$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/7D2EA194B20711EA8B74F445C4F9AE02.roa File: 7D2EA194B20711EA8B74F445C4F9AE02.roa (raw, json) Hash identifier: lM2+lNkRgg0+N9l8V1gAYVqmFODjgvHitRJVHesM3xo= Subject key identifier: 56:73:14:29:71:B0:B2:6B:66:3B:81:BD:D7:BD:7E:A8:1B:AA:AB:82 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 1784 Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/7D2EA194B20711EA8B74F445C4F9AE02.roa Signing time: Fri 16 Oct 2026 17:30:08 +0000 ROA not before: Fri 16 Oct 2026 17:30:08 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 45102 IP address blocks: 43.242.168.0/22 maxlen: 24 103.38.56.0/22 maxlen: 24 2401:8680::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6020 (0x1784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Oct 16 17:30:08 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ad25f20-6a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:f5:4d:c0:a7:8d:f6:d8:f3:70:60:eb:4b: c6:b6:45:0c:36:ef:e1:12:70:fe:d8:65:a4:86:39: c6:3d:65:30:af:52:6d:8e:87:18:d6:7c:7f:3b:54: 08:b2:8c:ee:83:d9:73:0d:47:e7:76:61:e4:55:a3: 9e:d1:f9:b2:1f:9d:a8:b9:da:06:58:3d:12:06:a1: c6:ca:1b:45:39:53:5d:0b:d7:77:a5:06:4a:7b:0a: b7:33:ea:07:ab:20:29:a6:5f:5c:af:f7:77:31:67: 60:a0:c7:51:6c:bb:29:6f:ee:aa:14:7e:4f:3b:47: 78:57:ba:57:59:8a:e1:07:7c:e7:a6:b9:bc:58:48: 7b:5e:d0:f9:04:c7:de:ab:bb:91:5a:c0:4d:00:22: b9:c0:ad:09:53:60:64:28:cd:97:c9:17:78:98:b2: bc:21:18:00:f4:52:74:41:92:a5:4d:b8:85:d2:1c: 14:70:92:c3:e4:82:75:6e:86:55:0f:2f:46:e6:c3: 29:20:17:18:1b:82:60:07:f3:ef:52:16:9a:87:a6: 7f:52:9e:f0:26:39:e6:c8:73:28:32:0e:97:4d:d2: 7e:44:7a:23:79:f4:c7:e6:b1:6b:ab:32:bf:8c:fa: 4d:e1:8c:8a:0b:13:fa:f2:50:f7:98:23:40:30:92: 62:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:73:14:29:71:B0:B2:6B:66:3B:81:BD:D7:BD:7E:A8:1B:AA:AB:82 X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/7D2EA194B20711EA8B74F445C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.242.168.0/22 103.38.56.0/22 IPv6: 2401:8680::/32 Signature Algorithm: sha256WithRSAEncryption 63:0d:4b:32:f9:4b:22:a6:f7:d9:19:82:81:1e:cf:af:ab:d5: 88:99:a4:ef:76:8e:f9:c3:7b:2e:fc:3e:00:55:9f:f4:ba:58: 57:48:92:e9:cc:9c:19:d0:2c:8a:77:48:37:b1:d1:aa:bb:73: 69:d0:2d:95:31:f2:52:b1:37:f4:b9:9c:1d:95:a0:b4:35:e5: f3:c2:99:2e:a6:21:ae:3d:14:59:e8:e3:5f:98:e3:8a:62:5a: 27:09:b0:d6:ac:ae:36:e9:b2:fb:47:9f:83:80:6d:ae:b1:c2: 32:b8:7f:1a:10:81:a5:c1:d2:7b:6d:cf:83:c5:2e:9b:1a:30: 9f:71:2d:30:29:ff:0b:43:ed:83:24:9f:2d:b1:7b:af:e2:92: db:b4:e1:38:12:b4:32:02:a9:e6:76:65:8f:8b:bf:fe:3e:a1: e4:74:43:1f:30:d1:79:85:5a:98:96:e9:0d:50:e9:2a:af:83: c6:e4:b2:9e:1e:88:d4:4b:c2:e9:50:b3:90:08:57:30:d7:fb: ee:e9:34:10:60:fd:51:12:9f:62:cf:dc:09:66:37:9b:17:b3: 3a:ce:ef:11:e9:03:e7:74:0e:67:57:90:45:65:93:b9:68:d2: 1c:71:e0:5d:b1:38:c4:17:e9:9f:95:fd:6f:b7:f0:f5:cb:df: dd:b3:b1:45 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICF4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjYxMDE2MTczMDA4WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQyNWYyMC02YTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp271TcCnjfbY83Bg60vGtkUMNu/hEnD+2GWkhjnGPWUwr1JtjocY1nx/O1QI sozug9lzDUfndmHkVaOe0fmyH52oudoGWD0SBqHGyhtFOVNdC9d3pQZKewq3M+oH qyAppl9cr/d3MWdgoMdRbLspb+6qFH5PO0d4V7pXWYrhB3znprm8WEh7XtD5BMfe q7uRWsBNACK5wK0JU2BkKM2XyRd4mLK8IRgA9FJ0QZKlTbiF0hwUcJLD5IJ1boZV Dy9G5sMpIBcYG4JgB/PvUhaah6Z/Up7wJjnmyHMoMg6XTdJ+RHojefTH5rFrqzK/ jPpN4YyKCxP68lD3mCNAMJJitQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFZzFClx sLJrZjuBvde9fqgbqquCMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc0NjUvQjFBRkI2RkEwQTUzMTFFOEFDN0JFRTJFQzRGOUFFMDIvN0QyRUExOTRC MjA3MTFFQThCNzRGNDQ1QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/KoAwQCZyY4MA0EAgACMAcDBQAkAYaAMA0GCSqGSIb3DQEBCwUA A4IBAQBjDUsy+UsipvfZGYKBHs+vq9WImaTvdo75w3su/D4AVZ/0ulhXSJLpzJwZ 0CyKd0g3sdGqu3Np0C2VMfJSsTf0uZwdlaC0NeXzwpkupiGuPRRZ6ONfmOOKYlon CbDWrK426bL7R5+DgG2uscIyuH8aEIGlwdJ7bc+DxS6bGjCfcS0wKf8LQ+2DJJ8t sXuv4pLbtOE4ErQyAqnmdmWPi7/+PqHkdEMfMNF5hVqYlukNUOkqr4PG5LKeHojU S8LpULOQCFcw1/vu6TQQYP1REp9iz9wJZjebF7M6zu8R6QPndA5nV5BFZZO5aNIc ceBdsTjEF+mflf1vt/D1y9/ds7FF -----END CERTIFICATE-----Generated at Tue Oct 27 04:37:43 2026 by rpki-client