$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/4CF39D56A79511F185FBCE2B4711F970.roa File: 4CF39D56A79511F185FBCE2B4711F970.roa (raw, json) Hash identifier: SMW4S5FYxczF25s5zzpkvjJXs6KT4YiUOpb73XRxxU4= Subject key identifier: E5:E7:85:18:25:97:F8:A9:32:F8:C9:AA:D5:6A:F6:5B:EF:F4:85:B2 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 35F9 Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/4CF39D56A79511F185FBCE2B4711F970.roa Signing time: Fri 02 Oct 2026 15:41:30 +0000 ROA not before: Fri 02 Oct 2026 15:41:30 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 2497 IP address blocks: 101.0.16.0/24 maxlen: 24 101.0.17.0/24 maxlen: 24 101.0.18.0/24 maxlen: 24 101.0.19.0/24 maxlen: 24 103.46.205.0/24 maxlen: 24 103.46.206.0/24 maxlen: 24 103.46.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13817 (0x35f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Oct 2 15:41:30 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6abfd0aa-836f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:18:b6:44:df:94:62:90:cb:4a:c1:5b:b3: a8:a6:0f:30:a8:01:89:98:33:35:0f:9f:53:df:86: b9:1e:61:46:04:bb:df:35:73:50:bf:bb:0b:5e:87: 5c:36:e2:7c:d9:6e:02:9d:94:da:07:7f:77:d7:ba: ac:6c:16:2e:3d:fd:ef:9b:b3:32:ca:be:e5:7a:cc: 94:a0:63:79:4a:5c:8b:8e:75:20:d3:71:ca:c3:d5: c4:d1:82:10:74:16:28:69:1a:87:3d:bd:0e:8e:94: 70:c8:b6:72:31:0b:a4:5b:6d:52:2a:79:6b:da:f6: 49:4b:9b:bf:b6:29:13:02:f5:97:cd:7b:e0:24:45: 2a:c4:2f:cd:3c:ac:11:0e:9d:56:bf:90:a6:5b:b2: d2:b1:70:47:1b:7c:99:69:0a:c1:6a:8d:b5:af:30: 22:da:15:c0:39:4c:05:90:7a:db:1d:11:aa:c7:4b: a6:a9:1b:3f:ac:6a:61:a5:a1:82:f1:09:4b:8f:92: a3:2b:71:fe:1c:80:83:87:e7:ee:63:6a:ec:6a:38: b3:bf:7f:1e:f3:d6:d0:72:42:df:85:00:11:01:b6: cf:60:8a:40:0d:0e:e0:86:17:43:c9:99:97:cf:7d: 2b:1c:2c:6f:b5:7c:b3:b2:f5:fe:a2:48:5e:78:c7: 48:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E7:85:18:25:97:F8:A9:32:F8:C9:AA:D5:6A:F6:5B:EF:F4:85:B2 X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/4CF39D56A79511F185FBCE2B4711F970.roa sbgp-ipAddrBlock: critical IPv4: 101.0.16.0/22 103.46.205.0-103.46.207.255 Signature Algorithm: sha256WithRSAEncryption 5b:ec:cb:9d:f1:1c:f1:14:0d:a4:ad:f4:21:19:bd:d1:f9:c1: 9d:40:4d:d1:37:28:70:de:82:a6:25:c5:71:01:44:b2:0c:4a: f6:61:6a:3f:b0:02:56:44:59:60:b1:2f:23:c9:cc:c8:b8:71: bc:13:be:7e:2e:07:0f:74:01:9f:13:2a:34:b7:0a:a6:c7:f6: ff:da:ed:42:db:ac:2c:4c:ab:3c:be:b0:85:09:19:97:8d:28: 67:77:b0:80:e5:63:89:d7:44:89:f1:ac:d7:90:8b:41:66:77: 1a:4f:92:2a:4c:d9:fa:02:f2:69:22:35:d5:cd:46:f6:73:d8: 92:96:2b:1e:8f:7a:4e:8d:2e:8d:af:33:be:f8:01:1f:7c:80: d2:35:01:a6:81:d1:ef:43:0b:79:c5:6a:1a:73:5c:25:6e:de: f8:65:cd:85:1f:2f:2e:69:8f:86:03:c7:09:a1:55:62:17:b5: 03:0c:bd:c7:b9:a2:f2:33:2a:db:12:9a:d8:5a:30:33:f0:78: 75:65:8f:46:8a:bd:6d:40:08:be:b9:64:c7:77:93:e2:ea:b3: 76:b3:33:94:ee:6f:b5:22:ca:ad:80:a1:4f:ae:94:7a:36:da: 0e:a9:f0:e0:49:29:f5:26:72:f1:8b:45:18:e9:c6:ee:5b:3b: 32:c9:b3:b5 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICNfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjYxMDAyMTU0MTMwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmZDBhYS04MzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgEYtkTflGKQy0rBW7Oopg8wqAGJmDM1D59T34a5HmFGBLvfNXNQv7sLXodc NuJ82W4CnZTaB39317qsbBYuPf3vm7Myyr7lesyUoGN5SlyLjnUg03HKw9XE0YIQ dBYoaRqHPb0OjpRwyLZyMQukW21SKnlr2vZJS5u/tikTAvWXzXvgJEUqxC/NPKwR Dp1Wv5CmW7LSsXBHG3yZaQrBao21rzAi2hXAOUwFkHrbHRGqx0umqRs/rGphpaGC 8QlLj5KjK3H+HICDh+fuY2rsajizv38e89bQckLfhQARAbbPYIpADQ7ghhdDyZmX z30rHCxvtXyzsvX+okheeMdIrwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFOXnhRgl l/ipMvjJqtVq9lvv9IWyMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvNENGMzlENTZB Nzk1MTFGMTg1RkJDRTJCNDcxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQCZQAQMAwDBABnLs0DBARnLsAwDQYJKoZIhvcNAQELBQADggEBAFvs y53xHPEUDaSt9CEZvdH5wZ1ATdE3KHDegqYlxXEBRLIMSvZhaj+wAlZEWWCxLyPJ zMi4cbwTvn4uBw90AZ8TKjS3CqbH9v/a7ULbrCxMqzy+sIUJGZeNKGd3sIDlY4nX RInxrNeQi0FmdxpPkipM2foC8mkiNdXNRvZz2JKWKx6Pek6NLo2vM774AR98gNI1 AaaB0e9DC3nFahpzXCVu3vhlzYUfLy5pj4YDxwmhVWIXtQMMvce5ovIzKtsSmtha MDPweHVlj0aKvW1ACL65ZMd3k+Lqs3azM5Tub7Uiyq2AoU+ulHo22g6p8OBJKfUm cvGLRRjpxu5bOzLJs7U= -----END CERTIFICATE-----Generated at Wed Oct 7 07:50:30 2026 by rpki-client