$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/1A302138448311EDB0572C4CC4F9AE02.roa File: 1A302138448311EDB0572C4CC4F9AE02.roa (raw, json) Hash identifier: MRcKSGRFYJf8cnQm7tu7BzVZBZdhD0H2CFY4n8nd0BE= Subject key identifier: C0:6B:34:EB:4B:9F:FB:00:AF:45:01:B8:EE:06:3F:69:62:9F:DA:4F Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 02F6 Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/1A302138448311EDB0572C4CC4F9AE02.roa Signing time: Wed 07 Oct 2026 01:50:13 +0000 ROA not before: Wed 07 Oct 2026 01:50:13 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132829 IP address blocks: 103.158.92.0/23 maxlen: 23 103.158.92.0/24 maxlen: 24 103.158.93.0/24 maxlen: 24 2400:a5e0::/32 maxlen: 32 2400:a5e0::/48 maxlen: 48 2400:a5e0:1::/48 maxlen: 48 2400:a5e0:2::/48 maxlen: 48 2400:a5e0:3::/48 maxlen: 48 2400:a5e0:4::/48 maxlen: 48 2400:a5e0:5::/48 maxlen: 48 2400:a5e0:6::/48 maxlen: 48 2400:a5e0:7::/48 maxlen: 48 2400:a5e0:8::/48 maxlen: 48 2400:a5e0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 01:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 758 (0x2f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Oct 7 01:50:13 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac5a554-ac2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:a9:10:53:ce:d1:d8:0b:a4:1a:3e:2d:c5: 97:07:7e:33:64:66:64:d5:72:f4:e3:73:3e:d4:f1: d1:4f:43:42:a1:7a:5f:02:31:b5:9d:9a:34:cc:1a: 94:44:50:b9:bc:aa:45:24:d1:8f:6d:b2:b5:7e:61: 31:d2:7b:b4:07:17:b2:60:f9:28:df:cc:33:0c:de: 00:be:88:74:77:53:7a:52:57:0b:85:bb:2b:94:b3: 15:03:ef:24:c1:4f:67:7b:ca:61:93:44:3e:45:36: 62:db:49:ca:ab:b0:1d:25:23:24:56:c8:89:24:4e: e5:8e:5d:34:f5:6f:7b:2a:0e:b2:4a:ff:02:2f:ea: 35:83:35:71:a3:e2:80:9d:bb:79:b3:41:c0:d1:cd: 4b:25:42:a1:f9:74:1c:44:44:bf:25:66:c3:6a:57: 2a:e4:9a:59:42:c2:24:32:b3:01:71:e3:87:5f:4b: 6e:4d:02:66:dc:a4:68:df:77:1e:e9:48:8b:5e:13: 5d:97:fe:39:d2:19:0f:42:4e:91:07:ad:94:a2:bc: 20:80:92:36:dc:53:b1:d9:72:2e:6d:ed:c1:b0:22: 93:d4:b8:69:f4:8c:dd:d2:25:21:98:57:5b:16:31: 5e:a1:ff:00:fc:2a:91:3c:90:a6:88:50:fc:45:50: 97:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6B:34:EB:4B:9F:FB:00:AF:45:01:B8:EE:06:3F:69:62:9F:DA:4F X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/1A302138448311EDB0572C4CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.158.92.0/23 IPv6: 2400:a5e0::/32 Signature Algorithm: sha256WithRSAEncryption 19:35:38:7a:b0:8e:57:98:fe:94:46:6e:9d:47:92:52:c7:1d: f7:32:8c:b9:6a:3a:78:f7:2f:06:09:86:e0:d5:78:89:90:71: 2d:77:4b:6e:f8:cc:fa:02:47:a4:b6:81:01:14:6f:82:68:1a: 70:54:32:e0:91:0f:c6:78:1f:af:db:83:5f:8c:a4:ac:60:97: 88:8c:45:30:5e:03:80:4d:8a:9c:94:51:b2:ca:4b:4f:74:03: e6:75:0e:62:aa:87:9a:2e:73:96:f0:ae:74:09:e1:2b:b9:96: ef:a5:92:0f:17:93:2e:67:15:3b:d2:2a:fa:90:8b:7a:cb:25: 21:5c:a8:3a:de:a5:ac:ac:d9:fc:2e:ad:95:ed:46:a0:42:6f: 14:b3:0f:f4:55:1e:75:ef:b4:66:22:96:61:dc:32:4a:ab:3e: b2:2a:ea:67:f0:d2:c1:67:0d:37:7f:12:a2:7d:d3:21:9f:0f: f5:41:7a:bb:0a:2c:53:32:5d:2d:72:e2:93:4e:0a:46:95:f4: 81:25:21:ed:95:b9:a5:1d:5f:35:27:6d:be:ba:a6:75:8d:97: f5:fb:2e:06:b5:2c:09:11:83:9d:ba:21:f2:dd:d4:fa:66:26: 76:8f:a0:77:84:da:83:27:f1:aa:5a:9c:a6:d6:06:38:99:f0: da:67:2c:76 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjYxMDA3MDE1MDEzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM1YTU1NC1hYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMSpEFPO0dgLpBo+LcWXB34zZGZk1XL043M+1PHRT0NCoXpfAjG1nZo0zBqU RFC5vKpFJNGPbbK1fmEx0nu0BxeyYPko38wzDN4Avoh0d1N6UlcLhbsrlLMVA+8k wU9ne8phk0Q+RTZi20nKq7AdJSMkVsiJJE7ljl009W97Kg6ySv8CL+o1gzVxo+KA nbt5s0HA0c1LJUKh+XQcRES/JWbDalcq5JpZQsIkMrMBceOHX0tuTQJm3KRo33ce 6UiLXhNdl/450hkPQk6RB62UorwggJI23FOx2XIube3BsCKT1Lhp9Izd0iUhmFdb FjFeof8A/CqRPJCmiFD8RVCXlQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMBrNOtL n/sAr0UBuO4GP2lin9pPMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjJGRjIvMzIxMEQ2QzY0NDdFMTFFRDk0OEQ0NDJGQzRGOUFFMDIvMUEzMDIxMzg0 NDgzMTFFREIwNTcyQzRDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ55cMA0EAgACMAcDBQAkAKXgMA0GCSqGSIb3DQEBCwUAA4IBAQAZ NTh6sI5XmP6URm6dR5JSxx33Moy5ajp49y8GCYbg1XiJkHEtd0tu+Mz6AkektoEB FG+CaBpwVDLgkQ/GeB+v24NfjKSsYJeIjEUwXgOATYqclFGyyktPdAPmdQ5iqoea LnOW8K50CeEruZbvpZIPF5MuZxU70ir6kIt6yyUhXKg63qWsrNn8Lq2V7UagQm8U sw/0VR5177RmIpZh3DJKqz6yKupn8NLBZw03fxKifdMhnw/1QXq7CixTMl0tcuKT TgpGlfSBJSHtlbmlHV81J22+uqZ1jZf1+y4GtSwJEYOduiHy3dT6ZiZ2j6B3hNqD J/GqWpym1gY4mfDaZyx2 -----END CERTIFICATE-----Generated at Thu Oct 15 05:55:46 2026 by rpki-client