$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/25687A64364D11F0AECC3986C4F9AE02.roa File: 25687A64364D11F0AECC3986C4F9AE02.roa (raw, json) Hash identifier: SiaKfWh20onDMNEmqxmOZpPd2+52s+o/XbL2Uti7Li8= Subject key identifier: DD:A7:E1:A7:84:41:D5:96:F1:0A:F9:0C:0F:4E:69:C7:5A:C0:CF:C8 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 042F Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/25687A64364D11F0AECC3986C4F9AE02.roa Signing time: Wed 05 Aug 2026 01:49:02 +0000 ROA not before: Wed 05 Aug 2026 01:49:02 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 153494 IP address blocks: 45.122.136.0/22 maxlen: 24 103.63.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1071 (0x42f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: Aug 5 01:49:02 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a72968e-065c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6c:3f:f0:ec:be:48:b0:90:d7:79:9c:dd:25: d9:db:21:7a:cc:ee:1d:b2:e9:3c:1c:5d:da:c8:c7: 12:19:17:c2:73:4b:9e:a5:20:51:0f:18:cc:60:bf: ca:95:3a:b2:95:2a:d2:d1:30:94:40:4e:08:8b:a7: 38:03:68:29:29:f5:32:85:94:ad:a4:c1:4d:97:00: 37:11:7e:8d:3e:4a:e0:d3:bd:6f:59:47:bc:93:72: 86:86:9b:c1:c0:c6:3a:23:2f:60:3b:94:2f:7d:7d: 8a:9d:3f:16:2a:a1:3c:0c:41:c8:3f:2e:be:24:bb: 8e:dd:5b:fa:9f:58:fa:ae:72:df:96:6f:a6:12:26: 59:fd:49:88:53:ad:91:40:a7:05:18:5f:b5:6e:c0: 3a:61:db:c6:57:b1:4a:59:0f:63:45:7d:2c:75:63: eb:05:85:c6:8a:85:cc:fd:2a:02:15:6d:8c:26:43: 28:f6:bb:1e:b0:47:d9:56:10:91:44:86:e0:b2:ac: 20:16:67:1b:76:25:c9:21:af:ea:42:22:06:ee:1c: 3e:01:06:93:0a:21:d6:12:05:3a:1d:19:4f:71:34: cd:3e:bf:d0:0a:0f:43:16:75:11:2b:b0:60:c4:af: 47:ca:29:2d:af:99:db:de:3e:94:4d:1b:a4:19:ba: 4c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A7:E1:A7:84:41:D5:96:F1:0A:F9:0C:0F:4E:69:C7:5A:C0:CF:C8 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/25687A64364D11F0AECC3986C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.122.136.0/22 103.63.4.0/22 Signature Algorithm: sha256WithRSAEncryption 52:49:a6:7c:a9:26:de:03:82:80:98:fc:ae:f2:f3:11:5a:2f: 73:3c:71:27:db:69:1f:3d:f4:59:77:cd:d5:a6:b0:7b:63:ad: e8:40:01:76:ed:ba:89:27:26:02:95:69:f4:9c:e5:fb:1b:ff: a4:37:06:96:78:90:40:0f:b7:a9:c6:7f:bb:12:0f:a9:aa:ab: d7:0a:21:d2:79:8d:c7:1d:b6:0f:73:9f:f3:25:66:b0:5d:59: de:19:59:18:dd:e2:ef:2b:fb:0a:41:82:b7:0d:09:c3:85:50: 6b:a6:75:6e:f5:4f:1c:26:15:83:fe:ee:85:62:72:19:d8:60: b0:e9:03:3b:fe:25:9a:f8:f0:03:b3:93:1f:cd:41:ff:83:ca: 1c:f8:c4:0b:7f:df:07:c0:52:91:8c:28:53:29:3c:19:64:a7: 15:6b:40:15:25:3c:00:d1:fc:d0:57:38:1e:44:41:e6:56:89: a8:9c:2f:40:22:03:2c:80:d1:0a:b9:45:98:77:cd:a6:02:e1: dd:02:ac:ba:7a:fb:09:c3:54:06:56:9b:9b:31:cf:10:bc:51: 58:0e:bb:77:7e:3a:03:84:26:c8:8c:05:89:7c:11:35:12:5f: c5:a6:de:d2:1a:aa:dd:f5:63:b2:9c:fe:b3:29:87:c9:87:9c: 11:2f:cf:05 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjYwODA1MDE0OTAyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcyOTY4ZS0wNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62w/8Oy+SLCQ13mc3SXZ2yF6zO4dsuk8HF3ayMcSGRfCc0uepSBRDxjMYL/K lTqylSrS0TCUQE4Ii6c4A2gpKfUyhZStpMFNlwA3EX6NPkrg071vWUe8k3KGhpvB wMY6Iy9gO5QvfX2KnT8WKqE8DEHIPy6+JLuO3Vv6n1j6rnLflm+mEiZZ/UmIU62R QKcFGF+1bsA6YdvGV7FKWQ9jRX0sdWPrBYXGioXM/SoCFW2MJkMo9rsesEfZVhCR RIbgsqwgFmcbdiXJIa/qQiIG7hw+AQaTCiHWEgU6HRlPcTTNPr/QCg9DFnURK7Bg xK9Hyiktr5nb3j6UTRukGbpMjwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFN2n4aeE QdWW8Qr5DA9OacdawM/IMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFFMDgvOUVDNjMxRUNDNjA5MTFFQ0I0NjBFQzU3QzRGOUFFMDIvMjU2ODdBNjQz NjREMTFGMEFFQ0MzOTg2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLXqIAwQCZz8EMA0GCSqGSIb3DQEBCwUAA4IBAQBSSaZ8qSbeA4KA mPyu8vMRWi9zPHEn22kfPfRZd83VprB7Y63oQAF27bqJJyYClWn0nOX7G/+kNwaW eJBAD7epxn+7Eg+pqqvXCiHSeY3HHbYPc5/zJWawXVneGVkY3eLvK/sKQYK3DQnD hVBrpnVu9U8cJhWD/u6FYnIZ2GCw6QM7/iWa+PADs5MfzUH/g8oc+MQLf98HwFKR jChTKTwZZKcVa0AVJTwA0fzQVzgeREHmVomonC9AIgMsgNEKuUWYd82mAuHdAqy6 evsJw1QGVpubMc8QvFFYDrt3fjoDhCbIjAWJfBE1El/Fpt7SGqrd9WOynP6zKYfJ h5wRL88F -----END CERTIFICATE-----Generated at Wed Aug 19 13:39:16 2026 by rpki-client