$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/EF14DD34B6E211EAB3BA9536C4F9AE02.roa File: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (raw, json) Hash identifier: 3bDomSWxzZmFd9K4NUh5rneQ95kaPkOYk8YbxDfqyvk= Subject key identifier: D5:1B:C3:2E:FC:1A:82:1E:AB:55:71:63:38:93:80:68:06:7B:1A:04 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0D14 Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/EF14DD34B6E211EAB3BA9536C4F9AE02.roa Signing time: Thu 06 Aug 2026 18:36:42 +0000 ROA not before: Thu 06 Aug 2026 18:36:42 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 136224 IP address blocks: 103.192.156.0/22 maxlen: 22 103.192.156.0/23 maxlen: 23 103.192.156.0/24 maxlen: 24 103.192.157.0/24 maxlen: 24 103.192.158.0/23 maxlen: 23 103.192.158.0/24 maxlen: 24 103.192.159.0/24 maxlen: 24 202.91.40.0/22 maxlen: 22 202.91.40.0/23 maxlen: 23 202.91.40.0/24 maxlen: 24 202.91.41.0/24 maxlen: 24 202.91.42.0/23 maxlen: 23 202.91.42.0/24 maxlen: 24 202.91.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3348 (0xd14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Validity Not Before: Aug 6 18:36:42 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a74d43a-2c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fa:d8:6b:ae:72:f9:eb:94:77:ef:76:6c:79: 2a:17:91:7e:c9:87:b1:51:18:d0:6d:4a:ec:02:5e: be:ca:21:b2:84:e0:78:ad:a5:f2:8c:f0:b9:08:01: 6f:0d:63:6f:2d:5b:00:b6:b0:97:40:16:17:88:df: 9a:f2:63:ca:3e:ed:4e:51:67:a1:9a:05:ec:40:bc: e2:b5:18:88:3e:89:ac:b4:23:eb:22:1f:84:80:37: 76:c9:b3:9e:38:5f:21:85:9f:14:56:19:4f:49:9c: 9e:18:b1:e7:81:7d:9b:76:15:8d:44:fb:18:6e:5f: 87:00:d6:71:09:24:0a:18:dd:a2:59:8e:a3:81:c9: 95:de:df:d4:86:20:c5:c9:5f:4d:3a:bd:f6:83:ce: c4:e8:d0:34:4f:95:d0:61:6a:ce:dc:34:0a:33:ea: 8f:5e:a4:c3:b4:9e:23:8c:7c:7a:a2:b1:35:9d:a0: a8:fd:fe:a1:09:c5:5e:01:89:0d:f6:41:88:f6:f2: 5f:2b:c6:2e:0b:86:ef:84:9d:b7:d5:4c:0e:64:b0: d9:86:c7:77:39:67:5f:ab:07:fb:d8:8e:d2:33:61: 14:1e:3b:26:01:b9:1b:41:59:6c:fa:36:7d:0f:dd: 30:84:08:35:02:a4:78:7f:fc:a2:07:f5:fd:98:76: 8a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1B:C3:2E:FC:1A:82:1E:AB:55:71:63:38:93:80:68:06:7B:1A:04 X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/EF14DD34B6E211EAB3BA9536C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.192.156.0/22 202.91.40.0/22 Signature Algorithm: sha256WithRSAEncryption 40:37:5f:cc:1f:e3:92:d1:4e:24:50:fa:db:52:72:61:a2:a9: b6:1c:20:f6:f2:55:51:e5:a1:87:6e:3a:18:3c:dc:7c:b2:d4: 1c:9e:85:33:ce:cd:30:30:70:8e:42:4a:2b:9f:2d:35:9f:ec: 90:18:66:0a:55:27:9d:dc:94:9a:7b:76:f3:ed:47:9a:ed:6c: c0:bb:f5:db:23:05:62:80:7f:78:d3:0b:e2:d6:db:0e:fe:22: 79:4e:46:0f:48:15:f5:66:f4:49:0f:d2:57:57:9b:17:73:d4: f7:c2:d7:1a:44:c1:ca:2a:8b:27:bf:5a:e7:ab:91:9a:49:f5: 45:7f:b5:c7:4f:cb:97:6b:65:56:b2:82:ce:80:a5:3c:76:32: 8f:1f:b9:65:0b:fd:54:9d:d1:c0:1d:b6:53:11:ee:5d:0d:43: a7:7f:67:82:94:37:8b:c4:89:12:ac:12:1a:3c:28:34:0e:4c: 46:e5:d9:f2:6e:3f:d8:94:2c:99:43:24:ca:e8:8a:48:92:03: 6f:cb:0e:6c:34:d5:9c:74:ed:d6:ae:eb:9b:05:bb:a2:82:83: 99:5c:1a:0f:62:c8:13:62:c2:2a:0f:47:a9:29:d2:31:0f:7b: e7:95:90:60:b4:1b:27:8b:82:a9:f8:4f:db:2e:66:dc:55:64: 5a:6b:48:91 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjYwODA2MTgzNjQyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0ZDQzYS0yYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/rYa65y+euUd+92bHkqF5F+yYexURjQbUrsAl6+yiGyhOB4raXyjPC5CAFv DWNvLVsAtrCXQBYXiN+a8mPKPu1OUWehmgXsQLzitRiIPomstCPrIh+EgDd2ybOe OF8hhZ8UVhlPSZyeGLHngX2bdhWNRPsYbl+HANZxCSQKGN2iWY6jgcmV3t/UhiDF yV9NOr32g87E6NA0T5XQYWrO3DQKM+qPXqTDtJ4jjHx6orE1naCo/f6hCcVeAYkN 9kGI9vJfK8YuC4bvhJ231UwOZLDZhsd3OWdfqwf72I7SM2EUHjsmAbkbQVls+jZ9 D90whAg1AqR4f/yiB/X9mHaK6QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNUbwy78 GoIeq1VxYziTgGgGexoEMB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNCQzkvQzVDODNDQUUxM0EwMTFFQTkzRUVFRjY1QzRGOUFFMDIvRUYxNEREMzRC NkUyMTFFQUIzQkE5NTM2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ8CcAwQCylsoMA0GCSqGSIb3DQEBCwUAA4IBAQBAN1/MH+OS0U4k UPrbUnJhoqm2HCD28lVR5aGHbjoYPNx8stQcnoUzzs0wMHCOQkorny01n+yQGGYK VSed3JSae3bz7Uea7WzAu/XbIwVigH940wvi1tsO/iJ5TkYPSBX1ZvRJD9JXV5sX c9T3wtcaRMHKKosnv1rnq5GaSfVFf7XHT8uXa2VWsoLOgKU8djKPH7llC/1UndHA HbZTEe5dDUOnf2eClDeLxIkSrBIaPCg0DkxG5dnybj/YlCyZQyTK6IpIkgNvyw5s NNWcdO3WruubBbuigoOZXBoPYsgTYsIqD0epKdIxD3vnlZBgtBsni4Kp+E/bLmbc VWRaa0iR -----END CERTIFICATE-----Generated at Wed Aug 19 20:13:28 2026 by rpki-client