$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/879AF91C9A8C11EF98A18D7FC4F9AE02.roa File: 879AF91C9A8C11EF98A18D7FC4F9AE02.roa (raw, json) Hash identifier: gMz0ptlWHqhfygwT6wMdIE4ywFBtqD/2C+peTd3EFU0= Subject key identifier: 56:AA:88:77:87:7F:0A:48:C7:87:CD:AA:E7:8E:F6:7A:E9:B3:C5:5A Certificate issuer: /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Certificate serial: 0917 Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/879AF91C9A8C11EF98A18D7FC4F9AE02.roa Signing time: Fri 02 Oct 2026 20:41:32 +0000 ROA not before: Fri 02 Oct 2026 20:41:32 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 140995 IP address blocks: 103.154.158.0/24 maxlen: 24 2001:df4:8f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 20:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2327 (0x917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172EF8, serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Validity Not Before: Oct 2 20:41:32 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac016fc-abaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:3a:4f:be:87:e9:be:71:94:df:91:c1:5d: 82:92:04:14:9c:fc:11:f4:2c:ac:4e:8d:5e:1b:74: 9f:1b:41:97:fd:45:cb:e6:15:9d:ad:4b:66:7a:27: 82:88:a7:3f:af:92:bc:05:6c:f6:92:83:19:ca:e4: f3:5b:0b:76:e3:fa:dc:ff:86:69:55:2c:53:79:90: 0e:27:9f:9d:06:10:cb:d8:5d:1c:1a:74:e4:25:5b: ba:d2:73:ee:b5:7b:d4:c5:61:c1:75:06:a0:ab:7a: 74:cc:a2:9f:bf:64:60:15:26:5d:6c:9c:bc:d1:12: 4a:fe:a0:7f:a1:01:18:67:d9:5b:29:46:c5:02:10: f8:f6:4c:b3:65:9d:c8:6e:f4:b9:1c:6b:5b:1d:d9: 78:e3:41:d8:ce:ee:2b:ae:d4:b9:d6:e1:32:ac:9e: 22:64:c6:60:fb:a8:c2:aa:99:e6:8b:81:9a:67:43: 5b:a3:84:fc:ad:34:b0:32:5d:64:b8:79:ea:94:d2: 98:82:6f:b8:fd:d6:24:36:66:49:f4:8d:87:60:e2: 5b:56:76:62:5b:62:36:29:39:4c:30:2c:a9:0a:f4: 11:4e:16:bc:8f:b7:f2:ac:ef:5a:ac:0b:d1:c3:f1: 07:12:cf:f6:2e:f7:f5:35:8d:a0:ee:16:81:ef:bc: 63:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AA:88:77:87:7F:0A:48:C7:87:CD:AA:E7:8E:F6:7A:E9:B3:C5:5A X509v3 Authority Key Identifier: keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/879AF91C9A8C11EF98A18D7FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.158.0/24 IPv6: 2001:df4:8f80::/48 Signature Algorithm: sha256WithRSAEncryption a2:90:a4:98:a1:6e:90:f3:80:95:8f:f3:78:8e:12:a8:fd:80: 58:b7:e6:f0:fe:4f:26:51:63:94:71:eb:3b:a9:bf:32:ed:c3: 8a:09:73:2b:ad:2c:d1:a4:3f:e2:c0:36:89:89:8d:03:f0:99: 67:eb:0e:e4:b3:b9:40:cb:38:0c:b8:d7:c7:4b:09:d4:02:8b: 38:2c:ad:d2:69:be:86:d4:e7:cd:f6:6a:14:3e:2a:e0:f1:54: c4:16:74:6c:fd:65:7e:b3:96:9a:42:a7:2b:88:10:40:0d:77: 2c:f6:46:16:2e:87:36:5e:5e:f7:f6:44:c9:79:4e:c4:64:c1: 0b:70:57:3c:05:cd:ed:2c:e1:c8:72:4b:f3:c7:23:6f:4b:cd: 52:8e:08:00:63:ec:56:10:19:41:5c:ed:be:ef:19:d7:33:cc: 1e:a3:07:c5:2b:91:31:38:74:17:f5:72:35:65:ce:b2:e7:17: c7:dd:2e:28:62:ec:0b:40:d8:b3:56:e7:2c:b4:23:7f:c7:cd: 94:b2:a0:9e:77:d0:b8:3b:b2:ca:32:4b:8a:08:d2:57:49:9e: a5:05:bd:8f:3c:c6:b0:c0:28:c8:3f:e9:39:cb:9a:00:62:ca: 77:0d:ca:f6:4a:76:28:4d:df:f7:5d:13:98:c0:5f:b8:f6:79: e0:3b:6a:05 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFRjgxMTAvBgNVBAUTKEU4RERFQ0VDMTZGRTM0ODVENUI2MUE2NUE2MUVFQ0Q3 NUE5ODFCNDMwHhcNMjYxMDAyMjA0MTMyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMwMTZmYy1hYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsz06T76H6b5xlN+RwV2CkgQUnPwR9CysTo1eG3SfG0GX/UXL5hWdrUtmeieC iKc/r5K8BWz2koMZyuTzWwt24/rc/4ZpVSxTeZAOJ5+dBhDL2F0cGnTkJVu60nPu tXvUxWHBdQagq3p0zKKfv2RgFSZdbJy80RJK/qB/oQEYZ9lbKUbFAhD49kyzZZ3I bvS5HGtbHdl440HYzu4rrtS51uEyrJ4iZMZg+6jCqpnmi4GaZ0Nbo4T8rTSwMl1k uHnqlNKYgm+4/dYkNmZJ9I2HYOJbVnZiW2I2KTlMMCypCvQRTha8j7fyrO9arAvR w/EHEs/2Lvf1NY2g7haB77xjzwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFaqiHeH fwpIx4fNqueO9nrps8VaMB8GA1UdIwQYMBaAFOjd7OwW/jSF1bYaZaYe7NdamBtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkVGOC83N0Y5OEMzOERE OEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5JWFZ0aHBscGg3czExcVlH ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOM3M3QmItTklYVnRocGxwaDdzMTFxWUcwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJFRjgvNzdGOThDMzhERDhDMTFFQUJERjBFNjgyQzRGOUFFMDIvODc5QUY5MUM5 QThDMTFFRjk4QTE4RDdGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ5qeMA8EAgACMAkDBwAgAQ30j4AwDQYJKoZIhvcNAQELBQADggEB AKKQpJihbpDzgJWP83iOEqj9gFi35vD+TyZRY5Rx6zupvzLtw4oJcyutLNGkP+LA NomJjQPwmWfrDuSzuUDLOAy418dLCdQCizgsrdJpvobU5832ahQ+KuDxVMQWdGz9 ZX6zlppCpyuIEEANdyz2RhYuhzZeXvf2RMl5TsRkwQtwVzwFze0s4chyS/PHI29L zVKOCABj7FYQGUFc7b7vGdczzB6jB8UrkTE4dBf1cjVlzrLnF8fdLihi7AtA2LNW 5yy0I3/HzZSyoJ530Lg7ssoyS4oI0ldJnqUFvY88xrDAKMg/6TnLmgBiyncNyvZK dihN3/ddE5jAX7j2eeA7agU= -----END CERTIFICATE-----Generated at Tue Oct 6 01:27:02 2026 by rpki-client