$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/A6E8B05401D611F1A42696D7366F56BC.roa File: A6E8B05401D611F1A42696D7366F56BC.roa (raw, json) Hash identifier: kH/loibssTw1SMlq4v4kn0TXgp71DRNjeiASfXICBKs= Subject key identifier: A5:67:43:1C:AA:41:09:01:8A:E0:2B:30:A8:25:31:59:FF:41:22:4B Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0557 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/A6E8B05401D611F1A42696D7366F56BC.roa Signing time: Wed 02 Sep 2026 08:47:30 +0000 ROA not before: Wed 02 Sep 2026 08:47:30 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9009 IP address blocks: 43.228.156.0/24 maxlen: 24 43.228.158.0/24 maxlen: 24 43.228.159.0/24 maxlen: 24 103.47.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Sep 2 08:47:30 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a97e2a2-9d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:96:1a:ba:bb:fe:41:66:0e:93:9f:61:92:e7: 36:5d:b8:f4:f6:fe:81:73:b5:9c:8a:d8:26:05:cc: 14:5e:92:90:4e:ba:71:30:ab:b8:0b:58:52:a1:88: 3a:15:88:05:a9:51:f1:51:63:cd:54:3e:20:92:72: c6:52:91:71:8c:2e:f1:c2:ae:91:b1:6f:c6:44:1b: 61:14:8e:7b:6e:05:0b:71:58:9b:b2:59:e8:b1:b0: df:cd:10:54:fc:f7:c8:a8:b2:49:86:ca:0d:ca:d1: 1f:c1:88:16:78:f8:38:97:55:6d:5c:76:d8:10:59: f0:3e:09:d2:f2:77:a5:96:9f:65:84:26:25:df:84: d0:a0:be:5c:33:a2:ed:3a:e8:3e:99:a0:d1:3f:f5: b7:47:49:14:e7:21:6d:40:b3:6f:1f:64:bb:a8:4f: c8:5a:0b:b2:0c:3a:75:a0:ab:ca:46:81:7e:00:d5: 49:d3:8d:c5:d8:3e:8f:2c:92:ec:a6:3d:d7:b1:74: 8c:25:9b:83:bc:d7:4e:bd:fd:1e:db:72:87:d6:fb: 68:43:e4:15:d3:6a:07:fe:4f:0e:75:5d:d0:84:2c: e6:67:c2:f6:03:36:5a:15:ce:0f:4e:e2:bc:8c:9b: 08:40:2a:92:18:87:9a:f0:29:cf:6b:0d:e0:53:98: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:67:43:1C:AA:41:09:01:8A:E0:2B:30:A8:25:31:59:FF:41:22:4B X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/A6E8B05401D611F1A42696D7366F56BC.roa sbgp-ipAddrBlock: critical IPv4: 43.228.156.0/24 43.228.158.0/23 103.47.146.0/24 Signature Algorithm: sha256WithRSAEncryption af:e9:63:7a:1a:ca:4a:7d:eb:f0:d3:13:65:96:44:98:ff:67: fe:5b:cb:bf:8b:ef:14:fb:1d:27:06:87:49:38:69:29:dc:54: 79:71:46:c2:09:90:b9:d9:a9:fb:6f:74:aa:e3:97:c5:80:3c: 27:86:e8:d7:1c:c4:f0:28:24:3b:db:f8:ef:f4:71:94:64:cf: 42:1f:a3:33:96:bc:25:6c:bc:76:6f:06:0b:a7:0a:03:8b:ca: c7:53:fc:2e:08:2a:f6:83:24:c9:4a:b2:a7:72:92:a1:6f:0e: 58:2d:07:31:ac:26:26:f7:f5:11:0c:39:d3:7f:d1:33:bf:4b: 58:4a:19:13:14:09:14:9e:02:62:7f:2a:ff:ac:f2:0e:55:d6: 5d:bd:df:8b:de:5e:2b:4b:a5:05:0d:cb:ac:77:49:82:d6:25: a0:82:22:cc:14:6d:ab:2b:e6:f4:c7:eb:e0:ce:c2:90:37:d4: 59:b4:af:ad:09:3a:fc:59:04:ba:f2:dc:5f:5d:3a:41:20:2a: ac:86:3e:20:0e:e3:00:44:78:2b:6d:23:bc:da:df:ac:55:f0: 7a:77:b6:8b:fa:38:35:34:6a:3a:94:8e:f9:71:be:19:21:d5: bb:fc:f1:b5:f0:5a:94:c6:9c:89:0b:02:b9:61:c6:de:f7:c5: a2:14:1a:91 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjYwOTAyMDg0NzMwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk3ZTJhMi05ZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkJYaurv+QWYOk59hkuc2Xbj09v6Bc7WcitgmBcwUXpKQTrpxMKu4C1hSoYg6 FYgFqVHxUWPNVD4gknLGUpFxjC7xwq6RsW/GRBthFI57bgULcVibslnosbDfzRBU /PfIqLJJhsoNytEfwYgWePg4l1VtXHbYEFnwPgnS8nellp9lhCYl34TQoL5cM6Lt Oug+maDRP/W3R0kU5yFtQLNvH2S7qE/IWguyDDp1oKvKRoF+ANVJ043F2D6PLJLs pj3XsXSMJZuDvNdOvf0e23KH1vtoQ+QV02oH/k8OdV3QhCzmZ8L2AzZaFc4PTuK8 jJsIQCqSGIea8CnPaw3gU5inHwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKVnQxyq QQkBiuArMKglMVn/QSJLMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODNCOTUvQjU0QTNDMzQ4MDM1MTFFQzlBRERBNTRGQzRGOUFFMDIvQTZFOEIwNTQw MUQ2MTFGMUE0MjY5NkQ3MzY2RjU2QkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK+ScAwQBK+SeAwQAZy+SMA0GCSqGSIb3DQEBCwUAA4IBAQCv6WN6 GspKfevw0xNllkSY/2f+W8u/i+8U+x0nBodJOGkp3FR5cUbCCZC52an7b3Sq45fF gDwnhujXHMTwKCQ72/jv9HGUZM9CH6MzlrwlbLx2bwYLpwoDi8rHU/wuCCr2gyTJ SrKncpKhbw5YLQcxrCYm9/URDDnTf9Ezv0tYShkTFAkUngJifyr/rPIOVdZdvd+L 3l4rS6UFDcusd0mC1iWggiLMFG2rK+b0x+vgzsKQN9RZtK+tCTr8WQS68txfXTpB ICqshj4gDuMARHgrbSO82t+sVfB6d7aL+jg1NGo6lI75cb4ZIdW7/PG18FqUxpyJ CwK5Ycbe98WiFBqR -----END CERTIFICATE-----Generated at Sat Sep 5 01:43:53 2026 by rpki-client