$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/861025FE5FE811F1B01C65CA7947A888.roa File: 861025FE5FE811F1B01C65CA7947A888.roa (raw, json) Hash identifier: LHiDdvarbkdpEuPe2M9rxWr2BXS9n0jE/IDZDbqEKUU= Subject key identifier: E5:18:78:B1:34:8C:9D:17:DC:2A:A2:5D:97:00:3B:2A:0F:88:24:3A Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 35F7 Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/861025FE5FE811F1B01C65CA7947A888.roa Signing time: Fri 02 Oct 2026 15:41:25 +0000 ROA not before: Fri 02 Oct 2026 15:41:25 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 216138 IP address blocks: 101.0.16.0/24 maxlen: 24 101.0.17.0/24 maxlen: 24 101.0.18.0/24 maxlen: 24 101.0.19.0/24 maxlen: 24 103.46.205.0/24 maxlen: 24 103.46.206.0/24 maxlen: 24 103.46.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 15:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13815 (0x35f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Oct 2 15:41:25 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6abfd0a5-db3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:50:94:99:77:1c:1b:38:8c:63:d6:34:09:49: fc:c9:15:9d:e0:c9:3e:91:7f:53:b8:e0:11:69:78: ca:c7:e9:c9:8d:70:41:76:3d:0f:39:0e:1e:cc:f8: 81:11:75:e6:3b:ae:8b:2f:77:51:48:4e:5d:8e:13: fb:93:3a:49:dd:3c:13:fc:4d:5f:ac:5f:85:86:02: 80:1c:2f:aa:f4:9a:96:6f:54:78:6f:26:ea:8a:da: c6:13:c8:0c:8b:24:9e:39:15:ba:00:1c:13:d9:f2: 80:cc:3a:e5:91:9d:d1:78:11:6c:24:aa:ab:db:c9: d9:93:d5:d4:60:d9:85:b7:77:0b:60:8b:f0:0e:e1: f8:56:c4:e6:db:11:45:31:2d:fa:ee:ac:28:92:01: 61:24:74:59:fa:67:d5:6b:c5:a2:78:09:14:10:b3: 48:a7:3c:cd:16:ee:c1:cd:6d:db:9f:70:4a:d8:e5: 37:f1:e2:f4:59:45:6b:6d:54:6f:d0:24:3c:86:dc: 37:f6:96:7b:a2:5f:d6:66:cd:cc:80:59:18:0d:46: 37:b6:f8:43:c1:3d:ed:e0:ef:d1:65:0d:f5:e3:38: 50:54:fe:01:d8:f7:b2:82:5f:90:f9:9b:24:fc:b1: 9d:84:54:8a:d7:b2:05:81:fb:f6:fb:31:d1:4b:fb: 9f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:18:78:B1:34:8C:9D:17:DC:2A:A2:5D:97:00:3B:2A:0F:88:24:3A X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/861025FE5FE811F1B01C65CA7947A888.roa sbgp-ipAddrBlock: critical IPv4: 101.0.16.0/22 103.46.205.0-103.46.207.255 Signature Algorithm: sha256WithRSAEncryption 02:79:5d:72:ce:74:a0:5f:a3:58:66:b5:ec:9a:f9:02:dc:c3: 49:6f:a6:a1:38:bd:b0:31:81:b1:2b:17:23:cf:15:b4:cd:bb: be:77:55:09:81:85:d7:02:95:63:7c:b2:ca:d2:4f:96:b2:b1: de:a0:85:0b:40:2f:a5:eb:77:c5:a6:a4:af:16:60:d7:38:de: f5:73:ef:cc:7e:7c:aa:89:3f:10:df:75:35:d2:2f:1b:9c:47: 94:27:c0:f0:2a:0b:3a:c0:1c:47:00:55:79:b5:a0:a9:9f:7a: b2:c9:3b:a7:81:fc:5b:36:f6:2b:e7:fa:b0:76:73:e5:25:00: 08:33:03:45:f0:f1:fd:bb:cb:12:ab:7e:87:91:33:73:5e:1c: 4d:82:10:c1:c8:2e:5b:ef:f4:53:87:37:5b:ec:f8:52:6c:b6: 7e:4c:8c:6f:9c:39:b7:58:db:81:4c:5a:a0:08:eb:1a:4f:68: 01:55:29:d5:e8:8a:1c:5c:84:c5:99:18:0f:eb:1a:24:d6:4f: 8d:6d:fa:49:13:ae:84:11:54:58:c5:d9:4a:3e:e9:0d:26:4d: db:e6:68:dc:a6:6b:8a:f9:9c:3f:09:a1:0d:dd:70:88:43:2b: d3:36:fd:10:7e:f1:2a:8f:17:01:ac:ba:4b:75:18:85:af:77: 57:61:ad:b5 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICNfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjYxMDAyMTU0MTI1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmZDBhNS1kYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01CUmXccGziMY9Y0CUn8yRWd4Mk+kX9TuOARaXjKx+nJjXBBdj0POQ4ezPiB EXXmO66LL3dRSE5djhP7kzpJ3TwT/E1frF+FhgKAHC+q9JqWb1R4bybqitrGE8gM iySeORW6ABwT2fKAzDrlkZ3ReBFsJKqr28nZk9XUYNmFt3cLYIvwDuH4VsTm2xFF MS367qwokgFhJHRZ+mfVa8WieAkUELNIpzzNFu7BzW3bn3BK2OU38eL0WUVrbVRv 0CQ8htw39pZ7ol/WZs3MgFkYDUY3tvhDwT3t4O/RZQ314zhQVP4B2Peygl+Q+Zsk /LGdhFSK17IFgfv2+zHRS/ufKQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFOUYeLE0 jJ0X3CqiXZcAOyoPiCQ6MB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvODYxMDI1RkU1 RkU4MTFGMUIwMUM2NUNBNzk0N0E4ODgucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQCZQAQMAwDBABnLs0DBARnLsAwDQYJKoZIhvcNAQELBQADggEBAAJ5 XXLOdKBfo1hmteya+QLcw0lvpqE4vbAxgbErFyPPFbTNu753VQmBhdcClWN8ssrS T5aysd6ghQtAL6Xrd8WmpK8WYNc43vVz78x+fKqJPxDfdTXSLxucR5QnwPAqCzrA HEcAVXm1oKmferLJO6eB/Fs29ivn+rB2c+UlAAgzA0Xw8f27yxKrfoeRM3NeHE2C EMHILlvv9FOHN1vs+FJstn5MjG+cObdY24FMWqAI6xpPaAFVKdXoihxchMWZGA/r GiTWT41t+kkTroQRVFjF2Uo+6Q0mTdvmaNyma4r5nD8JoQ3dcIhDK9M2/RB+8SqP FwGsukt1GIWvd1dhrbU= -----END CERTIFICATE-----Generated at Wed Nov 4 11:20:41 2026 by rpki-client