$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/1220DC24BC3611F1AD36CE244611F970.roa File: 1220DC24BC3611F1AD36CE244611F970.roa (raw, json) Hash identifier: OUyn+IONzuCRAeD03z3CsRow7qkKxEe5vgr9iI+/Vz4= Subject key identifier: AD:37:66:22:CB:F6:CE:4D:0E:64:E6:6C:0A:A2:0E:31:12:F1:A8:26 Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0B29 Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/1220DC24BC3611F1AD36CE244611F970.roa Signing time: Tue 06 Oct 2026 19:38:41 +0000 ROA not before: Tue 06 Oct 2026 19:38:41 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 138149 IP address blocks: 103.121.76.0/24 maxlen: 24 103.121.77.0/24 maxlen: 24 103.121.78.0/24 maxlen: 24 2403:6ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2857 (0xb29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Oct 6 19:38:41 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac54e41-090e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:85:34:04:0d:b3:55:52:01:1f:3b:39:10: 49:99:ef:3a:a0:7b:81:08:9e:cc:07:3f:79:57:f1: 28:8f:a7:26:68:51:01:ce:6e:f9:ed:b3:10:cc:be: 25:c1:8d:46:5c:13:f5:89:56:d6:0f:1f:bb:c0:a7: 3a:41:08:de:df:2b:41:62:ae:b8:1e:c8:f2:a5:0d: 86:51:62:24:40:4d:4b:d5:7c:a9:31:9d:9e:57:dc: c1:0c:d6:94:5e:ea:e9:94:8e:f4:fd:46:d2:b2:bb: 0d:eb:39:af:76:f0:b1:a8:fa:7e:f2:85:5f:3e:73: 54:5a:a3:ab:d8:50:88:d5:f7:6b:ac:94:b2:67:7b: 6a:63:d5:a2:9d:46:17:c1:d8:f6:12:e6:c5:63:9e: d6:17:90:eb:f4:ff:89:1f:55:07:42:a9:02:a1:e8: fb:ae:19:32:15:30:a2:82:26:f2:b3:2e:f0:0e:4c: 6a:4a:0b:f1:78:d3:02:9e:29:a9:a7:8d:8c:06:89: b0:75:74:fd:6e:eb:3a:d8:9e:ba:0b:73:9d:e5:1e: 26:63:47:f9:38:8f:53:97:37:9a:2d:85:44:38:c0: d5:1a:64:22:c0:5e:eb:1f:64:2a:e5:9f:b8:dc:2e: 83:da:17:0b:16:a9:8a:60:01:13:c8:b0:71:e5:e9: 4e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:66:22:CB:F6:CE:4D:0E:64:E6:6C:0A:A2:0E:31:12:F1:A8:26 X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/1220DC24BC3611F1AD36CE244611F970.roa sbgp-ipAddrBlock: critical IPv4: 103.121.76.0-103.121.78.255 IPv6: 2403:6ac0::/32 Signature Algorithm: sha256WithRSAEncryption 68:82:4b:ac:d6:a6:21:1f:49:0c:98:c5:2c:df:6d:1b:c9:b0: f6:88:e2:89:a4:70:c4:5b:a5:bb:05:41:19:aa:58:ca:30:b1: 97:3a:3b:12:1c:42:57:f0:ba:14:d9:3b:2e:78:c0:5a:81:06: 4e:3c:e2:d8:c6:0f:ab:3c:93:6f:c6:19:cc:3c:ad:42:98:dc: bf:da:cf:7e:8c:8b:e7:8b:b9:13:ef:d2:bf:b5:a4:68:a4:2e: b1:1a:1e:5f:7f:1f:4a:18:68:52:30:7d:e3:07:ce:ab:50:d3: 6d:0e:fc:27:89:ea:0f:e4:fd:2f:25:15:0e:20:01:30:54:26: 82:ef:d2:51:0a:38:aa:7c:07:e9:9e:64:2f:cb:7b:8a:24:9a: d4:5b:fd:27:84:14:e1:50:28:d9:84:65:16:97:f0:d2:7c:e9: eb:13:28:13:dd:37:ae:d2:a7:b0:fa:0f:f7:c6:f8:50:e1:f1: f5:9e:6e:1f:03:b0:8d:10:45:fe:8d:94:90:31:3e:e5:e8:87: fa:90:af:36:92:11:23:9a:b4:b2:25:55:5d:d5:cc:71:32:bc: 35:89:e8:43:dd:fe:d1:7f:16:fb:96:26:aa:57:dd:32:e6:ba: e6:20:cc:3e:62:ad:1c:5a:51:f3:a7:bb:05:80:37:c9:fc:17: 1b:54:8d:35 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICCykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjYxMDA2MTkzODQxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM1NGU0MS0wOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmiFNAQNs1VSAR87ORBJme86oHuBCJ7MBz95V/Eoj6cmaFEBzm757bMQzL4l wY1GXBP1iVbWDx+7wKc6QQje3ytBYq64HsjypQ2GUWIkQE1L1XypMZ2eV9zBDNaU XurplI70/UbSsrsN6zmvdvCxqPp+8oVfPnNUWqOr2FCI1fdrrJSyZ3tqY9WinUYX wdj2EubFY57WF5Dr9P+JH1UHQqkCoej7rhkyFTCigibysy7wDkxqSgvxeNMCnimp p42MBomwdXT9bus62J66C3Od5R4mY0f5OI9TlzeaLYVEOMDVGmQiwF7rH2Qq5Z+4 3C6D2hcLFqmKYAETyLBx5elO4QIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFK03ZiLL 9s5NDmTmbAqiDjES8agmMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQxNTYvMzY0NzkzODQ3MzYwMTFFQUI2MzQ5NTQ0QzRGOUFFMDIvMTIyMERDMjRC QzM2MTFGMUFEMzZDRTI0NDYxMUY5NzAucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBAJneUwDBABneU4wDQQCAAIwBwMFACQDasAwDQYJKoZIhvcNAQEL BQADggEBAGiCS6zWpiEfSQyYxSzfbRvJsPaI4omkcMRbpbsFQRmqWMowsZc6OxIc QlfwuhTZOy54wFqBBk484tjGD6s8k2/GGcw8rUKY3L/az36Mi+eLuRPv0r+1pGik LrEaHl9/H0oYaFIwfeMHzqtQ020O/CeJ6g/k/S8lFQ4gATBUJoLv0lEKOKp8B+me ZC/Le4okmtRb/SeEFOFQKNmEZRaX8NJ86esTKBPdN67Sp7D6D/fG+FDh8fWebh8D sI0QRf6NlJAxPuXoh/qQrzaSESOatLIlVV3VzHEyvDWJ6EPd/tF/FvuWJqpX3TLm uuYgzD5irRxaUfOnuwWAN8n8FxtUjTU= -----END CERTIFICATE-----Generated at Thu Oct 8 00:55:45 2026 by rpki-client