$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/13C099EE366711F0B5877C84C4F9AE02.roa File: 13C099EE366711F0B5877C84C4F9AE02.roa (raw, json) Hash identifier: vICYDNS9kD2vGmiU8XjONZtvToD23t4bowNaFlpgJxM= Subject key identifier: 96:03:02:A2:EF:35:54:D3:1C:F2:EE:9A:60:8F:3F:CF:B8:D0:7D:22 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0E90 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/13C099EE366711F0B5877C84C4F9AE02.roa Signing time: Mon 27 Jul 2026 11:41:30 +0000 ROA not before: Mon 27 Jul 2026 11:41:30 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138640 IP address blocks: 43.246.200.0/24 maxlen: 24 43.246.201.0/24 maxlen: 24 103.109.56.0/24 maxlen: 24 103.109.57.0/24 maxlen: 24 103.109.59.0/24 maxlen: 24 103.111.13.0/24 maxlen: 24 2402:76c0::/32 maxlen: 36 2402:76c0:f00::/48 maxlen: 48 2402:76c0:f000::/48 maxlen: 48 2402:76c0:f001::/48 maxlen: 48 2402:76c0:f010::/48 maxlen: 48 2402:76c0:f013::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3728 (0xe90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Jul 27 11:41:30 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a6743e9-ab40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:d8:a8:fc:8a:e8:40:76:ed:b8:56:d8:91: ff:60:0b:49:40:a1:c2:dd:e2:2d:5c:b0:fc:43:b7: 62:73:aa:98:b7:ac:51:f4:68:16:9d:ac:a1:24:a0: a5:55:39:7f:20:cf:b6:27:8c:2d:9f:5e:4e:e6:35: cc:50:cb:d5:87:18:8c:4c:0e:14:71:1c:ed:58:02: 04:de:1f:4c:93:6e:2e:f0:15:73:fc:6e:27:60:30: 21:14:db:5a:a7:45:ce:e5:2b:5e:cd:da:52:72:ee: e9:ea:a6:71:2f:b5:24:05:74:be:2c:ab:56:07:19: 0e:63:b3:ee:c2:a4:db:37:bd:42:d6:97:7a:f4:a8: bb:f8:e8:8b:76:7a:38:07:0e:7f:bb:83:78:48:09: 4f:d7:ef:9c:76:22:8e:e3:7e:cd:bd:ee:7b:88:62: 60:7f:39:b4:21:e3:bb:a7:c8:12:e1:60:31:08:14: 5d:16:f0:70:ec:2b:65:64:93:1f:e2:d2:4e:54:10: 04:f5:cb:09:44:14:f6:c5:9d:cd:71:b0:ac:6f:46: be:38:3d:18:4d:59:88:3f:1d:53:b7:dc:76:1a:12: eb:02:0f:97:ba:9c:ea:03:5d:9f:65:c1:9d:cc:00: 7b:d4:1b:0a:c4:db:aa:22:bd:f4:a1:64:db:25:b8: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:03:02:A2:EF:35:54:D3:1C:F2:EE:9A:60:8F:3F:CF:B8:D0:7D:22 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/13C099EE366711F0B5877C84C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.200.0/23 103.109.56.0/23 103.109.59.0/24 103.111.13.0/24 IPv6: 2402:76c0::/32 Signature Algorithm: sha256WithRSAEncryption 9c:88:b3:5d:97:0d:d7:e7:b4:31:c0:d8:22:3e:7b:60:5f:6b: ef:3d:9c:e6:eb:21:b7:a1:cd:bc:60:6e:30:35:35:46:cb:0f: 42:1a:6c:58:68:9d:61:c4:77:80:a3:93:71:e9:61:c2:19:6c: 6f:5a:e0:0e:14:fc:61:7d:cf:52:08:84:2f:07:d6:76:2d:5b: 9e:51:35:c1:db:d4:a6:14:26:a1:2a:5d:19:0d:11:97:61:73: 95:72:6f:f6:51:d7:95:f0:1d:f6:e8:7c:a0:fc:9c:b9:09:49: 6b:8e:df:81:7c:c2:65:c4:68:ba:d9:62:a8:d5:2b:19:cf:57: cf:e8:54:af:c4:09:7c:67:57:ed:02:13:b1:f9:bf:e8:b2:71: 70:2b:cd:26:14:4a:aa:ba:57:7f:ea:60:0b:de:3b:d6:e2:20: 75:f0:31:0e:30:38:19:86:b5:86:e0:6a:75:8a:a2:90:48:e3: 66:f6:a0:ee:6f:db:6c:69:5b:dd:8d:c4:82:66:f2:8f:e0:1d: c2:a4:14:01:82:4b:1a:b3:3a:88:8f:1b:a0:5b:27:69:c4:a4: 80:27:d9:ee:f4:05:8f:bb:6e:02:c7:29:3d:fa:de:5d:8d:3c: 71:6e:f0:e2:24:3d:f0:50:70:6c:87:ce:6f:cb:a5:20:34:15: 0e:59:d0:11 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICDpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjYwNzI3MTE0MTMwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTY3NDNlOS1hYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5nYqPyK6EB27bhW2JH/YAtJQKHC3eItXLD8Q7dic6qYt6xR9GgWnayhJKCl VTl/IM+2J4wtn15O5jXMUMvVhxiMTA4UcRztWAIE3h9Mk24u8BVz/G4nYDAhFNta p0XO5StezdpScu7p6qZxL7UkBXS+LKtWBxkOY7PuwqTbN71C1pd69Ki7+OiLdno4 Bw5/u4N4SAlP1++cdiKO437Nve57iGJgfzm0IeO7p8gS4WAxCBRdFvBw7CtlZJMf 4tJOVBAE9csJRBT2xZ3NcbCsb0a+OD0YTVmIPx1Tt9x2GhLrAg+XupzqA12fZcGd zAB71BsKxNuqIr30oWTbJbh6PQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFJYDAqLv NVTTHPLummCPP8+40H0iMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg4NDcvRERGQkIwQjhENzgxMTFFOUI0MjNBQzRCQzRGOUFFMDIvMTNDMDk5RUUz NjY3MTFGMEI1ODc3Qzg0QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQBK/bIAwQBZ204AwQAZ207AwQAZ28NMA0EAgACMAcDBQAkAnbAMA0G CSqGSIb3DQEBCwUAA4IBAQCciLNdlw3X57QxwNgiPntgX2vvPZzm6yG3oc28YG4w NTVGyw9CGmxYaJ1hxHeAo5Nx6WHCGWxvWuAOFPxhfc9SCIQvB9Z2LVueUTXB29Sm FCahKl0ZDRGXYXOVcm/2UdeV8B326Hyg/Jy5CUlrjt+BfMJlxGi62WKo1SsZz1fP 6FSvxAl8Z1ftAhOx+b/osnFwK80mFEqquld/6mAL3jvW4iB18DEOMDgZhrWG4Gp1 iqKQSONm9qDub9tsaVvdjcSCZvKP4B3CpBQBgksaszqIjxugWydpxKSAJ9nu9AWP u24Cxyk9+t5djTxxbvDiJD3wUHBsh85vy6UgNBUOWdAR -----END CERTIFICATE-----Generated at Mon Jul 27 21:59:42 2026 by rpki-client