 0f:11:59:e1:e0:2f:22:4e:da:98:00:25:45:1a:8c:f0:fb:4b: f7:15:2e:a6:0b:0e:10:d0:38:37:e1:82:f3:38:fc:5d:0d:61: 30:34:53:c7:7e:f7:51:a0:64:ef:e1:5b:bb:2d:c9:06:e3:75: 1d:44:f8:c9:37:1f:d4:7d:0b:f3:79:c7:ae:97:df:cc:13:c0: 08:b4:bf:6b:93:21:2f:4f:61:ef:e0:8c:3d:29:0d:50:fb:3c: e7:56:1f:a8:84:6e:e0:98:11:f6:8a:c8:dc:f5:6b:ba:7e:5d: 2a:83:de:7e:a2:51:2d:1b:dd:dd:b9:27:a1:23:f3:18:6d:d0: 96:45:61:36:1a:75:57:97:17:89:36:5a:e3:66:ef:75:a3:1a: 15:8f:c2:65:bb:3e:d5:cd:70:32:91:c5:f9:32:ac:07:37:b7: f7:64:68:02:04:9d:a5:49:e4:df:da:a6:6f:33:85:ba:ab:d5: f0:a7:ef:02:58:7f:e6:1d:76:8c:18:3c:b9:25:2c:d2:88:0e: f9:0d:fb:f9:ae:40:79:f8:52:77:dc:a5:ee:d8:5d:d9:57:34: 15:1d:81:19 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICJj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjYxMDEyMTYyMzE1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkMDk3My1mMmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/ANzk2ji0+hAwRMHwHyH/zyscr+/054GOOr+Wl0XVpVpkJYBOF3u3eD1nkN XSkdGIe9psS7NGucjc4MKG6jKwkC6XxS9a5mvjXVNlHbKypId+tftRSv3TgXjFJw HhfMPfGjO5RAzUSmAYZamD+1zWLuPW/Qw1LQ+j3rx3+D/mJkE29Qq/q/Mz1iNm2U ISu3NeUIoofEPZRQiwAYGJi+h+D0duzdEWw7YtyhQwgn8Gx6lNMxIaygzLHShO3Y R+DQfwkywz8+GfUDw0uyp30/yTC2UJcfVFk7FdExHyVIJjX+8iOS7MHFe8/JTjYQ X+nhP0KPnr1A0wEeCdC6POtaUQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFAgKVZiq sNIPlcmpYCT/JBmKWpTGMB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY0MzgvQjdFRjUzRkUyQjRFMTFFNUFDQkJERjNBQzRGOUFFMDIvRDg3MkU1MEM4 NkVFMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQBZ5rCAwQCtjKoAwQCylfQAwQCy2OcMA0EAgACMAcDBQAkAq6AMA0G CSqGSIb3DQEBCwUAA4IBAQBD+ujoTubb0IgdvcCRSAs44Et9SJeLgYJH6ypfLRoQ 1IfvGVoPEVnh4C8iTtqYACVFGozw+0v3FS6mCw4Q0Dg34YLzOPxdDWEwNFPHfvdR oGTv4Vu7LckG43UdRPjJNx/UfQvzeceul9/ME8AItL9rkyEvT2Hv4Iw9KQ1Q+zzn Vh+ohG7gmBH2isjc9Wu6fl0qg95+olEtG93duSehI/MYbdCWRWE2GnVXlxeJNlrj Zu91oxoVj8Jluz7VzXAykcX5MqwHN7f3ZGgCBJ2lSeTf2qZvM4W6q9Xwp+8CWH/m HXaMGDy5JSzSiA75Dfv5rkB5+FJ33KXu2F3ZVzQVHYEZ -----END CERTIFICATE-----Generated at Sat Oct 31 15:23:04 2026 by rpki-client