$ rpki-client -vvvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/A98F7960A41F11F0A133244EC4F9AE02.roa File: A98F7960A41F11F0A133244EC4F9AE02.roa (raw, json) Hash identifier: tpBOZMv/BM0U3GaohtwEK9Q6M+tw+SVPAEKtte+eObI= Subject key identifier: F9:F4:E4:93:39:21:8B:92:37:EF:B3:8F:0D:6F:E9:64:B7:55:13:0A Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0A2D Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/A98F7960A41F11F0A133244EC4F9AE02.roa Signing time: Wed 02 Sep 2026 20:41:42 +0000 ROA not before: Wed 02 Sep 2026 20:41:42 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 6453 IP address blocks: 45.117.203.0/24 maxlen: 24 45.126.163.0/24 maxlen: 24 150.107.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605 (0xa2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Sep 2 20:41:42 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a988a06-c958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:08:e5:96:3c:bc:fd:ce:13:32:50:1d:85: 12:e1:7f:e1:ac:39:50:5c:36:22:61:51:76:17:ed: 26:98:44:40:d7:08:ca:49:9f:43:ad:5e:f8:0d:5c: c2:55:99:85:fe:ed:39:df:d0:c4:fb:dd:3f:67:b7: 64:82:27:08:92:8b:fd:2d:5f:0f:07:ee:b8:3a:0f: cd:47:55:bf:12:47:61:3d:05:56:bf:69:37:0b:c8: c4:00:1d:51:07:55:29:64:6e:64:33:1b:2c:2f:6a: e9:bb:ed:3c:c5:e1:93:d2:dc:d6:ed:0c:c3:bc:29: 36:c0:82:0a:af:d1:8c:b5:78:0d:1b:19:91:f7:54: 2b:9d:78:84:ad:e7:96:96:18:ab:b6:56:27:48:f9: 3b:cd:51:36:fb:9d:93:14:e1:02:fc:3e:87:a3:bb: c7:d5:02:d4:c3:ad:34:dd:27:02:63:52:a2:5f:39: 45:d6:5a:59:0c:f0:a1:a8:4f:97:5f:9d:c9:78:c1: 29:d6:ed:fa:20:5b:1b:17:45:f5:46:bf:1f:4f:86: 4a:e0:64:93:d6:75:9f:4c:c2:53:2b:f6:1a:5a:95: b8:f1:25:36:f6:02:07:f3:0e:77:b6:ea:af:33:e5: 55:e1:cd:0a:bf:25:e3:e1:41:06:43:b2:dd:c8:b3: b8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F4:E4:93:39:21:8B:92:37:EF:B3:8F:0D:6F:E9:64:B7:55:13:0A X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/A98F7960A41F11F0A133244EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.117.203.0/24 45.126.163.0/24 150.107.10.0/24 Signature Algorithm: sha256WithRSAEncryption a4:23:9f:3f:96:48:d5:fe:e8:7c:e7:f6:a3:09:a1:8b:77:a8: d8:80:07:31:ba:87:58:28:f6:7c:7b:4c:1b:f7:35:51:6a:d1: 80:73:a1:d5:c8:8a:05:bd:5e:64:6e:2d:64:ad:ac:92:ce:31: 35:cb:d3:59:f2:6a:2d:b0:cf:c7:62:91:2b:b5:0e:d1:65:53: f0:7c:fc:00:bf:0b:6a:fc:50:a6:8a:17:cc:06:d3:9f:27:fc: 45:10:f1:9a:a4:6a:c7:b8:8f:ae:5c:3c:df:5d:1d:bc:e1:a1: 41:51:7e:78:13:44:b5:ca:4c:37:96:76:3c:b9:a3:69:95:6c: f6:55:dc:76:ad:2f:f4:78:7f:d0:af:3c:86:11:7e:69:03:4b: 29:75:34:1e:5a:04:fc:a9:5e:19:36:ae:72:de:3e:b2:7e:c0: 37:39:4d:95:fe:12:e3:e0:30:8d:56:f6:52:5e:f1:6c:16:6c: 94:51:b8:61:3f:e4:8e:a6:05:26:8f:2e:30:78:b0:cc:76:3c: 4d:d2:33:af:46:7b:c0:f7:c5:af:44:76:3f:de:fa:9d:4f:cd: 32:f4:a6:dd:60:8a:3e:9f:ce:fd:8a:14:df:58:94:32:4b:04: 1f:40:49:61:38:71:e4:6b:09:ac:05:a6:97:12:51:bc:e2:11: 2c:98:4a:ee -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYwOTAyMjA0MTQyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4OGEwNi1jOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD0I5ZY8vP3OEzJQHYUS4X/hrDlQXDYiYVF2F+0mmERA1wjKSZ9DrV74DVzC VZmF/u0539DE+90/Z7dkgicIkov9LV8PB+64Og/NR1W/EkdhPQVWv2k3C8jEAB1R B1UpZG5kMxssL2rpu+08xeGT0tzW7QzDvCk2wIIKr9GMtXgNGxmR91QrnXiEreeW lhirtlYnSPk7zVE2+52TFOEC/D6Ho7vH1QLUw6003ScCY1KiXzlF1lpZDPChqE+X X53JeMEp1u36IFsbF0X1Rr8fT4ZK4GST1nWfTMJTK/YaWpW48SU29gIH8w53tuqv M+VV4c0KvyXj4UEGQ7LdyLO4oQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPn05JM5 IYuSN++zjw1v6WS3VRMKMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQwNEUvQkMwMzBDNzZGMURBMTFFQUFGQzZDNzBBQzRGOUFFMDIvQTk4Rjc5NjBB NDFGMTFGMEExMzMyNDRFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQALXXLAwQALX6jAwQAlmsKMA0GCSqGSIb3DQEBCwUAA4IBAQCkI58/ lkjV/uh85/ajCaGLd6jYgAcxuodYKPZ8e0wb9zVRatGAc6HVyIoFvV5kbi1krayS zjE1y9NZ8motsM/HYpErtQ7RZVPwfPwAvwtq/FCmihfMBtOfJ/xFEPGapGrHuI+u XDzfXR284aFBUX54E0S1ykw3lnY8uaNplWz2Vdx2rS/0eH/QrzyGEX5pA0spdTQe WgT8qV4ZNq5y3j6yfsA3OU2V/hLj4DCNVvZSXvFsFmyUUbhhP+SOpgUmjy4weLDM djxN0jOvRnvA98WvRHY/3vqdT80y9KbdYIo+n879ihTfWJQySwQfQElhOHHkawms BaaXElG84hEsmEru -----END CERTIFICATE-----Generated at Sat Sep 5 04:36:52 2026 by rpki-client