$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/DF361B00A5CC11F1A22117043311F970.roa File: DF361B00A5CC11F1A22117043311F970.roa (raw, json) Hash identifier: Pob24smwgTjPWg3/zZl4f+wy5+QycWgluq4+t3FuClk= Subject key identifier: F8:5C:4F:FC:EA:B8:DA:83:C5:DE:4E:B4:D5:3E:56:0F:0B:96:40:4D Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 35FD Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/DF361B00A5CC11F1A22117043311F970.roa Signing time: Fri 02 Oct 2026 15:41:38 +0000 ROA not before: Fri 02 Oct 2026 15:41:38 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 6939 IP address blocks: 101.0.16.0/24 maxlen: 24 101.0.17.0/24 maxlen: 24 101.0.18.0/24 maxlen: 24 101.0.19.0/24 maxlen: 24 103.46.205.0/24 maxlen: 24 103.46.206.0/24 maxlen: 24 103.46.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13821 (0x35fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Oct 2 15:41:38 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6abfd0b2-16b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:0b:16:f4:a6:24:c5:fc:17:d1:b1:03:0b: e0:aa:3c:d2:0a:86:a4:17:56:c4:f3:da:b8:73:8e: 85:82:f9:43:ab:72:9f:d3:a9:d1:6c:a7:a9:0c:0c: 50:5a:dc:30:ef:a9:0e:da:43:63:f4:2d:49:39:41: 83:2b:7c:8a:9a:2c:db:af:9f:0e:b5:a1:23:09:88: 74:2c:c4:6c:ae:ca:12:53:2a:e5:8e:96:25:a3:22: f0:e3:56:06:db:a7:ac:c3:08:d6:13:b4:88:5e:57: 5c:5a:ac:20:80:df:b1:39:4b:59:4f:57:49:45:4a: 39:3e:fe:9b:85:24:3a:47:c0:b4:2b:4d:fb:39:fb: 08:60:00:3a:45:99:47:1b:76:f4:43:8e:61:bf:cc: d2:44:9f:3a:5f:3a:5a:71:e9:c2:ec:b4:53:53:9a: a2:a5:b5:96:fc:7d:f6:c9:63:3c:b6:57:c8:bb:e1: c2:ba:19:24:15:6b:46:26:1c:f5:6f:b8:d2:b0:d4: aa:d7:ba:70:a3:2e:34:f2:56:86:52:f1:d1:b9:14: dc:60:5b:4b:33:cd:e4:5d:4d:21:61:1c:35:d3:e0: 0d:99:1a:6a:e7:8c:ff:7e:12:3f:6b:8f:0d:d9:7b: d4:a3:b6:b4:3c:4d:7e:68:81:a3:6f:b2:05:6c:50: 39:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5C:4F:FC:EA:B8:DA:83:C5:DE:4E:B4:D5:3E:56:0F:0B:96:40:4D X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/DF361B00A5CC11F1A22117043311F970.roa sbgp-ipAddrBlock: critical IPv4: 101.0.16.0/22 103.46.205.0-103.46.207.255 Signature Algorithm: sha256WithRSAEncryption 01:db:20:30:83:c4:af:10:1e:74:04:97:98:bb:fa:48:7e:fb: a4:41:cd:c9:40:c7:a7:48:42:72:10:37:31:1a:ca:fa:8f:e9: 22:a2:da:a1:a2:80:14:2c:c0:82:b7:b1:87:c1:aa:8e:1c:bf: 37:35:0e:4c:52:c8:21:3e:27:92:dc:cc:1c:9f:14:18:52:00: b6:a6:e5:38:c9:2c:9a:fd:89:b5:ca:ed:3b:b5:30:8c:a3:c8: e4:98:c0:40:ae:72:15:1d:cb:2e:5d:52:fa:ea:64:ab:17:58: 70:f1:93:54:26:3e:8b:05:f8:9e:9c:bf:e2:4a:2d:cc:23:a3: 45:c8:f3:0b:af:02:f8:9f:4c:48:25:98:41:4b:0f:15:e2:bc: b3:19:43:93:7f:af:da:a9:10:4f:03:e7:06:d7:cf:dc:b3:00: bd:85:35:b8:48:ce:d3:0a:3a:5c:e5:09:0b:6e:57:1d:36:38: 51:38:b2:bc:b9:df:a4:98:75:ce:43:da:c4:09:ed:59:bc:5b: 4a:06:91:9e:6a:48:f4:ee:10:6a:72:26:3b:ed:bb:dc:cc:6b: 3b:96:05:31:ff:1e:a4:d5:5b:4b:13:63:17:91:31:4e:df:74: ad:80:53:c0:8a:a7:f2:a0:a7:69:2f:da:56:be:4c:8b:51:11: 36:4e:fc:93 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICNf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjYxMDAyMTU0MTM4WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmZDBiMi0xNmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxILFvSmJMX8F9GxAwvgqjzSCoakF1bE89q4c46FgvlDq3Kf06nRbKepDAxQ Wtww76kO2kNj9C1JOUGDK3yKmizbr58OtaEjCYh0LMRsrsoSUyrljpYloyLw41YG 26eswwjWE7SIXldcWqwggN+xOUtZT1dJRUo5Pv6bhSQ6R8C0K037OfsIYAA6RZlH G3b0Q45hv8zSRJ86XzpacenC7LRTU5qipbWW/H32yWM8tlfIu+HCuhkkFWtGJhz1 b7jSsNSq17pwoy408laGUvHRuRTcYFtLM83kXU0hYRw10+ANmRpq54z/fhI/a48N 2XvUo7a0PE1+aIGjb7IFbFA5nQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFPhcT/zq uNqDxd5OtNU+Vg8LlkBNMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvREYzNjFCMDBB NUNDMTFGMUEyMjExNzA0MzMxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQCZQAQMAwDBABnLs0DBARnLsAwDQYJKoZIhvcNAQELBQADggEBAAHb IDCDxK8QHnQEl5i7+kh++6RBzclAx6dIQnIQNzEayvqP6SKi2qGigBQswIK3sYfB qo4cvzc1DkxSyCE+J5LczByfFBhSALam5TjJLJr9ibXK7Tu1MIyjyOSYwECuchUd yy5dUvrqZKsXWHDxk1QmPosF+J6cv+JKLcwjo0XI8wuvAvifTEglmEFLDxXivLMZ Q5N/r9qpEE8D5wbXz9yzAL2FNbhIztMKOlzlCQtuVx02OFE4sry536SYdc5D2sQJ 7Vm8W0oGkZ5qSPTuEGpyJjvtu9zMazuWBTH/HqTVW0sTYxeRMU7fdK2AU8CKp/Kg p2kv2la+TItRETZO/JM= -----END CERTIFICATE-----Generated at Sat Oct 10 19:08:36 2026 by rpki-client